$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/650fdd24-8ecc-33a0-be25-d449bcf0ace3.roa File: 650fdd24-8ecc-33a0-be25-d449bcf0ace3.roa (raw, json) Hash identifier: +IfaJcpFS5MNtFV/SyqknD+nOZIOxA2/7zWwyg4Y90Y= Subject key identifier: 8D:A8:37:05:41:BB:6F:2F:C6:F8:6A:48:60:7C:0F:1C:AB:A4:6E:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361571F92C2B3A4FF4B900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/650fdd24-8ecc-33a0-be25-d449bcf0ace3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:15:71:f9:2c:2b:3a:4f:f4:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=e3a16969-8708-406a-9487-4351ca9a6d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e3:d8:ca:fc:b2:9b:38:c7:43:12:bb:ce:88: ec:b2:4b:2a:68:9f:c8:7d:66:da:4b:dd:fb:c6:b8: cd:a7:95:f4:26:fb:b1:e0:85:6c:1f:c4:24:1c:0f: b7:68:f5:e7:96:8e:0b:de:a4:6d:a6:3b:dc:0a:33: 31:83:1e:a5:20:5f:39:27:41:65:3d:5e:8a:c4:2b: f6:23:fd:a8:0e:8b:fc:ce:58:95:87:62:4e:e3:9c: 68:78:40:6c:b5:e9:38:bc:4e:1e:ce:82:d2:4f:59: f7:48:24:c1:7a:f6:2d:b3:ce:31:9a:c7:5f:ce:cb: 61:be:a7:47:1a:98:35:2b:31:be:5f:25:72:fc:0a: f3:c4:af:13:4c:da:53:47:4d:1f:10:5f:95:7e:30: e1:fe:e6:bd:f4:80:b0:aa:e5:5d:28:8d:67:e0:7f: 57:63:70:9e:57:3b:74:dc:78:46:69:fe:1c:ee:6e: 8c:d6:b1:7f:e9:85:1b:28:eb:75:cd:67:33:3c:41: 70:84:73:62:44:a9:79:68:a7:1a:92:e5:d4:aa:72: ef:86:b7:17:8c:52:5a:27:cd:9c:f1:46:d7:d4:5e: 66:54:6d:ee:47:c0:b7:44:01:ff:4f:30:38:10:64: 53:6a:16:20:47:33:1f:e7:b6:15:26:99:b6:c4:63: 1d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A8:37:05:41:BB:6F:2F:C6:F8:6A:48:60:7C:0F:1C:AB:A4:6E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/650fdd24-8ecc-33a0-be25-d449bcf0ace3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9f:55:9f:ff:fb:3e:c0:42:3a:e6:41:74:8f:86:a2:74:b1: cb:1f:c8:75:90:f4:b1:f8:3b:7f:37:a2:ca:14:eb:49:a9:81: 65:41:6c:03:54:84:65:5c:f7:72:af:d5:4b:33:75:0f:bc:3b: 15:e1:2a:4a:df:7c:27:af:a3:79:9f:5b:3a:a8:eb:fe:ed:2c: f5:d0:01:5d:49:aa:4b:11:f3:88:26:87:db:f9:6b:75:3d:f2: 06:91:38:50:e4:be:a5:80:e9:c4:86:97:43:93:9e:0a:69:9d: 49:52:1b:23:a2:a5:e5:c6:7a:53:12:2d:55:f9:e3:76:93:c9: c9:56:83:51:2d:63:76:39:5a:4d:df:53:6d:8f:e4:39:1a:3c: 03:5e:61:4d:2e:83:2a:8d:2f:c1:42:c9:b3:b2:0f:21:bc:37: 61:74:48:37:aa:29:be:e8:b6:69:eb:fa:35:18:13:99:95:4a: 8c:72:b5:af:9d:d2:45:74:43:43:60:70:f9:23:10:49:cd:86: fa:8b:ae:77:9b:91:b8:a9:99:fd:16:d2:bb:2a:98:f4:33:64: 0c:65:fc:8c:e9:d4:dd:0d:0e:79:b6:69:f6:75:ac:2c:ca:4f: 59:f6:c3:34:00:de:6e:b8:f2:c6:8e:e4:8b:da:ef:d3:05:b8: 89:4e:b6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhVx+SwrOk/0uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTNhMTY5NjktODcwOC00MDZhLTk0ODctNDM1MWNhOWE2ZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgePYyvyymzjHQxK7zojssksqaJ/IfWbaS937 xrjNp5X0Jvux4IVsH8QkHA+3aPXnlo4L3qRtpjvcCjMxgx6lIF85J0FlPV6KxCv2 I/2oDov8zliVh2JO45xoeEBstek4vE4ezoLST1n3SCTBevYts84xmsdfzsthvqdH Gpg1KzG+XyVy/ArzxK8TTNpTR00fEF+VfjDh/ua99ICwquVdKI1n4H9XY3CeVzt0 3HhGaf4c7m6M1rF/6YUbKOt1zWczPEFwhHNiRKl5aKcakuXUqnLvhrcXjFJaJ82c 8UbX1F5mVG3uR8C3RAH/TzA4EGRTahYgRzMf57YVJpm2xGMdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2oNwVBu28vxvhqSGB8DxyrpG7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUwZmRkMjQtOGVjYy0z M2EwLWJlMjUtZDQ0OWJjZjBhY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqfVZ//+z7AQjrmQXSPhqJ0scsfyHWQ9LH4O383osoU60mpgWVBbANU hGVc93Kv1UszdQ+8OxXhKkrffCevo3mfWzqo6/7tLPXQAV1JqksR84gmh9v5a3U9 8gaROFDkvqWA6cSGl0OTngppnUlSGyOipeXGelMSLVX543aTyclWg1EtY3Y5Wk3f U22P5DkaPANeYU0ugyqNL8FCybOyDyG8N2F0SDeqKb7otmnr+jUYE5mVSoxyta+d 0kV0Q0NgcPkjEEnNhvqLrnebkbipmf0W0rsqmPQzZAxl/Izp1N0NDnm2afZ1rCzK T1n2wzQA3m648saO5Iva79MFuIlOtoY= -----END CERTIFICATE-----Generated at Sat Aug 9 05:45:41 2025 by rpki-client