$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8caef340-64eb-3082-8408-bc3f2ea2bad1.roa File: 8caef340-64eb-3082-8408-bc3f2ea2bad1.roa (raw, json) Hash identifier: Yc3QXhwbkJ8aNzFWUTtfP65kvBcSyakO7SyYLTDxONU= Subject key identifier: 4C:67:9B:E3:91:37:A9:E2:2D:B6:D5:78:05:F0:58:CD:4B:A1:87:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363AE5918E2ACA37602480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8caef340-64eb-3082-8408-bc3f2ea2bad1.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.13.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3a:e5:91:8e:2a:ca:37:60:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ba0f6ad1-5094-47c8-be5d-e814cf300a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:43:ad:bb:21:ad:ae:b6:8f:ce:e2:2f:1c: bc:15:87:d2:90:6d:b8:df:6f:ca:d0:49:37:95:01: cf:9a:80:5d:83:66:a0:9f:db:b3:c8:3b:de:1d:ac: 15:a3:d7:a8:69:d8:25:1e:6e:f6:a9:55:e4:02:7e: 44:5e:d5:63:ce:6a:30:14:2f:18:26:06:2c:7d:6c: df:f2:da:3f:f4:87:04:5a:60:3d:fd:f2:5d:5f:38: 77:70:d5:df:70:2c:7e:bb:aa:7c:b4:7c:cb:3c:65: 4b:3a:f8:18:97:f8:3e:d2:c4:ed:d3:82:24:16:0a: fd:35:6b:8d:9b:99:07:8b:6a:5b:ed:a0:99:63:b9: d2:9d:2b:ae:a7:ae:55:60:e8:41:bf:17:37:bd:55: 29:7d:69:a1:a4:ea:71:ef:36:79:00:65:96:ce:de: bc:b6:a2:b7:b5:9b:7a:f2:cf:98:fc:2e:ea:c3:98: 54:13:a0:30:ab:16:00:69:2a:da:dd:c0:fc:28:fd: b9:15:e0:59:a4:a7:9f:52:07:44:bd:65:82:10:fa: ae:c6:00:4d:06:b5:15:0d:d5:17:bc:84:e0:6b:f9: 7e:b8:5a:4a:ad:6c:40:56:48:a4:63:c5:24:5f:71: 22:c0:f0:5a:34:63:76:10:62:7f:41:b7:c7:ca:b1: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:9B:E3:91:37:A9:E2:2D:B6:D5:78:05:F0:58:CD:4B:A1:87:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8caef340-64eb-3082-8408-bc3f2ea2bad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.13.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:cd:47:d1:b1:f8:9b:94:38:1d:a5:d6:08:70:64:f7:00:0a: 64:8e:ee:2a:2a:b4:61:c7:e5:3f:88:62:06:7b:62:d1:0a:bc: 05:03:5d:c7:b8:82:51:b4:5c:75:c2:0d:fa:1a:9c:43:fb:d9: 55:41:d4:1f:3d:f8:d3:7e:82:ee:47:48:9c:ea:68:5d:a2:d1: 5f:dc:71:ce:27:ae:62:e9:fc:cc:67:b3:05:64:bb:11:7a:07: 4b:d7:83:61:e0:c3:27:8e:d9:30:16:f6:79:83:4d:1b:6f:86: 8e:3d:41:59:4c:67:68:8b:7f:b2:15:41:a9:a7:f9:6a:4a:0c: 2a:4f:ac:ec:ee:b3:ab:7a:fa:f1:74:04:61:b5:86:bf:dd:9a: 43:f5:f5:ea:5e:51:89:9a:bd:57:88:6d:10:85:5f:37:a8:b8: 77:f1:ad:c8:ce:44:01:5d:a6:71:c9:51:ea:74:ec:b2:5a:52: 72:42:63:88:09:fe:92:fa:36:0b:d4:55:df:9c:11:3c:99:3b: ff:86:3d:2e:c0:a5:b1:2c:1c:bf:b5:42:ed:6b:e9:e7:3b:01: b4:d4:8e:4e:b3:6b:5a:f4:e9:06:3d:54:b7:14:88:6a:61:7c: aa:04:cd:d5:d9:74:06:a8:20:df:12:fd:43:59:8f:f6:8d:c5: 6a:54:67:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjrlkY4qyjdgJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmEwZjZhZDEtNTA5NC00N2M4LWJlNWQtZTgxNGNmMzAwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYdDrbshra62j87iLxy8FYfSkG2432/K0Ek3 lQHPmoBdg2agn9uzyDveHawVo9eoadglHm72qVXkAn5EXtVjzmowFC8YJgYsfWzf 8to/9IcEWmA9/fJdXzh3cNXfcCx+u6p8tHzLPGVLOvgYl/g+0sTt04IkFgr9NWuN m5kHi2pb7aCZY7nSnSuup65VYOhBvxc3vVUpfWmhpOpx7zZ5AGWWzt68tqK3tZt6 8s+Y/C7qw5hUE6AwqxYAaSra3cD8KP25FeBZpKefUgdEvWWCEPquxgBNBrUVDdUX vITga/l+uFpKrWxAVkikY8UkX3EiwPBaNGN2EGJ/QbfHyrG/SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExnm+ORN6niLbbVeAXwWM1LoYf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNhZWYzNDAtNjRlYi0z MDgyLTg0MDgtYmMzZjJlYTJiYWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXNR9Gx+JuUOB2l1ghwZPcACmSO7ioqtGHH5T+IYgZ7YtEKvAUDXce4 glG0XHXCDfoanEP72VVB1B89+NN+gu5HSJzqaF2i0V/ccc4nrmLp/MxnswVkuxF6 B0vXg2HgwyeO2TAW9nmDTRtvho49QVlMZ2iLf7IVQamn+WpKDCpPrOzus6t6+vF0 BGG1hr/dmkP19epeUYmavVeIbRCFXzeouHfxrcjORAFdpnHJUep07LJaUnJCY4gJ /pL6NgvUVd+cETyZO/+GPS7ApbEsHL+1Qu1r6ec7AbTUjk6za1r06QY9VLcUiGph fKoEzdXZdAaoIN8S/UNZj/aNxWpUZ9A= -----END CERTIFICATE-----Generated at Sat Aug 9 01:15:47 2025 by rpki-client