$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ad192c-5046-3d8c-99de-048db6a3650e.roa File: 32ad192c-5046-3d8c-99de-048db6a3650e.roa (raw, json) Hash identifier: VPEt17ZZHke6EakZNO8oIIivzIlQHyGuN4BD324roxE= Subject key identifier: BC:DF:EB:F8:83:F7:B8:76:7D:8E:69:22:EA:07:A1:85:16:1D:D4:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963681B34033F133406AA800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ad192c-5046-3d8c-99de-048db6a3650e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.68.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:81:b3:40:33:f1:33:40:6a:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=56d94929-e0bb-4702-8e82-bc87bbc33735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:57:40:fc:04:30:67:f0:78:fa:b8:d0:78: 4b:9d:bb:0a:f9:38:58:59:65:1f:cb:e0:b6:6d:29: f2:95:fd:68:b0:96:af:1c:60:b0:cf:3b:0e:11:f9: 4d:46:95:1b:4b:88:5d:fe:e0:61:d8:09:d8:ed:1a: 3f:0c:b9:7a:1f:b5:84:60:48:26:3e:65:94:3c:54: b4:74:b7:14:7e:c4:f6:ae:72:a7:96:5d:57:3b:e6: 3e:e1:b6:fe:06:d3:12:88:84:fb:78:50:a8:ea:e3: 5e:53:6a:58:89:03:b9:b9:5a:45:76:47:17:74:81: 3d:4b:42:06:61:d4:39:29:f8:9c:10:b2:ba:68:76: a6:18:a8:2a:21:41:f3:de:14:40:23:2d:b5:90:48: c5:58:7f:1c:0b:0d:0a:36:4a:16:04:8a:60:ce:6e: 22:97:d0:c8:86:57:5a:d9:a4:81:ca:02:d7:7d:f3: cd:2e:62:27:07:1d:70:04:44:53:87:a5:a3:a4:fb: be:ff:b2:e7:3d:6e:e0:c9:55:e9:8e:37:15:fa:3e: aa:21:3b:e1:f7:ba:aa:93:94:0d:89:48:88:3e:4b: 28:8d:a2:99:f8:69:31:2b:e3:10:dc:69:2d:db:1a: 49:dd:12:f7:75:12:f5:fd:eb:71:a3:c9:cf:31:27: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DF:EB:F8:83:F7:B8:76:7D:8E:69:22:EA:07:A1:85:16:1D:D4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ad192c-5046-3d8c-99de-048db6a3650e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:86:13:e1:e9:d5:e9:7e:98:68:c8:90:20:51:e2:c8:a0:53: 95:39:1d:ce:6b:3a:4e:e4:2d:03:a5:26:fb:6f:12:6e:9a:56: ae:fb:6a:a4:1f:22:ae:a2:c9:d4:a8:d9:b7:e7:eb:27:c7:55: dd:fc:25:55:12:ec:d3:0d:47:78:6a:00:bc:1c:42:b8:99:b7: 17:ae:b7:72:46:98:6b:09:66:5f:94:f9:2e:f5:da:2b:c2:60: 70:b5:d2:64:39:ad:f7:47:79:df:75:9b:f2:09:1c:09:cc:fa: 2f:4e:1b:ab:4c:0a:5c:4b:d3:60:87:1d:f9:82:87:d4:57:64: ab:a9:ce:99:e8:26:52:1c:91:d5:20:4b:94:0a:fa:f3:ab:29: eb:01:fc:ce:f9:87:dc:07:cd:ec:b7:98:20:de:98:79:0a:52: 45:8b:1a:48:7f:a3:67:dc:2f:53:e4:95:95:e8:06:29:0b:f8: a8:57:a7:ba:ab:4c:cb:71:27:e1:68:e8:06:a4:a5:7b:7f:db: 30:8a:9f:5a:3d:85:54:56:8c:4a:ff:d9:cc:6d:f9:6d:b2:d5: 64:22:af:91:fb:90:3a:73:46:34:37:b7:9c:18:4d:00:2d:41: a6:dd:32:71:5d:f0:a3:8a:de:aa:f7:41:c0:60:02:4e:27:60: dc:13:89:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoGzQDPxM0BqqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTZkOTQ5MjktZTBiYi00NzAyLThlODItYmM4N2JiYzMzNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirNXQPwEMGfwePq40HhLnbsK+ThYWWUfy+C2 bSnylf1osJavHGCwzzsOEflNRpUbS4hd/uBh2AnY7Ro/DLl6H7WEYEgmPmWUPFS0 dLcUfsT2rnKnll1XO+Y+4bb+BtMSiIT7eFCo6uNeU2pYiQO5uVpFdkcXdIE9S0IG YdQ5KficELK6aHamGKgqIUHz3hRAIy21kEjFWH8cCw0KNkoWBIpgzm4il9DIhlda 2aSBygLXffPNLmInBx1wBERTh6WjpPu+/7LnPW7gyVXpjjcV+j6qITvh97qqk5QN iUiIPksojaKZ+GkxK+MQ3Gkt2xpJ3RL3dRL1/etxo8nPMSeqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzf6/iD97h2fY5pIuoHoYUWHdR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJhZDE5MmMtNTA0Ni0z ZDhjLTk5ZGUtMDQ4ZGI2YTM2NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaGE+Hp1el+mGjIkCBR4sigU5U5Hc5rOk7kLQOlJvtvEm6aVq77aqQf Iq6iydSo2bfn6yfHVd38JVUS7NMNR3hqALwcQriZtxeut3JGmGsJZl+U+S712ivC YHC10mQ5rfdHed91m/IJHAnM+i9OG6tMClxL02CHHfmCh9RXZKupzpnoJlIckdUg S5QK+vOrKesB/M75h9wHzey3mCDemHkKUkWLGkh/o2fcL1PklZXoBikL+KhXp7qr TMtxJ+Fo6AakpXt/2zCKn1o9hVRWjEr/2cxt+W2y1WQir5H7kDpzRjQ3t5wYTQAt QabdMnFd8KOK3qr3QcBgAk4nYNwTiTo= -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:11 2025 by rpki-client