$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa File: c39668ce-0b15-33e0-95de-a15f5cde3544.roa (raw, json) Hash identifier: JFYEdwPbhYNDKNWiO+sz0RY0Heu+S3WTHcVrFRxrgDk= Subject key identifier: 54:5E:66:23:8A:F1:6D:A7:98:B9:9B:07:6E:4D:59:E2:D4:FD:69:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963620711B84014BB0335400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.229.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:20:71:1b:84:01:4b:b0:33:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=89dcc6b3-291d-4334-97d8-aee022beb12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:ba:7c:3a:25:df:25:d5:22:a2:c8:48:87: a7:7b:a4:c6:3a:f0:27:c1:05:c7:47:16:90:1c:94: 19:08:04:45:3a:88:8a:b4:42:bf:23:cf:5f:98:4f: e2:0f:ab:a3:77:c7:28:d0:cc:a2:a7:ab:25:bf:f4: b0:6b:00:65:50:6b:e2:bb:23:d8:64:57:f5:ff:79: 84:cf:78:5b:e0:1c:0d:9b:be:61:f6:78:8b:6e:53: e0:a9:f6:85:52:db:88:f4:62:ca:45:64:02:51:f7: ad:25:a4:1b:f8:37:f8:76:b5:bf:16:80:69:13:48: 5f:59:35:74:86:05:7f:c7:6d:13:10:36:53:19:5f: 2e:f9:15:06:40:e4:2d:76:42:97:b0:7e:6a:3d:7b: fa:24:8e:95:65:c7:cd:9a:30:ad:66:95:1b:e4:b6: 35:fd:59:69:9b:73:ee:c9:76:c6:c7:9a:e9:d0:3a: d1:43:8c:be:c4:11:ed:a5:66:13:ff:f3:9d:cb:88: 8a:46:10:11:d0:85:ed:87:0e:12:01:b5:5a:80:d3: 8a:76:c2:b0:eb:8a:e8:80:96:9f:02:3d:39:b1:83: 69:01:44:49:3e:4d:4e:2e:a8:df:af:3f:95:a7:b0: d1:f7:a5:ec:68:41:06:56:ab:37:42:c0:70:42:7e: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5E:66:23:8A:F1:6D:A7:98:B9:9B:07:6E:4D:59:E2:D4:FD:69:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:99:e5:ef:e0:cb:f1:41:98:5a:1b:15:ea:98:90:ac:e1: 1b:c4:7a:42:97:92:50:5d:24:3b:6e:fb:c4:24:8a:34:ad:8f: 1b:99:1b:91:10:27:01:d5:27:ca:f3:0e:bf:62:61:7f:89:50: 3d:ce:87:43:f7:aa:c5:45:70:8c:0d:de:c0:06:3a:55:7a:71: 5e:29:9b:7c:ee:d3:64:cb:5e:2d:7f:33:ba:b2:1d:7d:e5:28: ad:4a:0f:4a:4c:29:87:a7:c4:45:d4:38:66:b1:85:7a:09:76: 33:52:c4:05:55:96:ef:2d:4d:cb:4c:61:03:fe:29:7f:ea:e0: e4:4b:52:c7:b5:f4:ad:b4:ed:72:07:0d:06:41:cf:53:22:56: 0e:8c:49:99:c3:c1:78:44:b2:10:1c:03:25:48:6e:89:2b:c0: a2:bf:d8:53:2c:4f:18:02:0c:18:83:e1:49:de:18:92:0f:a6: d4:cd:30:d0:9c:99:71:d5:f5:26:3c:dc:e0:d0:29:6f:cd:3e: 5e:fb:63:cb:a5:26:4d:cb:b7:9f:e3:8b:d7:8b:8b:15:85:55: c7:f2:c8:31:60:8e:a8:a8:3e:69:df:f8:02:3d:64:92:ee:99: d1:d5:77:03:4d:4d:54:f7:f6:aa:72:f7:5e:ea:5a:87:f9:55: d2:5a:4f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiBxG4QBS7AzVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODlkY2M2YjMtMjkxZC00MzM0LTk3ZDgtYWVlMDIyYmViMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs+6fDol3yXVIqLISIene6TGOvAnwQXHRxaQ HJQZCARFOoiKtEK/I89fmE/iD6ujd8co0Myip6slv/SwawBlUGviuyPYZFf1/3mE z3hb4BwNm75h9niLblPgqfaFUtuI9GLKRWQCUfetJaQb+Df4drW/FoBpE0hfWTV0 hgV/x20TEDZTGV8u+RUGQOQtdkKXsH5qPXv6JI6VZcfNmjCtZpUb5LY1/Vlpm3Pu yXbGx5rp0DrRQ4y+xBHtpWYT//Ody4iKRhAR0IXthw4SAbVagNOKdsKw64rogJaf Aj05sYNpAURJPk1OLqjfrz+Vp7DR96XsaEEGVqs3QsBwQn47iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFReZiOK8W2nmLmbB25NWeLU/WlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM5NjY4Y2UtMGIxNS0z M2UwLTk1ZGUtYTE1ZjVjZGUzNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArxmeXv4MvxQZhaGxXqmJCs4RvEekKXklBdJDtu+8QkijStjxuZG5EQ JwHVJ8rzDr9iYX+JUD3Oh0P3qsVFcIwN3sAGOlV6cV4pm3zu02TLXi1/M7qyHX3l KK1KD0pMKYenxEXUOGaxhXoJdjNSxAVVlu8tTctMYQP+KX/q4ORLUse19K207XIH DQZBz1MiVg6MSZnDwXhEshAcAyVIbokrwKK/2FMsTxgCDBiD4UneGJIPptTNMNCc mXHV9SY83ODQKW/NPl77Y8ulJk3Lt5/ji9eLixWFVcfyyDFgjqioPmnf+AI9ZJLu mdHVdwNNTVT39qpy917qWof5VdJaT1s= -----END CERTIFICATE-----Generated at Fri Aug 8 00:43:43 2025 by rpki-client