$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a53a5430-21c5-3c7b-8379-2570a584a7f0.roa File: a53a5430-21c5-3c7b-8379-2570a584a7f0.roa (raw, json) Hash identifier: n1rHjUcgo5u+PR+PM0Aw/J1PB4jfLwyp5X9/0sGcN4k= Subject key identifier: 1A:EB:92:93:AA:7A:99:66:F0:19:17:92:35:80:12:B5:FA:9D:A9:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963611B15B0A4950017D1E40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a53a5430-21c5-3c7b-8379-2570a584a7f0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:11:b1:5b:0a:49:50:01:7d:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7e77cfdb-84ca-4b23-9a78-dcbaa4098be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:46:9e:f7:20:8c:ff:fa:37:ef:b3:2d:03: 2f:b3:fb:34:b5:12:41:a1:9a:ce:b8:ee:cb:14:5d: c2:0d:b4:0d:5c:f5:97:4a:81:54:96:81:65:ee:90: b7:77:da:c4:b5:4d:2c:26:cf:6f:0d:1e:22:f4:82: 8c:59:f0:a4:58:93:23:94:37:e9:25:6f:d5:5e:53: 38:e3:96:4f:bc:dd:0e:83:fc:1f:29:5c:d0:c4:ea: 34:16:0e:25:b4:98:e6:81:9c:8f:11:25:0e:68:40: 22:27:25:46:58:f2:b4:58:21:7d:8e:92:ec:5a:f6: 85:66:bc:aa:89:cb:9e:3f:dc:b8:5b:c9:77:f9:75: b2:cf:87:ba:74:67:ed:80:18:f7:4b:e6:af:c8:83: ac:96:99:84:4d:79:a6:86:64:4a:f4:f8:c7:4d:4e: 67:92:42:dd:80:07:1c:2a:9e:fb:fb:47:19:84:9f: 57:0b:99:ad:e4:95:d1:7c:e0:fc:a1:32:be:f3:4d: b0:cb:95:22:b5:06:a7:26:1c:ac:49:f6:25:62:b0: 11:8e:ac:6c:03:ac:37:e3:75:77:1b:92:49:69:9d: 44:f1:c5:3c:60:34:9d:c9:dd:56:47:0e:4a:75:02: 3c:47:76:9c:79:ed:30:92:e4:e7:66:cd:6d:93:4c: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EB:92:93:AA:7A:99:66:F0:19:17:92:35:80:12:B5:FA:9D:A9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a53a5430-21c5-3c7b-8379-2570a584a7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:00:ad:fb:a0:fc:4d:c2:80:a0:ea:a8:9e:31:85:07:95:54: 07:59:de:0b:dc:3e:82:aa:ad:3d:55:0c:66:bd:6d:62:77:1b: a9:ef:4d:f3:9f:25:9c:f6:d7:5a:f7:88:71:e7:95:33:89:f4: cf:5a:1b:d9:fd:7a:99:82:85:93:d8:95:a7:b1:f2:16:4e:8f: 1c:3e:b5:22:f5:44:6f:13:2f:48:16:4f:51:ac:9a:50:38:82: 78:7e:55:3e:3d:1e:82:87:63:8f:ab:da:e0:36:66:7b:ec:42: 13:3a:c0:2b:d1:5f:7b:a3:8d:e7:03:9e:2c:ab:90:49:a7:5a: 2f:c9:61:3c:cf:1c:2a:63:66:87:29:79:b5:96:ae:3b:e9:fd: 24:5e:d2:3a:ea:86:a4:aa:e8:df:2e:2e:76:c5:3d:1d:f0:97: 70:20:ea:8b:75:02:94:5f:4f:f5:c3:5a:ff:41:b0:3a:d9:80: 44:35:48:d6:a2:96:58:7b:c7:c9:a8:76:c6:e4:49:11:08:d7: ef:79:c6:4c:1c:7e:36:1b:11:8b:63:1a:62:27:ae:81:cf:ba: ae:99:33:74:af:93:b4:ab:92:a5:16:fd:5f:9b:39:d8:4a:6d: 38:dd:21:b2:e6:e9:ed:b9:dd:b4:03:fe:67:f1:c3:30:cb:d1: d9:e2:c2:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhGxWwpJUAF9HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2U3N2NmZGItODRjYS00YjIzLTlhNzgtZGNiYWE0MDk4YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJGnvcgjP/6N++zLQMvs/s0tRJBoZrOuO7L FF3CDbQNXPWXSoFUloFl7pC3d9rEtU0sJs9vDR4i9IKMWfCkWJMjlDfpJW/VXlM4 45ZPvN0Og/wfKVzQxOo0Fg4ltJjmgZyPESUOaEAiJyVGWPK0WCF9jpLsWvaFZryq icueP9y4W8l3+XWyz4e6dGftgBj3S+avyIOslpmETXmmhmRK9PjHTU5nkkLdgAcc Kp77+0cZhJ9XC5mt5JXRfOD8oTK+802wy5UitQanJhysSfYlYrARjqxsA6w343V3 G5JJaZ1E8cU8YDSdyd1WRw5KdQI8R3acee0wkuTnZs1tk0yAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrrkpOqeplm8BkXkjWAErX6nalTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTUzYTU0MzAtMjFjNS0z YzdiLTgzNzktMjU3MGE1ODRhN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwArfug/E3CgKDqqJ4xhQeVVAdZ3gvcPoKqrT1VDGa9bWJ3G6nvTfOf JZz211r3iHHnlTOJ9M9aG9n9epmChZPYlaex8hZOjxw+tSL1RG8TL0gWT1GsmlA4 gnh+VT49HoKHY4+r2uA2ZnvsQhM6wCvRX3ujjecDniyrkEmnWi/JYTzPHCpjZocp ebWWrjvp/SRe0jrqhqSq6N8uLnbFPR3wl3Ag6ot1ApRfT/XDWv9BsDrZgEQ1SNai llh7x8modsbkSREI1+95xkwcfjYbEYtjGmInroHPuq6ZM3Svk7SrkqUW/V+bOdhK bTjdIbLm6e253bQD/mfxwzDL0dniwgw= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:53 2025 by rpki-client