$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801b414c-9c77-3be4-be94-2f1bfa040664.roa File: 801b414c-9c77-3be4-be94-2f1bfa040664.roa (raw, json) Hash identifier: BeLcvnvGgZL9Sr/a8iyOl2myhkdZkyWZELbvXdVH9l8= Subject key identifier: 02:D5:2D:27:BA:BA:C2:FB:02:B8:32:DD:22:C5:21:7E:98:59:74:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365CE2D52C19A04E536880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801b414c-9c77-3be4-be94-2f1bfa040664.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.8.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5c:e2:d5:2c:19:a0:4e:53:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f49799ed-a202-4a77-a804-c070669115a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:3b:92:fa:fd:17:80:05:c9:f4:ad:99:c7: f1:12:c5:05:09:e3:f1:3e:b5:00:9c:ac:76:69:83: 75:1c:f3:0b:ef:c7:ee:ba:9b:fa:72:05:5f:ee:c1: c4:98:a6:48:78:5a:14:bd:cf:d2:90:72:de:6a:e6: f0:e4:7c:e9:e9:56:47:c6:fd:30:6b:17:3f:66:0f: 0f:ce:49:97:f1:d7:aa:91:48:41:dc:e2:6e:86:ba: 6a:2b:a0:59:d1:58:10:84:82:bf:fd:f9:88:59:e8: de:3f:31:3a:41:6d:24:74:f0:65:1f:f1:be:fa:f9: 7a:b9:b3:22:99:b1:4a:36:81:20:32:4b:d5:95:14: ef:df:66:1b:09:04:18:6e:da:2b:3e:e9:6d:ce:d8: 51:8c:ed:88:9b:08:1d:9a:1c:f0:7a:64:56:e1:eb: 20:27:ee:ce:25:a9:55:49:ff:2f:dc:78:6a:fe:16: 3c:20:61:48:a9:8e:dd:9a:26:42:bc:f7:f4:45:78: 7e:18:b1:1c:ce:27:f8:17:e7:88:f9:21:11:7e:19: c1:c9:89:df:e7:70:78:35:f5:bc:f6:a4:fb:3f:fd: 8a:23:8f:f7:4a:bd:0a:71:65:ca:e9:23:c6:b2:95: 61:25:60:ef:3e:ac:1c:04:0d:d7:b3:4e:f8:e9:aa: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:2D:27:BA:BA:C2:FB:02:B8:32:DD:22:C5:21:7E:98:59:74:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/801b414c-9c77-3be4-be94-2f1bfa040664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:16:38:fa:6a:e8:99:c4:24:b4:f6:1a:c6:bb:84:86:f3:17: 33:eb:0e:df:36:d5:50:b3:3b:a3:29:ca:21:19:f9:cb:c1:6c: a3:31:bb:2c:58:e6:f7:22:c7:c7:46:4a:99:fd:48:e5:52:23: c2:a1:19:c1:1e:d8:8b:80:c2:23:92:c8:d8:32:19:dc:4a:b9: 34:de:24:93:e5:9c:f6:5d:7c:c7:ef:be:0e:8f:74:47:44:f6: 47:96:95:e4:35:70:95:c2:2f:87:00:87:26:3f:f5:e9:e1:b1: 9c:e7:c9:af:60:9c:5b:27:c0:41:ca:4a:e5:7f:5f:e2:c6:86: 10:66:b8:79:81:08:b7:82:24:5d:44:df:ac:68:f7:ac:8b:45: b8:ab:b3:1b:c8:7d:29:00:04:12:9e:69:3f:60:29:22:f6:cd: 2f:60:97:a5:64:f4:a4:af:61:05:98:15:fb:ac:ee:ff:ee:b8: d2:99:34:f1:1b:9e:4a:aa:f1:1c:5f:2c:47:87:8b:01:2b:e1: a7:1a:17:19:ec:d5:35:41:33:00:15:b5:06:59:d8:49:8d:ae: be:f8:4e:d6:f8:d7:f1:76:19:b4:21:f1:f3:50:a9:a9:65:83: 77:65:67:70:47:71:fe:7b:13:96:f4:99:2c:a7:3c:0b:37:2e: 5f:08:f2:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlzi1SwZoE5TaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjQ5Nzk5ZWQtYTIwMi00YTc3LWE4MDQtYzA3MDY2OTExNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6o7kvr9F4AFyfStmcfxEsUFCePxPrUAnKx2 aYN1HPML78fuupv6cgVf7sHEmKZIeFoUvc/SkHLeaubw5Hzp6VZHxv0waxc/Zg8P zkmX8deqkUhB3OJuhrpqK6BZ0VgQhIK//fmIWejePzE6QW0kdPBlH/G++vl6ubMi mbFKNoEgMkvVlRTv32YbCQQYbtorPultzthRjO2ImwgdmhzwemRW4esgJ+7OJalV Sf8v3Hhq/hY8IGFIqY7dmiZCvPf0RXh+GLEczif4F+eI+SERfhnByYnf53B4NfW8 9qT7P/2KI4/3Sr0KcWXK6SPGspVhJWDvPqwcBA3Xs0746aq81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALVLSe6usL7Argy3SLFIX6YWXT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODAxYjQxNGMtOWM3Ny0z YmU0LWJlOTQtMmYxYmZhMDQwNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYWOPpq6JnEJLT2Gsa7hIbzFzPrDt821VCzO6MpyiEZ+cvBbKMxuyxY 5vcix8dGSpn9SOVSI8KhGcEe2IuAwiOSyNgyGdxKuTTeJJPlnPZdfMfvvg6PdEdE 9keWleQ1cJXCL4cAhyY/9enhsZznya9gnFsnwEHKSuV/X+LGhhBmuHmBCLeCJF1E 36xo96yLRbirsxvIfSkABBKeaT9gKSL2zS9gl6Vk9KSvYQWYFfus7v/uuNKZNPEb nkqq8RxfLEeHiwEr4acaFxns1TVBMwAVtQZZ2EmNrr74Ttb41/F2GbQh8fNQqall g3dlZ3BHcf57E5b0mSynPAs3Ll8I8pI= -----END CERTIFICATE-----Generated at Thu Aug 7 05:09:33 2025 by rpki-client