$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e91368e3-eb5f-3757-88fd-5c3a71568eae.roa File: e91368e3-eb5f-3757-88fd-5c3a71568eae.roa (raw, json) Hash identifier: KTLKxPjCZMhbEC5t+2wTokNyKXKIA4cHNqm5WhKDB1M= Subject key identifier: B3:90:DE:CD:94:71:D0:B2:51:FC:7A:C7:E6:DD:35:5D:F9:BB:42:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360CB652755E223B486258 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e91368e3-eb5f-3757-88fd-5c3a71568eae.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0c:b6:52:75:5e:22:3b:48:62:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=870b5dd5-0e14-44fe-b4bd-d4efbaec921c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:24:9a:d8:51:02:e4:23:2f:27:7f:c1:f9:b6: 2d:36:d8:18:cf:51:bc:69:35:38:b4:3d:65:4c:6d: f0:0c:77:be:f8:fd:12:bb:be:1f:d5:3d:81:17:5d: 36:d1:f9:25:e4:17:e7:cf:7b:1a:c8:6e:ad:8d:0a: ee:41:18:dd:36:29:e3:24:28:98:be:5a:b2:33:b6: fb:61:0e:b5:fc:d4:37:5e:a2:60:09:f7:ea:64:1a: 31:a5:c2:2f:22:cd:c2:af:7b:d9:f0:3c:0e:f2:02: 52:fb:4d:0e:f0:2a:19:3b:28:ff:95:ca:36:9b:8e: 88:23:57:51:9a:9d:6a:25:bf:74:3f:33:bc:3b:11: e4:d8:22:13:1c:9a:bd:0b:08:4a:d2:c5:76:3b:43: f3:ce:10:3a:6a:8d:ea:4d:8b:c6:32:39:02:06:e4: c4:8a:79:cf:69:e5:b4:ec:45:15:10:35:26:e0:78: 45:5e:d0:c4:77:c9:fe:99:a3:24:d1:5f:ff:c3:8f: 5d:0a:35:08:64:56:f1:17:7e:d2:6d:12:1f:4e:b5: 9b:08:ba:d7:ca:0e:a3:4f:65:9b:b1:3c:d8:94:32: a0:e3:1a:fd:30:55:18:50:9b:92:e7:fd:d0:37:94: c2:31:88:74:4b:9b:ac:ac:03:d8:29:6e:fa:53:4f: d9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:90:DE:CD:94:71:D0:B2:51:FC:7A:C7:E6:DD:35:5D:F9:BB:42:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e91368e3-eb5f-3757-88fd-5c3a71568eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7b:97:1f:18:92:05:d5:ee:e0:db:a6:63:07:29:00:e9:cd: ce:1c:56:a2:29:b6:61:f0:c4:67:97:cf:fb:08:a6:4c:9b:72: 45:6b:77:18:64:02:06:b0:9e:75:ac:53:90:92:cc:69:26:b1: f5:c9:39:13:03:2a:d5:26:d2:e9:d7:d6:5d:20:8e:68:0d:df: 1e:9f:b8:3c:5a:4e:43:9e:19:60:9b:07:45:ab:72:5d:c0:b4: 18:52:39:79:d2:39:05:76:7e:8e:fe:d1:81:29:f8:9d:3c:47: 71:66:3f:54:72:8e:37:3e:f7:40:6e:0b:83:9d:f8:89:f1:b2: b6:61:90:3b:2d:2f:03:f4:17:09:d0:e4:9f:38:eb:86:ac:a8: 1a:23:c9:5b:12:c4:7d:32:b0:36:5a:4c:2f:fd:63:2f:58:36: 3a:a7:1d:45:fc:8e:8c:8b:ce:5b:37:88:7d:77:de:65:1a:a2: e2:3b:d6:dc:e6:17:bf:15:76:21:d8:85:c9:9c:06:39:10:98: 16:3e:b2:4e:2a:c0:e3:aa:7d:d5:c5:73:70:d1:66:78:d7:51: f5:11:97:eb:07:ab:b3:df:1f:3c:52:6d:7f:78:73:9b:1f:e7: 28:45:8f:cf:cd:90:af:44:d6:f9:c2:2b:09:40:bd:c4:1c:35: d3:87:00:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgy2UnVeIjtIYlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODcwYjVkZDUtMGUxNC00NGZlLWI0YmQtZDRlZmJhZWM5MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCSa2FEC5CMvJ3/B+bYtNtgYz1G8aTU4tD1l TG3wDHe++P0Su74f1T2BF1020fkl5Bfnz3sayG6tjQruQRjdNinjJCiYvlqyM7b7 YQ61/NQ3XqJgCffqZBoxpcIvIs3Cr3vZ8DwO8gJS+00O8CoZOyj/lco2m46II1dR mp1qJb90PzO8OxHk2CITHJq9CwhK0sV2O0PzzhA6ao3qTYvGMjkCBuTEinnPaeW0 7EUVEDUm4HhFXtDEd8n+maMk0V//w49dCjUIZFbxF37SbRIfTrWbCLrXyg6jT2Wb sTzYlDKg4xr9MFUYUJuS5/3QN5TCMYh0S5usrAPYKW76U0/ZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOQ3s2UcdCyUfx6x+bdNV35u0JJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTkxMzY4ZTMtZWI1Zi0z NzU3LTg4ZmQtNWMzYTcxNTY4ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARADwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC97lx8YkgXV7uDbpmMHKQDpzc4cVqIptmHwxGeXz/sIpkybckVrdxhk AgawnnWsU5CSzGkmsfXJORMDKtUm0unX1l0gjmgN3x6fuDxaTkOeGWCbB0Wrcl3A tBhSOXnSOQV2fo7+0YEp+J08R3FmP1Ryjjc+90BuC4Od+InxsrZhkDstLwP0FwnQ 5J8464asqBojyVsSxH0ysDZaTC/9Yy9YNjqnHUX8joyLzls3iH133mUaouI71tzm F78VdiHYhcmcBjkQmBY+sk4qwOOqfdXFc3DRZnjXUfURl+sHq7PfHzxSbX94c5sf 5yhFj8/NkK9E1vnCKwlAvcQcNdOHAO0= -----END CERTIFICATE-----Generated at Sat Aug 9 05:38:56 2025 by rpki-client