$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bae641b5-842e-3b48-ba73-2b5d80a3fd90.roa File: bae641b5-842e-3b48-ba73-2b5d80a3fd90.roa (raw, json) Hash identifier: v0HtykdoS4QISmml9NFjPzKnQioe1jD1meYGF56BUrg= Subject key identifier: F6:60:CC:50:39:01:17:48:28:9B:4A:6E:87:59:01:4B:F0:D4:96:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363C79FDA99FEAF3EE5100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bae641b5-842e-3b48-ba73-2b5d80a3fd90.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.99.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3c:79:fd:a9:9f:ea:f3:ee:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f4c39431-4d1f-4466-9563-c55140c4148b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:66:a9:74:91:65:f5:11:b9:ae:56:0f:f0: bc:ae:1a:57:41:4a:9d:54:cf:c1:7d:f9:8f:73:00: 0a:0b:a1:91:51:50:72:f2:b4:3f:82:74:52:d0:d9: f0:f6:f4:48:9f:c7:6d:aa:0b:27:99:d4:3d:04:f1: 33:cc:0a:e8:65:4a:94:0e:fa:c6:0a:ad:6d:17:ae: c9:97:19:e7:57:91:80:bd:1c:e5:bf:22:df:4a:ca: 7e:1a:16:0b:39:4e:2b:28:73:63:bd:dc:09:8c:f5: 44:b3:87:7b:f6:53:38:18:7b:10:e1:a9:f0:e0:c4: e0:a9:db:d3:3e:2f:47:79:b5:48:5b:4a:9f:31:8f: b0:b2:18:e2:d8:12:de:21:b2:b4:a8:77:ab:5e:dd: 1d:57:9a:ce:25:4b:3e:a6:04:e0:4b:06:a6:c0:e6: 4e:a9:1d:80:ec:2c:f5:f6:f8:37:71:bc:7e:e9:bb: 28:c9:3e:34:ad:50:2a:48:b8:a8:56:92:ea:85:be: 4b:e2:c1:d0:d4:76:5b:ce:c8:07:43:7a:f1:0a:1c: 47:dd:5e:e3:b5:b8:b0:b1:c8:6b:3f:98:40:e0:4b: 5f:ce:42:1d:8b:83:c7:87:1d:35:8d:14:6f:34:2b: 23:a5:9a:7b:94:3c:c0:68:5c:46:f6:5d:c6:64:2b: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:60:CC:50:39:01:17:48:28:9B:4A:6E:87:59:01:4B:F0:D4:96:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bae641b5-842e-3b48-ba73-2b5d80a3fd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a8:98:a3:99:7f:4a:eb:37:21:dd:2c:6b:53:2d:7b:63:d4: ce:73:f9:b9:66:32:2b:79:24:a0:8e:b0:0e:56:89:d4:b1:84: cd:9c:87:39:7e:88:78:75:8c:b3:da:34:85:1b:d8:13:d7:76: c9:f9:61:70:eb:eb:af:c9:38:dd:a8:82:0f:84:44:e5:43:1b: 73:88:0e:c0:45:cc:af:f7:2f:14:a9:f8:fe:2f:d9:85:79:30: d0:7b:d8:35:a2:f4:9a:37:f1:6b:9b:c2:88:93:60:78:d8:1e: ef:c5:8b:cb:0e:8a:52:ed:ca:d0:69:70:3c:78:e2:3b:5d:31: 1e:0f:a7:68:52:16:7e:28:c7:09:ba:40:de:7a:92:b8:23:5c: ff:c3:8d:f4:7e:65:96:85:ee:e2:3a:72:dd:15:73:d9:20:86: c8:1c:9f:aa:d8:d9:d6:37:f6:90:d7:a0:fd:32:a2:c8:8a:04: a6:79:01:91:9a:d3:ec:6d:a7:31:90:51:a2:c7:c2:b9:a3:6d: db:79:64:16:45:f1:2c:cf:4b:0f:f1:e8:73:74:9a:7c:cb:8d: ff:7a:a5:c0:d6:ee:f0:f3:b0:f8:bc:b3:90:f1:86:51:7e:e3: e4:83:13:dc:95:cd:be:bc:62:dd:2d:50:cb:69:ee:77:d1:14: 5d:8a:eb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjx5/amf6vPuUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjRjMzk0MzEtNGQxZi00NDY2LTk1NjMtYzU1MTQwYzQxNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWtmqXSRZfURua5WD/C8rhpXQUqdVM/BffmP cwAKC6GRUVBy8rQ/gnRS0Nnw9vRIn8dtqgsnmdQ9BPEzzAroZUqUDvrGCq1tF67J lxnnV5GAvRzlvyLfSsp+GhYLOU4rKHNjvdwJjPVEs4d79lM4GHsQ4anw4MTgqdvT Pi9HebVIW0qfMY+wshji2BLeIbK0qHerXt0dV5rOJUs+pgTgSwamwOZOqR2A7Cz1 9vg3cbx+6bsoyT40rVAqSLioVpLqhb5L4sHQ1HZbzsgHQ3rxChxH3V7jtbiwschr P5hA4EtfzkIdi4PHhx01jRRvNCsjpZp7lDzAaFxG9l3GZCtX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZgzFA5ARdIKJtKbodZAUvw1JYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFlNjQxYjUtODQyZS0z YjQ4LWJhNzMtMmI1ZDgwYTNmZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWomKOZf0rrNyHdLGtTLXtj1M5z+blmMit5JKCOsA5WidSxhM2chzl+ iHh1jLPaNIUb2BPXdsn5YXDr66/JON2ogg+EROVDG3OIDsBFzK/3LxSp+P4v2YV5 MNB72DWi9Jo38WubwoiTYHjYHu/Fi8sOilLtytBpcDx44jtdMR4Pp2hSFn4oxwm6 QN56krgjXP/DjfR+ZZaF7uI6ct0Vc9kghsgcn6rY2dY39pDXoP0yosiKBKZ5AZGa 0+xtpzGQUaLHwrmjbdt5ZBZF8SzPSw/x6HN0mnzLjf96pcDW7vDzsPi8s5DxhlF+ 4+SDE9yVzb68Yt0tUMtp7nfRFF2K6+M= -----END CERTIFICATE-----Generated at Wed Aug 6 12:41:53 2025 by rpki-client