$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa File: d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa (raw, json) Hash identifier: SnKhJycikNNFzrdu2onyScV++R/icg2aLgOv2xJ6xqw= Subject key identifier: ED:49:2F:56:5C:17:06:7D:A9:E0:C4:0B:B7:67:8E:22:38:61:82:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AAB266DECF9F45DBCE7D9E380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 23000 IP address blocks: 68.15.153.80/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:6d:ec:f9:f4:5d:bc:e7:d9:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=8e3ba01c-926e-4c18-99b5-fa0473442922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:50:f5:64:66:b6:83:f9:d8:6f:68:17:5a: 49:0c:5f:f8:6d:26:1d:b7:a4:09:c3:c3:43:31:86: e7:00:bd:3f:67:e1:4c:a8:57:34:d0:18:69:ab:8a: 7d:00:32:dd:ad:02:33:36:de:a0:e8:e7:3c:03:bb: 6c:c9:95:73:3e:10:50:a7:b5:5c:23:23:df:e2:78: ce:07:55:c6:ef:00:5c:34:c8:90:9e:ac:02:30:ac: 70:6d:20:4b:af:c4:3d:f0:d5:76:35:bd:b3:82:5e: f2:69:61:ad:77:fb:f8:62:1e:e2:43:8d:91:44:d7: d9:4c:39:2c:5b:02:89:f2:05:0b:10:b4:ff:00:63: b2:b4:85:b7:27:6c:3f:53:a9:80:a4:37:42:f5:2b: 8d:ad:02:94:e3:32:31:8f:c7:dc:23:04:37:93:93: f2:ef:47:9c:ab:c8:c6:4f:43:37:40:c3:5b:63:c8: 9c:f4:27:18:b4:49:ce:1f:6f:09:3e:af:9c:5c:5e: ee:31:db:9a:c1:41:45:fd:0d:c6:2c:88:ed:0c:bd: dc:7d:0b:d1:ae:00:72:5a:5d:99:86:09:e6:de:22: bf:00:91:8a:e6:f2:66:81:fe:57:86:c0:ea:86:16: de:5f:ab:d3:a6:89:99:49:28:b0:9d:b7:11:cb:b3: f6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:49:2F:56:5C:17:06:7D:A9:E0:C4:0B:B7:67:8E:22:38:61:82:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.153.80/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0a:cd:d5:93:3d:06:d2:87:c6:0f:a8:5d:fa:76:d2:66:3f: f7:7b:b4:c1:cb:3e:97:ea:76:49:37:dd:ec:c0:7e:b3:db:71: 0f:73:b7:18:1f:92:ad:7b:e0:7c:72:2c:44:b8:6f:6e:23:df: 85:62:d5:dd:fe:83:da:06:b4:e7:28:10:2b:21:eb:b2:83:78: 27:45:91:99:98:5e:ee:f8:5b:d8:e2:87:c1:10:ad:bf:06:ec: 54:9c:1e:d2:32:52:04:80:67:89:25:04:00:0f:4c:e1:f6:8b: aa:f6:59:a2:70:73:b7:cd:f7:ba:ff:b0:64:3f:04:82:bb:60: a9:1b:a8:f1:12:6a:63:b9:1c:fd:12:da:dd:88:f1:63:54:d2: 6c:1f:f0:a1:83:cb:29:da:29:b8:8d:0c:2d:11:19:40:50:6b: e7:09:23:bd:f6:01:43:06:38:7e:cc:bc:90:16:26:33:26:2f: 10:d9:05:aa:cb:65:49:21:b8:87:b7:87:20:b2:3a:e1:18:4b: 89:b4:ad:49:07:f1:af:ab:24:b5:87:71:7a:6e:cd:ba:02:6d: 4b:0e:6a:a6:88:bd:03:35:4a:ee:02:36:15:bc:46:cc:8e:70: a2:5c:10:9f:b5:2f:e0:7c:72:7f:1d:19:eb:c3:26:c5:da:a7: d0:ff:43:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqrJm3s+fRdvOfZ44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk OGUzYmEwMWMtOTI2ZS00YzE4LTk5YjUtZmEwNDczNDQyOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9Q9WRmtoP52G9oF1pJDF/4bSYdt6QJw8ND MYbnAL0/Z+FMqFc00Bhpq4p9ADLdrQIzNt6g6Oc8A7tsyZVzPhBQp7VcIyPf4njO B1XG7wBcNMiQnqwCMKxwbSBLr8Q98NV2Nb2zgl7yaWGtd/v4Yh7iQ42RRNfZTDks WwKJ8gULELT/AGOytIW3J2w/U6mApDdC9SuNrQKU4zIxj8fcIwQ3k5Py70ecq8jG T0M3QMNbY8ic9CcYtEnOH28JPq+cXF7uMduawUFF/Q3GLIjtDL3cfQvRrgByWl2Z hgnm3iK/AJGK5vJmgf5XhsDqhhbeX6vTpomZSSiwnbcRy7P2vQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO1JL1ZcFwZ9qeDEC7dnjiI4YYJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDU0OGU1ZjEtYzM5Zi0z MmFlLThhMWEtMzYwOWVlODNkZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDRA+ZUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8Cs3Vkz0G0ofGD6hd+nbSZj/3e7TByz6X6nZJN93swH6z23EPc7cY H5Kte+B8cixEuG9uI9+FYtXd/oPaBrTnKBArIeuyg3gnRZGZmF7u+FvY4ofBEK2/ BuxUnB7SMlIEgGeJJQQAD0zh9ouq9lmicHO3zfe6/7BkPwSCu2CpG6jxEmpjuRz9 EtrdiPFjVNJsH/Chg8sp2im4jQwtERlAUGvnCSO99gFDBjh+zLyQFiYzJi8Q2QWq y2VJIbiHt4cgsjrhGEuJtK1JB/GvqyS1h3F6bs26Am1LDmqmiL0DNUruAjYVvEbM jnCiXBCftS/gfHJ/HRnrwybF2qfQ/0O9 -----END CERTIFICATE-----Generated at Sat Aug 9 00:59:55 2025 by rpki-client