$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae28b81c-e520-3177-aa3c-dfc4992b1544.roa File: ae28b81c-e520-3177-aa3c-dfc4992b1544.roa (raw, json) Hash identifier: b2bvixAOoSBqJ8GgkyKC2/cNaEmD/bRtI4qxc8BVR00= Subject key identifier: CF:6F:23:83:3F:5F:D5:0F:8F:68:5B:F0:A6:FB:C3:4F:A9:97:D8:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636382E95C6FA4158CCAA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae28b81c-e520-3177-aa3c-dfc4992b1544.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.10.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:38:2e:95:c6:fa:41:58:cc:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0cadc89b-4020-45fc-a624-2cf81c454803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c6:20:d2:f9:84:9c:b8:42:aa:f4:fa:25:ca: 93:c9:d3:0b:cb:69:b0:0b:67:17:40:e6:a7:d0:72: c8:3f:79:71:ef:de:2b:ee:3b:7f:60:58:b5:62:b4: b0:ec:4c:2b:77:fd:1f:43:d8:74:c9:ad:5e:0f:e5: 94:c0:59:80:8e:55:25:3c:6b:a2:35:45:00:7e:72: 8a:4a:91:9c:8c:46:26:64:94:ac:fa:36:12:1c:4a: 4d:1e:12:1c:7b:18:17:be:6a:f2:00:e7:c6:8e:0b: ae:38:04:ff:0d:c6:3d:12:2c:e3:1b:11:79:e5:45: ca:82:37:fc:d7:9a:f4:01:60:ae:4e:22:47:98:af: d6:f3:e5:80:63:23:5b:5c:7a:e1:6d:85:09:8b:1f: e2:0e:b7:b0:ea:75:3c:9e:18:d9:2e:5e:4c:77:11: 0b:8c:31:05:08:c5:e4:6e:cb:55:a0:3a:65:4b:60: 5b:00:32:cd:f0:92:5e:ad:85:7c:b6:34:99:74:37: 5b:dd:ca:e7:2d:db:19:07:9d:d5:f1:19:2c:51:81: 7b:33:03:68:c4:79:9c:af:40:57:65:cc:e3:23:00: a2:af:86:ac:08:30:77:f5:0f:32:16:ac:6b:d0:01: 4b:d4:52:a2:59:f4:5e:fa:37:d8:74:c7:69:5f:e0: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6F:23:83:3F:5F:D5:0F:8F:68:5B:F0:A6:FB:C3:4F:A9:97:D8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae28b81c-e520-3177-aa3c-dfc4992b1544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:43:14:9a:59:6b:82:98:47:5d:49:1e:f7:fc:04:89:21:dc: 71:30:bb:b6:9d:b7:68:d3:4c:e3:d4:32:aa:54:85:ea:ca:90: 76:97:2f:06:a8:6a:ca:6e:ad:de:cd:77:55:2b:65:61:4f:d0: 6e:91:50:1f:3d:5d:06:87:06:da:9a:19:5a:53:a3:eb:b1:1e: 05:9b:f6:62:55:0e:cd:ee:3d:a2:a4:a3:3e:eb:dd:3d:d4:00: 92:3b:c1:cb:c8:48:55:75:93:d9:30:32:e8:51:e7:45:8f:8b: cb:a8:45:53:80:e2:ff:06:4e:19:67:7c:9b:35:7d:20:04:ba: ad:07:c5:d7:58:4f:ca:6b:40:4a:53:e4:22:20:b8:22:42:1d: 96:8c:17:88:4c:aa:4e:71:77:f0:7a:66:78:97:d3:84:ad:69: eb:ff:5c:1d:8a:7b:2b:bf:b1:a7:5e:c4:c5:6e:42:27:21:6e: 1e:e5:c2:d9:ed:25:78:3f:b9:b3:a5:e4:c0:12:dd:85:a9:75: f4:3e:4a:5d:3e:e9:58:29:00:f9:ed:1d:3f:5d:44:44:b9:57: cc:aa:f0:a7:0c:b8:3e:1c:31:83:1a:46:2a:6f:7b:c6:a5:c0: 24:e7:cd:4c:08:0b:e5:5e:64:50:d8:98:c0:00:df:51:55:79: c8:77:33:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjgulcb6QVjMqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGNhZGM4OWItNDAyMC00NWZjLWE2MjQtMmNmODFjNDU0ODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMYg0vmEnLhCqvT6JcqTydMLy2mwC2cXQOan 0HLIP3lx794r7jt/YFi1YrSw7Ewrd/0fQ9h0ya1eD+WUwFmAjlUlPGuiNUUAfnKK SpGcjEYmZJSs+jYSHEpNHhIcexgXvmryAOfGjguuOAT/DcY9EizjGxF55UXKgjf8 15r0AWCuTiJHmK/W8+WAYyNbXHrhbYUJix/iDrew6nU8nhjZLl5MdxELjDEFCMXk bstVoDplS2BbADLN8JJerYV8tjSZdDdb3crnLdsZB53V8RksUYF7MwNoxHmcr0BX ZczjIwCir4asCDB39Q8yFqxr0AFL1FKiWfRe+jfYdMdpX+DrgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9vI4M/X9UPj2hb8Kb7w0+pl9jKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWUyOGI4MWMtZTUyMC0z MTc3LWFhM2MtZGZjNDk5MmIxNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtDFJpZa4KYR11JHvf8BIkh3HEwu7adt2jTTOPUMqpUherKkHaXLwao aspurd7Nd1UrZWFP0G6RUB89XQaHBtqaGVpTo+uxHgWb9mJVDs3uPaKkoz7r3T3U AJI7wcvISFV1k9kwMuhR50WPi8uoRVOA4v8GThlnfJs1fSAEuq0HxddYT8prQEpT 5CIguCJCHZaMF4hMqk5xd/B6ZniX04Staev/XB2Keyu/sadexMVuQichbh7lwtnt JXg/ubOl5MAS3YWpdfQ+Sl0+6VgpAPntHT9dRES5V8yq8KcMuD4cMYMaRipve8al wCTnzUwIC+VeZFDYmMAA31FVech3Mzg= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:10 2025 by rpki-client