$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f19d7c-00b2-3858-b711-5b75cd484010.roa File: 49f19d7c-00b2-3858-b711-5b75cd484010.roa (raw, json) Hash identifier: VvBpRPkqJxp2cvQu8V4C8o2yVAkQR0TWU0kWnuSXEU4= Subject key identifier: 68:EE:CE:35:6E:04:D7:72:E2:77:A6:C5:DA:AE:F6:69:E6:FB:C9:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963636AB8D378B66B1E84A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f19d7c-00b2-3858-b711-5b75cd484010.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.10.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:36:ab:8d:37:8b:66:b1:e8:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=60bb17c5-1922-4f1b-8fa4-06e9c05ddee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:80:36:0d:5b:e9:84:da:7b:03:f0:5e:96: 8d:4f:e0:51:d6:b5:ce:45:73:62:bc:a3:47:be:2a: 98:b6:5d:e6:93:ee:c1:72:d1:89:44:1c:04:a1:e8: ec:46:8b:9a:06:9e:9b:58:90:16:67:8a:ff:b8:17: 9e:66:f9:c1:af:b3:74:fa:26:20:62:2b:2f:8c:50: 4d:90:47:11:4b:a3:df:6b:d6:b8:b4:b4:da:36:62: a8:d6:e3:01:5a:a3:29:50:f1:17:4d:d1:5d:18:af: 92:c3:65:56:09:b3:88:cc:d0:bf:79:0d:80:4d:e3: 39:ec:b7:c3:01:0f:a4:aa:e8:9f:20:64:58:af:10: fd:d9:5b:bb:3c:01:65:ba:37:32:f2:fe:9d:f5:36: 87:2b:2e:49:12:6e:36:d6:27:73:b4:d0:9b:3e:9c: c4:32:b7:6a:2c:4f:af:1b:e9:0e:72:22:13:1e:1f: c2:9f:38:21:33:06:27:e7:95:75:0f:22:68:0b:96: 64:be:1b:e2:96:0c:d0:a0:33:8e:41:95:22:b1:ae: 6a:ea:12:e3:82:61:e1:78:ae:d7:a8:50:47:25:3a: ea:a8:08:65:52:c1:9c:f2:9f:04:8b:61:f6:84:5c: ae:c4:85:e6:1c:2a:7f:4e:6b:f3:94:84:b1:32:a5: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EE:CE:35:6E:04:D7:72:E2:77:A6:C5:DA:AE:F6:69:E6:FB:C9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49f19d7c-00b2-3858-b711-5b75cd484010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:86:25:1f:f3:a5:62:d3:93:f8:3f:73:98:b2:5a:48:95:4c: be:2c:a5:76:37:b8:39:5f:37:80:87:de:ed:cb:1d:9d:7e:39: 64:65:b2:45:d9:25:ac:3b:4f:3c:20:78:0b:f3:17:a9:93:cf: 23:39:ec:84:3b:0f:03:1d:cb:e4:3e:31:a0:ea:00:34:6c:8c: 5f:60:9f:6f:6e:e7:c4:51:0f:0b:3e:b5:70:6c:d9:8e:da:b9: 82:ec:5c:09:4f:55:79:27:1f:a4:89:ba:c1:8d:b9:83:af:24: e5:af:76:b0:ea:70:66:f6:71:8f:be:2b:29:6c:25:02:a0:7c: 2f:41:83:ca:61:d6:2e:d9:18:88:a8:33:f8:f2:4b:d6:7f:88: 08:d7:90:76:dc:c6:f2:71:9b:e8:63:dd:a4:fd:47:c4:9b:a4: 14:ea:de:9c:16:7e:f4:ff:02:0c:b8:10:10:7e:f3:df:be:86: dc:44:66:05:5f:01:8f:3b:e5:2f:ab:a3:97:35:b9:e3:bf:50: c4:00:bc:57:6a:67:d8:ae:cf:ab:df:2f:54:a6:3e:ff:98:4f: dc:7b:c5:62:71:08:e1:07:aa:d3:d4:ec:ed:f6:25:e9:e0:85: d4:6c:2c:b0:89:a1:e3:03:56:cf:e9:24:9c:41:04:9c:f5:32: 61:28:03:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjarjTeLZrHoSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjBiYjE3YzUtMTkyMi00ZjFiLThmYTQtMDZlOWMwNWRkZWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOANg1b6YTaewPwXpaNT+BR1rXORXNivKNH viqYtl3mk+7BctGJRBwEoejsRouaBp6bWJAWZ4r/uBeeZvnBr7N0+iYgYisvjFBN kEcRS6Pfa9a4tLTaNmKo1uMBWqMpUPEXTdFdGK+Sw2VWCbOIzNC/eQ2ATeM57LfD AQ+kquifIGRYrxD92Vu7PAFlujcy8v6d9TaHKy5JEm421idztNCbPpzEMrdqLE+v G+kOciITHh/CnzghMwYn55V1DyJoC5ZkvhvilgzQoDOOQZUisa5q6hLjgmHheK7X qFBHJTrqqAhlUsGc8p8Ei2H2hFyuxIXmHCp/TmvzlISxMqWkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjuzjVuBNdy4nemxdqu9mnm+8nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDlmMTlkN2MtMDBiMi0z ODU4LWI3MTEtNWI3NWNkNDg0MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRApWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaGJR/zpWLTk/g/c5iyWkiVTL4spXY3uDlfN4CH3u3LHZ1+OWRlskXZ Jaw7TzwgeAvzF6mTzyM57IQ7DwMdy+Q+MaDqADRsjF9gn29u58RRDws+tXBs2Y7a uYLsXAlPVXknH6SJusGNuYOvJOWvdrDqcGb2cY++KylsJQKgfC9Bg8ph1i7ZGIio M/jyS9Z/iAjXkHbcxvJxm+hj3aT9R8SbpBTq3pwWfvT/Agy4EBB+89++htxEZgVf AY875S+ro5c1ueO/UMQAvFdqZ9iuz6vfL1SmPv+YT9x7xWJxCOEHqtPU7O32Jeng hdRsLLCJoeMDVs/pJJxBBJz1MmEoA0Y= -----END CERTIFICATE-----Generated at Fri Aug 8 12:51:57 2025 by rpki-client