$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e475cd9-5754-3d2d-b02d-48503b79c7d6.roa File: 2e475cd9-5754-3d2d-b02d-48503b79c7d6.roa (raw, json) Hash identifier: iHJfwNeS7TcJk+KwcfYsy7vRHDvaed34onxvZXoGyOU= Subject key identifier: 20:39:99:28:14:30:00:B1:18:E5:AA:01:8C:E2:50:1D:77:25:13:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365CFCD880112A8F464BC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e475cd9-5754-3d2d-b02d-48503b79c7d6.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.8.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5c:fc:d8:80:11:2a:8f:46:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=3b0f1e04-7d3f-41de-9fc9-bcd10e6f9f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:90:27:c8:0c:e6:e2:e3:bc:f2:a9:4d:70: 9f:b2:4a:fd:72:fe:bc:a0:b0:ed:eb:c9:83:10:dc: 9b:21:2a:57:ce:50:3f:cf:bf:6c:8b:2c:52:0c:61: d0:52:0c:8c:8b:ec:98:11:87:da:05:a7:21:aa:ff: 55:e0:b5:1e:9f:b1:b7:90:75:84:31:2f:07:01:29: bb:ac:2c:1c:12:b0:2c:bf:7d:53:ea:23:a6:76:91: 97:7f:c4:4c:86:7a:9e:a9:29:38:fe:ab:50:4b:51: 53:41:3b:99:fe:44:10:2a:14:5a:c9:f4:e4:72:6e: 27:6a:b8:1a:15:d5:3a:d7:8f:19:b2:28:f6:6d:15: e7:a4:f0:87:8a:b6:4a:d1:92:7c:f5:ab:f4:91:bf: 75:9b:f2:ba:b0:87:32:bb:9b:d2:d0:c8:69:0f:59: 12:d3:5e:b5:8f:e9:e1:ea:45:05:2a:e9:a2:50:d5: ee:04:01:f9:44:ea:14:0b:0a:05:86:05:f9:0b:b6: 8b:0a:52:87:29:d5:c1:3e:8e:7a:d5:33:c3:e6:9b: f8:f5:80:2e:e7:ad:55:69:9d:25:1c:b8:84:93:5b: a6:97:eb:a1:37:8f:c5:f7:09:95:c8:41:ab:05:2d: e6:4c:46:2a:cb:a5:29:f3:21:9d:c2:4f:88:6e:fa: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:99:28:14:30:00:B1:18:E5:AA:01:8C:E2:50:1D:77:25:13:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e475cd9-5754-3d2d-b02d-48503b79c7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8a:4a:33:24:1d:34:26:7e:14:77:89:77:50:be:13:43:ce: 87:36:e3:9f:41:b9:71:3c:0f:32:9e:32:ba:dd:9a:5e:7e:a9: c2:0e:0c:b0:6a:21:6d:61:0d:23:f9:01:82:59:58:ad:ce:52: 2e:83:90:2d:75:ae:a6:08:79:42:9c:b7:6c:66:33:5d:a7:67: cc:19:2e:e3:b4:50:2b:5b:65:38:40:2d:a5:3d:d0:65:ec:05: 84:9e:6a:e1:70:70:17:b3:8e:f3:b9:5f:8d:d4:df:ce:3a:cd: e7:71:fb:dd:df:bc:56:27:f0:29:ae:60:b7:e7:e5:ef:16:da: d5:dd:95:73:61:eb:62:be:a8:f6:1b:95:c7:ba:b8:89:97:67: 2e:f3:d8:3c:e9:d4:95:24:0c:06:ce:ed:0a:4f:10:61:ff:d3: ed:75:1d:4b:ac:8b:09:2f:d0:94:b3:f6:b7:70:4b:e3:cc:6e: 59:80:64:7b:b2:64:0c:56:ba:2b:54:a8:f5:98:a1:34:58:89: af:b0:86:e8:5f:df:a9:68:ee:fe:33:af:7d:0f:ee:62:ea:3f: 31:6a:c2:08:b1:78:1d:6f:d8:3d:08:9e:cc:27:68:ed:43:1e: 2b:dd:0a:16:13:48:3a:58:1c:fd:75:44:91:1f:07:23:93:42: 11:bc:d1:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlz82IARKo9GS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk M2IwZjFlMDQtN2QzZi00MWRlLTlmYzktYmNkMTBlNmY5ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggyQJ8gM5uLjvPKpTXCfskr9cv68oLDt68mD ENybISpXzlA/z79siyxSDGHQUgyMi+yYEYfaBachqv9V4LUen7G3kHWEMS8HASm7 rCwcErAsv31T6iOmdpGXf8RMhnqeqSk4/qtQS1FTQTuZ/kQQKhRayfTkcm4narga FdU6148Zsij2bRXnpPCHirZK0ZJ89av0kb91m/K6sIcyu5vS0MhpD1kS0161j+nh 6kUFKumiUNXuBAH5ROoUCwoFhgX5C7aLClKHKdXBPo561TPD5pv49YAu561VaZ0l HLiEk1uml+uhN4/F9wmVyEGrBS3mTEYqy6Up8yGdwk+Ibvrx+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA5mSgUMACxGOWqAYziUB13JRM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmU0NzVjZDktNTc1NC0z ZDJkLWIwMmQtNDg1MDNiNzljN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSKSjMkHTQmfhR3iXdQvhNDzoc2459BuXE8DzKeMrrdml5+qcIODLBq IW1hDSP5AYJZWK3OUi6DkC11rqYIeUKct2xmM12nZ8wZLuO0UCtbZThALaU90GXs BYSeauFwcBezjvO5X43U3846zedx+93fvFYn8CmuYLfn5e8W2tXdlXNh62K+qPYb lce6uImXZy7z2Dzp1JUkDAbO7QpPEGH/0+11HUusiwkv0JSz9rdwS+PMblmAZHuy ZAxWuitUqPWYoTRYia+whuhf36lo7v4zr30P7mLqPzFqwgixeB1v2D0InswnaO1D HivdChYTSDpYHP11RJEfByOTQhG80WA= -----END CERTIFICATE-----Generated at Wed Aug 6 11:25:13 2025 by rpki-client