$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9c68921-570e-3a49-983e-e43ee2810ca7.roa File: d9c68921-570e-3a49-983e-e43ee2810ca7.roa (raw, json) Hash identifier: smDBimAbKVnXmT7+M2F4EATzKXBAZ9bbZsxHKDox7SE= Subject key identifier: 1C:9F:9D:4A:7B:B5:B7:8D:66:CA:53:75:04:C6:80:3E:07:E1:1D:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367FDFF8FE76274072BF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9c68921-570e-3a49-983e-e43ee2810ca7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 174.65.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7f:df:f8:fe:76:27:40:72:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=7bc6ef97-d1fa-4717-8d35-dc730e393082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:b4:cd:b7:37:bf:98:1e:5c:8c:6b:54:41: e5:d6:7a:96:a8:ff:71:ee:87:e3:87:92:37:85:4e: 7e:6b:3f:ad:0a:a6:08:37:88:f8:ae:ed:0a:d2:a7: 89:24:21:17:75:0f:4a:bd:8c:66:26:28:60:17:80: 65:4d:ba:43:39:63:0a:e7:3a:97:07:d7:cc:df:e3: 57:c0:e4:3e:c5:08:d0:aa:69:6e:45:d4:d9:dc:ba: f7:f8:e3:66:59:2b:78:ec:e4:cf:bd:25:70:60:6d: be:4a:c3:a9:31:80:c5:84:32:6e:14:03:da:6b:9d: d5:05:22:73:93:1b:bb:c6:59:f2:80:25:64:d9:bf: 4e:d0:86:ef:d7:7e:fb:f5:aa:a2:41:dc:1b:d5:2f: e9:72:e2:76:87:6b:d5:f6:3b:60:a1:42:4f:8c:bd: 82:95:48:a7:dc:f6:70:2b:e6:25:89:2a:57:78:18: 29:ad:d0:6e:ee:de:ec:26:d3:29:e6:96:99:88:86: c9:fc:89:53:a3:0a:77:2c:1f:24:ba:f7:32:d5:e0: ac:29:b1:44:36:97:2f:03:2e:4e:a7:62:82:c4:d3: f8:c8:67:f7:54:81:e1:b0:6c:d0:2a:86:02:42:a1: 4a:34:42:64:00:46:a6:fe:0f:ba:78:a4:a5:a9:16: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:9F:9D:4A:7B:B5:B7:8D:66:CA:53:75:04:C6:80:3E:07:E1:1D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9c68921-570e-3a49-983e-e43ee2810ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e8:bd:79:9b:84:77:a4:80:8d:44:d1:ff:34:cc:99:d7:a1: 11:a8:13:c1:43:fd:4e:d9:92:80:a4:04:26:75:15:3c:65:4e: f0:97:5f:3b:82:24:59:3f:10:45:10:c7:bc:d3:a1:fa:c7:cb: ae:53:22:69:5c:ab:a2:4e:e1:29:d9:f5:06:b6:c2:e7:c7:d8: 46:be:f3:3a:f6:4d:b8:8a:63:86:ef:c2:75:04:a8:f5:e0:b1: 1b:70:ad:18:c7:d6:3b:4e:ed:bc:5c:2b:0a:d3:a5:2e:fd:55: 81:20:e1:f5:76:15:c0:3d:0a:84:0f:03:f1:07:a0:1e:3c:38: c1:c5:07:53:6e:31:e9:a8:29:7d:3a:5b:74:77:0b:0c:e6:59: 73:f8:83:ef:87:25:e0:13:2a:25:c9:5d:1b:cc:b6:5c:0f:2c: 49:d3:b2:f6:de:18:64:f6:6a:19:e7:03:8f:63:06:9e:be:ff: 9b:44:de:d1:0f:d3:23:77:26:e0:a4:d7:66:66:e8:e2:f6:7a: e3:d3:3c:f5:0f:83:0c:b5:72:75:5a:67:89:16:4b:47:1e:27: 52:3a:18:74:37:2a:64:a8:50:3b:8e:67:5d:cc:18:c2:10:02: 2a:fa:fb:39:81:04:14:4f:9d:ab:41:5e:f1:08:a9:59:a7:a1: 4b:9d:fc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNn/f+P52J0Byv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk N2JjNmVmOTctZDFmYS00NzE3LThkMzUtZGM3MzBlMzkzMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8e0zbc3v5geXIxrVEHl1nqWqP9x7ofjh5I3 hU5+az+tCqYIN4j4ru0K0qeJJCEXdQ9KvYxmJihgF4BlTbpDOWMK5zqXB9fM3+NX wOQ+xQjQqmluRdTZ3Lr3+ONmWSt47OTPvSVwYG2+SsOpMYDFhDJuFAPaa53VBSJz kxu7xlnygCVk2b9O0Ibv13779aqiQdwb1S/pcuJ2h2vV9jtgoUJPjL2ClUin3PZw K+YliSpXeBgprdBu7t7sJtMp5paZiIbJ/IlTowp3LB8kuvcy1eCsKbFENpcvAy5O p2KCxNP4yGf3VIHhsGzQKoYCQqFKNEJkAEam/g+6eKSlqRb6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByfnUp7tbeNZspTdQTGgD4H4R3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDljNjg5MjEtNTcwZS0z YTQ5LTk4M2UtZTQzZWUyODEwY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzovXmbhHekgI1E0f80zJnXoRGoE8FD/U7ZkoCkBCZ1FTxlTvCXXzuC JFk/EEUQx7zTofrHy65TImlcq6JO4SnZ9Qa2wufH2Ea+8zr2TbiKY4bvwnUEqPXg sRtwrRjH1jtO7bxcKwrTpS79VYEg4fV2FcA9CoQPA/EHoB48OMHFB1NuMemoKX06 W3R3CwzmWXP4g++HJeATKiXJXRvMtlwPLEnTsvbeGGT2ahnnA49jBp6+/5tE3tEP 0yN3JuCk12Zm6OL2euPTPPUPgwy1cnVaZ4kWS0ceJ1I6GHQ3KmSoUDuOZ13MGMIQ Air6+zmBBBRPnatBXvEIqVmnoUud/AY= -----END CERTIFICATE-----Generated at Thu Aug 7 05:10:53 2025 by rpki-client