$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa File: 6c439349-953f-3643-8c11-9363425bb721.roa (raw, json) Hash identifier: doWz+J4FYm3TkY3sC8w2nMgjhLI/QunSskoShBAmWT8= Subject key identifier: 6C:D7:5B:56:4D:2E:E4:EB:A6:6F:55:41:5E:EA:16:D0:81:CC:79:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361FF1285BB04681C649C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.228.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1f:f1:28:5b:b0:46:81:c6:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=11175de9-0c0e-4661-a380-3e9b3f95f17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:27:77:1f:df:e8:8e:3a:07:39:90:a4:71: 6a:91:ed:a9:54:21:c4:1b:88:3f:2c:17:ba:9f:c5: 52:b4:39:b0:a7:5c:fb:83:73:e5:e1:fc:8d:fb:91: 7b:79:d1:9d:2f:48:a2:91:23:e6:95:4e:83:88:47: 68:6a:67:24:ae:e7:ab:a4:1d:91:dd:6c:17:c6:d2: 9b:27:41:ad:86:99:4f:16:98:e4:05:3f:43:00:c5: b6:f4:3d:bc:9c:d4:d2:dd:91:75:0e:0b:2d:b1:04: 83:a3:b5:48:b7:cf:30:98:76:d3:c9:e5:b6:55:d9: 06:7a:03:17:ee:f8:5a:74:b8:9f:ee:ac:b9:b1:53: 77:c4:b4:ec:4b:47:65:06:af:58:e8:10:fc:84:37: ee:20:79:3c:4c:62:f2:14:1a:fb:f3:58:1d:6a:e5: d4:ad:2e:88:f9:b7:3c:85:5a:21:77:d2:bd:69:54: e5:ef:45:68:29:7a:24:a0:cb:23:7e:13:ba:fe:b6: ec:b9:c8:23:44:52:ab:8e:14:04:93:98:80:74:fe: 5b:c3:4c:39:70:72:ff:67:a0:e5:56:21:c6:42:09: 3d:6d:83:01:22:4a:08:60:a3:a2:d5:cd:04:c9:ff: 78:f9:8d:72:19:a2:0c:49:fd:4b:ff:29:05:08:74: a8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:5B:56:4D:2E:E4:EB:A6:6F:55:41:5E:EA:16:D0:81:CC:79:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:fb:5e:b3:f6:af:be:5e:c0:f9:f7:49:78:79:9a:80:46:af: 17:23:b4:5b:2d:d4:39:d3:04:70:6f:51:4a:1d:ac:01:a9:c1: a1:7b:cc:47:4a:80:0d:96:45:00:0c:47:cf:4e:02:71:bc:d8: 87:24:e0:7e:a3:68:07:38:82:89:f5:3a:d6:ee:e7:35:f1:a8: 23:82:c6:6b:99:ff:db:dd:f0:b8:4a:92:e8:24:72:e3:ae:15: 43:01:32:96:e9:f5:06:84:fd:12:ad:0e:b3:38:8c:dd:51:92: 7a:3e:44:b5:a9:1d:5f:76:3a:90:89:93:61:94:43:41:20:bb: 9a:6b:91:19:0c:5c:f9:50:34:0d:24:b5:94:72:b4:53:30:61: 8b:57:0a:28:27:03:45:6a:96:0d:db:79:d3:3a:ab:1e:52:6d: 5a:21:41:66:61:c2:0d:13:b6:e2:42:c2:a5:69:7f:81:1c:61: 48:37:c9:65:98:89:2e:41:3d:97:4b:d0:bc:09:3a:0e:76:d7: 16:f5:70:69:33:08:60:be:29:e3:e3:c4:be:95:a2:14:5a:b3: b0:5b:8b:8e:57:9d:43:78:7c:5d:d1:e8:29:95:a5:cf:71:dd: 17:8b:ec:3a:35:5e:30:df:6c:2f:6b:57:6d:89:43:d8:46:99: 47:09:b7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh/xKFuwRoHGScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTExNzVkZTktMGMwZS00NjYxLWEzODAtM2U5YjNmOTVmMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRondx/f6I46BzmQpHFqke2pVCHEG4g/LBe6 n8VStDmwp1z7g3Pl4fyN+5F7edGdL0iikSPmlU6DiEdoamckruerpB2R3WwXxtKb J0GthplPFpjkBT9DAMW29D28nNTS3ZF1DgstsQSDo7VIt88wmHbTyeW2VdkGegMX 7vhadLif7qy5sVN3xLTsS0dlBq9Y6BD8hDfuIHk8TGLyFBr781gdauXUrS6I+bc8 hVohd9K9aVTl70VoKXokoMsjfhO6/rbsucgjRFKrjhQEk5iAdP5bw0w5cHL/Z6Dl ViHGQgk9bYMBIkoIYKOi1c0Eyf94+Y1yGaIMSf1L/ykFCHSomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzXW1ZNLuTrpm9VQV7qFtCBzHlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmM0MzkzNDktOTUzZi0z NjQzLThjMTEtOTM2MzQyNWJiNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROSeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH7XrP2r75ewPn3SXh5moBGrxcjtFst1DnTBHBvUUodrAGpwaF7zEdK gA2WRQAMR89OAnG82Ick4H6jaAc4gon1Otbu5zXxqCOCxmuZ/9vd8LhKkugkcuOu FUMBMpbp9QaE/RKtDrM4jN1Rkno+RLWpHV92OpCJk2GUQ0Egu5prkRkMXPlQNA0k tZRytFMwYYtXCignA0Vqlg3bedM6qx5SbVohQWZhwg0TtuJCwqVpf4EcYUg3yWWY iS5BPZdL0LwJOg521xb1cGkzCGC+KePjxL6VohRas7Bbi45XnUN4fF3R6CmVpc9x 3ReL7Do1XjDfbC9rV22JQ9hGmUcJt5E= -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:51 2025 by rpki-client