$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a61e6561-2fe8-356a-8196-895cac72fe91.roa File: a61e6561-2fe8-356a-8196-895cac72fe91.roa (raw, json) Hash identifier: Xb6v2nAOzYGrQP3wszrH4DcsE8Su4Z8DqBM+ctAlLLs= Subject key identifier: 67:37:E3:C9:C6:93:0E:A7:BA:EF:77:A4:5A:53:E4:D2:04:19:28:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362109FFD78E936DF21080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a61e6561-2fe8-356a-8196-895cac72fe91.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.230.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:21:09:ff:d7:8e:93:6d:f2:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8d3bcd3e-aa40-43b9-8e28-3192c317fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:be:44:28:c8:86:f8:3c:6d:d5:6f:ce:63: 1d:4f:2d:5b:7d:a6:da:6d:27:22:73:14:f1:99:65: 56:24:d6:40:6c:29:d8:24:1e:e1:c7:21:ea:fa:3c: ad:40:2a:81:a7:9c:9c:84:10:8a:66:c4:f1:81:5d: c6:3a:06:ba:24:c5:8c:7a:f4:4d:d0:f5:82:09:95: 58:6a:a0:8b:9e:44:ba:cc:d7:55:83:6f:76:06:bd: 24:07:14:68:1c:82:75:5e:0e:34:36:be:1e:10:ce: 59:56:20:ea:9b:43:83:2a:56:22:33:2b:97:48:ff: bc:6c:dd:a2:8b:06:8d:9d:4b:b7:ff:62:37:f0:aa: 87:79:71:e5:a4:82:f6:8f:2b:01:b3:70:e7:cc:8d: da:29:0d:d7:49:17:03:af:26:22:19:24:9f:17:93: d9:07:14:e6:1e:3f:12:ce:b5:fc:dc:29:ff:33:c0: c8:1c:bd:86:d3:1b:cc:ea:77:5b:62:dc:f3:70:2a: 94:eb:a2:dc:fe:40:81:1b:23:c2:1c:e2:f8:91:f4: 22:2c:a0:7c:91:94:5d:2c:90:27:74:fe:d9:d2:1d: 2a:72:45:5c:c6:4f:dd:81:37:38:f6:42:0e:0e:15: 93:75:3b:22:43:e5:2f:bd:cc:84:45:f1:1b:52:4e: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:37:E3:C9:C6:93:0E:A7:BA:EF:77:A4:5A:53:E4:D2:04:19:28:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a61e6561-2fe8-356a-8196-895cac72fe91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2b:a9:11:8f:fa:e2:4b:86:b3:3c:2f:72:58:ec:ee:f9:c4: d5:49:79:8c:31:55:5a:61:16:d6:19:cc:c6:89:74:da:75:98: 27:32:8b:70:0d:22:39:2e:a1:68:34:8e:ba:a3:3f:94:5f:11: d9:a8:21:ec:92:86:da:6f:d7:38:c9:47:c5:a6:2f:45:74:14: 49:80:69:31:73:5e:b7:e6:a8:aa:20:db:15:0e:73:ea:94:49: 9d:39:9d:28:a1:c2:66:01:11:5a:d8:9b:aa:41:4c:0d:f3:97: 27:c1:da:f4:ec:29:ce:b7:f3:3c:2c:d5:24:3a:b5:5d:fd:70: c1:af:7e:1b:83:e3:46:18:0f:81:d1:88:36:39:14:a6:a6:5c: 36:47:df:76:3d:57:9b:ae:ce:f6:11:1b:8f:4e:1e:3c:02:01: a5:ea:83:eb:11:e0:fc:be:28:6e:29:2e:62:49:32:5d:a8:b2: d0:43:0f:02:85:5a:65:08:b1:77:50:4d:16:a0:3a:24:23:a4: 7b:51:bb:27:39:3a:b5:59:c0:64:fd:51:41:c5:20:7b:35:11: e1:d1:73:9b:83:01:c4:1b:4c:6c:2f:17:13:4d:98:26:9f:81: d2:ef:fd:2d:89:e0:27:f6:3b:80:ba:ca:c7:e4:7c:c7:63:40: 51:82:73:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiEJ/9eOk23yEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGQzYmNkM2UtYWE0MC00M2I5LThlMjgtMzE5MmMzMTdmYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPC+RCjIhvg8bdVvzmMdTy1bfababScicxTx mWVWJNZAbCnYJB7hxyHq+jytQCqBp5ychBCKZsTxgV3GOga6JMWMevRN0PWCCZVY aqCLnkS6zNdVg292Br0kBxRoHIJ1Xg40Nr4eEM5ZViDqm0ODKlYiMyuXSP+8bN2i iwaNnUu3/2I38KqHeXHlpIL2jysBs3DnzI3aKQ3XSRcDryYiGSSfF5PZBxTmHj8S zrX83Cn/M8DIHL2G0xvM6ndbYtzzcCqU66Lc/kCBGyPCHOL4kfQiLKB8kZRdLJAn dP7Z0h0qckVcxk/dgTc49kIODhWTdTsiQ+UvvcyERfEbUk67cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc348nGkw6nuu93pFpT5NIEGShuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTYxZTY1NjEtMmZlOC0z NTZhLTgxOTYtODk1Y2FjNzJmZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwrqRGP+uJLhrM8L3JY7O75xNVJeYwxVVphFtYZzMaJdNp1mCcyi3AN IjkuoWg0jrqjP5RfEdmoIeyShtpv1zjJR8WmL0V0FEmAaTFzXrfmqKog2xUOc+qU SZ05nSihwmYBEVrYm6pBTA3zlyfB2vTsKc638zws1SQ6tV39cMGvfhuD40YYD4HR iDY5FKamXDZH33Y9V5uuzvYRG49OHjwCAaXqg+sR4Py+KG4pLmJJMl2ostBDDwKF WmUIsXdQTRagOiQjpHtRuyc5OrVZwGT9UUHFIHs1EeHRc5uDAcQbTGwvFxNNmCaf gdLv/S2J4Cf2O4C6ysfkfMdjQFGCc0I= -----END CERTIFICATE-----Generated at Fri Aug 8 20:40:40 2025 by rpki-client