$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d6ee0f5-08dd-3e5e-9373-5c408ccffd78.roa File: 6d6ee0f5-08dd-3e5e-9373-5c408ccffd78.roa (raw, json) Hash identifier: 4Rt7qpTtOWPLz2VkMngoOvFh5SXlFR0qG4wV87gqGGU= Subject key identifier: FA:7A:E6:AC:66:F4:1F:D3:90:58:C4:F8:D9:AE:52:EC:CF:B2:16:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364078EF444D169EE65380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d6ee0f5-08dd-3e5e-9373-5c408ccffd78.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.231.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:40:78:ef:44:4d:16:9e:e6:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a3e4e557-bc93-4325-a0b8-d0ad5877de78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:e1:f0:b9:a8:a6:68:ff:28:54:c4:b0:53: 9c:d1:cc:61:59:12:3d:55:74:71:0d:71:96:73:be: 57:b0:97:d4:05:fd:e0:e1:40:1f:1c:40:11:b2:0e: 05:67:a6:1b:ef:ca:db:c7:a4:bb:cb:87:d1:a8:d4: 29:a5:36:1b:18:af:ad:78:59:d2:f8:2e:99:0a:8a: de:fe:72:e2:dc:e5:85:73:17:a4:47:b3:4a:85:a0: 20:b1:bf:fa:d9:f3:de:b0:6d:7e:9b:62:ad:15:52: f7:84:d8:c0:44:43:75:4f:68:20:46:90:db:21:8d: 34:a1:87:94:fc:c5:40:f7:3f:d6:62:52:fe:77:d8: bd:6b:f7:fc:45:23:e2:55:7c:e2:52:a3:b4:c0:0e: 59:0c:84:9b:1c:8d:45:a7:e5:28:7b:76:31:57:80: 57:ed:20:5a:c5:cc:cc:16:30:65:97:93:90:a0:ca: b9:3a:98:1b:de:e1:c9:19:bb:ce:dd:f4:6b:c9:d0: 32:b2:12:11:2e:25:87:8c:60:25:04:65:a2:8c:a7: f0:b3:72:58:7a:99:35:1b:39:c7:13:20:da:87:1b: bd:cc:d2:59:5c:40:24:36:56:7d:fe:ad:a1:b8:e7: 13:26:da:01:c1:e9:ea:6c:1c:42:0e:09:0f:a1:f2: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7A:E6:AC:66:F4:1F:D3:90:58:C4:F8:D9:AE:52:EC:CF:B2:16:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d6ee0f5-08dd-3e5e-9373-5c408ccffd78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:91:7f:ee:1f:28:a0:6e:22:4d:6a:e0:46:2a:f6:5a:3f:91: 98:7f:6e:3d:ea:85:6a:5e:36:88:f6:78:ac:14:95:67:b1:63: 70:b8:e3:b4:3a:1d:6a:4c:27:25:bc:8b:3c:02:95:96:7d:39: f4:48:98:46:6c:ee:c3:20:fc:30:7d:f8:fd:b6:e1:59:fb:0f: 41:6a:32:98:86:99:5c:79:53:5a:67:15:30:ee:89:07:ca:7c: 92:03:cc:93:15:ca:03:03:ca:bc:ca:b1:f4:e1:99:09:ca:82: 56:c6:3e:3c:cc:3e:ff:be:ee:a2:65:79:95:c2:5b:0e:0a:01: 51:fd:a9:d9:7f:ab:dd:b0:12:a7:8e:c4:c6:83:a0:ea:f1:69: 58:59:9a:2c:a4:cd:41:45:96:bf:fa:8d:c3:a9:55:02:56:05: d4:8b:47:06:62:d0:69:12:02:84:38:e6:1d:36:a5:35:c8:23: ba:71:12:ef:48:ed:1f:1f:57:3c:f5:46:b7:d8:f6:3c:d2:b5: 4d:a9:bf:8c:3e:ac:cd:97:03:26:86:8c:74:10:41:32:d5:a1: 83:90:83:b3:c9:e2:f1:c8:f5:af:b2:49:e0:ec:6d:13:42:01: ca:e9:f3:33:d9:24:2e:49:d2:e2:bf:49:6e:87:8b:f4:e8:d0: 29:1c:d3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkB470RNFp7mU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTNlNGU1NTctYmM5My00MzI1LWEwYjgtZDBhZDU4NzdkZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsLh8Lmopmj/KFTEsFOc0cxhWRI9VXRxDXGW c75XsJfUBf3g4UAfHEARsg4FZ6Yb78rbx6S7y4fRqNQppTYbGK+teFnS+C6ZCore /nLi3OWFcxekR7NKhaAgsb/62fPesG1+m2KtFVL3hNjAREN1T2ggRpDbIY00oYeU /MVA9z/WYlL+d9i9a/f8RSPiVXziUqO0wA5ZDISbHI1Fp+Uoe3YxV4BX7SBaxczM FjBll5OQoMq5Opgb3uHJGbvO3fRrydAyshIRLiWHjGAlBGWijKfws3JYepk1GznH EyDahxu9zNJZXEAkNlZ9/q2huOcTJtoBwenqbBxCDgkPofJZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp65qxm9B/TkFjE+NmuUuzPshYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmQ2ZWUwZjUtMDhkZC0z ZTVlLTkzNzMtNWM0MDhjY2ZmZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmRf+4fKKBuIk1q4EYq9lo/kZh/bj3qhWpeNoj2eKwUlWexY3C447Q6 HWpMJyW8izwClZZ9OfRImEZs7sMg/DB9+P224Vn7D0FqMpiGmVx5U1pnFTDuiQfK fJIDzJMVygMDyrzKsfThmQnKglbGPjzMPv++7qJleZXCWw4KAVH9qdl/q92wEqeO xMaDoOrxaVhZmiykzUFFlr/6jcOpVQJWBdSLRwZi0GkSAoQ45h02pTXII7pxEu9I 7R8fVzz1RrfY9jzStU2pv4w+rM2XAyaGjHQQQTLVoYOQg7PJ4vHI9a+ySeDsbRNC Acrp8zPZJC5J0uK/SW6Hi/To0Ckc0/w= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:24 2025 by rpki-client