$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bc9d78-72de-3224-b204-aa3c162b6e66.roa File: a9bc9d78-72de-3224-b204-aa3c162b6e66.roa (raw, json) Hash identifier: lO9gViiZeXk0Pco+jdvPJ2QwrhulOjPhYI6Zs3IwWeA= Subject key identifier: 79:17:06:F1:51:F3:68:25:E3:35:CC:FD:54:FF:44:01:99:DA:E7:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361DEFD2AF209CFA25BC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bc9d78-72de-3224-b204-aa3c162b6e66.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.224.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1d:ef:d2:af:20:9c:fa:25:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=40d5b991-49bd-4de1-88d5-f433c8e2ccc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:75:c6:54:06:d8:08:44:42:e2:82:e6:91:e7: df:4e:6c:fb:b0:6c:d2:58:cf:79:7a:52:68:fb:0a: 1b:cb:ea:e7:4e:d4:e1:ed:88:e0:d1:28:da:da:82: 08:7b:b4:4a:02:7e:6f:8a:4d:18:e3:52:40:79:7d: bc:60:48:30:de:27:ee:0c:38:2f:35:41:6e:fc:99: e5:cf:12:f4:47:be:bd:ab:91:8b:0e:a6:d7:7c:10: 3c:3a:14:5a:59:71:32:14:55:69:fa:6a:1f:fc:0e: 50:3f:b4:61:85:1a:2b:e1:a7:eb:88:26:ca:35:08: 53:bb:33:27:48:ff:15:19:bd:dd:05:20:31:bf:55: 9f:c9:dc:6b:63:69:2b:3d:52:4b:08:e6:f5:8f:b9: f4:85:d5:b2:e7:04:9e:d8:2f:da:9e:62:b3:fc:c3: 88:59:66:3a:10:1d:28:2a:7b:7b:fa:04:c7:27:3c: 84:b8:43:c5:80:b0:4a:a0:42:0e:48:f5:e6:fc:b9: c3:cf:5c:0b:a0:d6:3e:35:2a:b3:57:20:7a:b1:6d: 3a:13:5b:ae:c9:35:35:c1:ea:36:de:7e:0f:29:2f: d6:27:c6:fd:d4:d6:fb:bc:3b:18:4d:63:5e:48:bb: 89:b9:0b:dc:0a:57:fd:10:3e:14:81:64:0f:a0:41: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:06:F1:51:F3:68:25:E3:35:CC:FD:54:FF:44:01:99:DA:E7:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9bc9d78-72de-3224-b204-aa3c162b6e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e4:09:4a:ae:0e:3e:dd:99:b9:d1:99:c9:cb:b2:73:d8:26: 7c:8c:5e:79:96:db:e7:05:37:cc:e5:5c:98:0d:e9:60:cb:2f: 6b:a9:ea:af:a5:d2:1a:8f:a9:44:a7:fe:30:a0:ec:e4:44:40: 90:75:3e:f4:b3:5f:91:ea:52:0d:c9:26:c6:d0:67:2f:61:88: 6f:bf:a7:28:da:4a:ff:70:15:ee:6e:49:b9:cd:f3:7c:7c:a7: 23:a5:bd:90:7f:ba:74:6b:d8:f4:8f:ed:39:8b:e6:de:86:47: 72:2e:35:30:d9:16:a5:6a:17:1f:c4:af:31:30:97:f5:54:b0: b8:2b:5a:81:81:07:76:71:c7:47:e3:9b:1c:a3:44:b3:ea:80: 1f:40:f8:e4:4c:de:74:90:b1:38:4d:7f:c4:18:a2:bf:43:14: b0:06:73:ed:9e:5d:54:ed:b1:d4:ef:22:22:6b:0e:56:ed:db: ec:32:6a:3f:99:e2:df:21:a0:b9:1f:97:33:ed:b9:39:6a:35: 1c:a5:16:c5:ce:70:93:f6:43:60:1a:27:63:04:94:6b:7f:d3: e3:b9:1f:14:52:f5:23:33:dc:c7:06:a8:33:9a:70:3d:eb:79: ba:7e:d0:b2:e1:d3:3b:cf:9a:bc:ce:a3:76:01:68:b8:60:d9: e0:c7:e8:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh3v0q8gnPolvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDBkNWI5OTEtNDliZC00ZGUxLTg4ZDUtZjQzM2M4ZTJjY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3XGVAbYCERC4oLmkeffTmz7sGzSWM95elJo +woby+rnTtTh7Yjg0Sja2oIIe7RKAn5vik0Y41JAeX28YEgw3ifuDDgvNUFu/Jnl zxL0R769q5GLDqbXfBA8OhRaWXEyFFVp+mof/A5QP7RhhRor4afriCbKNQhTuzMn SP8VGb3dBSAxv1WfydxrY2krPVJLCOb1j7n0hdWy5wSe2C/anmKz/MOIWWY6EB0o Knt7+gTHJzyEuEPFgLBKoEIOSPXm/LnDz1wLoNY+NSqzVyB6sW06E1uuyTU1weo2 3n4PKS/WJ8b91Nb7vDsYTWNeSLuJuQvcClf9ED4UgWQPoEG4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkXBvFR82gl4zXM/VT/RAGZ2ufbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTliYzlkNzgtNzJkZS0z MjI0LWIyMDQtYWEzYzE2MmI2ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRODKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLkCUquDj7dmbnRmcnLsnPYJnyMXnmW2+cFN8zlXJgN6WDLL2up6q+l 0hqPqUSn/jCg7OREQJB1PvSzX5HqUg3JJsbQZy9hiG+/pyjaSv9wFe5uSbnN83x8 pyOlvZB/unRr2PSP7TmL5t6GR3IuNTDZFqVqFx/ErzEwl/VUsLgrWoGBB3Zxx0fj mxyjRLPqgB9A+ORM3nSQsThNf8QYor9DFLAGc+2eXVTtsdTvIiJrDlbt2+wyaj+Z 4t8hoLkflzPtuTlqNRylFsXOcJP2Q2AaJ2MElGt/0+O5HxRS9SMz3McGqDOacD3r ebp+0LLh0zvPmrzOo3YBaLhg2eDH6GM= -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:25 2025 by rpki-client