$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa File: 38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa (raw, json) Hash identifier: abqwivcLNlFBEc3RVpV0ZeCKc2YDW6vNXdJXtV43UI0= Subject key identifier: EF:B7:26:5D:EE:5E:EA:A4:8D:4A:82:83:2C:23:66:17:D3:3E:07:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361F73EA49F51F20D63148 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.227.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1f:73:ea:49:f5:1f:20:d6:31:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=449733bd-71e5-40a1-a4d1-6f7cfba412c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:30:97:47:b0:0c:a0:25:a7:ea:83:eb:30: a4:69:17:c3:63:9f:14:98:92:8e:58:5b:3c:e5:72: 02:d2:51:2d:bc:b7:d8:19:08:9c:eb:14:7e:69:16: 42:58:7f:31:f5:4b:db:a9:2e:a1:13:5a:b2:db:50: 1e:aa:d3:75:dc:cb:93:82:72:5f:a8:1c:61:c0:b8: b8:ed:b8:09:13:a9:38:b6:ea:b0:0c:b7:ce:d9:fd: 15:d3:63:e5:8e:13:08:50:30:d5:24:f3:35:bc:01: 94:80:e3:0d:3a:b0:d9:4b:f4:8e:9e:1a:42:f1:c6: b4:89:a9:2c:f1:c5:5a:2e:e4:67:5f:05:03:0e:4d: 9b:0f:c5:ff:8b:ae:39:93:c3:bc:ee:6e:67:80:58: 4d:a4:9a:57:66:ed:9e:01:63:75:15:ad:3b:14:53: dd:51:85:aa:dc:0b:32:a3:18:b2:8d:4a:f4:92:66: 76:7e:c2:6e:fd:7e:86:f5:9a:bb:63:1d:7d:1b:61: 6b:d9:b6:01:a0:48:b3:25:2e:9b:ed:0b:c1:7d:23: 6e:b3:99:ea:6a:b3:23:38:55:cc:dd:67:b7:10:9c: 39:a9:77:bd:7c:af:01:e3:75:b5:63:67:51:31:d2: d5:37:17:6d:bb:63:fb:d8:25:29:4a:d0:85:c6:79: 9b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B7:26:5D:EE:5E:EA:A4:8D:4A:82:83:2C:23:66:17:D3:3E:07:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:78:0e:50:8a:bc:a6:94:3a:6b:c9:ba:f8:b0:5c:e8:96:c0: ee:f2:d3:0c:dd:c1:6f:1a:a3:27:53:e7:00:12:8f:0a:a1:1b: f4:30:44:1a:13:f4:a4:0e:11:bd:03:fe:26:ad:2b:3d:cb:b9: 89:db:18:1e:82:3b:ea:05:60:47:6c:25:3c:75:99:19:f4:f9: 02:27:b4:9d:24:f4:ae:2b:19:d2:3e:2d:fb:ae:64:c6:a6:51: 86:57:16:39:cf:34:97:0e:7d:dd:d7:63:e3:92:18:56:2b:ff: 04:2a:76:d6:e0:b8:7f:69:05:e5:3d:5e:81:b9:06:d4:4c:38: 8c:54:e7:c9:d5:7a:c2:83:81:55:1c:9b:25:b7:0f:34:d4:68: f0:72:5f:80:ca:6a:11:97:b7:60:af:38:92:5c:9d:98:6c:93: 3c:a3:21:66:fa:0b:3d:0b:74:ac:60:18:eb:4e:10:5d:57:0b: 15:46:35:25:af:f3:e2:9f:97:c0:68:1e:1f:c0:15:ff:7f:b8: 5b:ec:7f:03:33:52:c2:71:1e:7c:16:95:e0:3c:13:ea:8c:70: ea:5f:af:ea:d8:f2:f7:3a:a9:3e:ce:a2:56:91:04:60:50:d5: 1a:4d:4d:91:3e:f9:b9:96:cb:88:86:ef:7e:5e:83:8e:7b:7e: 61:35:99:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh9z6kn1HyDWMUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDQ5NzMzYmQtNzFlNS00MGExLWE0ZDEtNmY3Y2ZiYTQxMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lswl0ewDKAlp+qD6zCkaRfDY58UmJKOWFs8 5XIC0lEtvLfYGQic6xR+aRZCWH8x9UvbqS6hE1qy21AeqtN13MuTgnJfqBxhwLi4 7bgJE6k4tuqwDLfO2f0V02PljhMIUDDVJPM1vAGUgOMNOrDZS/SOnhpC8ca0iaks 8cVaLuRnXwUDDk2bD8X/i645k8O87m5ngFhNpJpXZu2eAWN1Fa07FFPdUYWq3Asy oxiyjUr0kmZ2fsJu/X6G9Zq7Yx19G2Fr2bYBoEizJS6b7QvBfSNus5nqarMjOFXM 3We3EJw5qXe9fK8B43W1Y2dRMdLVNxdtu2P72CUpStCFxnmbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+3Jl3uXuqkjUqCgywjZhfTPgcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhhODFiOWItY2Q3OS0z ZWI4LWFiODYtMzczOTIwYWM1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF4DlCKvKaUOmvJuviwXOiWwO7y0wzdwW8aoydT5wASjwqhG/QwRBoT 9KQOEb0D/iatKz3LuYnbGB6CO+oFYEdsJTx1mRn0+QIntJ0k9K4rGdI+LfuuZMam UYZXFjnPNJcOfd3XY+OSGFYr/wQqdtbguH9pBeU9XoG5BtRMOIxU58nVesKDgVUc myW3DzTUaPByX4DKahGXt2CvOJJcnZhskzyjIWb6Cz0LdKxgGOtOEF1XCxVGNSWv 8+Kfl8BoHh/AFf9/uFvsfwMzUsJxHnwWleA8E+qMcOpfr+rY8vc6qT7OolaRBGBQ 1RpNTZE++bmWy4iG735eg457fmE1mfY= -----END CERTIFICATE-----Generated at Fri Aug 8 13:10:06 2025 by rpki-client