$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa File: 5b800870-20d9-315e-98d4-dd27562224ae.roa (raw, json) Hash identifier: bVy9xgPkwJBhAM/R1QF9+6btiMeqjCgjG4pmDItOW7I= Subject key identifier: 53:CB:31:F7:62:D4:DC:C0:3C:4D:7D:4B:4A:4C:20:71:42:13:00:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361F5598BE89449B658000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.227.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1f:55:98:be:89:44:9b:65:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=67fba776-1824-4906-bafd-257116ba2920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:42:dc:77:dc:40:3c:0c:05:03:ef:26:42: 48:d9:a5:74:02:60:f0:97:57:0f:dc:a8:60:7a:b7: 65:8b:f1:d8:03:0f:24:55:e9:a0:6c:c4:4e:3d:43: fb:1a:1f:15:0d:e9:6a:21:b2:b9:00:54:8c:96:97: 28:b4:1f:ce:84:88:6e:3d:dc:ba:e5:af:f0:13:57: f4:a1:40:15:54:84:37:40:7d:45:fc:fb:df:70:01: a0:b0:c4:70:f0:70:f7:ae:55:43:f7:c4:d0:a3:f2: d4:ec:72:c2:aa:7a:fc:48:a8:0c:89:3b:38:bb:c1: 42:7b:d5:44:5a:b7:b9:a4:77:50:0f:95:4e:92:38: 51:a6:86:a6:78:e3:8d:43:d9:ff:8a:5d:2f:66:0f: bd:63:55:a6:17:51:50:b0:4e:11:b2:d8:3f:c5:de: 9e:3d:ce:08:03:74:66:af:89:5a:d8:59:67:0d:40: 43:0a:39:9a:29:62:ac:40:56:a4:c1:57:71:55:ca: 2d:5b:9a:10:44:1b:f4:df:78:79:50:d5:70:20:11: 37:ad:67:8a:1e:ab:f9:80:f7:67:16:54:d9:45:90: 9d:d5:73:03:f5:93:0f:5a:ec:85:f1:82:5e:ff:a1: e5:59:56:fd:6a:1f:25:f4:4c:22:fd:a6:f9:58:1a: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:31:F7:62:D4:DC:C0:3C:4D:7D:4B:4A:4C:20:71:42:13:00:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b800870-20d9-315e-98d4-dd27562224ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:46:77:9e:6b:05:ab:a4:ab:63:25:2f:90:b2:32:14:20:cb: c9:8e:9e:51:39:8f:b0:a0:d8:ba:69:e5:44:e6:04:0c:68:ee: c5:5e:69:11:19:ed:2e:26:e7:74:27:77:54:2d:a9:cb:38:9c: a5:64:fa:ca:b9:f1:2f:42:c7:80:10:cf:9e:27:c8:ec:0c:3e: f2:b0:cc:2e:74:16:0d:ae:e5:2f:02:7a:43:9d:14:94:ad:4b: af:7b:17:ae:54:2f:fb:6b:f0:6e:24:68:41:c0:e7:41:f6:53: eb:c7:61:7a:4f:0c:3d:4f:49:00:dc:7b:4e:46:fa:49:f0:e9: b4:80:30:4f:b7:98:1a:8e:fe:43:39:da:26:71:91:a0:20:77: 4b:ee:9e:48:16:03:cd:e9:75:44:76:aa:6e:27:9d:79:6a:8a: c1:17:9d:41:c5:98:4e:dc:cf:72:e4:ef:c5:eb:4e:92:60:5d: 74:63:cf:cf:1d:6a:11:47:68:a5:9a:0f:20:fe:d8:a5:ce:60: b2:de:df:e2:2c:34:a7:96:33:78:78:0d:e4:33:5b:77:87:7a: 40:e1:ee:06:79:9f:65:c3:2b:0e:7c:5c:72:df:f2:b4:76:aa: 16:3a:92:ca:34:f7:36:de:d7:e0:f6:42:b0:b1:6a:27:de:35: e0:9f:b0:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh9VmL6JRJtlgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjdmYmE3NzYtMTgyNC00OTA2LWJhZmQtMjU3MTE2YmEyOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RC3HfcQDwMBQPvJkJI2aV0AmDwl1cP3Khg erdli/HYAw8kVemgbMROPUP7Gh8VDelqIbK5AFSMlpcotB/OhIhuPdy65a/wE1f0 oUAVVIQ3QH1F/PvfcAGgsMRw8HD3rlVD98TQo/LU7HLCqnr8SKgMiTs4u8FCe9VE Wre5pHdQD5VOkjhRpoameOONQ9n/il0vZg+9Y1WmF1FQsE4Rstg/xd6ePc4IA3Rm r4la2FlnDUBDCjmaKWKsQFakwVdxVcotW5oQRBv033h5UNVwIBE3rWeKHqv5gPdn FlTZRZCd1XMD9ZMPWuyF8YJe/6HlWVb9ah8l9Ewi/ab5WBqUZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPLMfdi1NzAPE19S0pMIHFCEwAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI4MDA4NzAtMjBkOS0z MTVlLTk4ZDQtZGQyNzU2MjIyNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1Gd55rBaukq2MlL5CyMhQgy8mOnlE5j7Cg2Lpp5UTmBAxo7sVeaREZ 7S4m53Qnd1Qtqcs4nKVk+sq58S9Cx4AQz54nyOwMPvKwzC50Fg2u5S8CekOdFJSt S697F65UL/tr8G4kaEHA50H2U+vHYXpPDD1PSQDce05G+knw6bSAME+3mBqO/kM5 2iZxkaAgd0vunkgWA83pdUR2qm4nnXlqisEXnUHFmE7cz3Lk78XrTpJgXXRjz88d ahFHaKWaDyD+2KXOYLLe3+IsNKeWM3h4DeQzW3eHekDh7gZ5n2XDKw58XHLf8rR2 qhY6kso09zbe1+D2QrCxaifeNeCfsKM= -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:30 2025 by rpki-client