$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa File: 35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa (raw, json) Hash identifier: x4Iy88LQWf4gxXqNXYbo/WmScC+2yMCNLEx4NUtvCbY= Subject key identifier: C6:48:39:9B:9E:08:63:40:FA:0D:7E:03:08:FD:5E:78:27:70:96:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963654B315474C7A007E7280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.6.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:54:b3:15:47:4c:7a:00:7e:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8824e199-b7e7-4185-92c0-4ddf6fd497c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8f:47:fb:22:1c:3e:7c:fd:cf:38:61:18:24: 23:f3:de:d5:a9:ff:49:62:ab:fd:c4:b3:b8:2f:d9: 9b:c6:c3:03:26:79:6e:9c:e4:7c:4d:1b:ec:c2:eb: 09:74:24:79:0f:9c:a0:08:58:62:0e:a2:08:ff:34: cf:06:b9:0f:cd:7c:3c:13:f6:1a:db:e1:80:0e:22: e1:4a:c1:ac:d7:dd:59:65:65:7c:1b:8c:93:98:56: d6:3b:8f:df:e5:84:bc:7e:d8:46:29:94:72:1f:0c: 14:9a:44:e7:17:77:93:16:d7:29:cb:f3:15:d8:23: 42:2d:fe:c7:71:6b:b2:13:b1:b0:b6:f5:96:b8:e6: 51:fd:02:1d:3b:6d:5e:51:b0:84:f2:44:93:05:e0: 30:66:9c:04:3f:d7:4d:b4:76:91:65:f6:13:5b:58: 24:3a:86:12:6c:a6:16:6c:dd:bc:2b:38:b4:48:6f: 40:80:65:e4:d7:1d:80:ad:ba:bb:80:26:25:46:27: f9:f2:a8:ec:7e:c6:ee:93:82:76:fc:cb:67:94:49: cc:b1:31:10:4a:38:87:58:4c:63:72:61:c6:b0:7d: 08:f6:3e:25:8f:11:c7:55:f0:d7:a6:1f:9b:1d:f0: b7:cc:0a:42:50:d8:e2:50:a3:85:10:35:6e:a9:db: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:39:9B:9E:08:63:40:FA:0D:7E:03:08:FD:5E:78:27:70:96:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f200fd-86a7-38c9-95d7-1393ddfe9a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b6:35:0a:cc:8d:89:c5:8e:2f:55:1e:a9:53:4d:e5:38:b2: 15:be:5a:73:e3:0c:8a:8d:06:c3:1b:fb:2d:43:a8:69:1a:8c: 4b:2b:f8:89:0a:66:5d:3b:02:28:af:56:50:07:3d:29:69:f7: b4:48:ad:e7:2f:50:5f:4b:7d:c0:56:8f:10:18:52:3b:6f:af: f2:ae:f2:3e:59:34:8b:f5:e6:4f:f5:45:ad:10:43:25:a7:30: 17:42:c4:8d:a6:d9:14:51:87:f1:43:0e:e3:8b:b3:70:97:90: c1:d0:7c:57:40:80:37:50:f8:31:31:fe:89:b9:f5:69:f5:64: 6e:e9:05:7b:73:d0:e7:77:a4:4e:80:de:c2:90:19:61:2f:3a: 97:2e:c0:61:05:4a:d5:a1:79:79:4c:83:9e:14:8c:e7:44:b6: 5b:12:da:40:10:be:44:2a:b9:66:52:eb:61:50:70:03:c9:93: 52:c6:a4:b6:a1:81:87:70:57:8c:11:ea:80:79:6f:b3:e5:f7: da:70:29:49:96:a8:94:82:41:7f:04:a6:34:92:42:e7:0f:2b: 69:02:67:81:f4:52:66:29:6c:fc:98:5b:91:35:7d:6e:c7:a1: 94:7e:f9:61:49:dc:28:73:0c:02:76:6b:10:b8:cb:c7:f4:d5: 24:ed:4c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlSzFUdMegB+coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODgyNGUxOTktYjdlNy00MTg1LTkyYzAtNGRkZjZmZDQ5N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI9H+yIcPnz9zzhhGCQj897Vqf9JYqv9xLO4 L9mbxsMDJnlunOR8TRvswusJdCR5D5ygCFhiDqII/zTPBrkPzXw8E/Ya2+GADiLh SsGs191ZZWV8G4yTmFbWO4/f5YS8fthGKZRyHwwUmkTnF3eTFtcpy/MV2CNCLf7H cWuyE7GwtvWWuOZR/QIdO21eUbCE8kSTBeAwZpwEP9dNtHaRZfYTW1gkOoYSbKYW bN28Kzi0SG9AgGXk1x2Arbq7gCYlRif58qjsfsbuk4J2/MtnlEnMsTEQSjiHWExj cmHGsH0I9j4ljxHHVfDXph+bHfC3zApCUNjiUKOFEDVuqdvPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZIOZueCGNA+g1+Awj9XngncJZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVmMjAwZmQtODZhNy0z OGM5LTk1ZDctMTM5M2RkZmU5YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm2NQrMjYnFji9VHqlTTeU4shW+WnPjDIqNBsMb+y1DqGkajEsr+IkK Zl07AiivVlAHPSlp97RIrecvUF9LfcBWjxAYUjtvr/Ku8j5ZNIv15k/1Ra0QQyWn MBdCxI2m2RRRh/FDDuOLs3CXkMHQfFdAgDdQ+DEx/om59Wn1ZG7pBXtz0Od3pE6A 3sKQGWEvOpcuwGEFStWheXlMg54UjOdEtlsS2kAQvkQquWZS62FQcAPJk1LGpLah gYdwV4wR6oB5b7Pl99pwKUmWqJSCQX8EpjSSQucPK2kCZ4H0UmYpbPyYW5E1fW7H oZR++WFJ3ChzDAJ2axC4y8f01STtTEU= -----END CERTIFICATE-----Generated at Fri Aug 8 20:43:16 2025 by rpki-client