$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34c1df50-abb8-385c-a02a-224389887076.roa File: 34c1df50-abb8-385c-a02a-224389887076.roa (raw, json) Hash identifier: 4/5qOXC42k9ImnGIuNfqP+uksppABcmsZbQllZNgbPg= Subject key identifier: CC:95:B5:CD:51:75:E6:36:6D:4F:99:EF:68:91:D1:63:AD:D8:B4:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361D16F464909D8B886740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34c1df50-abb8-385c-a02a-224389887076.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.110.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1d:16:f4:64:90:9d:8b:88:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=4ada7150-3702-4ead-a3fe-3e36887063b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:23:64:77:95:a0:f6:8d:f0:37:a5:01:f8: 22:60:0f:6c:61:89:22:34:6b:7f:76:28:f2:a9:de: 6b:3a:36:90:6f:18:b7:76:bf:a0:a0:64:f2:c6:0f: bb:f6:68:fc:22:99:17:6c:75:2e:3d:94:c8:76:f0: 1b:89:b9:b9:29:5e:2b:3c:a9:9f:83:68:86:45:cf: 8e:39:1a:d1:cb:ba:07:ba:2a:e2:d5:59:ae:f5:0e: cf:05:98:35:4c:c7:01:4d:eb:c7:e4:ae:9c:d8:26: 59:af:1d:07:e1:cb:37:38:40:9a:4b:db:6c:3d:07: 0c:e2:d0:81:26:19:70:57:ba:cd:1c:a3:72:fd:06: 71:7e:88:7d:c2:b8:a0:f4:c9:06:be:33:34:b0:19: 71:a7:0e:58:21:3d:55:5c:1d:09:34:e7:27:71:02: 31:8b:73:38:c0:17:ff:23:a7:73:7e:01:3f:af:63: 2b:76:d2:15:72:1c:bc:e7:4f:25:64:c5:4f:be:a7: f8:1e:c1:b0:21:d5:af:e7:84:fe:e4:05:48:bd:07: 13:ab:bb:15:29:43:4d:28:3f:c7:f0:08:76:c5:26: 6e:12:1e:e0:35:a4:2d:07:f0:5d:74:af:91:c5:d8: 89:b2:f2:ee:70:bf:04:75:28:b3:81:d0:03:46:aa: ab:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:95:B5:CD:51:75:E6:36:6D:4F:99:EF:68:91:D1:63:AD:D8:B4:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34c1df50-abb8-385c-a02a-224389887076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.110.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e9:34:a8:b1:27:b7:61:47:2a:2f:68:6c:91:73:ba:e3:6b: f6:a3:95:ab:56:6b:01:c7:a1:c1:3e:1b:d5:a7:23:d6:4e:43: d1:85:d2:9d:97:02:91:6a:76:45:98:6c:83:96:19:dc:03:00: 05:32:7d:f7:0d:25:d9:cc:4d:45:50:6a:96:34:37:f8:2c:52: 42:49:31:90:2c:b6:b0:bb:d7:a3:92:52:65:73:7b:df:e8:23: b2:36:54:04:1e:ac:94:ac:4c:83:5c:9f:a6:90:2b:d8:41:c9: 49:f4:7e:98:06:8a:28:33:85:02:f1:04:d1:c4:8d:35:e6:a9: 35:fa:21:c9:c4:ff:09:3a:76:58:b4:57:15:d0:ad:ae:eb:1c: 0d:3c:9f:e9:84:35:57:62:e6:d5:34:64:11:f7:d8:f0:90:21: 09:7d:e4:a9:d0:a2:64:9d:47:b0:9f:f1:50:13:ee:8f:72:64: 50:37:e1:4b:40:28:d7:c7:8d:89:b0:b9:b9:2a:c6:d7:a9:69: 45:eb:74:27:be:30:54:e8:e2:d8:f6:79:36:a3:3f:84:4d:d5: 2b:45:d6:89:f9:b3:88:09:cf:7c:64:b9:87:da:5f:8d:84:40: 7e:5c:63:78:1c:8a:5c:b8:ea:36:6f:ae:1a:8b:0e:9d:ea:f8: fb:2f:53:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh0W9GSQnYuIZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NGFkYTcxNTAtMzcwMi00ZWFkLWEzZmUtM2UzNjg4NzA2M2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6AjZHeVoPaN8DelAfgiYA9sYYkiNGt/dijy qd5rOjaQbxi3dr+goGTyxg+79mj8IpkXbHUuPZTIdvAbibm5KV4rPKmfg2iGRc+O ORrRy7oHuiri1Vmu9Q7PBZg1TMcBTevH5K6c2CZZrx0H4cs3OECaS9tsPQcM4tCB JhlwV7rNHKNy/QZxfoh9wrig9MkGvjM0sBlxpw5YIT1VXB0JNOcncQIxi3M4wBf/ I6dzfgE/r2MrdtIVchy8508lZMVPvqf4HsGwIdWv54T+5AVIvQcTq7sVKUNNKD/H 8Ah2xSZuEh7gNaQtB/BddK+RxdiJsvLucL8EdSizgdADRqqrgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyVtc1RdeY2bU+Z72iR0WOt2LTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzRjMWRmNTAtYWJiOC0z ODVjLWEwMmEtMjI0Mzg5ODg3MDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzpNKixJ7dhRyovaGyRc7rja/ajlatWawHHocE+G9WnI9ZOQ9GF0p2X ApFqdkWYbIOWGdwDAAUyffcNJdnMTUVQapY0N/gsUkJJMZAstrC716OSUmVze9/o I7I2VAQerJSsTINcn6aQK9hByUn0fpgGiigzhQLxBNHEjTXmqTX6IcnE/wk6dli0 VxXQra7rHA08n+mENVdi5tU0ZBH32PCQIQl95KnQomSdR7Cf8VAT7o9yZFA34UtA KNfHjYmwubkqxtepaUXrdCe+MFTo4tj2eTajP4RN1StF1on5s4gJz3xkuYfaX42E QH5cY3gcily46jZvrhqLDp3q+PsvU7c= -----END CERTIFICATE-----Generated at Fri Aug 8 20:49:33 2025 by rpki-client