$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f62cb17-685b-3ee6-a074-62a4b6144289.roa File: 1f62cb17-685b-3ee6-a074-62a4b6144289.roa (raw, json) Hash identifier: /NXZ/7nZFCyk91vuOrE5gwPWlenFPOd5SxoKZgLg7O0= Subject key identifier: 97:29:C6:4A:BD:AD:7D:7B:FE:68:1D:1A:D8:13:AE:E2:8C:5C:C8:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363AFAB86363421C675500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f62cb17-685b-3ee6-a074-62a4b6144289.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.13.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3a:fa:b8:63:63:42:1c:67:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a79becb7-d1c0-4473-bf80-5d9cefa0ae6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:3a:b8:04:09:a6:8b:e4:ea:96:fd:c4:e1: 21:72:af:1f:bd:f2:29:2e:e6:cd:8e:ac:1c:f0:33: 53:80:86:7e:c8:86:06:1d:f4:2f:3b:3d:14:7a:62: a6:d5:ee:c7:e5:93:0b:3e:73:9c:bb:dd:17:6f:24: 2d:48:84:40:a9:48:db:b5:8c:67:85:4d:2e:78:c2: 38:2d:a4:dc:a5:4f:53:9e:6d:f4:56:38:f5:a9:9f: c5:1a:70:6e:67:63:20:d9:a4:ae:a0:0c:77:6b:73: d5:cd:12:cc:d1:39:1f:7d:c9:f4:33:a7:1b:cd:90: bf:66:e5:c9:7a:e4:1b:d8:04:94:4f:2d:bc:be:28: 4f:8f:4b:8e:d1:75:90:26:1a:f9:c4:05:6c:b8:4f: a8:8e:f2:8a:67:b6:80:91:14:f4:cf:62:35:ef:c0: 53:f2:60:dd:d3:be:aa:03:58:cc:86:3c:56:9a:8b: db:98:f4:fd:59:52:8b:37:b3:df:a8:2e:d1:6e:6b: 1f:01:ab:1c:b9:47:30:2b:2d:e4:45:6f:df:ea:70: f0:13:3c:0f:c9:2c:e4:46:de:83:cc:ac:b4:2b:2b: 50:78:0f:77:9c:cb:09:2f:c6:15:40:35:b6:5f:6b: e8:ce:3a:2c:2a:44:fc:f6:04:e6:95:4a:65:9d:f7: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:29:C6:4A:BD:AD:7D:7B:FE:68:1D:1A:D8:13:AE:E2:8C:5C:C8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1f62cb17-685b-3ee6-a074-62a4b6144289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:eb:88:a6:1a:11:ef:48:7d:84:5b:82:58:84:dc:d8:61:2e: 28:e9:e8:31:8b:c6:0c:fe:9f:a1:1e:94:07:74:e4:7f:69:0e: e3:b9:90:e8:4a:c3:e8:89:61:e8:59:2e:cb:29:b0:38:79:4a: 9f:99:ec:b8:5a:27:12:5e:08:a4:71:c6:50:97:32:e4:75:c6: 0b:20:0a:b2:43:06:4c:cd:0f:75:48:a4:22:28:a3:54:fa:d6: de:3e:99:29:1c:a1:77:0b:f3:d9:f8:a0:6e:c4:0a:af:43:93: ac:11:39:a8:d5:de:2e:33:27:8d:4a:18:af:11:69:f8:0f:91: d1:97:bd:ea:a1:b9:87:a0:ab:78:e6:55:9a:e0:e5:ac:be:55: 4a:03:15:3b:b5:0e:5d:39:ab:4d:f1:60:4f:39:c4:77:a1:15: 0e:eb:75:4f:36:29:02:72:c9:e7:92:56:15:59:87:3d:39:ca: 1c:1a:93:f1:f8:25:4c:02:e8:3b:0c:4f:ae:ef:f2:f6:1f:ee: 5f:03:2d:05:22:3f:82:3b:55:85:39:bc:6e:f0:26:e2:0b:ef: d9:ac:a3:0a:9c:a3:a7:96:53:50:ed:5b:47:30:d2:11:58:3f: 03:a6:6d:d2:33:db:e7:40:75:22:c7:52:66:a4:ad:19:57:8c: 9b:85:7b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjr6uGNjQhxnVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTc5YmVjYjctZDFjMC00NDczLWJmODAtNWQ5Y2VmYTBhZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWY6uAQJpovk6pb9xOEhcq8fvfIpLubNjqwc 8DNTgIZ+yIYGHfQvOz0UemKm1e7H5ZMLPnOcu90XbyQtSIRAqUjbtYxnhU0ueMI4 LaTcpU9Tnm30Vjj1qZ/FGnBuZ2Mg2aSuoAx3a3PVzRLM0Tkffcn0M6cbzZC/ZuXJ euQb2ASUTy28vihPj0uO0XWQJhr5xAVsuE+ojvKKZ7aAkRT0z2I178BT8mDd076q A1jMhjxWmovbmPT9WVKLN7PfqC7RbmsfAascuUcwKy3kRW/f6nDwEzwPySzkRt6D zKy0KytQeA93nMsJL8YVQDW2X2vozjosKkT89gTmlUplnff1EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcpxkq9rX17/mgdGtgTruKMXMgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWY2MmNiMTctNjg1Yi0z ZWU2LWEwNzQtNjJhNGI2MTQ0Mjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrriKYaEe9IfYRbgliE3NhhLijp6DGLxgz+n6EelAd05H9pDuO5kOhK w+iJYehZLsspsDh5Sp+Z7LhaJxJeCKRxxlCXMuR1xgsgCrJDBkzND3VIpCIoo1T6 1t4+mSkcoXcL89n4oG7ECq9Dk6wROajV3i4zJ41KGK8RafgPkdGXveqhuYegq3jm VZrg5ay+VUoDFTu1Dl05q03xYE85xHehFQ7rdU82KQJyyeeSVhVZhz05yhwak/H4 JUwC6DsMT67v8vYf7l8DLQUiP4I7VYU5vG7wJuIL79msowqco6eWU1DtW0cw0hFY PwOmbdIz2+dAdSLHUmakrRlXjJuFe5Y= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:16 2025 by rpki-client