$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa File: 08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa (raw, json) Hash identifier: 2y9mGU9V+DU6jAv42TUagEze7fpjoconG9DwawfxrzY= Subject key identifier: 09:7B:B6:33:C5:06:D0:3D:C8:6F:2F:4D:FA:4F:0C:94:A6:0D:4D:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636604C26071A0B974E24C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.101.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:60:4c:26:07:1a:0b:97:4e:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=6320b759-37c6-4d43-8e56-daa2143a531a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:6d:31:e6:dd:04:fc:fd:87:b1:a5:38:5e: a2:47:df:72:b7:a0:a2:01:72:d7:a1:cc:c3:e0:fd: ca:68:d1:99:b5:8e:04:4d:93:0f:74:f8:33:5d:fe: 78:42:33:30:75:82:2d:76:c0:d2:28:0b:2c:eb:ec: 84:95:56:aa:8a:98:22:85:cc:c2:9e:de:05:99:64: 68:04:02:2b:a2:81:67:f1:d7:5c:10:c2:40:f0:b7: f7:86:07:5f:27:99:e3:14:71:c0:4d:a9:02:a8:b8: a6:af:9e:8b:f7:71:00:97:bc:52:d2:ed:8d:a8:38: c4:ad:8b:b2:62:d0:4e:f3:8d:6e:e3:dc:ed:82:e6: 69:51:26:ee:50:52:dd:b8:76:01:90:d7:ef:1a:1b: 2c:c4:00:1b:7c:05:48:f0:2b:25:31:46:9a:47:bf: 2a:0c:63:f7:2c:c2:96:9a:b8:2e:e9:8e:fd:d7:10: 97:f0:de:b0:12:70:09:26:c3:4d:10:1a:23:bf:30: 45:03:6e:46:c5:75:ff:04:94:99:22:4a:29:e0:74: 63:5d:1a:e0:90:7b:4c:1d:ea:2b:ba:c5:72:8e:2d: 84:85:51:92:5a:07:53:4a:14:b6:76:37:12:11:23: 35:ca:02:11:0a:b4:db:45:99:e5:2c:b9:41:6b:0f: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:B6:33:C5:06:D0:3D:C8:6F:2F:4D:FA:4F:0C:94:A6:0D:4D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:63:8b:a1:8a:26:27:86:67:e2:1f:0b:19:74:e1:3d:f2:68: 1c:b3:db:cf:20:0b:41:b5:a9:df:cf:40:d6:c7:f7:38:07:a1: bc:34:96:f9:a9:11:61:1a:f3:01:d3:fb:a3:9e:2a:2f:35:ae: aa:1e:81:ac:3c:70:0f:48:0f:09:34:c0:34:52:4c:e7:2c:43: 96:f4:b0:d5:46:75:89:cf:5f:0a:47:a4:15:3f:fc:3b:1e:03: 02:cb:e4:f4:7c:a6:cf:a4:08:ca:96:d5:88:58:04:5c:52:d0: 71:07:df:e9:3a:3d:7c:7e:a8:2c:d9:1c:33:37:55:64:48:b0: f9:15:ee:b8:4e:71:d1:69:95:ec:85:3e:a6:ea:70:30:40:a8: d9:e1:66:69:db:68:48:9f:6f:3b:df:ae:ff:91:24:ff:2e:03: 0b:ad:36:c4:3c:ac:02:17:1c:85:99:d1:6a:00:04:74:9e:a1: a5:14:da:54:0b:b7:6a:5e:3a:e0:db:b9:7e:eb:ca:f0:1d:f9: ef:f1:ea:13:52:df:bf:e8:3d:eb:b1:e9:1f:a7:4c:20:40:1e: a3:d1:84:10:d2:e0:ef:9c:87:a6:28:a6:3c:88:ff:4e:4b:50: ea:bc:26:cf:80:65:e7:7b:d8:6b:66:2a:76:fe:d2:86:b0:a4: f6:ce:0d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmBMJgcaC5dOJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjMyMGI3NTktMzdjNi00ZDQzLThlNTYtZGFhMjE0M2E1MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa1tMebdBPz9h7GlOF6iR99yt6CiAXLXoczD 4P3KaNGZtY4ETZMPdPgzXf54QjMwdYItdsDSKAss6+yElVaqipgihczCnt4FmWRo BAIrooFn8ddcEMJA8Lf3hgdfJ5njFHHATakCqLimr56L93EAl7xS0u2NqDjErYuy YtBO841u49ztguZpUSbuUFLduHYBkNfvGhssxAAbfAVI8CslMUaaR78qDGP3LMKW mrgu6Y791xCX8N6wEnAJJsNNEBojvzBFA25GxXX/BJSZIkop4HRjXRrgkHtMHeor usVyji2EhVGSWgdTShS2djcSESM1ygIRCrTbRZnlLLlBaw+G7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl7tjPFBtA9yG8vTfpPDJSmDU3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhhMmIzMjEtZDk0Yy0z MzhlLThkZGQtYTJmYTdmMmMzNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVji6GKJieGZ+IfCxl04T3yaByz288gC0G1qd/PQNbH9zgHobw0lvmp EWEa8wHT+6OeKi81rqoegaw8cA9IDwk0wDRSTOcsQ5b0sNVGdYnPXwpHpBU//Dse AwLL5PR8ps+kCMqW1YhYBFxS0HEH3+k6PXx+qCzZHDM3VWRIsPkV7rhOcdFpleyF PqbqcDBAqNnhZmnbaEifbzvfrv+RJP8uAwutNsQ8rAIXHIWZ0WoABHSeoaUU2lQL t2peOuDbuX7ryvAd+e/x6hNS37/oPeux6R+nTCBAHqPRhBDS4O+ch6YopjyI/05L UOq8Js+AZed72GtmKnb+0oawpPbODfM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:20 2025 by rpki-client