$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6681f47-c0d4-3e08-a046-9e9f315429fd.roa File: a6681f47-c0d4-3e08-a046-9e9f315429fd.roa (raw, json) Hash identifier: H7O8TayQR5pgopQcXVsZXYpwITWolkCAe2LTUuXsdAE= Subject key identifier: E4:70:A1:95:09:EB:7F:46:30:BF:C7:4D:02:7B:CE:4F:7A:67:03:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963640586B46BB62B7451980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6681f47-c0d4-3e08-a046-9e9f315429fd.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.230.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:40:58:6b:46:bb:62:b7:45:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ae7110a3-9707-4654-9306-b2fba6835601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:ea:37:6f:56:24:d7:2e:16:08:73:fb:bc: 00:d2:bc:a2:f6:f5:d1:68:e1:44:a3:f3:bc:37:30: 68:99:08:62:5e:49:9c:92:c7:50:b0:2e:8d:5c:ba: 33:fa:dd:81:4e:d9:e6:b2:56:da:53:6a:c6:f1:cd: 12:3b:bb:cd:ed:49:bc:af:b5:db:95:c8:50:31:a7: 69:b5:9b:72:ca:5c:87:5d:26:31:01:41:aa:9f:30: 27:a4:4d:fa:69:92:0b:18:92:c2:01:12:26:53:92: e7:46:97:5f:ae:b3:12:86:02:e2:5c:d6:5f:86:d6: c1:31:93:cb:e1:4e:83:3b:c4:09:91:24:f3:76:ef: cb:2c:c8:9a:20:07:50:30:a9:da:43:a5:f6:0d:cc: 13:35:a8:3f:50:48:74:14:1b:6d:df:0d:62:bd:1c: a6:e3:0c:48:ca:e4:73:3b:08:35:49:fc:4e:17:aa: 59:46:83:75:b6:19:44:09:a4:e6:8f:08:13:df:99: 6c:c9:96:07:da:55:1e:6d:34:c2:4b:56:74:2c:21: 2a:26:f3:d5:ec:b6:4a:be:f0:90:e3:d7:bc:27:cd: f3:43:1b:d1:7d:4d:83:b6:31:b2:13:f3:8b:a2:6e: 70:54:cf:96:d0:05:a2:3a:7b:11:e1:b8:0b:70:26: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:70:A1:95:09:EB:7F:46:30:BF:C7:4D:02:7B:CE:4F:7A:67:03:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a6681f47-c0d4-3e08-a046-9e9f315429fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:75:a0:40:12:18:be:06:15:fb:91:d5:9e:ae:b1:b5:e4:b0: 6d:9b:fb:53:33:cb:df:01:93:ec:5f:75:ea:9a:2b:8f:d7:37: d7:77:0c:54:31:3b:59:95:b5:5d:6b:da:d4:4b:8f:67:47:51: 7e:88:97:4e:39:be:03:c8:2d:bf:d6:67:3b:5f:dc:99:6a:80: c2:14:a2:ab:88:2a:2e:e8:a1:82:f3:33:f8:cf:fc:e2:2c:2e: 29:91:7e:31:bc:bc:6f:46:17:c3:81:71:1a:d9:6e:28:88:84: af:4f:e6:f9:79:b1:50:ab:59:55:c5:a2:2d:51:83:a5:d8:2e: e5:5f:30:92:35:19:58:36:ec:3f:52:f5:50:18:5b:60:c1:2f: 4d:2b:87:13:71:c5:0f:36:97:98:ff:6c:7c:e0:db:9c:66:2d: db:be:fb:35:09:d3:a5:7d:d3:d2:41:83:2c:79:3c:44:2e:08: d1:e7:ff:16:a6:73:8a:51:5d:b3:a9:77:e9:27:54:6e:35:db: 06:bd:9d:39:8b:58:ac:0a:df:9f:f6:22:ac:34:1b:3f:1e:7a: f8:4b:5c:79:23:f2:7e:7a:71:b8:6b:61:fe:3a:b0:32:e1:51: 91:08:ed:5c:fa:4f:2f:fa:ee:bb:39:99:95:ea:ee:66:ea:4f: 68:cb:3c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkBYa0a7YrdFGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YWU3MTEwYTMtOTcwNy00NjU0LTkzMDYtYjJmYmE2ODM1NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiavqN29WJNcuFghz+7wA0ryi9vXRaOFEo/O8 NzBomQhiXkmcksdQsC6NXLoz+t2BTtnmslbaU2rG8c0SO7vN7Um8r7XblchQMadp tZtyylyHXSYxAUGqnzAnpE36aZILGJLCARImU5LnRpdfrrMShgLiXNZfhtbBMZPL 4U6DO8QJkSTzdu/LLMiaIAdQMKnaQ6X2DcwTNag/UEh0FBtt3w1ivRym4wxIyuRz Owg1SfxOF6pZRoN1thlECaTmjwgT35lsyZYH2lUebTTCS1Z0LCEqJvPV7LZKvvCQ 49e8J83zQxvRfU2DtjGyE/OLom5wVM+W0AWiOnsR4bgLcCZfQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORwoZUJ639GML/HTQJ7zk96ZwMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2ODFmNDctYzBkNC0z ZTA4LWEwNDYtOWU5ZjMxNTQyOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRObeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt1oEASGL4GFfuR1Z6usbXksG2b+1Mzy98Bk+xfdeqaK4/XN9d3DFQx O1mVtV1r2tRLj2dHUX6Il045vgPILb/WZztf3JlqgMIUoquIKi7ooYLzM/jP/OIs LimRfjG8vG9GF8OBcRrZbiiIhK9P5vl5sVCrWVXFoi1Rg6XYLuVfMJI1GVg27D9S 9VAYW2DBL00rhxNxxQ82l5j/bHzg25xmLdu++zUJ06V909JBgyx5PEQuCNHn/xam c4pRXbOpd+knVG412wa9nTmLWKwK35/2Iqw0Gz8eevhLXHkj8n56cbhrYf46sDLh UZEI7Vz6Ty/67rs5mZXq7mbqT2jLPOg= -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:29 2025 by rpki-client