$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c909d07-15fa-38d8-a0e3-a4f3f165a702.roa File: 9c909d07-15fa-38d8-a0e3-a4f3f165a702.roa (raw, json) Hash identifier: 18R5Knl1Mksi8/zJYiq7sQxKBt8OTCyQooNsauy58MA= Subject key identifier: 30:CF:10:4E:E2:13:08:B1:0F:FF:EE:16:14:F8:A8:7F:C9:EB:E0:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360F900000E5B4A10894E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c909d07-15fa-38d8-a0e3-a4f3f165a702.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0f:90:00:00:e5:b4:a1:08:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=707ab587-f011-469f-91b7-da83de012097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d7:06:a5:55:b2:29:d7:cd:35:49:6c:dd:26: 1a:62:a7:21:89:82:e4:11:1c:4d:36:c3:1d:c8:56: a2:0f:fc:3b:b9:1c:c2:ec:63:a7:f0:ee:96:16:60: 90:4d:b3:1d:24:44:29:54:ea:4f:a1:22:8e:07:e6: 9e:a2:55:4f:a0:57:d0:d5:ff:5c:e0:c4:3c:4e:a2: 62:00:43:e7:bb:51:f6:3b:45:42:76:cf:ad:af:e6: d7:02:f6:2d:02:e9:23:5c:4e:14:a3:f1:c1:a7:3c: d3:88:0e:bf:71:8c:0d:98:e8:d9:5e:10:7a:ec:41: 95:1b:6a:4a:d9:5a:eb:e7:89:4a:77:52:67:44:10: 9e:d7:44:d7:be:a6:49:72:a1:d8:57:1e:bd:a3:b0: 84:ec:87:32:71:2a:9a:6b:ff:2f:e2:c9:a5:32:0a: 2b:b1:82:96:bb:14:1a:0a:44:33:18:a6:5f:93:61: af:48:08:7e:35:82:14:d3:ea:64:b9:fd:64:fd:a0: 68:e8:99:01:e3:9f:35:9c:f1:af:06:64:3f:92:4c: 33:5a:c3:f5:19:fa:7b:49:26:3f:c4:61:f5:67:7b: 3b:3a:39:cd:2b:6d:c8:93:17:5b:20:c8:08:4a:aa: 3f:14:24:8d:ee:27:a9:99:5e:c9:67:9f:35:ea:ea: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CF:10:4E:E2:13:08:B1:0F:FF:EE:16:14:F8:A8:7F:C9:EB:E0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c909d07-15fa-38d8-a0e3-a4f3f165a702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:86:71:9b:23:d4:a8:70:69:a4:a4:9f:d8:3a:6b:3d:1e:25: 61:49:d3:75:59:8f:4e:58:99:5f:c0:79:49:f3:76:e9:9c:d3: 1a:13:47:b1:72:8e:93:08:33:93:d6:53:9d:99:d2:e2:e2:36: 41:60:18:15:61:d9:91:64:15:c3:ed:0f:bd:04:ef:77:2c:1b: e6:8d:b2:22:f2:a0:31:00:80:09:ba:2e:be:68:91:cd:4f:3b: b4:4f:8b:b3:e3:c5:1e:ce:58:e3:f1:ac:10:95:7d:dd:40:87: a2:c4:0f:bb:c5:b1:a1:32:42:78:cd:84:fa:68:eb:4d:28:b5: 65:5c:cc:f0:63:0b:fa:8f:a0:24:f9:59:44:09:77:56:c6:5a: 93:fb:f7:81:73:2b:d0:ab:1e:50:4d:bd:6a:07:02:d0:4a:cf: e8:b5:7a:e6:21:59:19:55:a8:62:a1:54:e9:1f:b6:5a:85:bb: e6:fe:92:a3:3b:13:74:87:7f:9e:c1:92:e8:bf:cb:0c:fb:c1: 04:d3:66:52:b4:f6:ab:c9:62:51:df:b1:24:92:2d:01:05:4e: 19:1c:ed:8c:cf:b7:3b:37:35:23:94:2d:d6:33:fb:90:7c:49: 0f:0c:b4:16:3f:b3:bf:38:c4:57:3f:58:2b:ec:7a:e6:35:ce: 7d:7f:28:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNg+QAADltKEIlOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzA3YWI1ODctZjAxMS00NjlmLTkxYjctZGE4M2RlMDEyMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tcGpVWyKdfNNUls3SYaYqchiYLkERxNNsMd yFaiD/w7uRzC7GOn8O6WFmCQTbMdJEQpVOpPoSKOB+aeolVPoFfQ1f9c4MQ8TqJi AEPnu1H2O0VCds+tr+bXAvYtAukjXE4Uo/HBpzzTiA6/cYwNmOjZXhB67EGVG2pK 2Vrr54lKd1JnRBCe10TXvqZJcqHYVx69o7CE7IcycSqaa/8v4smlMgorsYKWuxQa CkQzGKZfk2GvSAh+NYIU0+pkuf1k/aBo6JkB4581nPGvBmQ/kkwzWsP1Gfp7SSY/ xGH1Z3s7OjnNK23IkxdbIMgISqo/FCSN7iepmV7JZ5816up/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDPEE7iEwixD//uFhT4qH/J6+ArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWM5MDlkMDctMTVmYS0z OGQ4LWEwZTMtYTRmM2YxNjVhNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAkqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiGcZsj1KhwaaSkn9g6az0eJWFJ03VZj05YmV/AeUnzdumc0xoTR7Fy jpMIM5PWU52Z0uLiNkFgGBVh2ZFkFcPtD70E73csG+aNsiLyoDEAgAm6Lr5okc1P O7RPi7PjxR7OWOPxrBCVfd1Ah6LED7vFsaEyQnjNhPpo600otWVczPBjC/qPoCT5 WUQJd1bGWpP794FzK9CrHlBNvWoHAtBKz+i1euYhWRlVqGKhVOkftlqFu+b+kqM7 E3SHf57Bkui/ywz7wQTTZlK09qvJYlHfsSSSLQEFThkc7YzPtzs3NSOULdYz+5B8 SQ8MtBY/s784xFc/WCvseuY1zn1/KEg= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:22 2025 by rpki-client