$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfa58918-35d7-3e17-8600-edf4861c6dce.roa File: dfa58918-35d7-3e17-8600-edf4861c6dce.roa (raw, json) Hash identifier: 7oiiR8l3M77Y6qgmbSrpVCeHo/fOPx/jkO1HZ3Vkdi4= Subject key identifier: A0:AD:E5:D5:4E:A2:2D:07:EC:ED:2C:92:D5:87:AE:13:CA:FF:AC:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360C8EC16386E3A1A03220 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfa58918-35d7-3e17-8600-edf4861c6dce.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0c:8e:c1:63:86:e3:a1:a0:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f7fb3314-d062-4ad5-81c2-d54ede0910bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:09:81:ee:71:60:bb:71:07:99:c4:01:f9: 79:e0:dd:df:42:b8:cb:a1:c4:07:12:0d:57:68:ec: e8:f4:42:82:0d:dc:7e:18:f9:54:58:43:93:7a:1e: ba:f3:7c:9b:19:90:79:72:0e:5c:a1:e9:bb:f2:97: 3d:2c:ee:de:66:44:f9:f5:c3:6f:d4:34:ed:ce:50: e6:7c:72:fb:68:52:fa:73:f0:26:8f:9e:f8:0a:05: 8f:1e:5d:c2:0e:65:f1:ad:92:0b:4d:60:70:7a:4b: 20:bb:ee:64:13:be:cc:0e:37:bc:b7:4b:a9:e5:9d: d2:85:84:71:c0:0d:70:eb:85:4b:24:2e:87:7a:fe: 3a:04:dd:11:93:e4:23:ac:79:b4:ef:30:34:95:5d: 10:ee:42:18:55:7a:d7:9f:70:b1:e5:f6:f6:85:96: 66:be:85:b5:b5:fe:e4:46:f4:3e:d6:6c:bc:40:ff: fc:a2:e9:fd:d7:30:f5:3c:6a:05:1f:d3:3b:1b:fb: 83:e3:0d:5a:c9:ab:4b:d5:85:43:79:51:4a:c8:ba: 47:d2:bb:f4:be:91:02:99:3a:de:6e:56:27:42:b0: 8a:e5:1f:f4:e7:ae:56:91:69:cb:b8:78:c2:b4:a4: f4:a8:77:64:47:6d:96:fc:59:ea:fb:af:22:c1:f2: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AD:E5:D5:4E:A2:2D:07:EC:ED:2C:92:D5:87:AE:13:CA:FF:AC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dfa58918-35d7-3e17-8600-edf4861c6dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7d:a6:b7:71:e4:4e:eb:3a:0e:8f:88:bc:af:03:1c:f3:94: 9b:4c:67:2d:0e:af:95:b1:20:4b:f4:32:62:9b:f2:be:29:9a: 25:d0:1c:0a:74:ea:5a:92:c7:2d:5c:d2:af:18:2d:27:85:66: e6:fd:6e:d6:15:4b:fe:6c:e5:4d:81:42:01:85:42:c3:be:27: 17:3d:28:d2:fd:1e:66:75:bb:5c:52:f5:03:b5:05:28:bf:11: 37:60:77:e8:3c:9a:46:69:8e:ef:5e:d6:a1:95:96:23:da:0a: b5:78:8c:c7:14:be:19:9c:36:1a:8a:05:82:d5:d2:d7:60:67: 9d:ed:eb:80:34:c7:84:aa:da:51:06:1d:36:f9:bb:d5:2c:6c: e8:27:e1:ed:1e:d7:50:b8:85:fc:a4:70:ad:bc:a8:c2:88:ed: 09:fb:d7:20:21:87:13:e8:83:31:4d:31:54:2f:29:cd:1f:61: 6c:c3:39:08:8d:45:fb:7e:95:07:8b:2f:b5:5d:38:91:48:7b: 22:3e:a8:d4:68:73:62:02:a8:f3:bb:68:81:ce:1f:9c:2f:b3: dd:52:08:4d:e3:d5:1a:f0:84:7a:fa:08:a5:55:48:df:3a:e4: 26:ee:23:5a:39:6d:d0:66:09:d1:bd:4a:32:57:45:7d:94:0e: ef:7d:cc:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgyOwWOG46GgMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjdmYjMzMTQtZDA2Mi00YWQ1LTgxYzItZDU0ZWRlMDkxMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijEJge5xYLtxB5nEAfl54N3fQrjLocQHEg1X aOzo9EKCDdx+GPlUWEOTeh6683ybGZB5cg5coem78pc9LO7eZkT59cNv1DTtzlDm fHL7aFL6c/Amj574CgWPHl3CDmXxrZILTWBweksgu+5kE77MDje8t0up5Z3ShYRx wA1w64VLJC6Hev46BN0Rk+QjrHm07zA0lV0Q7kIYVXrXn3Cx5fb2hZZmvoW1tf7k RvQ+1my8QP/8oun91zD1PGoFH9M7G/uD4w1ayatL1YVDeVFKyLpH0rv0vpECmTre blYnQrCK5R/0565WkWnLuHjCtKT0qHdkR22W/Fnq+68iwfJrJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCt5dVOoi0H7O0sktWHrhPK/6x/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGZhNTg5MTgtMzVkNy0z ZTE3LTg2MDAtZWRmNDg2MWM2ZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF9prdx5E7rOg6PiLyvAxzzlJtMZy0Or5WxIEv0MmKb8r4pmiXQHAp0 6lqSxy1c0q8YLSeFZub9btYVS/5s5U2BQgGFQsO+Jxc9KNL9HmZ1u1xS9QO1BSi/ ETdgd+g8mkZpju9e1qGVliPaCrV4jMcUvhmcNhqKBYLV0tdgZ53t64A0x4Sq2lEG HTb5u9UsbOgn4e0e11C4hfykcK28qMKI7Qn71yAhhxPogzFNMVQvKc0fYWzDOQiN Rft+lQeLL7VdOJFIeyI+qNRoc2ICqPO7aIHOH5wvs91SCE3j1RrwhHr6CKVVSN86 5CbuI1o5bdBmCdG9SjJXRX2UDu99zFI= -----END CERTIFICATE-----Generated at Fri Aug 8 12:51:51 2025 by rpki-client