$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/852e7b2b-81c7-328e-9d23-7a5bddd48d0a.roa File: 852e7b2b-81c7-328e-9d23-7a5bddd48d0a.roa (raw, json) Hash identifier: MJOcDjcpTsZq8RHSzoqubLByuBFGDId4vzUnpW5dtu0= Subject key identifier: D3:25:C8:90:2F:2D:7B:0C:88:62:7E:4E:E4:AA:99:96:85:15:7E:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363E145D9EE1812C2DBD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/852e7b2b-81c7-328e-9d23-7a5bddd48d0a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.225.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3e:14:5d:9e:e1:81:2c:2d:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=212d6e88-be8e-4bfb-b8ff-6cf8d500b89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bd:46:f2:c6:a4:9e:ea:af:7c:a7:4d:d4:90: 75:70:f4:b7:01:07:5c:f0:47:33:ba:32:40:29:9f: 4b:67:ab:e3:f0:32:31:a1:fb:97:1d:2f:78:e2:50: 8b:b8:0f:ac:f9:a9:4b:73:51:d7:4a:3c:25:22:01: f0:44:14:4c:60:78:e7:ea:77:27:e3:c1:85:4b:5b: 3e:77:fa:e5:f4:7c:ea:c2:5d:36:d5:7c:c5:69:2e: 80:49:0c:62:f0:d8:30:3f:64:26:9c:bb:63:5d:c4: 1a:53:7a:a8:f3:31:d9:7d:5b:44:07:ce:96:13:9c: c8:da:7e:00:9a:3a:56:46:a0:3a:49:96:91:fe:e2: 29:92:e3:2e:60:e2:80:50:23:63:0c:6b:9d:a8:2e: 16:dc:85:7e:64:be:2a:48:71:78:85:d7:d1:08:54: b0:ff:30:8a:16:7b:96:0f:e2:7a:b8:a8:a1:96:4b: e8:84:4e:3e:07:13:86:91:ea:13:16:f5:4e:d5:ce: d1:13:95:67:70:64:d2:92:d8:46:11:a6:b7:bb:23: 2c:73:6a:83:56:1b:0d:55:19:34:e3:3a:bf:7c:6d: f5:19:40:ca:14:0d:2b:cd:af:d7:ca:e9:08:a7:9e: 32:8f:b1:05:96:43:87:80:55:a0:1c:ac:28:29:b0: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:C8:90:2F:2D:7B:0C:88:62:7E:4E:E4:AA:99:96:85:15:7E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/852e7b2b-81c7-328e-9d23-7a5bddd48d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2b:ec:be:a3:e4:2c:82:c6:f4:85:5d:fb:ce:92:56:07:7b: a1:cf:61:10:52:2b:ec:55:3a:de:15:8b:8a:78:b6:be:ee:67: f7:b1:ad:1c:52:e3:49:24:2c:b7:86:1b:1c:f4:83:75:3e:32: fc:8f:ee:8a:c1:6f:74:d0:2b:eb:47:d4:72:18:4f:45:81:72: cf:11:11:5e:3b:45:ca:e4:01:25:c9:88:dc:79:ad:44:51:0c: f2:a2:41:13:3a:37:09:c7:67:ad:97:14:b2:bc:0a:0a:69:09: 81:e0:e6:93:da:e2:24:d8:6f:94:30:40:6f:97:9e:a6:3e:3c: 00:5e:ca:17:f5:b9:5e:a4:87:96:82:02:74:b7:b6:00:3c:18: 0e:05:2c:84:1d:57:96:73:41:86:b2:ce:4c:b2:5e:cf:aa:0c: 87:18:25:2f:b1:92:bb:fa:53:f0:80:28:b6:19:2f:48:56:ed: 59:65:70:83:b8:06:ae:99:df:9a:01:89:75:26:4c:ed:21:5f: 69:86:7a:3c:fa:ff:f0:ed:f3:37:89:38:7a:e0:2c:bf:b1:01: d9:ba:6b:be:5e:31:4b:d9:a9:34:f6:de:dd:71:41:4c:45:22: 38:51:1e:53:20:83:aa:f6:e6:17:b3:d6:7d:1e:6c:10:0f:9a: 3f:ea:73:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNj4UXZ7hgSwtvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjEyZDZlODgtYmU4ZS00YmZiLWI4ZmYtNmNmOGQ1MDBiODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL1G8saknuqvfKdN1JB1cPS3AQdc8EczujJA KZ9LZ6vj8DIxofuXHS944lCLuA+s+alLc1HXSjwlIgHwRBRMYHjn6ncn48GFS1s+ d/rl9Hzqwl021XzFaS6ASQxi8NgwP2QmnLtjXcQaU3qo8zHZfVtEB86WE5zI2n4A mjpWRqA6SZaR/uIpkuMuYOKAUCNjDGudqC4W3IV+ZL4qSHF4hdfRCFSw/zCKFnuW D+J6uKihlkvohE4+BxOGkeoTFvVO1c7RE5VncGTSkthGEaa3uyMsc2qDVhsNVRk0 4zq/fG31GUDKFA0rza/XyukIp54yj7EFlkOHgFWgHKwoKbAzbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMlyJAvLXsMiGJ+TuSqmZaFFX4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODUyZTdiMmItODFjNy0z MjhlLTlkMjMtN2E1YmRkZDQ4ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEr7L6j5CyCxvSFXfvOklYHe6HPYRBSK+xVOt4Vi4p4tr7uZ/exrRxS 40kkLLeGGxz0g3U+MvyP7orBb3TQK+tH1HIYT0WBcs8REV47RcrkASXJiNx5rURR DPKiQRM6NwnHZ62XFLK8CgppCYHg5pPa4iTYb5QwQG+XnqY+PABeyhf1uV6kh5aC AnS3tgA8GA4FLIQdV5ZzQYayzkyyXs+qDIcYJS+xkrv6U/CAKLYZL0hW7VllcIO4 Bq6Z35oBiXUmTO0hX2mGejz6//Dt8zeJOHrgLL+xAdm6a75eMUvZqTT23t1xQUxF IjhRHlMgg6r25hez1n0ebBAPmj/qc/w= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:58 2025 by rpki-client