$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa File: 033950d8-0213-3cac-a0c6-a58cf35f17df.roa (raw, json) Hash identifier: SL63KLucz2ftxhGjJNCi4ALVwMAHf7+nnL5f0HxWk6I= Subject key identifier: 31:52:67:91:FC:5B:1A:F3:BB:19:98:0A:33:59:91:57:F5:33:FE:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366580A3FFFEB3BC6F8DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:65:80:a3:ff:fe:b3:bc:6f:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=98f419d1-8501-44a4-b3fc-8ea37529f077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:94:4d:83:e7:56:3d:1d:ad:1c:9f:7c:63: f4:49:76:94:54:8f:05:11:74:46:c9:32:69:68:58: a1:32:9f:74:b4:bd:9d:d8:82:e2:b5:32:c4:86:cc: 07:75:98:c5:29:7c:81:e7:c4:82:b8:89:64:d5:f2: 98:d7:b7:d7:5f:7b:cb:9c:7a:14:c0:83:0a:d8:60: 94:b1:03:a8:4e:9c:2b:7d:20:1d:28:97:5e:f6:1b: b6:64:fa:5b:e0:f2:a6:46:83:e1:1b:5c:c8:d3:ea: a4:a0:e9:ce:1b:cf:64:8a:48:ea:e4:37:45:f3:c4: 61:64:fa:01:23:b5:fc:5a:a6:80:03:24:55:f8:c1: e1:39:0c:f2:36:26:75:51:bd:45:30:5e:0e:a8:67: b1:59:1e:ca:95:90:e4:cb:14:c9:bd:d9:07:e8:02: 7d:2b:dd:9b:02:04:d9:92:b0:7f:1a:f6:a1:3d:a4: 7a:2d:e9:2d:6e:00:5f:15:79:0c:86:63:50:c4:d3: 60:af:5b:86:fe:ca:fe:a2:86:2e:f9:df:80:38:62: 99:81:ff:0e:bd:aa:65:02:bd:f9:63:e9:73:2a:f7: 9a:11:9b:96:db:14:05:e5:20:55:05:ab:55:8b:a1: f5:75:91:7c:fb:0e:b3:47:84:40:28:f4:78:5f:e6: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:52:67:91:FC:5B:1A:F3:BB:19:98:0A:33:59:91:57:F5:33:FE:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:32:9c:86:81:f6:0c:24:ff:c0:4b:6d:88:3d:8b:63:25:e1: 6e:3d:7f:3a:4c:29:2c:a7:c0:59:c9:24:b6:20:97:d0:54:7b: 13:4b:94:34:88:15:e3:e8:db:a9:fe:3c:fb:e7:e5:f5:08:4e: cd:29:ea:6f:60:29:ff:1f:2b:fa:c0:b5:fc:ae:f9:44:a4:2b: ee:4a:c8:41:69:59:2a:e3:aa:bc:4d:58:b2:15:ef:89:24:2c: dc:bf:9f:0d:21:bb:00:bd:2d:b8:86:26:66:5f:ec:a6:fd:ed: 8e:c1:bf:2b:f1:b9:6f:3c:b3:27:be:b4:92:9e:8e:66:cd:d9: d6:b8:a6:fe:5f:49:74:20:2d:1b:d7:97:a0:e8:42:cb:c5:23: dc:ad:3b:00:8f:1e:b5:10:02:51:22:fc:40:6d:61:4f:57:0a: 5f:43:76:c0:83:5b:e6:2d:02:59:a3:a6:15:fc:6f:a4:02:36: 05:20:76:7a:e5:22:02:f1:0b:0a:fb:f6:13:f6:0f:de:32:3c: 2d:e7:65:2b:1f:7e:43:90:35:17:ce:7f:4b:ee:4f:5b:ff:68: bf:0b:27:5f:04:30:91:cd:5c:48:45:26:3b:20:56:73:d5:8e: f6:5c:07:fa:59:70:14:b6:ff:34:88:2c:8f:d4:59:59:a8:25: d5:77:79:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmWAo//+s7xvjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OThmNDE5ZDEtODUwMS00NGE0LWIzZmMtOGVhMzc1MjlmMDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr6UTYPnVj0drRyffGP0SXaUVI8FEXRGyTJp aFihMp90tL2d2ILitTLEhswHdZjFKXyB58SCuIlk1fKY17fXX3vLnHoUwIMK2GCU sQOoTpwrfSAdKJde9hu2ZPpb4PKmRoPhG1zI0+qkoOnOG89kikjq5DdF88RhZPoB I7X8WqaAAyRV+MHhOQzyNiZ1Ub1FMF4OqGexWR7KlZDkyxTJvdkH6AJ9K92bAgTZ krB/GvahPaR6LektbgBfFXkMhmNQxNNgr1uG/sr+ooYu+d+AOGKZgf8OvaplAr35 Y+lzKveaEZuW2xQF5SBVBatVi6H1dZF8+w6zR4RAKPR4X+aqQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFSZ5H8WxrzuxmYCjNZkVf1M/5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzOTUwZDgtMDIxMy0z Y2FjLWEwYzYtYTU4Y2YzNWYxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMynIaB9gwk/8BLbYg9i2Ml4W49fzpMKSynwFnJJLYgl9BUexNLlDSI FePo26n+PPvn5fUITs0p6m9gKf8fK/rAtfyu+USkK+5KyEFpWSrjqrxNWLIV74kk LNy/nw0huwC9LbiGJmZf7Kb97Y7BvyvxuW88sye+tJKejmbN2da4pv5fSXQgLRvX l6DoQsvFI9ytOwCPHrUQAlEi/EBtYU9XCl9DdsCDW+YtAlmjphX8b6QCNgUgdnrl IgLxCwr79hP2D94yPC3nZSsffkOQNRfOf0vuT1v/aL8LJ18EMJHNXEhFJjsgVnPV jvZcB/pZcBS2/zSILI/UWVmoJdV3eRo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:01 2025 by rpki-client