$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31eefe56-a8d0-34a5-a3fd-baf7d3c4b143.roa File: 31eefe56-a8d0-34a5-a3fd-baf7d3c4b143.roa (raw, json) Hash identifier: NJdeVAYqqVC/1p9YWnEGcb2I+yei8Bd71R25gja4Bkk= Subject key identifier: 21:71:4B:A5:EA:31:02:22:08:CD:7D:CE:32:16:FD:58:12:72:6F:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636597BB02BCD2B5CB6A100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31eefe56-a8d0-34a5-a3fd-baf7d3c4b143.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:59:7b:b0:2b:cd:2b:5c:b6:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=b6b0d15b-6d95-4518-b0c4-42935f1800ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:97:ec:1c:83:a1:1c:b6:2e:9d:83:4b:01: 3c:b2:d7:4c:7a:4b:b0:7c:4c:3b:09:52:9d:c6:a9: 71:fb:9f:be:f2:77:55:df:e2:5e:ce:83:e2:e5:da: 4c:35:ad:94:54:11:17:65:fa:6e:9b:46:67:67:21: 69:28:78:9d:17:50:1d:ca:1c:a3:28:f2:1a:9f:4a: a4:d4:cf:4e:70:46:44:37:59:18:45:29:2b:91:92: a1:48:6d:19:57:94:eb:2e:f8:19:bb:36:81:60:d7: dd:a8:f4:eb:72:98:1c:84:71:88:a3:7c:7a:2b:a2: 6b:ae:1e:38:77:88:fb:de:ae:73:c6:b3:4b:7f:8b: dd:c1:db:51:22:cb:de:eb:a5:ce:40:c5:f8:11:6d: 49:7c:2b:f9:77:4d:ab:a6:0b:d4:e7:55:fb:42:81: b7:2c:a9:1f:57:d1:d7:13:f2:2e:17:a4:42:e4:d0: 21:9d:81:8a:4e:e4:10:38:13:46:d7:44:04:f0:77: b6:20:53:0f:92:55:32:29:4b:0a:cf:6c:5e:c9:0c: 18:57:f5:b0:c4:1e:f0:e4:45:34:fc:33:30:35:9d: 0d:cb:87:d5:a6:44:c9:50:61:e7:85:31:e8:b1:67: 6a:a3:0d:bc:32:25:cb:5e:1b:c6:46:bb:0b:14:9d: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:71:4B:A5:EA:31:02:22:08:CD:7D:CE:32:16:FD:58:12:72:6F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31eefe56-a8d0-34a5-a3fd-baf7d3c4b143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2e:e6:cb:7e:82:26:35:d2:cb:1c:cd:73:a3:79:46:e5:fa: 88:44:dc:59:e3:0e:d9:17:ba:a1:cb:df:ac:94:d9:de:d4:0e: 4a:bc:6e:10:1f:15:b1:30:65:d7:44:41:a7:ba:e8:04:28:63: 31:52:df:e8:11:9c:80:07:06:7a:e6:c4:eb:08:56:e0:fe:70: e7:56:94:77:f7:22:6f:ad:55:a0:19:fb:2f:6a:09:5b:1f:a5: a5:8b:5b:15:1f:3c:a7:4a:d5:7b:7a:b6:6c:fa:67:23:ec:b6: d5:ac:19:18:c0:9e:b3:d8:16:4a:2b:97:01:91:56:52:64:16: 91:71:6d:32:2f:77:57:7f:f0:76:e0:cc:f9:15:a3:51:06:20: 5e:24:7f:a9:8e:0f:59:67:3c:fb:5f:07:4f:24:a2:f9:64:e0: 00:23:55:1c:86:e5:57:f1:73:3c:11:f1:c1:f0:f0:77:76:ff: 3c:57:de:94:bd:37:0b:d4:04:4a:f3:20:6f:dd:a3:b6:5a:a6: 75:5d:3c:c8:46:e7:bb:ae:9c:f9:a8:c6:c0:56:5b:52:63:03: db:b4:01:f7:aa:95:59:4f:28:9f:a7:47:e5:2f:d9:74:04:06: 0f:6c:ea:cf:ea:18:c3:18:ce:51:22:17:ba:08:d1:9e:6a:0d: f9:ec:3f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNll7sCvNK1y2oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YjZiMGQxNWItNmQ5NS00NTE4LWIwYzQtNDI5MzVmMTgwMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu82X7ByDoRy2Lp2DSwE8stdMekuwfEw7CVKd xqlx+5++8ndV3+JezoPi5dpMNa2UVBEXZfpum0ZnZyFpKHidF1AdyhyjKPIan0qk 1M9OcEZEN1kYRSkrkZKhSG0ZV5TrLvgZuzaBYNfdqPTrcpgchHGIo3x6K6Jrrh44 d4j73q5zxrNLf4vdwdtRIsve66XOQMX4EW1JfCv5d02rpgvU51X7QoG3LKkfV9HX E/IuF6RC5NAhnYGKTuQQOBNG10QE8He2IFMPklUyKUsKz2xeyQwYV/WwxB7w5EU0 /DMwNZ0Ny4fVpkTJUGHnhTHosWdqow28MiXLXhvGRrsLFJ3NRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFxS6XqMQIiCM19zjIW/VgScm9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFlZWZlNTYtYThkMC0z NGE1LWEzZmQtYmFmN2QzYzRiMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACku5st+giY10ssczXOjeUbl+ohE3FnjDtkXuqHL36yU2d7UDkq8bhAf FbEwZddEQae66AQoYzFS3+gRnIAHBnrmxOsIVuD+cOdWlHf3Im+tVaAZ+y9qCVsf paWLWxUfPKdK1Xt6tmz6ZyPsttWsGRjAnrPYFkorlwGRVlJkFpFxbTIvd1d/8Hbg zPkVo1EGIF4kf6mOD1lnPPtfB08kovlk4AAjVRyG5VfxczwR8cHw8Hd2/zxX3pS9 NwvUBErzIG/do7ZapnVdPMhG57uunPmoxsBWW1JjA9u0AfeqlVlPKJ+nR+Uv2XQE Bg9s6s/qGMMYzlEiF7oI0Z5qDfnsPyY= -----END CERTIFICATE-----Generated at Wed Aug 6 00:38:47 2025 by rpki-client