$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa File: a99a9965-50c0-3084-b6df-7013b2e65f1e.roa (raw, json) Hash identifier: iiJlzaEJU3lrWsQ/1N46gGUd1Eqq7StNnptfJd/6Ukc= Subject key identifier: D9:BF:F7:B7:19:DD:D7:1C:AF:D2:2B:4D:0F:E9:62:97:81:61:8D:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963635135108D86B4E6196A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:35:13:51:08:d8:6b:4e:61:96:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=2407ab68-2be3-4027-9bca-cf5db69f65e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:85:24:34:9f:22:f7:3b:f9:2b:59:50:f0: 50:72:0d:91:e7:63:5f:84:5b:2e:05:7d:8a:ba:5e: 25:f4:1e:6a:e7:7b:55:a9:99:d4:33:8f:e6:f0:8b: bb:9f:5d:4f:f5:d6:54:46:7c:14:3d:c0:fd:30:be: ca:48:ba:0d:f4:21:df:d5:c2:ab:bb:89:29:65:4d: 64:86:7e:b2:47:2c:66:69:27:a2:bb:f3:08:9a:58: ce:fe:53:52:31:7f:ae:82:89:1b:db:d3:0c:0b:c3: 6f:e9:35:aa:6c:d2:74:72:d8:a9:34:2e:1f:73:b4: 7d:30:a5:73:9b:68:21:4b:af:c4:ca:65:4e:c0:19: e7:31:b0:6a:5f:45:b2:0f:fe:e4:32:64:7d:3d:fb: 03:77:a4:36:fa:fa:af:4b:b5:04:63:e7:11:c7:f4: 4c:c5:d2:89:10:dc:e0:c9:ff:d0:73:eb:81:f3:2b: 47:c3:4a:b5:17:99:79:a8:d3:53:42:0e:48:80:74: 11:9c:fc:fe:2e:38:7f:e8:fe:89:7b:17:df:fb:80: 6f:65:89:0f:dc:34:e5:1f:08:1c:34:e6:e8:12:ba: fc:e8:81:ae:d5:91:20:d0:80:04:fa:0b:93:95:ff: 51:d9:4e:a0:2c:2c:6d:30:39:a2:22:9f:11:43:6d: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BF:F7:B7:19:DD:D7:1C:AF:D2:2B:4D:0F:E9:62:97:81:61:8D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a99a9965-50c0-3084-b6df-7013b2e65f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cf:80:c0:a1:69:c0:c6:ed:b1:65:0c:57:97:b7:26:ba:cf: f1:32:ce:b9:4d:50:c9:fe:48:76:90:3b:c6:cc:62:9b:c5:fa: 6a:78:5b:1d:de:5b:61:f6:62:e8:48:a0:b6:90:ec:ed:62:1d: 0e:fa:15:14:5f:0d:c8:f7:3c:da:4e:1d:d6:39:17:46:31:61: 5a:0d:5d:2b:71:43:11:43:00:c9:8e:f3:57:37:48:37:a5:f8: 93:49:b2:42:44:b7:86:c5:12:cd:d0:fd:d1:d9:b6:66:7a:ce: 1f:4f:36:15:b8:37:3a:e8:5c:7f:cd:d0:39:01:72:5e:9e:07: 97:c6:9a:6c:61:45:d1:be:ba:b6:71:ff:8d:a3:9e:3c:42:d4: c1:a9:1f:23:a5:93:61:9f:dd:65:35:54:18:72:e3:2c:f9:d4: 58:e0:d1:94:df:a7:e7:1a:57:6d:a4:91:1a:f8:4e:81:8c:fa: fe:e6:fe:90:b0:d1:17:1e:c3:30:3c:98:36:c2:4e:00:ae:69: bb:92:f4:86:44:ff:ad:ae:e7:bd:df:ff:bb:69:a4:9a:be:d9: 21:49:05:fe:4b:1a:1f:3c:0c:56:d4:ba:a8:28:44:a1:7f:c7: f6:34:b9:e1:00:78:ac:d9:cd:c3:f3:0a:2a:60:4a:c1:c2:86: 61:0b:8b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjUTUQjYa05hlqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjQwN2FiNjgtMmJlMy00MDI3LTliY2EtY2Y1ZGI2OWY2NWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5+FJDSfIvc7+StZUPBQcg2R52NfhFsuBX2K ul4l9B5q53tVqZnUM4/m8Iu7n11P9dZURnwUPcD9ML7KSLoN9CHf1cKru4kpZU1k hn6yRyxmaSeiu/MImljO/lNSMX+ugokb29MMC8Nv6TWqbNJ0ctipNC4fc7R9MKVz m2ghS6/EymVOwBnnMbBqX0WyD/7kMmR9PfsDd6Q2+vqvS7UEY+cRx/RMxdKJENzg yf/Qc+uB8ytHw0q1F5l5qNNTQg5IgHQRnPz+Ljh/6P6Jexff+4BvZYkP3DTlHwgc NOboErr86IGu1ZEg0IAE+guTlf9R2U6gLCxtMDmiIp8RQ23H2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm/97cZ3dccr9IrTQ/pYpeBYY0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTk5YTk5NjUtNTBjMC0z MDg0LWI2ZGYtNzAxM2IyZTY1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHPgMChacDG7bFlDFeXtya6z/EyzrlNUMn+SHaQO8bMYpvF+mp4Wx3e W2H2YuhIoLaQ7O1iHQ76FRRfDcj3PNpOHdY5F0YxYVoNXStxQxFDAMmO81c3SDel +JNJskJEt4bFEs3Q/dHZtmZ6zh9PNhW4NzroXH/N0DkBcl6eB5fGmmxhRdG+urZx /42jnjxC1MGpHyOlk2Gf3WU1VBhy4yz51Fjg0ZTfp+caV22kkRr4ToGM+v7m/pCw 0RcewzA8mDbCTgCuabuS9IZE/62u573f/7tppJq+2SFJBf5LGh88DFbUuqgoRKF/ x/Y0ueEAeKzZzcPzCipgSsHChmELi6A= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:23 2025 by rpki-client