$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1fb521-1bcd-35f9-9545-cf8f1618f244.roa File: 8a1fb521-1bcd-35f9-9545-cf8f1618f244.roa (raw, json) Hash identifier: yUEUeIbotZhYIhVMK8T2OvqLnE/1M4UENrVtBGYGUHw= Subject key identifier: CD:43:B6:BC:F4:E1:BC:A8:3F:CF:6A:42:88:78:32:FB:DE:A6:82:E3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365A8E00B78BFB716A4680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1fb521-1bcd-35f9-9545-cf8f1618f244.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5a:8e:00:b7:8b:fb:71:6a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a0e971d5-90d9-4a03-9367-880c53e8ec8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6c:17:a2:95:0b:3e:7f:f6:16:a9:99:42:eb: ce:7b:8b:4d:7c:c3:5d:d7:5b:ad:bf:4d:6b:32:21: d0:29:aa:7e:89:d6:6e:63:fc:99:24:23:0f:d0:a6: e2:5c:eb:9f:f5:83:0f:da:80:d0:a9:de:57:46:96: b8:a7:49:7b:fc:ae:aa:c3:5e:4b:9e:cd:bb:ee:c9: be:cc:92:fe:75:0c:2b:95:bc:62:04:fe:84:cc:cb: 46:c2:a4:4a:0e:a1:18:75:b9:67:3c:7f:78:38:fb: 15:21:c1:c3:20:8b:ea:be:4b:17:e1:aa:2a:f1:aa: 68:d8:7a:29:9d:87:a3:ad:ba:4c:00:1b:43:ef:b1: e8:be:23:eb:96:67:2a:af:3e:cd:05:ee:f2:5e:22: b5:e1:ad:d7:a3:19:a0:b9:fb:16:30:ed:41:c2:e2: 59:a7:0a:58:73:4c:26:88:e8:8b:80:d9:92:ba:8c: 4e:d9:2c:0c:ae:77:0b:cc:85:ea:93:ee:02:3e:b1: 6e:3b:4f:52:ea:9a:84:2a:2b:6f:d4:3c:1f:2d:ef: 93:6d:4a:d8:99:d5:99:da:fc:d6:cc:73:3d:07:51: 86:65:f1:e2:68:c2:d3:c2:a4:e8:2a:17:22:f1:3a: ba:49:b8:32:50:cf:3f:0a:5d:1b:1a:f0:13:87:11: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:43:B6:BC:F4:E1:BC:A8:3F:CF:6A:42:88:78:32:FB:DE:A6:82:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a1fb521-1bcd-35f9-9545-cf8f1618f244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d3:55:c5:8c:b6:89:58:ed:69:13:38:ff:29:a1:9a:1f:b5: 34:b9:08:3d:a7:f3:dc:af:66:75:94:82:8b:a7:75:7f:31:7d: 2e:13:2b:71:83:20:c0:a1:ee:6c:bb:93:b1:3c:c8:d4:a8:8a: d0:9e:cf:64:8c:15:f1:0b:28:96:c3:08:61:d9:20:76:61:ac: 8c:14:6d:5b:8d:33:41:64:a3:cf:4f:f8:53:00:67:e0:be:c7: f2:42:19:4d:fe:5c:91:18:40:f4:16:9b:53:4e:ab:75:82:b9: 51:82:cf:1a:f8:f7:ee:62:30:53:ff:b8:e2:3d:66:17:00:06: ce:ba:4d:9f:a7:f0:82:07:da:58:a6:e3:82:e6:2c:be:62:b9: e8:b5:b4:e3:50:9c:c0:37:78:2a:f3:8d:b5:0f:ac:0c:4f:90: 75:79:0e:19:ae:25:56:9a:e5:86:88:94:1d:3b:3e:96:09:e2: ed:56:ea:9e:93:2b:85:d1:d6:72:bd:13:78:38:79:d5:b6:a6: 87:c5:aa:41:ba:6f:62:fb:95:39:ae:ca:0f:44:c2:00:00:37: 5a:25:4c:96:ab:eb:ac:bd:7d:90:2f:00:da:5b:28:cb:f2:ab: 02:cf:a1:76:c6:a7:6e:02:27:1c:4e:88:c1:94:96:2d:05:c5: 09:57:52:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlqOALeL+3FqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTBlOTcxZDUtOTBkOS00YTAzLTkzNjctODgwYzUzZThlYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWwXopULPn/2FqmZQuvOe4tNfMNd11utv01r MiHQKap+idZuY/yZJCMP0KbiXOuf9YMP2oDQqd5XRpa4p0l7/K6qw15Lns277sm+ zJL+dQwrlbxiBP6EzMtGwqRKDqEYdblnPH94OPsVIcHDIIvqvksX4aoq8apo2Hop nYejrbpMABtD77HoviPrlmcqrz7NBe7yXiK14a3XoxmgufsWMO1BwuJZpwpYc0wm iOiLgNmSuoxO2SwMrncLzIXqk+4CPrFuO09S6pqEKitv1DwfLe+TbUrYmdWZ2vzW zHM9B1GGZfHiaMLTwqToKhci8Tq6SbgyUM8/Cl0bGvAThxGt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1Dtrz04byoP89qQoh4MvvepoLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGExZmI1MjEtMWJjZC0z NWY5LTk1NDUtY2Y4ZjE2MThmMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjTVcWMtolY7WkTOP8poZoftTS5CD2n89yvZnWUgoundX8xfS4TK3GD IMCh7my7k7E8yNSoitCez2SMFfELKJbDCGHZIHZhrIwUbVuNM0Fko89P+FMAZ+C+ x/JCGU3+XJEYQPQWm1NOq3WCuVGCzxr49+5iMFP/uOI9ZhcABs66TZ+n8IIH2lim 44LmLL5iuei1tONQnMA3eCrzjbUPrAxPkHV5DhmuJVaa5YaIlB07PpYJ4u1W6p6T K4XR1nK9E3g4edW2pofFqkG6b2L7lTmuyg9EwgAAN1olTJar66y9fZAvANpbKMvy qwLPoXbGp24CJxxOiMGUli0FxQlXUns= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:35 2025 by rpki-client