$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa File: 18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa (raw, json) Hash identifier: 3l0HQBCYZC140JnVuFY3M2zi1G69v6SBXA6NWv45EwA= Subject key identifier: 0B:37:3F:7D:1C:FE:83:8D:2D:15:44:2D:E3:77:16:11:D3:94:48:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963664F18DB9C53607CC6380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:64:f1:8d:b9:c5:36:07:cc:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=84db92d5-7539-4e36-aa50-c8afca5f5aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:81:60:a8:c3:8b:5c:ab:5e:e9:77:57:3e: 5f:e7:1f:68:6d:79:ac:a9:12:1b:c1:33:20:74:84: f1:09:ab:f3:61:c1:aa:8d:d5:72:50:80:f9:07:18: 0f:47:27:1c:22:c0:04:dd:c8:f6:9f:93:51:9b:d3: 29:cc:b6:50:75:8d:5e:c9:73:4a:b7:4e:58:88:99: 28:d0:4e:76:86:66:b6:f4:ee:79:7a:39:af:58:cc: 96:23:4a:cd:ce:47:9b:8a:96:13:f5:de:c1:5c:fc: 75:ee:0c:b5:c8:e1:b4:af:9c:56:09:b5:55:50:f8: 7d:e0:f3:95:b0:c9:51:82:c7:e5:3f:02:6b:68:72: 3d:4f:25:ea:ab:79:62:2e:11:02:70:17:89:3e:eb: 1e:75:9f:f5:14:d2:12:95:a5:ec:bb:12:f1:96:dd: 2e:d0:2b:8f:8e:ba:84:3b:c7:1c:7d:db:f8:1b:bd: f8:18:f8:6d:61:3a:bd:5e:6b:7c:2f:af:15:5c:22: 65:d1:a1:09:54:96:17:25:9f:1a:e3:e4:a1:60:3e: 47:1d:d4:47:af:07:7d:c0:2b:1f:63:42:25:53:f0: 3d:03:22:80:cc:ca:0a:0a:af:eb:1c:73:5a:eb:4d: e7:95:f6:48:b9:00:80:fd:45:95:e7:77:f4:80:6b: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:3F:7D:1C:FE:83:8D:2D:15:44:2D:E3:77:16:11:D3:94:48:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:70:d2:9c:5d:4e:8b:f4:e5:f0:5c:8c:84:c0:6d:c1:10:b7: 9a:4c:9c:83:35:80:60:8e:ca:44:09:64:6e:93:8d:0e:70:da: 5e:dc:95:75:69:54:8d:60:92:8a:f9:fc:cb:26:e5:a8:22:01: 49:fa:3c:93:17:0e:6e:c9:94:7d:11:a7:81:7c:ba:58:30:99: 00:f7:ef:17:74:66:09:d8:f9:8b:90:5c:42:8e:59:8d:43:72: 8a:1f:cd:13:86:eb:e1:30:dc:90:2b:f2:fc:1c:f6:2d:37:64: ed:0d:38:ee:41:cf:2a:f9:19:5b:63:18:65:e5:ed:de:88:82: 9b:08:a3:12:89:65:77:a8:c6:0c:b3:fe:46:6b:59:99:12:b3: 74:3f:22:bd:47:c3:04:83:f0:d9:66:9a:0f:04:e1:44:3e:b2: 31:f3:5d:e8:96:53:db:66:61:49:d0:e1:09:46:fe:40:0f:61: a3:dc:89:f3:e3:da:e2:23:fe:25:7a:04:5c:2c:92:00:82:3c: fb:7b:c2:63:d1:92:6d:15:e4:cd:3c:cb:82:4f:a0:5c:b7:e5: 5e:74:ac:fd:0b:4c:45:4a:3b:4f:8f:2a:29:71:87:90:d7:e3: d3:6e:1d:3e:37:c8:bf:f3:4c:0d:1c:0d:3c:5c:a5:b5:75:37: ed:42:b7:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmTxjbnFNgfMY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODRkYjkyZDUtNzUzOS00ZTM2LWFhNTAtYzhhZmNhNWY1YWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBmBYKjDi1yrXul3Vz5f5x9obXmsqRIbwTMg dITxCavzYcGqjdVyUID5BxgPRyccIsAE3cj2n5NRm9MpzLZQdY1eyXNKt05YiJko 0E52hma29O55ejmvWMyWI0rNzkebipYT9d7BXPx17gy1yOG0r5xWCbVVUPh94POV sMlRgsflPwJraHI9TyXqq3liLhECcBeJPusedZ/1FNISlaXsuxLxlt0u0CuPjrqE O8ccfdv4G734GPhtYTq9Xmt8L68VXCJl0aEJVJYXJZ8a4+ShYD5HHdRHrwd9wCsf Y0IlU/A9AyKAzMoKCq/rHHNa603nlfZIuQCA/UWV53f0gGs4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs3P30c/oONLRVELeN3FhHTlEiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg3NjlkNGItNGRmMi0z NzNlLThmNjctZjdjZTJkMWNjNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtw0pxdTov05fBcjITAbcEQt5pMnIM1gGCOykQJZG6TjQ5w2l7clXVp VI1gkor5/Msm5agiAUn6PJMXDm7JlH0Rp4F8ulgwmQD37xd0ZgnY+YuQXEKOWY1D coofzROG6+Ew3JAr8vwc9i03ZO0NOO5Bzyr5GVtjGGXl7d6IgpsIoxKJZXeoxgyz /kZrWZkSs3Q/Ir1HwwSD8Nlmmg8E4UQ+sjHzXeiWU9tmYUnQ4QlG/kAPYaPcifPj 2uIj/iV6BFwskgCCPPt7wmPRkm0V5M08y4JPoFy35V50rP0LTEVKO0+PKilxh5DX 49NuHT43yL/zTA0cDTxcpbV1N+1Ctz4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:30 2025 by rpki-client