$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/168dd9de-6fe6-3d5b-947a-5c3963a759e8.roa File: 168dd9de-6fe6-3d5b-947a-5c3963a759e8.roa (raw, json) Hash identifier: QLsO+udUlTp3ZDNSgg+NPCxosorNdUBvH6AbUzGs/DY= Subject key identifier: C3:11:18:23:74:16:25:8E:EC:9A:C8:EE:9E:97:6F:C9:79:56:AD:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366390A33972EDA3B41080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/168dd9de-6fe6-3d5b-947a-5c3963a759e8.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.107.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:63:90:a3:39:72:ed:a3:b4:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=32938ff5-6aa5-4945-b4ec-96dc6e672f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:ab:83:be:06:86:63:fe:59:32:ee:e7:48: 73:0c:f7:9b:45:5f:3b:c6:68:e9:84:bf:ab:77:62: a2:a9:eb:f7:dc:ce:07:75:58:a5:3c:34:7c:a5:ee: 3e:64:93:5c:4e:53:24:b2:4f:22:7f:53:21:ea:c7: e7:99:a1:a6:db:50:2c:41:e0:8a:4b:18:51:70:61: c3:83:82:96:ef:bf:94:65:15:d0:42:9a:42:45:30: ae:62:ef:9d:27:b0:04:ed:e2:c2:b4:da:86:18:c4: 33:cc:62:61:d2:e1:46:32:fa:27:58:1c:fe:84:64: 80:2b:30:d0:45:f8:08:ef:82:bc:5d:66:d9:65:dd: 6e:35:5a:7d:91:ee:d3:fa:02:98:8e:62:58:9c:7a: 3c:e1:d3:cc:eb:ef:99:4f:b0:3f:b0:c6:91:ed:06: 6a:96:73:a7:d6:c6:c5:03:dd:dd:26:bc:bb:08:71: ba:1b:5c:da:df:94:a7:3e:b8:55:eb:90:cf:8b:6c: 36:75:a8:57:89:cd:61:41:8f:d7:1f:72:30:05:c3: 56:a6:0e:e3:d7:4c:de:07:7b:72:d8:b7:14:98:a3: 19:b6:bc:4a:ea:43:e3:7d:78:5d:49:33:22:4c:f4: 06:f1:04:15:a9:29:d7:fc:fc:34:18:f0:26:4d:30: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:18:23:74:16:25:8E:EC:9A:C8:EE:9E:97:6F:C9:79:56:AD:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/168dd9de-6fe6-3d5b-947a-5c3963a759e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9f:50:cd:5a:0e:1b:cc:5b:5e:90:8c:bd:aa:8f:f9:ff:ff: 27:f7:9f:f5:41:ab:f8:02:89:5b:a5:d1:0a:78:1e:3c:bd:f7: 98:bc:85:bd:6f:98:1b:f0:9d:8f:50:40:04:6e:7b:71:99:56: de:65:26:53:b0:c0:77:53:5b:ee:8a:57:bc:88:15:82:c4:72: a6:40:eb:6f:5e:b9:51:82:ed:44:0b:e0:99:dc:6b:2d:28:2d: a9:63:df:85:28:4d:61:1e:86:7d:b3:46:54:27:45:47:06:1e: e1:49:3d:37:e1:54:78:6a:62:23:67:26:e0:0a:07:fb:58:a2: c0:20:5e:bc:b2:91:09:fd:68:38:ae:ac:ad:07:74:d5:30:0f: e4:b9:51:4e:f2:b8:9d:58:60:23:56:4e:3f:31:92:c9:00:33: 88:92:ca:be:0f:1c:54:f4:a5:df:4a:5d:ce:49:ab:72:94:81: 49:15:19:29:35:dc:94:73:00:41:57:16:c7:80:81:11:4b:33: fd:3a:35:8b:42:9e:94:43:f0:8c:23:6c:14:e5:c4:a4:d2:82: 1c:70:7c:3d:bb:58:06:7b:9d:52:12:cc:dc:2e:25:d2:4b:bf: 78:b5:77:e8:b8:22:eb:56:66:c3:aa:ed:e1:ad:0e:7e:64:f6: 6c:9a:3d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmOQozly7aO0EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzI5MzhmZjUtNmFhNS00OTQ1LWI0ZWMtOTZkYzZlNjcyZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMmrg74GhmP+WTLu50hzDPebRV87xmjphL+r d2Kiqev33M4HdVilPDR8pe4+ZJNcTlMksk8if1Mh6sfnmaGm21AsQeCKSxhRcGHD g4KW77+UZRXQQppCRTCuYu+dJ7AE7eLCtNqGGMQzzGJh0uFGMvonWBz+hGSAKzDQ RfgI74K8XWbZZd1uNVp9ke7T+gKYjmJYnHo84dPM6++ZT7A/sMaR7QZqlnOn1sbF A93dJry7CHG6G1za35SnPrhV65DPi2w2dahXic1hQY/XH3IwBcNWpg7j10zeB3ty 2LcUmKMZtrxK6kPjfXhdSTMiTPQG8QQVqSnX/Pw0GPAmTTBfaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMRGCN0FiWO7JrI7p6Xb8l5Vq0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTY4ZGQ5ZGUtNmZlNi0z ZDViLTk0N2EtNWMzOTYzYTc1OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWfUM1aDhvMW16QjL2qj/n//yf3n/VBq/gCiVul0Qp4Hjy995i8hb1v mBvwnY9QQARue3GZVt5lJlOwwHdTW+6KV7yIFYLEcqZA629euVGC7UQL4Jncay0o Lalj34UoTWEehn2zRlQnRUcGHuFJPTfhVHhqYiNnJuAKB/tYosAgXryykQn9aDiu rK0HdNUwD+S5UU7yuJ1YYCNWTj8xkskAM4iSyr4PHFT0pd9KXc5Jq3KUgUkVGSk1 3JRzAEFXFseAgRFLM/06NYtCnpRD8IwjbBTlxKTSghxwfD27WAZ7nVISzNwuJdJL v3i1d+i4IutWZsOq7eGtDn5k9myaPaM= -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:12 2025 by rpki-client