$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6426997-7a6a-35d6-b1f2-a523805e6795.roa File: c6426997-7a6a-35d6-b1f2-a523805e6795.roa (raw, json) Hash identifier: v6NzYLx5uacpDu7L28qVeuLa0miCl3Eb7u1//G+PiSs= Subject key identifier: 16:F0:62:E0:56:09:DC:CC:15:65:DC:69:75:95:FF:8D:8E:94:61:B4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363D960D9FBC01B49FF880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6426997-7a6a-35d6-b1f2-a523805e6795.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3d:96:0d:9f:bc:01:b4:9f:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0f61e648-e27d-46f1-b22a-56ae33c5bac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:b0:dd:c3:a3:c7:4d:24:cd:33:72:0e:4c: d2:79:f0:0a:ad:28:8d:11:2b:0f:3c:47:b5:27:ca: 07:7b:97:e0:82:e8:e7:ef:41:a4:bf:23:e3:d2:b5: 66:71:54:78:fb:e2:1c:67:48:13:51:67:a8:06:9c: 9d:8a:bc:9f:cc:fb:89:89:9c:8b:98:78:9c:65:af: a6:eb:96:63:d3:f4:66:4b:00:0d:3a:f8:73:b5:86: 00:41:fd:bf:ea:f3:46:b9:3c:b5:e7:1a:52:08:d8: 2e:15:3b:fd:ff:44:dc:4c:b0:f1:ce:a3:d1:2b:3c: 95:19:71:4c:88:b9:af:07:f7:1f:16:53:70:2a:51: 72:83:a4:71:79:f8:21:88:e6:ca:65:f9:e0:03:99: 5d:6b:03:30:61:2f:f9:75:93:5a:1e:5d:1f:eb:13: 40:ca:98:81:93:74:d0:f6:70:6c:eb:51:fc:db:1e: 9f:db:f0:4d:da:9d:63:ed:91:6d:99:e9:a5:26:71: 11:5f:e3:3c:ac:41:8f:55:1c:bf:52:29:79:2b:77: e2:4a:82:65:f6:0f:16:ed:e0:1d:54:31:40:a1:f1: 4f:eb:f3:30:75:c3:31:cb:e4:06:35:57:e7:47:6e: ac:38:af:bf:0a:09:22:e0:a1:54:53:dc:7b:5b:d5: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:62:E0:56:09:DC:CC:15:65:DC:69:75:95:FF:8D:8E:94:61:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6426997-7a6a-35d6-b1f2-a523805e6795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e5:e4:37:2c:c5:cc:a1:0d:d6:89:1c:2e:12:bc:0d:e5:53: aa:9d:d7:fb:18:33:19:82:75:b4:16:a1:9e:85:c9:e9:97:9e: b7:c3:ca:e2:56:5d:00:7f:d3:b6:be:2f:09:45:f3:0d:4e:80: d1:08:3e:d3:5c:60:28:15:62:c6:bc:41:1f:0f:19:8a:9e:8a: 1d:2e:a9:76:69:4f:f7:00:a2:f6:ef:0e:37:fe:4d:bb:3d:20: 7a:88:53:0a:b8:87:af:6f:07:03:3c:47:3b:48:86:cc:a7:a5: 23:e7:1a:2a:70:b2:c3:1c:1a:d7:26:e8:de:fe:49:85:f6:37: 33:cc:cb:7e:ee:0a:ec:95:01:2e:2f:82:af:0f:cf:87:f7:e8: e1:a9:e3:f2:35:23:8f:4d:4d:8e:0b:4f:d0:d5:e7:bc:4b:09: 3f:26:9a:f8:fb:f0:a3:68:ab:f1:1b:39:e2:79:f7:8c:84:96: fc:20:97:a3:6e:cf:28:90:cd:03:ba:07:d9:85:7e:9a:f4:a6: 28:c9:e5:30:93:0f:46:72:74:fc:ad:8d:d3:67:d4:0b:5b:91: 85:da:9e:af:c5:23:fa:bd:c9:80:94:2d:d8:81:a9:fb:3d:3f: 76:56:00:41:bc:8a:47:d0:41:43:9c:6e:c2:4f:21:a1:5b:06: 80:af:fe:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNj2WDZ+8AbSf+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGY2MWU2NDgtZTI3ZC00NmYxLWIyMmEtNTZhZTMzYzViYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtyw3cOjx00kzTNyDkzSefAKrSiNESsPPEe1 J8oHe5fggujn70GkvyPj0rVmcVR4++IcZ0gTUWeoBpydiryfzPuJiZyLmHicZa+m 65Zj0/RmSwANOvhztYYAQf2/6vNGuTy15xpSCNguFTv9/0TcTLDxzqPRKzyVGXFM iLmvB/cfFlNwKlFyg6RxefghiObKZfngA5ldawMwYS/5dZNaHl0f6xNAypiBk3TQ 9nBs61H82x6f2/BN2p1j7ZFtmemlJnERX+M8rEGPVRy/Uil5K3fiSoJl9g8W7eAd VDFAofFP6/MwdcMxy+QGNVfnR26sOK+/Cgki4KFUU9x7W9XGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbwYuBWCdzMFWXcaXWV/42OlGG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzY0MjY5OTctN2E2YS0z NWQ2LWIxZjItYTUyMzgwNWU2Nzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG9kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzl5DcsxcyhDdaJHC4SvA3lU6qd1/sYMxmCdbQWoZ6FyemXnrfDyuJW XQB/07a+LwlF8w1OgNEIPtNcYCgVYsa8QR8PGYqeih0uqXZpT/cAovbvDjf+Tbs9 IHqIUwq4h69vBwM8RztIhsynpSPnGipwssMcGtcm6N7+SYX2NzPMy37uCuyVAS4v gq8Pz4f36OGp4/I1I49NTY4LT9DV57xLCT8mmvj78KNoq/EbOeJ594yElvwgl6Nu zyiQzQO6B9mFfpr0pijJ5TCTD0ZydPytjdNn1AtbkYXanq/FI/q9yYCULdiBqfs9 P3ZWAEG8ikfQQUOcbsJPIaFbBoCv/to= -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:16 2025 by rpki-client