$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa File: 68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa (raw, json) Hash identifier: E3wJwn6jpt+wzupm9aQQzr3WfIHaizZjmV7YZ2EGVfU= Subject key identifier: A9:D5:10:45:A8:E4:DF:47:32:CF:49:D4:DD:D9:A4:E3:E6:47:D5:4D Certificate issuer: /CN=99cd086f-b993-42d9-8f47-c65df74d693b Certificate serial: 010D0C9F4328584AAB265DC3197BF365223CDD80 Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 9009 IP address blocks: 162.254.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5d:c3:19:7b:f3:65:22:3c:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=6528718b-1cf0-4308-8518-bfed577e17c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:c6:5f:19:89:ed:72:eb:c6:e6:05:91:12: d2:6c:b3:b7:67:b3:a3:f5:b6:6d:01:a5:45:92:a1: 8d:3a:ab:45:41:a4:38:3c:42:89:0b:30:bf:1c:8c: 46:36:90:b3:cd:4b:02:4f:40:94:19:09:ab:12:5a: af:89:eb:7a:08:73:7f:14:16:6c:b7:db:eb:db:6b: 9a:f2:49:b6:8f:e1:e5:77:50:0c:4a:36:ab:39:19: 30:8e:07:19:90:a0:8b:00:fe:f9:54:ea:28:f4:7f: 5c:a2:1d:84:1a:41:df:40:02:43:32:2e:c3:28:c6: 3d:1c:37:7e:17:05:72:7a:d2:d1:0c:f4:fb:da:af: 4e:5e:a4:4b:c7:02:67:4f:5e:05:cd:13:6b:42:75: 39:67:7b:c2:d2:2f:1e:54:26:23:02:9a:7c:d8:86: c2:4d:1e:54:b4:c6:a6:26:09:54:da:bf:23:15:a2: 99:bb:1e:19:f1:61:ab:dc:15:4f:56:7c:93:95:9c: 92:6f:ad:35:65:38:62:9e:02:78:b2:ba:17:4e:d9: 54:df:91:d3:45:1e:46:48:a6:35:41:6c:d8:ae:1e: 1a:e2:2f:f0:92:27:7e:a8:5e:02:7c:32:a5:44:11: 3e:d9:a5:df:f3:0f:26:84:5b:af:86:23:fa:35:d7: 61:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:10:45:A8:E4:DF:47:32:CF:49:D4:DD:D9:A4:E3:E6:47:D5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/68e4c63c-f3d8-3762-ba1d-a02053a06b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl X509v3 Authority Key Identifier: keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer sbgp-ipAddrBlock: critical IPv4: 162.254.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:1f:f5:17:92:de:f1:3a:3a:77:4e:be:7c:57:10:7a:b3:7b: eb:1a:b2:f9:df:75:e7:2c:4e:ff:dd:57:36:33:54:01:52:c8: 86:e4:6e:8e:33:8d:bf:ec:6e:dc:bc:94:9b:90:c8:df:db:bf: 17:39:c2:af:83:76:c9:de:4c:ef:49:80:07:b3:c9:ad:9c:fe: 83:a4:db:7a:e8:93:5b:f3:d4:fe:d7:72:59:3f:29:2b:f5:c7: bf:8a:62:ec:80:e2:ed:ea:2b:a1:6d:89:80:d7:1f:b7:69:23: 12:4d:0e:d0:3e:92:29:57:a3:f8:f7:b9:4c:d5:dd:14:90:18: dc:a1:58:4b:87:d1:e9:ca:24:d1:65:9a:c8:a3:ba:af:22:60: bc:0e:09:a9:17:a6:fe:92:4f:a9:a1:03:eb:f5:6d:08:9f:85: c9:12:6e:77:59:85:e3:17:ef:0a:68:e6:2b:5b:d0:75:c2:39: 59:24:47:cb:de:46:11:1a:44:86:97:9f:08:39:04:e6:a6:10: 1a:6e:57:ba:86:4d:ba:a4:84:66:f4:28:6e:bc:cd:04:87:78: f1:70:f7:0d:e2:37:6b:c1:8a:93:2c:a1:cb:cd:f1:c6:91:0b: 21:66:2c:d4:af:17:fa:46:f7:1c:24:52:40:bb:27:ef:ff:2f: c5:dd:fc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJl3DGXvzZSI83YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTljZDA4NmYtYjk5My00MmQ5LThmNDctYzY1ZGY3NGQ2 OTNiMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NjUyODcxOGItMWNmMC00MzA4LTg1MTgtYmZlZDU3N2UxN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV/GXxmJ7XLrxuYFkRLSbLO3Z7Oj9bZtAaVF kqGNOqtFQaQ4PEKJCzC/HIxGNpCzzUsCT0CUGQmrElqviet6CHN/FBZst9vr22ua 8km2j+Hld1AMSjarORkwjgcZkKCLAP75VOoo9H9coh2EGkHfQAJDMi7DKMY9HDd+ FwVyetLRDPT72q9OXqRLxwJnT14FzRNrQnU5Z3vC0i8eVCYjApp82IbCTR5UtMam JglU2r8jFaKZux4Z8WGr3BVPVnyTlZySb601ZThingJ4sroXTtlU35HTRR5GSKY1 QWzYrh4a4i/wkid+qF4CfDKlRBE+2aXf8w8mhFuvhiP6NddhyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnVEEWo5N9HMs9J1N3ZpOPmR9VNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85OWNk MDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVkZjc0ZDY5M2IvNjhlNGM2M2MtZjNkOC0z NzYyLWJhMWQtYTAyMDUzYTA2YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTljZDA4NmYtYjk5My00MmQ5LThm NDctYzY1ZGY3NGQ2OTNiLzk5Y2QwODZmLWI5OTMtNDJkOS04ZjQ3LWM2NWRmNzRk NjkzYi5jcmwwHwYDVR0jBBgwFoAUw3xudGUvRJJydjptjDZRfGn1VfcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85OWNkMDg2Zi1iOTkzLTQyZDktOGY0Ny1jNjVk Zjc0ZDY5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYf9ReS3vE6OndOvnxXEHqze+sasvnfdecsTv/dVzYzVAFSyIbkbo4z jb/sbty8lJuQyN/bvxc5wq+DdsneTO9JgAezya2c/oOk23rok1vz1P7Xclk/KSv1 x7+KYuyA4u3qK6FtiYDXH7dpIxJNDtA+kilXo/j3uUzV3RSQGNyhWEuH0enKJNFl msijuq8iYLwOCakXpv6ST6mhA+v1bQifhckSbndZheMX7wpo5itb0HXCOVkkR8ve RhEaRIaXnwg5BOamEBpuV7qGTbqkhGb0KG68zQSHePFw9w3iN2vBipMsocvN8caR CyFmLNSvF/pG9xwkUkC7J+//L8Xd/AY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:50:41 2025 by rpki-client