$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9466b1d1-eb54-393d-93f4-11102757723d.roa File: 9466b1d1-eb54-393d-93f4-11102757723d.roa (raw, json) Hash identifier: nkumAitETYZkUh0YrSU2cmMYGzqu66As7VHmZdHQbUk= Subject key identifier: 9C:AD:AF:5C:AC:B3:BC:7A:E3:34:5B:A5:E2:FE:37:98:BA:AB:D1:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963634DDAD62482A47055D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9466b1d1-eb54-393d-93f4-11102757723d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:34:dd:ad:62:48:2a:47:05:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=63301c83-6682-4dd4-86d9-5162581deae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:2f:b9:29:02:84:94:13:86:5e:1b:25:be: 22:89:bc:c5:d9:e9:53:9f:17:20:48:8b:38:98:36: cd:d4:44:97:1a:9b:4f:65:c5:5e:ec:7f:89:90:a1: e5:c7:c8:c7:91:77:a6:51:6a:94:e5:41:5b:37:78: 18:66:92:d7:10:98:09:6f:75:60:c2:f2:f0:56:95: f8:7b:48:16:6d:e8:57:15:34:bd:4f:f2:7a:14:25: be:b5:9c:4a:ca:f4:91:53:32:b8:27:03:3b:23:ff: a9:46:33:51:5f:49:c7:67:9e:96:dd:91:d7:a0:3d: cf:ca:ae:a7:d5:1c:79:bf:f9:d6:bb:7f:5b:bd:bc: 94:45:65:f7:43:56:bf:d6:d7:c5:6b:c6:64:be:a3: c7:67:ef:08:fe:fc:be:76:df:e3:7c:25:bc:01:53: 58:f4:fd:fa:80:da:b5:71:55:b8:c9:24:13:e7:bc: 07:13:e0:d2:47:5d:af:c8:d7:a9:dc:db:4f:10:cf: 04:58:c6:42:38:92:63:f3:5f:02:79:cc:12:ef:5a: 63:06:3b:f4:01:64:4d:52:2e:4f:2f:c0:80:a8:30: ac:75:d6:2a:f6:98:68:82:1f:14:03:44:58:bd:71: 19:14:ea:f3:56:73:c9:38:20:e6:9b:d4:ac:62:ba: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AD:AF:5C:AC:B3:BC:7A:E3:34:5B:A5:E2:FE:37:98:BA:AB:D1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9466b1d1-eb54-393d-93f4-11102757723d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:55:c5:d8:d3:c5:b5:c8:c0:d4:c8:0e:c5:c9:1a:68:3c:53: 3a:57:ea:b5:15:12:a4:0f:80:1a:0b:33:8a:65:77:c0:f6:7f: 4d:4c:ff:52:2c:db:cc:a3:b9:64:b9:64:3d:7c:70:30:f1:cb: 04:0a:81:87:22:39:70:d5:cf:ae:cd:b4:26:ff:25:b5:58:41: 3a:23:91:2f:2a:95:60:01:eb:21:c3:44:75:07:17:36:75:52: 9b:54:62:46:4a:22:9b:28:13:80:1a:2f:4d:18:51:31:6b:71: f9:5b:52:45:b6:6f:8b:d7:5a:c9:65:d0:50:2b:1d:ca:d4:f2: b0:3b:58:d0:60:14:b7:be:e1:1f:e0:c5:ab:00:b9:3d:a9:a5: 4c:2c:9f:ec:7a:a7:9a:1d:24:b9:45:7a:7e:ba:bf:e0:84:f0: 4a:a9:09:54:2c:d8:a2:41:e0:6b:f7:56:22:f3:bd:49:cc:c5: d4:12:b7:0d:1d:9b:ee:9b:b4:6b:12:51:a3:ef:0f:35:2e:ea: 03:e9:d9:93:b3:24:d3:a9:41:f3:02:73:a1:06:92:d9:ef:99: d7:f7:b9:96:11:51:cd:27:07:5e:5d:30:a5:e1:a2:9f:21:00: 97:53:d7:e8:78:7b:94:10:59:d9:28:8b:d3:c5:94:8b:74:c9: 5a:07:b9:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjTdrWJIKkcFXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NjMzMDFjODMtNjY4Mi00ZGQ0LTg2ZDktNTE2MjU4MWRlYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vsvuSkChJQThl4bJb4iibzF2elTnxcgSIs4 mDbN1ESXGptPZcVe7H+JkKHlx8jHkXemUWqU5UFbN3gYZpLXEJgJb3VgwvLwVpX4 e0gWbehXFTS9T/J6FCW+tZxKyvSRUzK4JwM7I/+pRjNRX0nHZ56W3ZHXoD3Pyq6n 1Rx5v/nWu39bvbyURWX3Q1a/1tfFa8ZkvqPHZ+8I/vy+dt/jfCW8AVNY9P36gNq1 cVW4ySQT57wHE+DSR12vyNep3NtPEM8EWMZCOJJj818CecwS71pjBjv0AWRNUi5P L8CAqDCsddYq9phogh8UA0RYvXEZFOrzVnPJOCDmm9SsYrpfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJytr1yss7x64zRbpeL+N5i6q9EjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ2NmIxZDEtZWI1NC0z OTNkLTkzZjQtMTExMDI3NTc3MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZVxdjTxbXIwNTIDsXJGmg8UzpX6rUVEqQPgBoLM4pld8D2f01M/1Is 28yjuWS5ZD18cDDxywQKgYciOXDVz67NtCb/JbVYQTojkS8qlWAB6yHDRHUHFzZ1 UptUYkZKIpsoE4AaL00YUTFrcflbUkW2b4vXWsll0FArHcrU8rA7WNBgFLe+4R/g xasAuT2ppUwsn+x6p5odJLlFen66v+CE8EqpCVQs2KJB4Gv3ViLzvUnMxdQStw0d m+6btGsSUaPvDzUu6gPp2ZOzJNOpQfMCc6EGktnvmdf3uZYRUc0nB15dMKXhop8h AJdT1+h4e5QQWdkoi9PFlIt0yVoHueo= -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:09 2025 by rpki-client