$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1a3e9-3b73-3635-965e-3c464f224cff.roa File: 28c1a3e9-3b73-3635-965e-3c464f224cff.roa (raw, json) Hash identifier: qmNMeP+JiFBA6cvu6HNdDqJdqRc8q2f01IIay9Vyj9w= Subject key identifier: 4D:C0:66:BA:6F:50:A6:8E:9C:DA:F5:48:9F:09:15:72:8C:22:BB:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361CAB0F5ED7D73B446E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1a3e9-3b73-3635-965e-3c464f224cff.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.109.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1c:ab:0f:5e:d7:d7:3b:44:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7e8f6be6-dc2f-4d9d-af67-1791007ccdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:9f:f3:d5:15:65:84:21:25:36:a7:7b:a3: 92:b7:ce:8e:1a:b5:8e:90:0b:58:ac:af:18:1b:25: 17:0a:c3:84:90:61:a6:16:9f:dc:13:43:17:4e:e9: a3:84:3c:8f:07:0b:cd:10:87:50:a4:28:52:93:52: b2:ea:ec:b2:f2:85:cb:17:2d:f0:b6:f8:15:66:70: f3:ca:2d:00:2f:b2:8d:3d:7b:51:39:2f:7b:fa:77: 77:ba:5b:5b:d7:9f:ac:94:f8:8b:3b:31:c6:c1:d0: fe:7e:4d:21:05:34:71:d7:be:1a:64:3c:f9:f6:42: 3e:9f:a7:8a:d8:3f:5b:ae:98:c6:3f:8e:61:9b:98: f2:c5:f4:94:4d:00:92:62:55:8c:9e:74:9e:9d:1e: fa:37:2b:17:51:34:1a:67:43:51:04:00:cd:2c:4c: 5c:be:74:1f:99:12:d0:19:bf:49:70:2c:ed:42:ae: 6f:4f:29:a2:cd:6c:ed:5d:67:38:13:e9:42:2d:76: 33:c4:e5:c3:24:f6:9d:14:49:ea:80:fa:65:ad:36: 01:8f:63:c6:ba:98:87:b5:79:dc:64:a3:3e:9d:47: 37:ad:35:dc:9c:d4:3a:71:60:1f:ae:27:f5:1f:5d: 7a:ee:b7:5a:ab:73:f4:b6:5d:08:9d:2f:df:42:7f: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C0:66:BA:6F:50:A6:8E:9C:DA:F5:48:9F:09:15:72:8C:22:BB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28c1a3e9-3b73-3635-965e-3c464f224cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:27:54:63:10:44:83:f0:49:c8:df:a9:3b:5d:f2:32:f0:9b: c0:af:2d:a6:ab:66:d2:54:1e:63:43:e9:bf:4c:1d:77:8f:56: 9f:a8:36:04:8c:3b:bc:5c:05:8f:02:ed:d7:7c:a5:dd:bc:f2: cb:7f:50:ff:7a:46:bb:d5:8b:af:c6:68:cc:ea:46:be:60:fb: ae:cb:ce:ee:c9:fe:f6:c4:f4:b8:47:25:26:00:b7:8e:a8:47: 61:8a:e6:89:71:a4:12:42:ca:13:33:9d:41:4f:76:bd:7b:6d: 38:78:ea:c4:d4:74:6b:7b:fd:47:12:2f:3c:db:7b:fc:44:7f: 35:37:ef:5f:b7:53:40:44:61:98:ff:ad:4b:b3:45:aa:32:b7: 78:ea:9b:b6:ff:20:68:47:9a:c4:1c:18:d2:7b:db:8c:55:c2: 48:ef:a4:41:c7:c2:14:6b:74:11:2f:cb:23:71:26:a2:d8:9c: 0a:3c:64:b4:37:6f:54:9d:26:a7:1e:f0:a7:3b:d4:c1:24:de: 7d:b2:ab:52:f1:2d:1f:57:d8:dc:3f:db:04:5e:d7:98:c4:dc: de:37:3a:fa:ca:27:31:2f:ed:67:42:6b:75:bd:81:4c:d0:2a: cd:86:d5:b9:25:98:2f:55:6d:02:10:39:82:8f:c2:5d:23:ee: 86:7b:b8:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhyrD17X1ztEboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2U4ZjZiZTYtZGMyZi00ZDlkLWFmNjctMTc5MTAwN2NjZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dyf89UVZYQhJTane6OSt86OGrWOkAtYrK8Y GyUXCsOEkGGmFp/cE0MXTumjhDyPBwvNEIdQpChSk1Ky6uyy8oXLFy3wtvgVZnDz yi0AL7KNPXtROS97+nd3ultb15+slPiLOzHGwdD+fk0hBTRx174aZDz59kI+n6eK 2D9brpjGP45hm5jyxfSUTQCSYlWMnnSenR76NysXUTQaZ0NRBADNLExcvnQfmRLQ Gb9JcCztQq5vTymizWztXWc4E+lCLXYzxOXDJPadFEnqgPplrTYBj2PGupiHtXnc ZKM+nUc3rTXcnNQ6cWAfrif1H1167rdaq3P0tl0InS/fQn9fgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3AZrpvUKaOnNr1SJ8JFXKMIrsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhjMWEzZTktM2I3My0z NjM1LTk2NWUtM2M0NjRmMjI0Y2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG10MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUnVGMQRIPwScjfqTtd8jLwm8CvLaarZtJUHmND6b9MHXePVp+oNgSM O7xcBY8C7dd8pd288st/UP96RrvVi6/GaMzqRr5g+67Lzu7J/vbE9LhHJSYAt46o R2GK5olxpBJCyhMznUFPdr17bTh46sTUdGt7/UcSLzzbe/xEfzU371+3U0BEYZj/ rUuzRaoyt3jqm7b/IGhHmsQcGNJ724xVwkjvpEHHwhRrdBEvyyNxJqLYnAo8ZLQ3 b1SdJqce8Kc71MEk3n2yq1LxLR9X2Nw/2wRe15jE3N43OvrKJzEv7WdCa3W9gUzQ Ks2G1bklmC9VbQIQOYKPwl0j7oZ7uGs= -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:54 2025 by rpki-client