$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbda74ae-4eb0-3ab4-a2ad-4a8f3de9fa85.roa File: bbda74ae-4eb0-3ab4-a2ad-4a8f3de9fa85.roa (raw, json) Hash identifier: DIl3BGcNFgg4wg17as6e0meSv763W+DcA5XZMDDoff8= Subject key identifier: B3:E9:A3:06:0A:35:62:1E:C9:89:8E:CC:CE:AA:01:E9:B6:56:B8:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963636C502C286C71BB47880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbda74ae-4eb0-3ab4-a2ad-4a8f3de9fa85.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.10.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:36:c5:02:c2:86:c7:1b:b4:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8ec401ae-5e49-4950-9c4a-fe99fc5acc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:12:7c:60:9a:9c:57:65:b4:cb:17:a3:a4: e4:cd:eb:78:59:1a:66:93:73:6e:7c:26:3d:1f:a7: 47:4c:07:fd:a5:a0:10:91:56:a8:64:0c:f4:87:a5: 09:80:d9:4c:92:86:11:5a:68:35:2c:56:12:a1:30: 85:f4:f1:5e:64:72:90:91:2b:6a:f9:ae:d1:c0:4b: fe:e7:6b:69:64:8c:1a:03:83:ae:8f:f1:a0:ec:34: b7:42:2e:18:f5:db:38:af:b5:ce:a3:07:bd:66:c6: 0f:68:35:92:e5:7f:5d:73:63:7e:fd:18:3f:e7:22: dc:42:e7:03:a0:ce:93:7f:db:1e:11:2d:01:49:68: c8:e0:33:91:f1:8d:dd:73:0f:f7:28:03:f1:b3:6e: 8f:ef:76:b4:a5:de:d1:b2:fb:12:b8:78:00:83:ca: 4c:c2:4c:cf:cd:91:a9:7f:de:9e:02:58:5f:c8:17: d3:1d:e0:9c:90:68:1b:96:27:c8:89:f1:f7:30:f1: a5:5d:de:0c:4a:c6:c2:4c:bc:e0:63:95:05:ee:cb: 22:20:b2:da:4b:ee:a3:ac:aa:67:d3:bd:af:32:10: f5:f9:63:d4:99:94:91:82:f9:37:b9:9d:9e:bc:6d: 14:a3:0c:c6:28:e3:24:21:a7:a6:12:4a:d8:43:89: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:A3:06:0A:35:62:1E:C9:89:8E:CC:CE:AA:01:E9:B6:56:B8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbda74ae-4eb0-3ab4-a2ad-4a8f3de9fa85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e9:a5:2a:4f:92:29:b0:c4:a6:fd:62:98:2d:b7:ac:9b:6d: 8f:6f:5b:e1:95:81:12:49:1a:1a:e1:b3:33:8e:59:d4:82:6a: 4b:10:6a:fd:e9:fc:25:2f:4a:c3:d6:04:a4:9b:e2:d1:f8:c4: cf:f9:60:82:ea:f1:74:f9:d6:5f:b8:73:64:66:4c:01:82:24: e8:44:49:52:d9:f4:63:eb:e4:eb:db:73:c2:4d:72:5d:07:a5: 97:4d:ec:45:9e:1e:8d:d2:87:13:1e:07:a2:86:eb:88:15:f1: 05:0d:41:7a:09:c7:9d:d1:d1:7c:7b:44:26:a9:36:3d:80:d8: e8:36:0e:13:d6:47:56:b5:52:a2:ed:d8:06:ee:d4:18:bb:2c: 17:d2:56:4e:a9:5a:d8:34:2c:42:14:22:47:bc:6a:41:09:6a: db:ea:7e:f3:4f:d7:6b:02:7b:06:54:fc:47:c1:11:7c:a1:cd: 3f:b9:09:6e:06:ab:8c:62:00:f7:09:d7:96:05:c6:ea:ce:9c: 6c:76:c9:d3:a1:d7:a4:d3:4e:65:b1:b4:94:c5:82:df:38:62: bf:3e:74:6f:08:48:9a:8c:72:c6:4f:54:81:cd:47:a1:bc:9c: be:12:23:10:5b:fb:f4:a6:2b:5c:3f:be:fd:13:e8:da:ca:44: 6b:05:e6:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjbFAsKGxxu0eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGVjNDAxYWUtNWU0OS00OTUwLTljNGEtZmU5OWZjNWFjYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPESfGCanFdltMsXo6Tkzet4WRpmk3NufCY9 H6dHTAf9paAQkVaoZAz0h6UJgNlMkoYRWmg1LFYSoTCF9PFeZHKQkStq+a7RwEv+ 52tpZIwaA4Ouj/Gg7DS3Qi4Y9ds4r7XOowe9ZsYPaDWS5X9dc2N+/Rg/5yLcQucD oM6Tf9seES0BSWjI4DOR8Y3dcw/3KAPxs26P73a0pd7RsvsSuHgAg8pMwkzPzZGp f96eAlhfyBfTHeCckGgblifIifH3MPGlXd4MSsbCTLzgY5UF7ssiILLaS+6jrKpn 072vMhD1+WPUmZSRgvk3uZ2evG0UowzGKOMkIaemEkrYQ4loiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPpowYKNWIeyYmOzM6qAem2VrihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmJkYTc0YWUtNGViMC0z YWI0LWEyYWQtNGE4ZjNkZTlmYTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRApcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHppSpPkimwxKb9Ypgtt6ybbY9vW+GVgRJJGhrhszOOWdSCaksQav3p /CUvSsPWBKSb4tH4xM/5YILq8XT51l+4c2RmTAGCJOhESVLZ9GPr5Ovbc8JNcl0H pZdN7EWeHo3ShxMeB6KG64gV8QUNQXoJx53R0Xx7RCapNj2A2Og2DhPWR1a1UqLt 2Abu1Bi7LBfSVk6pWtg0LEIUIke8akEJatvqfvNP12sCewZU/EfBEXyhzT+5CW4G q4xiAPcJ15YFxurOnGx2ydOh16TTTmWxtJTFgt84Yr8+dG8ISJqMcsZPVIHNR6G8 nL4SIxBb+/SmK1w/vv0T6NrKRGsF5pM= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:34 2025 by rpki-client