$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbea592-20e6-36cd-9bda-8399ac67f84b.roa File: ddbea592-20e6-36cd-9bda-8399ac67f84b.roa (raw, json) Hash identifier: iE788kS3pEC2uWhcirDIHa0M3VHUXeRSZhzzj4Hm9j4= Subject key identifier: 48:04:DD:D9:48:0D:52:47:6A:87:2E:56:27:07:B5:B4:69:7F:0C:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360E255DC01CDDB93E4A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbea592-20e6-36cd-9bda-8399ac67f84b.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.1.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0e:25:5d:c0:1c:dd:b9:3e:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=3b6b0dd4-9d36-462c-97a7-2eb59be45e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:77:ea:49:51:ce:71:9c:5b:8f:44:10:f9: 84:d3:d9:0c:a4:df:dc:06:bd:50:83:f1:f5:77:9c: 3c:71:c4:ef:d6:f9:09:b7:a8:95:19:9b:f8:04:8d: aa:f5:56:85:3c:0d:40:a9:da:81:a0:cc:d5:a4:20: da:b7:a1:be:8e:87:7c:22:cb:eb:47:71:f3:00:d2: 25:4d:c5:0c:d9:5d:67:5b:e9:eb:76:8a:a1:fd:48: 9c:27:ba:94:9c:67:b8:49:e8:7f:17:22:82:db:ed: f1:c3:8e:26:b1:de:16:52:58:bd:95:0c:eb:fb:8a: 78:7a:3e:cd:36:5b:d1:1b:84:b9:98:a2:d8:b7:be: 39:56:35:1c:08:0f:44:4f:76:e3:ef:7a:41:49:a3: 7e:bd:f9:33:6f:9e:04:cc:1d:5f:ec:c9:52:8a:54: 62:cb:f0:83:22:f5:1c:31:4a:9a:8d:80:bd:2a:1b: df:dc:d1:95:0a:95:a0:90:81:ad:d8:4a:06:f6:e1: 92:ef:69:6b:90:89:fe:f9:71:f2:93:cd:06:e5:5e: 5e:d1:7d:c6:31:65:f1:97:34:12:cd:66:8c:7b:53: b6:7e:71:0a:af:a1:f5:65:6e:77:1e:f5:61:e5:d1: 86:63:00:3f:ba:9d:8a:90:20:a5:90:e4:f0:7e:06: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:DD:D9:48:0D:52:47:6A:87:2E:56:27:07:B5:B4:69:7F:0C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddbea592-20e6-36cd-9bda-8399ac67f84b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:15:4c:84:73:47:96:7a:cf:fd:77:96:2b:11:55:75:c9:35: a7:3d:74:1c:5f:60:6c:10:c6:a6:b9:ad:d1:72:64:e1:2c:2f: 2c:87:88:24:d6:2e:d5:0b:8e:d6:6f:a7:5c:de:e0:03:20:7b: 8b:84:c4:7b:71:d1:98:dd:f5:79:a6:c3:6f:cf:3e:ff:a7:68: a3:22:e4:de:d9:c1:53:3a:15:ff:8e:11:61:ae:d4:69:ce:72: 32:c3:d7:33:e7:f1:1b:59:f5:85:59:b7:e3:92:76:2e:e4:27: f2:c1:cf:d9:d8:c8:c4:3c:42:44:b2:93:fc:9e:7e:27:2c:5d: 5b:f6:f6:37:47:c3:98:80:95:ea:d0:79:2a:b1:70:9f:f9:bb: 2e:61:87:ae:cd:a7:ac:a1:10:dc:8f:52:af:a0:4a:2a:4a:8c: ec:34:a2:dc:64:06:70:5d:e6:50:0e:99:c5:ff:4c:84:df:43: ae:82:a7:0a:c1:aa:44:59:df:49:2c:f0:fd:bb:16:f1:69:bb: 81:0d:26:aa:3a:c1:dd:0b:ae:3b:5f:f0:bf:b3:61:e9:46:bb: 3b:27:f0:86:d1:ab:74:e8:9a:6f:71:ad:01:51:9f:f3:44:86: 4b:32:d0:e9:a9:be:7c:c9:02:6f:a6:77:58:fb:a6:ad:7f:73: 33:1d:ec:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNg4lXcAc3bk+SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk M2I2YjBkZDQtOWQzNi00NjJjLTk3YTctMmViNTliZTQ1ZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkod36klRznGcW49EEPmE09kMpN/cBr1Qg/H1 d5w8ccTv1vkJt6iVGZv4BI2q9VaFPA1AqdqBoMzVpCDat6G+jod8IsvrR3HzANIl TcUM2V1nW+nrdoqh/UicJ7qUnGe4Seh/FyKC2+3xw44msd4WUli9lQzr+4p4ej7N NlvRG4S5mKLYt745VjUcCA9ET3bj73pBSaN+vfkzb54EzB1f7MlSilRiy/CDIvUc MUqajYC9Khvf3NGVCpWgkIGt2EoG9uGS72lrkIn++XHyk80G5V5e0X3GMWXxlzQS zWaMe1O2fnEKr6H1ZW53HvVh5dGGYwA/up2KkCClkOTwfgbDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgE3dlIDVJHaocuVicHtbRpfwz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRiZWE1OTItMjBlNi0z NmNkLTliZGEtODM5OWFjNjdmODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsVTIRzR5Z6z/13lisRVXXJNac9dBxfYGwQxqa5rdFyZOEsLyyHiCTW LtULjtZvp1ze4AMge4uExHtx0Zjd9Xmmw2/PPv+naKMi5N7ZwVM6Ff+OEWGu1GnO cjLD1zPn8RtZ9YVZt+OSdi7kJ/LBz9nYyMQ8QkSyk/yeficsXVv29jdHw5iAlerQ eSqxcJ/5uy5hh67Np6yhENyPUq+gSipKjOw0otxkBnBd5lAOmcX/TITfQ66CpwrB qkRZ30ks8P27FvFpu4ENJqo6wd0Lrjtf8L+zYelGuzsn8IbRq3Tomm9xrQFRn/NE hksy0OmpvnzJAm+md1j7pq1/czMd7IM= -----END CERTIFICATE-----Generated at Fri Aug 8 19:34:24 2025 by rpki-client