$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa File: 44de805d-b8a8-38b5-8bac-cf6e3de61920.roa (raw, json) Hash identifier: yCAP16VptfeoCsa4gDKUPKupfiGLYqHT0hOduvIuzOo= Subject key identifier: 43:9A:7E:87:7F:F0:DB:D5:B0:8F:F1:70:8B:82:A3:D2:59:D0:83:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963634D1C2A35B2F66A77C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:d1:c2:a3:5b:2f:66:a7:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=45913de9-b713-4e6c-a8d0-f3521c79dbdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:a0:70:f1:dc:3c:64:e9:07:ae:a1:2e:c7: 80:c9:db:62:ae:d6:fb:ac:f0:9f:e9:57:44:20:8d: 5d:8b:f4:f1:12:19:08:ec:f6:60:40:a4:3b:c5:c7: ae:35:8b:f0:68:30:d9:b4:58:4c:6d:cf:ea:cd:6f: 25:da:7c:5e:3a:27:87:a7:55:b7:b2:64:0e:4f:89: 79:d5:42:72:0f:5f:fa:9c:17:b0:90:1b:94:ae:db: a4:55:30:06:c6:9c:47:36:1a:78:db:9a:8c:3d:bb: 60:7d:83:5b:74:58:21:dd:e9:51:82:e0:55:97:91: 39:47:40:dd:c3:9a:ab:f8:1b:a9:ca:98:3e:d1:e8: dc:71:cf:ef:1e:4a:e7:4d:59:34:66:28:6b:28:4e: 89:7d:46:1a:cd:10:29:c0:de:40:55:67:da:48:1f: 53:5f:78:36:60:e3:f4:03:df:b4:d5:9b:67:16:ce: c4:f9:cb:9c:65:cc:ce:0f:2d:0c:eb:ca:f0:68:81: 47:84:f0:ac:17:4b:86:b6:71:bd:38:3f:62:a4:06: b1:62:88:06:6b:8e:85:60:48:45:b2:55:ba:dc:47: ea:86:dc:02:4c:a4:b9:06:7d:ce:dd:b9:7f:8c:8b: b6:d9:4a:18:f1:00:61:38:72:d5:f7:3c:39:48:9d: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9A:7E:87:7F:F0:DB:D5:B0:8F:F1:70:8B:82:A3:D2:59:D0:83:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:0c:1f:1c:a4:29:e0:cd:8f:d7:ed:a2:68:44:84:1e:41:d8: 13:fc:d9:99:35:7d:25:b9:0d:1d:b3:d2:75:cb:ca:26:e5:c6: a2:b5:81:ca:49:58:6f:a1:bf:a7:07:9f:b4:33:7d:42:06:fc: cd:f6:b9:76:78:a2:bd:a5:61:23:44:a0:9f:b6:dc:8f:42:fa: ed:78:26:8d:a4:4d:d7:3d:60:6a:f3:b4:5a:48:35:e4:ad:78: c0:93:99:5d:02:cc:cb:f7:2d:af:49:ec:0b:7e:10:62:d4:03: 38:a7:b2:af:5f:19:71:ef:49:7f:09:f3:75:bb:e6:c8:6d:88: a5:68:82:ce:f9:19:87:96:53:42:72:78:5c:67:7a:f6:1b:ff: 6d:44:c8:77:09:20:36:f7:34:65:89:54:33:f7:c8:6c:01:29: 6d:0c:45:39:28:01:23:b7:94:fb:86:c1:72:b9:5d:a7:dc:57: 90:b7:6c:f0:b2:cc:a1:66:a1:fc:54:5b:4a:d0:3c:66:d8:fa: b1:c4:fa:6b:96:6f:11:8c:60:2e:7c:88:2e:18:1a:93:bb:90: b9:90:a5:00:dc:43:f1:d9:d0:88:de:68:1e:bf:f5:04:65:d5: 30:1d:1f:ee:46:19:0b:d7:46:9a:a7:93:b8:bd:b6:6a:7b:24: 80:e2:5e:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjTRwqNbL2anfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDU5MTNkZTktYjcxMy00ZTZjLWE4ZDAtZjM1MjFjNzlkYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvagcPHcPGTpB66hLseAydtirtb7rPCf6VdE II1di/TxEhkI7PZgQKQ7xceuNYvwaDDZtFhMbc/qzW8l2nxeOieHp1W3smQOT4l5 1UJyD1/6nBewkBuUrtukVTAGxpxHNhp425qMPbtgfYNbdFgh3elRguBVl5E5R0Dd w5qr+Bupypg+0ejccc/vHkrnTVk0ZihrKE6JfUYazRApwN5AVWfaSB9TX3g2YOP0 A9+01ZtnFs7E+cucZczODy0M68rwaIFHhPCsF0uGtnG9OD9ipAaxYogGa46FYEhF slW63EfqhtwCTKS5Bn3O3bl/jIu22UoY8QBhOHLV9zw5SJ1vMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOafod/8NvVsI/xcIuCo9JZ0IO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDRkZTgwNWQtYjhhOC0z OGI1LThiYWMtY2Y2ZTNkZTYxOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAASMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEMHxykKeDNj9ftomhEhB5B2BP82Zk1fSW5DR2z0nXLyiblxqK1gcpJ WG+hv6cHn7QzfUIG/M32uXZ4or2lYSNEoJ+23I9C+u14Jo2kTdc9YGrztFpINeSt eMCTmV0CzMv3La9J7At+EGLUAzinsq9fGXHvSX8J83W75shtiKVogs75GYeWU0Jy eFxnevYb/21EyHcJIDb3NGWJVDP3yGwBKW0MRTkoASO3lPuGwXK5XafcV5C3bPCy zKFmofxUW0rQPGbY+rHE+muWbxGMYC58iC4YGpO7kLmQpQDcQ/HZ0IjeaB6/9QRl 1TAdH+5GGQvXRpqnk7i9tmp7JIDiXjo= -----END CERTIFICATE-----Generated at Wed Aug 6 14:12:52 2025 by rpki-client