$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa File: e8225f6e-5293-3022-a030-8e64395c90ee.roa (raw, json) Hash identifier: rYW57Q2AMlhxPo5TJ8tV6CDb0dQhGSFDDSrGNEJBJBI= Subject key identifier: 85:45:21:A7:4C:53:55:42:A4:C4:2A:B4:E1:51:49:A3:AA:CE:4A:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963663E872A196D55F237F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.107.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:63:e8:72:a1:96:d5:5f:23:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=a77f1349-abb0-4c4f-b9e2-1ce956903629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:15:f5:35:06:89:5e:3c:45:aa:98:ef:52: cc:e1:1c:05:24:1a:24:81:b8:5e:1b:75:fe:3f:0f: 75:44:fc:c0:9a:a8:2a:22:39:0f:73:dd:bb:1d:e5: fb:4c:28:ad:fe:ec:c5:d5:7f:87:7d:c6:2b:18:f1: 07:ab:2a:d5:44:cd:c2:cf:b3:ad:a2:46:21:b5:3c: ac:a8:fe:5c:79:6e:97:fe:9a:fd:7f:19:05:b4:a9: 79:20:bb:60:2b:5f:e8:ec:7b:dd:10:1a:48:8e:57: 36:c7:c8:31:2e:e0:e6:db:3a:35:96:93:a7:d9:40: 38:6e:06:49:de:aa:12:88:ad:68:30:f6:69:de:74: aa:7f:bb:aa:f5:b1:55:06:71:36:e3:c5:a1:cb:24: 11:fa:5a:f8:90:fd:c9:15:ec:ea:ca:c1:e0:78:0c: 46:d2:a7:f2:95:09:02:e9:13:61:90:4f:37:36:a9: ea:ac:cc:50:c9:39:a1:18:79:38:85:b7:ca:9a:76: 46:3c:4f:6e:b3:6e:8a:8e:65:6d:48:be:85:8c:28: 3d:59:6b:9e:9c:cf:73:0a:73:59:e9:5b:6c:ca:aa: 2a:1c:c5:5f:b5:47:77:2d:92:56:d3:73:ac:d2:a1: 91:16:29:d7:bd:f5:51:ab:8a:1f:73:2c:bb:64:85: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:45:21:A7:4C:53:55:42:A4:C4:2A:B4:E1:51:49:A3:AA:CE:4A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e8225f6e-5293-3022-a030-8e64395c90ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0a:6a:33:65:ce:1e:40:af:0c:14:8e:2a:f3:85:df:89:d4: 78:3d:20:fa:0e:3f:d2:af:9b:b7:1c:c5:ae:09:ce:c7:ec:c9: 9c:1d:34:ef:9c:78:48:68:69:b2:62:74:a1:df:3a:56:b6:27: ed:06:6b:dc:53:18:22:be:c7:ed:54:30:31:27:a2:ed:67:85: e3:3f:0b:bf:50:7b:d6:fb:dc:d6:52:b9:e1:b4:58:30:ed:ed: 9b:aa:5e:8d:4e:23:66:cc:35:0d:bc:b6:a3:07:11:8f:43:22: 49:2a:19:0e:f0:6e:a5:43:a9:d8:07:bf:cf:2d:eb:91:b0:3a: ed:26:ee:6f:e8:46:14:e4:af:55:2a:ac:0c:d1:d9:63:4b:54: 43:54:80:86:be:c5:0f:1e:8a:0e:ec:cb:9f:6d:f0:d6:a8:8a: fa:ac:3d:60:2c:9f:b9:4b:11:f5:8f:a4:69:59:8c:bd:5f:a7: 7e:6f:ca:f3:23:51:5b:2f:e1:94:7d:51:56:b2:d3:c4:b2:c1: 01:1a:49:df:f0:e7:f2:21:9d:47:7c:55:a5:8a:da:d2:95:17: 71:23:0e:4a:b9:49:cd:79:f1:a8:b2:ae:2d:93:3c:7c:ad:80: 4f:92:ce:5c:76:ad:a2:c3:7b:b1:d6:15:61:cd:1e:03:16:f5: 5b:df:d6:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmPocqGW1V8jfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YTc3ZjEzNDktYWJiMC00YzRmLWI5ZTItMWNlOTU2OTAzNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsggV9TUGiV48RaqY71LM4RwFJBokgbheG3X+ Pw91RPzAmqgqIjkPc927HeX7TCit/uzF1X+HfcYrGPEHqyrVRM3Cz7OtokYhtTys qP5ceW6X/pr9fxkFtKl5ILtgK1/o7HvdEBpIjlc2x8gxLuDm2zo1lpOn2UA4bgZJ 3qoSiK1oMPZp3nSqf7uq9bFVBnE248WhyyQR+lr4kP3JFezqysHgeAxG0qfylQkC 6RNhkE83NqnqrMxQyTmhGHk4hbfKmnZGPE9us26KjmVtSL6FjCg9WWuenM9zCnNZ 6VtsyqoqHMVftUd3LZJW03Os0qGRFinXvfVRq4ofcyy7ZIW9gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVFIadMU1VCpMQqtOFRSaOqzkp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgyMjVmNmUtNTI5My0z MDIyLWEwMzAtOGU2NDM5NWM5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIKajNlzh5ArwwUjirzhd+J1Hg9IPoOP9Kvm7ccxa4JzsfsyZwdNO+c eEhoabJidKHfOla2J+0Ga9xTGCK+x+1UMDEnou1nheM/C79Qe9b73NZSueG0WDDt 7ZuqXo1OI2bMNQ28tqMHEY9DIkkqGQ7wbqVDqdgHv88t65GwOu0m7m/oRhTkr1Uq rAzR2WNLVENUgIa+xQ8eig7sy59t8NaoivqsPWAsn7lLEfWPpGlZjL1fp35vyvMj UVsv4ZR9UVay08SywQEaSd/w5/IhnUd8VaWK2tKVF3EjDkq5Sc158aiyri2TPHyt gE+Szlx2raLDe7HWFWHNHgMW9Vvf1gE= -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:04 2025 by rpki-client