$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2831432-1063-3988-adea-7355b4053604.roa File: a2831432-1063-3988-adea-7355b4053604.roa (raw, json) Hash identifier: 7DZB3lbPkQj7eIw6sI9jCKwwsfbQSsDdKTvEEAMysbk= Subject key identifier: 19:1C:D4:DF:8F:F4:B4:1A:94:FE:47:54:AD:7C:CA:29:DB:2C:7C:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636577A52BE8C275C5BCD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2831432-1063-3988-adea-7355b4053604.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:57:7a:52:be:8c:27:5c:5b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f29d720b-0456-46ed-b47b-405609cd6532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:23:57:da:da:ad:11:cf:9a:d2:80:43:e7: 3c:b8:51:5a:08:19:ee:c5:57:f0:fa:f3:99:c2:4e: d8:38:71:48:33:0f:2d:fb:00:6e:a6:b5:dc:2b:bf: 8d:cf:a4:ce:13:2b:bb:95:3a:16:a2:a4:3c:11:60: 26:c8:a5:c5:a8:17:ee:f0:95:f2:91:d5:cd:71:68: b7:2c:56:44:5e:6e:5f:fd:e7:51:9a:84:3d:80:75: 6f:7f:94:90:5c:76:a1:63:83:d1:6b:d1:f3:c8:13: 12:9e:6d:04:aa:cd:40:c7:1b:8d:ce:10:0c:39:96: 6f:fc:d9:31:8e:47:84:7f:ab:92:f5:a7:db:48:3e: 1a:f5:e0:66:1f:9e:dd:ad:46:cb:90:c5:d7:16:10: 5d:f6:ea:f2:7d:58:ff:0e:9e:7c:1e:0f:94:05:6a: 52:10:9a:5f:b6:53:4f:5a:27:23:2f:f1:10:68:14: 6c:bc:59:a4:1b:f8:6e:b2:1b:a3:ee:5f:a3:08:70: 79:75:03:e3:64:be:15:44:15:e0:7b:55:00:db:15: c8:aa:58:18:2c:aa:3b:c9:b7:f6:3e:93:ef:ca:eb: 04:92:c3:e5:e1:ee:a4:79:8b:16:4e:5f:6b:75:23: 31:6a:df:0c:87:46:cc:83:ad:4c:cb:d5:4b:06:13: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:D4:DF:8F:F4:B4:1A:94:FE:47:54:AD:7C:CA:29:DB:2C:7C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2831432-1063-3988-adea-7355b4053604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:35:99:9a:0c:8b:c0:b9:12:08:2b:c4:99:7a:f0:24:6b:af: c5:a8:41:bc:82:95:9d:e7:f4:92:a5:0c:58:e9:bf:9c:f1:6c: e3:31:e7:65:db:64:36:91:30:46:99:0f:47:01:0f:4f:fb:aa: 4a:0d:53:f6:74:53:00:c8:a9:3f:af:10:f4:1f:b8:9c:6d:c5: 60:c3:53:13:20:10:98:df:be:52:88:53:d3:a6:82:6e:04:a4: 44:f3:55:7e:ec:fa:84:6a:37:38:64:9c:f5:b2:05:11:93:94: ce:24:c5:af:3a:6e:45:f4:49:44:53:c2:1f:92:e2:e0:81:ca: 9d:83:f4:12:93:76:0a:e3:df:d3:a9:1b:7a:00:fc:a0:8b:b6: 9c:7b:f1:1c:0e:6a:7c:a4:89:b5:c4:c0:50:7b:c8:a1:fd:2d: aa:6a:35:3b:1c:ba:61:65:cf:8d:b6:3d:43:27:33:90:71:ee: bf:25:37:01:cf:af:65:9b:7d:ee:fb:6a:ca:59:f5:a0:93:f3: 4e:c0:7c:66:71:08:90:a8:8a:ba:1f:8f:78:93:95:a6:19:b7: 38:73:67:39:73:99:fb:ce:de:20:5f:9c:c3:4b:f9:df:03:7e: 8e:18:c5:4c:6b:3f:26:fa:85:1c:b4:46:dc:61:d8:20:1b:2a: f1:42:02:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNld6Ur6MJ1xbzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjI5ZDcyMGItMDQ1Ni00NmVkLWI0N2ItNDA1NjA5Y2Q2NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YojV9rarRHPmtKAQ+c8uFFaCBnuxVfw+vOZ wk7YOHFIMw8t+wBuprXcK7+Nz6TOEyu7lToWoqQ8EWAmyKXFqBfu8JXykdXNcWi3 LFZEXm5f/edRmoQ9gHVvf5SQXHahY4PRa9HzyBMSnm0Eqs1AxxuNzhAMOZZv/Nkx jkeEf6uS9afbSD4a9eBmH57drUbLkMXXFhBd9uryfVj/Dp58Hg+UBWpSEJpftlNP WicjL/EQaBRsvFmkG/hushuj7l+jCHB5dQPjZL4VRBXge1UA2xXIqlgYLKo7ybf2 PpPvyusEksPl4e6keYsWTl9rdSMxat8Mh0bMg61My9VLBhMKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkc1N+P9LQalP5HVK18yinbLHz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTI4MzE0MzItMTA2My0z OTg4LWFkZWEtNzM1NWI0MDUzNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAcjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo1mZoMi8C5EggrxJl68CRrr8WoQbyClZ3n9JKlDFjpv5zxbOMx52Xb ZDaRMEaZD0cBD0/7qkoNU/Z0UwDIqT+vEPQfuJxtxWDDUxMgEJjfvlKIU9Omgm4E pETzVX7s+oRqNzhknPWyBRGTlM4kxa86bkX0SURTwh+S4uCByp2D9BKTdgrj39Op G3oA/KCLtpx78RwOanykibXEwFB7yKH9LapqNTscumFlz422PUMnM5Bx7r8lNwHP r2Wbfe77aspZ9aCT807AfGZxCJCoirofj3iTlaYZtzhzZzlzmfvO3iBfnMNL+d8D fo4YxUxrPyb6hRy0Rtxh2CAbKvFCAsc= -----END CERTIFICATE-----Generated at Sun Aug 10 04:52:43 2025 by rpki-client