$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/295ce1e7-b6d4-33e4-a94a-c42ae5b18f58.roa File: 295ce1e7-b6d4-33e4-a94a-c42ae5b18f58.roa (raw, json) Hash identifier: 9tYVn4EK5G+Ajow71JHZ50pA9tgKccmutNWXwpo4M9Q= Subject key identifier: DB:E6:4C:FE:57:81:6B:61:D5:6B:FC:E1:9B:65:8C:7D:35:E3:FF:5E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365E666BD1928F7EF0ABA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/295ce1e7-b6d4-33e4-a94a-c42ae5b18f58.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.8.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5e:66:6b:d1:92:8f:7e:f0:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f671a040-ed8c-4448-b908-fcf7a8673c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:de:7a:33:f7:46:a9:2d:a2:2e:b9:34:58: 30:f8:18:75:05:4d:21:ad:5b:c3:6e:32:f6:e1:50: c8:4c:cf:7b:c4:0b:0e:1a:36:57:ef:3b:e6:97:63: b6:69:0b:37:58:88:9f:4f:c0:66:bb:95:d2:e6:3d: fc:4d:bd:21:ac:0c:5b:68:ad:34:c0:dc:d0:4d:f7: 9c:34:eb:96:e6:f6:b9:16:a9:ff:17:92:ef:cc:e3: 1d:fc:41:47:7a:8a:8d:51:65:9e:aa:1f:0a:80:96: c0:3e:fc:bd:49:7f:71:de:d5:26:99:90:8e:22:23: 9b:17:34:dc:39:8f:bd:bf:33:25:db:5b:85:19:fb: 08:19:e5:12:47:aa:19:bf:58:32:08:a3:bb:07:d2: 8a:6f:26:75:19:21:2c:45:8a:5b:1b:5b:07:b8:a8: b5:97:1e:1a:54:ab:8c:a7:80:d3:ba:73:3a:68:5c: e0:c8:16:26:b2:4b:ef:c7:85:ed:58:3c:63:09:6e: be:24:4a:fd:11:61:d4:6c:d7:2c:a7:34:92:ed:3b: 6b:19:df:6c:60:a6:3c:f9:8e:be:22:a3:9e:5b:f4: 3d:2c:20:bc:11:18:34:eb:f2:ad:42:7b:ba:41:6a: a1:f6:24:d0:51:43:4c:6f:3b:42:f5:10:f9:c0:70: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E6:4C:FE:57:81:6B:61:D5:6B:FC:E1:9B:65:8C:7D:35:E3:FF:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/295ce1e7-b6d4-33e4-a94a-c42ae5b18f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fc:0c:08:55:06:81:de:79:70:a8:01:34:19:ce:17:04:d5: d4:27:a2:81:1e:db:08:e7:5c:0c:be:9a:aa:02:36:06:2d:94: 78:54:ca:f1:83:22:4a:a3:37:81:ac:51:29:27:de:1a:1a:8b: d2:ad:c4:fb:58:9b:d7:8d:68:02:64:b4:96:83:3f:a7:0e:3d: 84:40:01:18:7b:99:b5:c8:66:43:b4:dc:6b:75:29:de:1d:a7: 63:2b:72:86:0c:8e:c1:83:20:86:25:30:ad:30:4a:cb:88:f5: c5:b8:a2:af:e2:81:1c:a4:94:86:c6:73:7b:45:87:65:14:1d: 80:65:0e:f0:da:af:5c:13:fe:77:2b:c9:a2:6b:63:49:07:6a: 2c:0a:29:6a:10:7f:e0:78:3b:8b:23:dd:10:17:f4:3d:3d:c5: 52:4f:10:1a:40:c8:7b:01:77:b5:64:54:e4:ee:26:cd:4e:81: 7f:c7:ea:fc:1e:d3:76:8a:1a:4e:22:46:23:a4:ea:62:ba:0e: b3:97:ba:07:1f:8f:a8:7d:49:f7:57:6a:46:85:7c:73:3a:99: 74:a7:30:66:a9:2a:b5:18:c4:c6:10:8d:d1:a0:1c:60:b1:d2: ed:51:78:27:fe:19:ca:92:de:b2:ee:f4:75:8b:5e:43:5b:d5: ed:ae:6a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNl5ma9GSj37wq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjY3MWEwNDAtZWQ4Yy00NDQ4LWI5MDgtZmNmN2E4NjczYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6PeejP3Rqktoi65NFgw+Bh1BU0hrVvDbjL2 4VDITM97xAsOGjZX7zvml2O2aQs3WIifT8Bmu5XS5j38Tb0hrAxbaK00wNzQTfec NOuW5va5Fqn/F5LvzOMd/EFHeoqNUWWeqh8KgJbAPvy9SX9x3tUmmZCOIiObFzTc OY+9vzMl21uFGfsIGeUSR6oZv1gyCKO7B9KKbyZ1GSEsRYpbG1sHuKi1lx4aVKuM p4DTunM6aFzgyBYmskvvx4XtWDxjCW6+JEr9EWHUbNcspzSS7TtrGd9sYKY8+Y6+ IqOeW/Q9LCC8ERg06/KtQnu6QWqh9iTQUUNMbztC9RD5wHAGjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvmTP5XgWth1Wv84ZtljH014/9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk1Y2UxZTctYjZkNC0z M2U0LWE5NGEtYzQyYWU1YjE4ZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL8DAhVBoHeeXCoATQZzhcE1dQnooEe2wjnXAy+mqoCNgYtlHhUyvGD IkqjN4GsUSkn3hoai9KtxPtYm9eNaAJktJaDP6cOPYRAARh7mbXIZkO03Gt1Kd4d p2MrcoYMjsGDIIYlMK0wSsuI9cW4oq/igRyklIbGc3tFh2UUHYBlDvDar1wT/ncr yaJrY0kHaiwKKWoQf+B4O4sj3RAX9D09xVJPEBpAyHsBd7VkVOTuJs1OgX/H6vwe 03aKGk4iRiOk6mK6DrOXugcfj6h9SfdXakaFfHM6mXSnMGapKrUYxMYQjdGgHGCx 0u1ReCf+GcqS3rLu9HWLXkNb1e2uavA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:54:49 2025 by rpki-client