$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e73b7f5-392b-3167-b13e-d485f55e7577.roa File: 0e73b7f5-392b-3167-b13e-d485f55e7577.roa (raw, json) Hash identifier: qYuKKciwT/A9hR0JsMIrdB/CkmaJhKI5ArM9k4oHXN8= Subject key identifier: 92:29:41:A3:31:32:5E:11:3B:11:4E:C4:0C:2A:E8:92:87:D3:F8:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360FC1E765D5A271CA2F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e73b7f5-392b-3167-b13e-d485f55e7577.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0f:c1:e7:65:d5:a2:71:ca:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f8eda1e7-784f-4bb8-83df-33fac69c77ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:bd:89:88:5e:0b:a7:15:95:17:55:30:a6: 9e:c1:15:78:4d:99:33:05:46:27:b4:e5:c9:3a:ec: af:0e:6c:40:1d:23:3b:e6:cc:14:b2:4c:9d:d6:5c: a1:85:cf:d0:92:97:9f:d3:11:b5:8f:26:86:d1:f4: 3c:f9:5e:a1:13:8b:6e:fd:ce:73:e4:d7:89:2b:e9: e2:b0:d4:3f:7a:4a:5f:06:2e:04:35:7d:f7:5c:53: 89:aa:01:bf:7d:a6:1d:75:ca:99:fa:4a:ab:a9:8b: 77:d0:1b:25:c3:23:d2:6c:ca:c7:7f:08:59:86:b8: bc:83:87:a8:62:09:78:9b:80:b9:c4:2e:3a:d5:25: 94:18:69:1a:cd:7b:a1:d6:cd:67:79:5d:6e:1a:bc: bc:f9:38:57:d6:70:c9:b5:c7:1b:8e:39:b7:bc:79: 4b:f3:85:34:a4:65:23:44:80:7a:d0:fb:2e:8d:43: de:e6:8e:2d:f2:f6:86:eb:20:5c:cd:9c:b6:9e:bd: f7:d0:23:5a:3a:c9:a6:f7:e9:1b:25:47:d2:51:3a: 5a:cc:b6:51:0d:de:f4:d6:bb:f5:e5:ab:c6:12:cb: 70:7c:7e:e4:10:b0:dd:ff:3b:1d:e2:7d:8a:d2:db: 39:f0:77:dc:2a:71:1b:64:bf:7b:47:c2:17:66:98: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:41:A3:31:32:5E:11:3B:11:4E:C4:0C:2A:E8:92:87:D3:F8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e73b7f5-392b-3167-b13e-d485f55e7577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:59:90:a0:dd:6c:6d:a8:ab:44:ee:bf:44:a1:b0:06:db:6d: 38:0a:04:39:5c:f5:93:da:b5:0b:75:92:2f:9b:76:a0:d0:a1: d9:0a:ef:04:71:09:4a:b6:60:55:0b:62:c9:a2:48:31:45:c9: 93:2a:e9:be:5d:3c:0d:b3:99:56:9d:aa:1c:29:65:e2:56:79: c1:65:b9:13:a3:2c:de:f6:ca:ff:b0:8e:82:25:94:da:14:3f: 21:56:79:ff:17:49:a7:66:83:bf:39:e2:0e:7d:ee:2d:8f:f0: 53:af:d5:fc:93:68:23:05:9b:58:f1:50:2f:1b:4a:59:7c:07: 05:c6:2b:6a:e0:9a:2c:9d:14:1c:1b:01:45:3d:b7:72:74:b7: 4c:29:35:ce:c3:19:1a:a8:17:a4:01:b8:58:b4:9d:6a:1a:66: eb:0a:45:38:b4:27:c5:4a:d4:08:da:aa:e7:79:e8:e8:e0:47: e3:8d:4c:03:30:17:93:7a:e3:ba:66:12:ac:51:89:a4:4a:46: 40:74:df:98:82:7a:78:4b:30:2b:f0:a5:23:7d:99:b3:ab:95: 0c:0f:9e:88:6c:ee:09:8c:27:10:b7:39:61:f8:8f:57:44:7c: 54:84:dc:02:b6:b9:d1:84:a1:67:0f:2a:33:24:f0:70:0c:a7: e4:3e:8d:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNg/B52XVonHKLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjhlZGExZTctNzg0Zi00YmI4LTgzZGYtMzNmYWM2OWM3N2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxC9iYheC6cVlRdVMKaewRV4TZkzBUYntOXJ OuyvDmxAHSM75swUskyd1lyhhc/Qkpef0xG1jyaG0fQ8+V6hE4tu/c5z5NeJK+ni sNQ/ekpfBi4ENX33XFOJqgG/faYddcqZ+kqrqYt30BslwyPSbMrHfwhZhri8g4eo Ygl4m4C5xC461SWUGGkazXuh1s1neV1uGry8+ThX1nDJtccbjjm3vHlL84U0pGUj RIB60PsujUPe5o4t8vaG6yBczZy2nr330CNaOsmm9+kbJUfSUTpazLZRDd701rv1 5avGEstwfH7kELDd/zsd4n2K0ts58HfcKnEbZL97R8IXZpgNdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIpQaMxMl4ROxFOxAwq6JKH0/hlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU3M2I3ZjUtMzkyYi0z MTY3LWIxM2UtZDQ4NWY1NWU3NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhZkKDdbG2oq0Tuv0ShsAbbbTgKBDlc9ZPatQt1ki+bdqDQodkK7wRx CUq2YFULYsmiSDFFyZMq6b5dPA2zmVadqhwpZeJWecFluROjLN72yv+wjoIllNoU PyFWef8XSadmg7854g597i2P8FOv1fyTaCMFm1jxUC8bSll8BwXGK2rgmiydFBwb AUU9t3J0t0wpNc7DGRqoF6QBuFi0nWoaZusKRTi0J8VK1Ajaqud56OjgR+ONTAMw F5N647pmEqxRiaRKRkB035iCenhLMCvwpSN9mbOrlQwPnohs7gmMJxC3OWH4j1dE fFSE3AK2udGEoWcPKjMk8HAMp+Q+jfs= -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:19 2025 by rpki-client