$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa File: 3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa (raw, json) Hash identifier: 4BdazcnBpU9OfKFUMex62xqsxvP6UrpNlmuvW34qDbk= Subject key identifier: 22:55:25:6D:D7:CE:2B:03:BF:27:A0:C0:CB:51:85:BD:53:A0:81:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963617D79B72EBD0E6BA0420 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.14.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:17:d7:9b:72:eb:d0:e6:ba:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fe002df5-e709-4762-8bf6-7901d1301cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d2:58:b4:18:60:6c:cf:59:fc:a3:19:66:d7: c0:05:14:02:d6:5a:59:6c:bc:a8:10:be:be:a8:9c: d1:08:11:08:78:bb:84:5f:c3:34:9f:dd:30:b3:8d: fb:20:a7:a9:10:69:de:12:65:28:43:90:2e:92:d7: 04:57:10:60:94:d3:61:eb:ab:49:08:15:b8:2a:86: 42:50:bc:e6:45:28:3e:13:8e:76:ce:97:ad:59:bc: 01:3e:d8:db:ea:b5:43:ba:b5:a4:e0:a1:7c:fb:bc: 76:73:9a:2e:ef:5d:8f:7a:8f:80:4b:96:43:53:6b: d8:02:eb:77:06:cf:b9:51:ef:01:20:0b:31:99:35: c2:48:9d:17:97:6d:12:be:28:5d:5c:50:c7:20:40: d4:76:05:af:d5:17:65:12:7b:6d:03:1e:d4:fc:8e: e3:fd:2a:54:03:df:87:ad:6e:64:c2:28:60:10:2a: 63:8e:50:f7:33:31:ad:82:70:f0:25:23:f2:4b:0f: 31:6e:0c:e9:2c:bb:ce:1c:85:8f:49:ca:f6:72:d2: fd:fe:da:af:65:2d:7e:a3:e8:f3:49:48:0d:c8:46: 29:f6:2f:94:ae:ee:bc:75:73:a0:cc:8e:e4:19:54: 00:1f:5a:a7:f1:42:89:39:21:35:af:09:51:ec:27: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:25:6D:D7:CE:2B:03:BF:27:A0:C0:CB:51:85:BD:53:A0:81:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aefb495-57f8-3da3-8ae9-4ec02ca98b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:36:43:ef:99:71:2b:4b:55:af:8a:13:f5:8b:64:eb:19:69: 2b:59:12:89:94:53:7e:44:df:e5:bf:97:bf:af:a5:b4:0c:18: 26:59:11:9f:f8:d9:73:6a:bd:02:87:8f:49:fc:58:85:4f:6f: e8:a7:aa:a4:e3:3c:94:e6:6f:ba:97:d0:a4:45:73:e6:f7:b4: 38:68:53:94:f4:d3:c8:19:4d:76:50:00:2d:fb:ba:00:e7:d4: 35:b3:29:85:86:9f:dd:23:ef:41:38:83:5c:38:d8:73:5f:82: b7:6a:2f:43:b6:61:21:d1:7e:76:8d:52:65:00:fa:28:53:0e: 49:95:1f:c0:57:8d:8f:ac:14:c9:92:e6:9c:c9:5a:e0:de:2e: 6a:5d:79:9b:d4:c8:53:7c:13:d2:96:25:50:cf:c4:08:0e:32: f8:b9:df:13:fc:68:ea:bf:38:37:2e:92:8d:1d:db:c3:2e:9d: 91:cc:38:16:2c:81:81:d9:10:1d:24:8d:36:e0:06:28:d2:8a: 9d:01:12:3a:e0:8b:cd:6b:42:f1:0b:ef:18:a5:1c:6a:58:75: ce:7f:71:85:ce:01:aa:82:91:14:90:c4:41:f2:9a:b7:ee:72: e1:bb:d0:3f:8d:23:10:d7:f2:5d:fd:7f:69:71:dd:f7:5b:18: f3:41:c9:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhfXm3Lr0Oa6BCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmUwMDJkZjUtZTcwOS00NzYyLThiZjYtNzkwMWQxMzAxY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9JYtBhgbM9Z/KMZZtfABRQC1lpZbLyoEL6+ qJzRCBEIeLuEX8M0n90ws437IKepEGneEmUoQ5AuktcEVxBglNNh66tJCBW4KoZC ULzmRSg+E452zpetWbwBPtjb6rVDurWk4KF8+7x2c5ou712Peo+AS5ZDU2vYAut3 Bs+5Ue8BIAsxmTXCSJ0Xl20SvihdXFDHIEDUdgWv1RdlEnttAx7U/I7j/SpUA9+H rW5kwihgECpjjlD3MzGtgnDwJSPySw8xbgzpLLvOHIWPScr2ctL9/tqvZS1+o+jz SUgNyEYp9i+Uru68dXOgzI7kGVQAH1qn8UKJOSE1rwlR7Cei2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJVJW3XzisDvyegwMtRhb1ToIExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FlZmI0OTUtNTdmOC0z ZGEzLThhZTktNGVjMDJjYTk4YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA02Q++ZcStLVa+KE/WLZOsZaStZEomUU35E3+W/l7+vpbQMGCZZEZ/4 2XNqvQKHj0n8WIVPb+inqqTjPJTmb7qX0KRFc+b3tDhoU5T008gZTXZQAC37ugDn 1DWzKYWGn90j70E4g1w42HNfgrdqL0O2YSHRfnaNUmUA+ihTDkmVH8BXjY+sFMmS 5pzJWuDeLmpdeZvUyFN8E9KWJVDPxAgOMvi53xP8aOq/ODcuko0d28MunZHMOBYs gYHZEB0kjTbgBijSip0BEjrgi81rQvEL7xilHGpYdc5/cYXOAaqCkRSQxEHymrfu cuG70D+NIxDX8l39f2lx3fdbGPNByUs= -----END CERTIFICATE-----Generated at Fri Aug 8 00:46:00 2025 by rpki-client