$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/008130af-9a59-31bd-b183-78829cab435d.roa File: 008130af-9a59-31bd-b183-78829cab435d.roa (raw, json) Hash identifier: WVFw/gVkPz375MwL4ZNArf968EF/3WSWvbjFg9+U4MY= Subject key identifier: AB:E9:6B:16:CC:E5:86:D1:23:15:12:C2:96:22:E2:78:F8:4E:8B:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963665BAA820A6B2FCF40100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/008130af-9a59-31bd-b183-78829cab435d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:65:ba:a8:20:a6:b2:fc:f4:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=b923b024-01e4-44d4-8d5f-153605d87ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:9e:d7:d2:db:84:39:03:86:30:f6:ad:5f: d3:a2:fc:85:45:03:d4:53:53:c3:c3:6e:d8:74:6d: 06:ca:e7:c9:ae:51:f1:f0:c9:67:73:96:1f:f3:fd: 15:2c:a9:96:12:05:13:ee:e2:d1:f7:4a:0b:20:1b: 19:b3:c6:5f:8c:29:e3:b2:aa:17:1a:29:3a:43:02: bb:5d:e5:43:ec:b0:50:f9:7c:17:30:e7:79:98:84: 42:05:45:03:21:d7:43:9a:a9:71:85:5c:ab:d7:b0: a7:fc:c3:c9:92:30:e8:b7:73:ab:ad:d7:0f:6b:cb: e1:b7:66:f0:99:1e:13:8f:2c:2e:40:cd:3c:ac:ed: 2c:b8:13:69:dd:f5:0f:76:23:a8:6c:1a:d5:ba:d9: 31:98:18:4e:a7:0a:37:fd:65:99:2c:27:55:86:ca: 02:81:93:20:fe:c5:a7:13:3e:43:fe:e8:b1:13:7e: 24:91:35:e8:45:3e:fe:9d:1c:5e:c5:b0:84:e5:80: 8a:bc:8c:88:5a:f3:12:80:05:5a:59:e9:e6:ae:77: 48:8a:e5:de:96:d4:60:fa:01:3c:ed:51:44:df:81: d3:cf:16:29:1b:80:76:d5:62:0e:71:62:d1:eb:3b: 2f:dc:b8:28:b5:d7:82:ea:71:1c:c9:6d:8f:d6:44: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E9:6B:16:CC:E5:86:D1:23:15:12:C2:96:22:E2:78:F8:4E:8B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/008130af-9a59-31bd-b183-78829cab435d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ce:af:e7:75:be:30:1b:5a:9e:a5:30:eb:35:15:d9:16:fc: 2e:dc:31:96:09:6b:2a:75:57:21:8d:4c:0a:f0:05:8a:d2:87: 3c:35:1d:f1:ea:7f:60:be:6e:cc:0d:b3:99:62:28:80:70:05: 82:41:44:26:ba:a0:03:a9:56:52:38:47:50:c9:83:4d:1d:86: 3c:1d:e8:d3:57:61:7a:ff:dc:01:4c:0a:83:1e:15:46:bd:a7: 90:8d:41:10:2e:32:d0:4b:de:bb:cc:e5:4c:5d:79:db:b4:3a: ac:80:72:c6:cf:7b:23:86:4b:2a:51:0b:d6:c8:94:19:8a:16: 51:d1:09:17:60:07:7f:6d:78:54:6e:5f:a7:ac:23:40:d6:dd: 7a:4e:e9:4a:e9:f8:26:93:b8:8b:77:f8:81:2c:f7:07:56:d2: 7d:1a:c5:9f:72:13:99:2f:5e:90:e9:57:9e:c6:8f:50:2f:e4: 66:ad:b4:a8:42:16:81:7f:f8:93:a0:a4:59:5e:c5:1c:22:87: c9:81:e3:ce:be:52:30:c9:50:ba:2c:67:8c:9c:10:15:1d:2d: fd:5e:f9:41:a1:ed:46:fa:15:ef:73:a1:4d:ad:48:d8:57:40: 2f:83:cd:b9:39:fa:5c:0f:45:5c:5a:02:9b:9a:0c:ea:41:ce: 20:af:1d:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmW6qCCmsvz0AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YjkyM2IwMjQtMDFlNC00NGQ0LThkNWYtMTUzNjA1ZDg3ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa+e19LbhDkDhjD2rV/TovyFRQPUU1PDw27Y dG0GyufJrlHx8Mlnc5Yf8/0VLKmWEgUT7uLR90oLIBsZs8ZfjCnjsqoXGik6QwK7 XeVD7LBQ+XwXMOd5mIRCBUUDIddDmqlxhVyr17Cn/MPJkjDot3OrrdcPa8vht2bw mR4TjywuQM08rO0suBNp3fUPdiOobBrVutkxmBhOpwo3/WWZLCdVhsoCgZMg/sWn Ez5D/uixE34kkTXoRT7+nRxexbCE5YCKvIyIWvMSgAVaWenmrndIiuXeltRg+gE8 7VFE34HTzxYpG4B21WIOcWLR6zsv3LgotdeC6nEcyW2P1kR28QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvpaxbM5YbRIxUSwpYi4nj4TotOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDA4MTMwYWYtOWE1OS0z MWJkLWIxODMtNzg4MjljYWI0MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjOr+d1vjAbWp6lMOs1FdkW/C7cMZYJayp1VyGNTArwBYrShzw1HfHq f2C+bswNs5liKIBwBYJBRCa6oAOpVlI4R1DJg00dhjwd6NNXYXr/3AFMCoMeFUa9 p5CNQRAuMtBL3rvM5Uxdedu0OqyAcsbPeyOGSypRC9bIlBmKFlHRCRdgB39teFRu X6esI0DW3XpO6Urp+CaTuIt3+IEs9wdW0n0axZ9yE5kvXpDpV57Gj1Av5GattKhC FoF/+JOgpFlexRwih8mB486+UjDJULosZ4ycEBUdLf1e+UGh7Ub6Fe9zoU2tSNhX QC+Dzbk5+lwPRVxaApuaDOpBziCvHac= -----END CERTIFICATE-----Generated at Sat Aug 9 14:33:48 2025 by rpki-client