$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb892356-41da-3dd7-9a04-1b2a6d90b3a0.roa File: bb892356-41da-3dd7-9a04-1b2a6d90b3a0.roa (raw, json) Hash identifier: bZdQ7W7O8H+acF/kkgHy4JCU2HPEy580gMYHjoox3mM= Subject key identifier: CE:B1:A8:B7:22:66:48:80:C2:94:0B:40:36:A0:E1:09:D1:15:C7:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363551AF9EF7D0D2A57780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb892356-41da-3dd7-9a04-1b2a6d90b3a0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:35:51:af:9e:f7:d0:d2:a5:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c38a4a2c-748b-487c-8593-0240257a3b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:23:95:5d:5a:9a:4b:be:6c:f6:a0:cb:6f: 63:03:7d:70:cb:0b:16:d3:53:44:93:3e:4d:37:97: ea:6b:ed:0f:d6:91:66:4d:f9:a1:c2:08:88:fb:c9: 5d:18:f3:5a:6c:d7:68:2a:87:4b:ec:ed:23:d6:11: 5c:6f:d6:9b:24:2d:56:b0:af:95:98:36:25:87:42: cd:51:11:3b:6e:5e:52:d3:e1:71:b3:a7:5f:3f:36: 47:23:47:62:ec:64:fa:6c:04:6a:61:f0:d3:88:bc: f1:c5:1b:30:f4:78:0d:9f:0b:ae:14:67:85:38:4e: 25:6c:35:5e:18:4f:65:60:1c:c8:7a:cb:68:01:97: 83:07:9e:54:47:3f:f7:1c:b9:f2:92:92:bc:c5:09: e0:ad:79:2f:fa:df:1e:0f:22:da:41:6f:de:d6:ec: f3:f1:3a:88:76:b5:98:71:ba:1a:20:90:bb:d3:ea: b2:c2:fc:c9:22:76:8f:38:51:b5:35:0c:83:9d:a5: 62:88:6d:dc:24:51:3c:92:ec:be:91:60:83:6f:ea: 9b:30:c6:fa:7c:74:e0:bb:00:0f:fc:82:c0:62:8a: 52:38:d3:ea:2d:3a:3c:bd:e1:61:1f:08:cc:c3:34: 1a:13:d8:2f:ab:21:8e:fb:ac:2a:95:1d:a4:4c:ac: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:A8:B7:22:66:48:80:C2:94:0B:40:36:A0:E1:09:D1:15:C7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bb892356-41da-3dd7-9a04-1b2a6d90b3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b5:22:07:99:f2:3a:79:3d:90:f2:88:9f:15:2b:03:74:92: c6:a3:a0:61:8a:27:4c:51:8f:7d:9a:4d:e2:7f:60:61:52:87: 0c:83:78:90:47:5b:7b:04:d5:1b:92:62:b6:07:e2:87:7b:13: 34:08:9a:11:8e:d8:6c:af:48:e9:b8:14:a8:67:65:0b:38:cf: e0:4f:b7:04:1b:52:83:38:01:7f:29:f2:30:63:ef:59:25:63: fa:87:6f:32:8f:6c:43:b3:2c:fa:c0:9d:eb:0c:be:db:7b:47: f4:19:0e:61:0a:ac:63:d6:3c:17:43:dc:2d:05:69:92:99:11: 7c:76:a4:69:07:74:c6:a8:6b:05:fb:b5:a6:4a:94:24:2e:80: 66:b3:cf:10:84:28:05:b7:2c:b8:b1:1c:5b:d0:e9:27:82:87: ef:de:7d:e5:61:0f:44:be:32:60:44:71:3f:4e:1c:8d:c4:5f: b4:eb:de:ad:35:1a:05:98:11:96:78:db:53:b6:b1:b9:37:6e: 94:4e:5b:41:4a:2d:c7:a6:92:1e:5d:32:9d:8f:d1:d8:cd:7e: 60:ea:85:0c:c0:57:26:b2:75:f0:9b:58:65:37:eb:e6:18:4e: 54:cf:de:fa:79:ab:9c:73:61:fa:54:fb:c4:d7:3b:05:af:13: d2:76:34:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjVRr5730NKld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzM4YTRhMmMtNzQ4Yi00ODdjLTg1OTMtMDI0MDI1N2EzYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWEjlV1amku+bPagy29jA31wywsW01NEkz5N N5fqa+0P1pFmTfmhwgiI+8ldGPNabNdoKodL7O0j1hFcb9abJC1WsK+VmDYlh0LN URE7bl5S0+Fxs6dfPzZHI0di7GT6bARqYfDTiLzxxRsw9HgNnwuuFGeFOE4lbDVe GE9lYBzIestoAZeDB55URz/3HLnykpK8xQngrXkv+t8eDyLaQW/e1uzz8TqIdrWY cboaIJC70+qywvzJInaPOFG1NQyDnaViiG3cJFE8kuy+kWCDb+qbMMb6fHTguwAP /ILAYopSONPqLTo8veFhHwjMwzQaE9gvqyGO+6wqlR2kTKwfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6xqLciZkiAwpQLQDag4QnRFcfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmI4OTIzNTYtNDFkYS0z ZGQ3LTlhMDQtMWIyYTZkOTBiM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA61IgeZ8jp5PZDyiJ8VKwN0ksajoGGKJ0xRj32aTeJ/YGFShwyDeJBH W3sE1RuSYrYH4od7EzQImhGO2GyvSOm4FKhnZQs4z+BPtwQbUoM4AX8p8jBj71kl Y/qHbzKPbEOzLPrAnesMvtt7R/QZDmEKrGPWPBdD3C0FaZKZEXx2pGkHdMaoawX7 taZKlCQugGazzxCEKAW3LLixHFvQ6SeCh+/efeVhD0S+MmBEcT9OHI3EX7Tr3q01 GgWYEZZ421O2sbk3bpROW0FKLcemkh5dMp2P0djNfmDqhQzAVyaydfCbWGU36+YY TlTP3vp5q5xzYfpU+8TXOwWvE9J2NAw= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:45 2025 by rpki-client