$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa File: 40e6259c-3daa-3562-8a47-965ddf6b40da.roa (raw, json) Hash identifier: czecRucRQ9SGozeAKusSELk6vX9OkhAV6jxPsEjeU0k= Subject key identifier: 04:BA:D9:D2:9D:51:81:00:81:26:21:39:07:4A:84:6C:20:76:87:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963654C2CF34ECEB41055680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.6.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:54:c2:cf:34:ec:eb:41:05:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=deb27365-c735-4976-b3cb-9e0f9c09ff4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f5:66:fd:e9:02:16:e7:4b:55:54:bb:27:b9: 66:59:f5:cd:19:f4:a2:fb:40:2a:93:d3:95:18:61: 08:e3:f9:e2:15:8f:57:31:42:86:ed:27:19:98:35: 90:bb:95:4a:b3:9c:35:e5:9c:f9:dc:52:01:d6:5f: 4d:e4:35:13:a8:e1:a5:68:9d:77:b6:4c:55:39:6d: 16:a3:ba:2b:dd:92:14:f7:59:18:b9:71:73:e1:6a: b2:ea:be:f6:c6:e2:5f:52:a3:10:77:7d:e8:15:9b: bb:57:ce:6e:4c:7c:76:6f:5e:80:8f:14:22:01:52: db:c2:17:db:9a:b9:cd:6a:c7:4c:32:36:8d:7e:04: c0:02:0b:17:50:c6:dd:c9:10:01:2d:98:01:d2:c8: 28:ce:48:56:6e:aa:70:ec:6e:16:83:71:dd:85:8f: 6b:45:e2:4d:d6:8b:1e:cf:f6:30:28:e6:0a:dd:1e: 05:70:8d:35:67:68:7c:99:84:f4:49:3f:e4:c1:68: da:33:6b:8b:52:84:47:83:53:82:51:69:3c:6d:68: 63:9e:c7:ef:dd:c6:38:fe:dd:af:b3:cb:70:f5:fa: 15:b1:6a:d6:90:45:fc:d1:1d:20:ed:53:89:1d:4b: 10:45:43:52:be:68:b3:d2:70:00:19:d8:2e:aa:76: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:D9:D2:9D:51:81:00:81:26:21:39:07:4A:84:6C:20:76:87:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40e6259c-3daa-3562-8a47-965ddf6b40da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:72:e4:9a:40:ff:c9:fd:6b:e3:44:a1:86:4c:4b:48:2f:2e: ae:e5:d3:04:75:5d:30:6c:bc:31:ce:00:e8:2c:9b:78:a4:bf: 5f:6f:dc:1e:7d:f1:70:21:71:97:86:c0:76:af:8b:b8:21:84: a2:40:2d:ed:f5:2c:5c:e1:01:a2:a3:63:74:02:53:45:d5:65: 41:cb:13:9f:34:5a:f4:73:8d:f4:6a:56:c9:97:87:68:ce:37: b7:79:8f:ac:bc:d6:48:8b:f6:33:a2:35:b1:5e:08:b3:93:63: 61:00:b6:d9:31:1f:49:4f:61:41:2f:d9:3c:12:64:71:74:06: b9:bf:90:c4:d1:9a:80:17:b0:5b:60:a3:2b:2f:92:5d:f9:da: 08:28:d8:6a:51:85:d1:1d:b7:66:88:97:60:fe:36:fd:81:fe: 07:cd:7b:b2:66:69:3a:40:ce:e5:fe:63:ec:1d:c9:9a:14:39: 66:07:2d:25:90:ef:9b:fa:08:13:71:3c:b7:f2:68:cb:e7:53: ab:25:c5:12:5d:5f:b5:07:99:67:4d:cd:02:74:9f:c6:7f:ec: 9c:28:f6:1c:34:e8:1f:aa:16:40:5d:96:bc:99:a9:24:16:c0: 9e:78:64:70:3f:d6:a7:c6:bf:ac:21:7a:59:c0:42:61:d3:68: 41:f3:44:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlTCzzTs60EFVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGViMjczNjUtYzczNS00OTc2LWIzY2ItOWUwZjljMDlmZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPVm/ekCFudLVVS7J7lmWfXNGfSi+0Aqk9OV GGEI4/niFY9XMUKG7ScZmDWQu5VKs5w15Zz53FIB1l9N5DUTqOGlaJ13tkxVOW0W o7or3ZIU91kYuXFz4Wqy6r72xuJfUqMQd33oFZu7V85uTHx2b16AjxQiAVLbwhfb mrnNasdMMjaNfgTAAgsXUMbdyRABLZgB0sgozkhWbqpw7G4Wg3HdhY9rReJN1ose z/YwKOYK3R4FcI01Z2h8mYT0ST/kwWjaM2uLUoRHg1OCUWk8bWhjnsfv3cY4/t2v s8tw9foVsWrWkEX80R0g7VOJHUsQRUNSvmiz0nAAGdguqnblEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS62dKdUYEAgSYhOQdKhGwgdocgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDBlNjI1OWMtM2RhYS0z NTYyLThhNDctOTY1ZGRmNmI0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJy5JpA/8n9a+NEoYZMS0gvLq7l0wR1XTBsvDHOAOgsm3ikv19v3B59 8XAhcZeGwHavi7ghhKJALe31LFzhAaKjY3QCU0XVZUHLE580WvRzjfRqVsmXh2jO N7d5j6y81kiL9jOiNbFeCLOTY2EAttkxH0lPYUEv2TwSZHF0Brm/kMTRmoAXsFtg oysvkl352ggo2GpRhdEdt2aIl2D+Nv2B/gfNe7JmaTpAzuX+Y+wdyZoUOWYHLSWQ 75v6CBNxPLfyaMvnU6slxRJdX7UHmWdNzQJ0n8Z/7Jwo9hw06B+qFkBdlryZqSQW wJ54ZHA/1qfGv6whelnAQmHTaEHzRNQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:13 2025 by rpki-client