$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5edca87a-be1d-3d15-a439-c7c4528b912f.roa File: 5edca87a-be1d-3d15-a439-c7c4528b912f.roa (raw, json) Hash identifier: +oBS3vrb351TYQp3jaG/GJSAd6Slr+1TCFQZ3ljF9wk= Subject key identifier: 33:1C:54:DD:C7:11:10:27:16:78:57:98:DF:C3:09:1B:BD:89:CF:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363FAC8E32F6B7126F4F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5edca87a-be1d-3d15-a439-c7c4528b912f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.230.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3f:ac:8e:32:f6:b7:12:6f:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e54f8fb9-6953-415c-bbaf-e9849654d991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:17:5e:6e:78:e9:86:cd:a9:c5:3c:93:80: ab:a2:b8:e7:6b:ec:96:cf:43:ce:44:63:f8:64:29: 1b:41:dc:2b:0a:80:4c:ea:53:b7:59:9b:70:0c:37: 9c:64:20:f9:6b:17:3b:93:cc:13:59:7e:fa:94:23: d8:54:1b:ed:26:eb:5a:36:55:90:41:cb:a1:8b:08: d6:10:01:d5:49:79:eb:35:b2:ac:ad:63:8c:5c:39: d0:16:d4:b5:55:ad:f5:a7:bc:6f:78:1e:bd:78:20: e3:d7:66:f7:06:f6:df:ee:c1:ae:d3:a6:3e:85:7c: a6:d1:0a:26:1f:97:b7:88:60:71:48:09:23:b0:25: 81:b2:63:b9:b4:7f:4c:f8:6d:e3:64:01:fd:e8:3f: 63:78:0c:2e:af:f2:1b:b9:75:c6:db:5b:76:f4:63: 35:6b:e7:78:91:c0:20:7f:7e:4e:d5:43:c2:05:87: 64:73:0e:26:24:44:19:8a:99:2d:d5:3e:ed:50:39: 70:35:f0:ca:cd:48:99:31:b5:6e:09:88:b9:41:d3: 8f:9c:64:89:95:d9:ca:f3:cd:31:c7:77:5c:d7:ee: 72:e4:5b:f8:b9:69:bd:61:20:80:a4:f6:82:3a:94: 23:c5:42:75:5a:0d:0a:fa:36:50:79:15:94:ff:90: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1C:54:DD:C7:11:10:27:16:78:57:98:DF:C3:09:1B:BD:89:CF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5edca87a-be1d-3d15-a439-c7c4528b912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:45:cf:b1:e0:d2:dd:81:b0:61:33:25:aa:8b:fb:3f:5e:b9: d3:94:27:97:e3:ac:e7:40:bc:59:da:1d:37:16:c5:fb:e3:16: 42:a3:2c:9e:96:40:4d:fd:f8:af:d3:83:9a:67:fb:27:ef:62: 56:18:83:ac:d9:be:dd:d0:08:d8:fd:1a:fe:19:ff:02:09:47: c1:79:4f:9b:59:54:04:f2:b5:e6:2f:66:4e:bf:36:30:b3:07: 97:c4:04:1a:f4:2a:46:a1:3e:ab:c6:89:e3:c5:88:31:80:b4: e5:2e:c7:8c:bc:79:de:0f:97:e6:3a:0f:75:92:fb:ce:cf:1b: 9d:c6:ea:48:34:0f:ea:19:87:3e:61:f2:69:6f:43:c2:00:42: 7c:75:62:97:ed:d0:38:2e:85:fd:76:21:40:0f:bc:78:17:e8: 28:69:a7:ef:7f:30:d0:89:9a:7c:f7:1d:bc:eb:bb:41:76:56: b4:f9:bd:ba:02:ef:50:7c:1b:7b:f4:83:b8:6b:02:14:12:38: 50:6a:ef:46:5e:a9:ba:81:d3:df:70:54:ef:3d:36:94:c6:02: 9c:4e:ea:2b:6e:6a:67:70:56:73:a9:f1:51:f3:03:cd:8d:5e: 1a:22:90:54:ce:60:6b:a9:61:2e:4f:c0:a8:dd:a4:2c:76:59: 20:b6:a1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNj+sjjL2txJvTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTU0ZjhmYjktNjk1My00MTVjLWJiYWYtZTk4NDk2NTRkOTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc4XXm546YbNqcU8k4Crorjna+yWz0PORGP4 ZCkbQdwrCoBM6lO3WZtwDDecZCD5axc7k8wTWX76lCPYVBvtJutaNlWQQcuhiwjW EAHVSXnrNbKsrWOMXDnQFtS1Va31p7xveB69eCDj12b3Bvbf7sGu06Y+hXym0Qom H5e3iGBxSAkjsCWBsmO5tH9M+G3jZAH96D9jeAwur/IbuXXG21t29GM1a+d4kcAg f35O1UPCBYdkcw4mJEQZipkt1T7tUDlwNfDKzUiZMbVuCYi5QdOPnGSJldnK880x x3dc1+5y5Fv4uWm9YSCApPaCOpQjxUJ1Wg0K+jZQeRWU/5BEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMcVN3HERAnFnhXmN/DCRu9ic+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWVkY2E4N2EtYmUxZC0z ZDE1LWE0MzktYzdjNDUyOGI5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRObGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpFz7Hg0t2BsGEzJaqL+z9eudOUJ5fjrOdAvFnaHTcWxfvjFkKjLJ6W QE39+K/Tg5pn+yfvYlYYg6zZvt3QCNj9Gv4Z/wIJR8F5T5tZVATyteYvZk6/NjCz B5fEBBr0KkahPqvGiePFiDGAtOUux4y8ed4Pl+Y6D3WS+87PG53G6kg0D+oZhz5h 8mlvQ8IAQnx1Ypft0Dguhf12IUAPvHgX6Chpp+9/MNCJmnz3Hbzru0F2VrT5vboC 71B8G3v0g7hrAhQSOFBq70ZeqbqB099wVO89NpTGApxO6ituamdwVnOp8VHzA82N XhoikFTOYGupYS5PwKjdpCx2WSC2oeg= -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:15 2025 by rpki-client