$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecc8bd6e-34e3-30bd-80f5-177dbef0f54d.roa File: ecc8bd6e-34e3-30bd-80f5-177dbef0f54d.roa (raw, json) Hash identifier: avru9c4JUs56L+KHxuraX7th9Jnt8Xw8JIPo56Vh+mw= Subject key identifier: 19:8A:3C:0C:43:C6:EC:A4:AB:08:A4:DC:B4:B2:FE:A0:49:51:6B:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361168BA8FF741A084A240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecc8bd6e-34e3-30bd-80f5-177dbef0f54d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:11:68:ba:8f:f7:41:a0:84:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=38097382-6e40-4efe-819a-d4a44da44992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:67:ad:4d:dd:2c:6c:21:3d:21:7b:ac:a1: b7:72:2b:47:a2:53:87:fb:0d:22:31:b4:30:66:41: 20:3e:9c:5c:0e:67:0e:a5:a3:ae:ba:98:a5:23:57: c2:a4:95:33:9e:85:4b:c7:cb:2b:34:d6:b2:26:20: 92:22:1a:a5:c1:e3:b8:7f:ad:1f:c7:11:47:5d:f2: 98:d9:e3:57:18:00:95:00:0e:14:72:a2:a6:02:84: f8:51:95:a5:49:86:3c:4b:18:0b:6e:7a:83:96:a6: 3b:45:b4:2e:03:db:5f:e0:66:47:34:46:7f:f5:be: 4b:8f:3a:57:4a:88:22:6d:90:19:42:fd:23:af:70: d0:e8:91:5b:58:53:b4:8b:7a:68:a6:85:b8:43:cb: ca:e4:1b:13:de:50:eb:53:d9:4e:4b:8f:e7:49:e4: f2:92:55:01:4b:4a:dd:ce:32:ba:bf:d2:ec:b8:33: 50:2c:06:40:7f:d8:ea:c9:25:ff:ab:59:0e:1d:3d: 2a:87:51:c6:c8:81:3f:12:40:78:f2:d9:02:8e:17: f2:b0:6f:a4:bb:05:0a:3e:db:c7:b5:e9:b3:88:1c: bc:00:1b:d5:b3:c3:cb:1a:97:2b:4d:63:8e:82:56: 31:e1:a8:12:b4:0c:43:e5:db:21:31:34:18:4a:88: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8A:3C:0C:43:C6:EC:A4:AB:08:A4:DC:B4:B2:FE:A0:49:51:6B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecc8bd6e-34e3-30bd-80f5-177dbef0f54d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:3e:7b:0b:56:bc:5a:7d:dd:12:fd:fd:0a:ed:66:90:32:55: 41:45:29:8f:64:13:cc:54:df:b0:d7:f4:ef:d1:73:4a:e0:c2: ee:0c:12:5b:8a:e4:55:e5:59:0e:4f:61:00:8a:83:be:18:b1: ec:1c:f9:ff:24:9f:71:e8:91:c3:d9:d1:69:48:98:70:ce:cd: 7c:4a:ed:14:b5:b5:5a:d3:84:98:76:91:19:8d:49:e0:fd:d4: 08:b7:9c:dd:41:94:fc:1d:e0:ca:b0:35:20:55:b4:85:a7:1c: 73:83:00:ae:61:54:96:6a:67:c6:ab:4a:f5:32:4e:b8:6b:a9: 07:c4:40:14:21:b0:e9:7b:e8:10:d0:74:7a:f5:5d:f5:07:74: 26:4c:d2:45:fa:8d:24:4b:02:41:73:34:9b:5f:11:4f:ba:b0: c7:38:8e:89:be:da:fe:cf:a9:b2:4c:b9:da:50:4a:34:22:4d: f5:b2:fa:cc:ff:c2:89:3c:41:d2:60:6d:d2:fc:e5:ed:66:71: fa:ab:50:fe:2f:f6:7e:3e:2d:45:2b:17:2b:43:0f:9e:16:b4: 24:f3:c0:79:89:6b:c8:de:7b:03:d2:88:b1:84:6a:53:d5:0a: 60:1f:3a:b7:91:1b:c6:ef:c6:1c:32:de:35:a4:4d:9e:85:c3: b3:b1:6f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhFouo/3QaCEokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzgwOTczODItNmU0MC00ZWZlLTgxOWEtZDRhNDRkYTQ0OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4pnrU3dLGwhPSF7rKG3citHolOH+w0iMbQw ZkEgPpxcDmcOpaOuupilI1fCpJUznoVLx8srNNayJiCSIhqlweO4f60fxxFHXfKY 2eNXGACVAA4UcqKmAoT4UZWlSYY8SxgLbnqDlqY7RbQuA9tf4GZHNEZ/9b5LjzpX SogibZAZQv0jr3DQ6JFbWFO0i3popoW4Q8vK5BsT3lDrU9lOS4/nSeTyklUBS0rd zjK6v9LsuDNQLAZAf9jqySX/q1kOHT0qh1HGyIE/EkB48tkCjhfysG+kuwUKPtvH temziBy8ABvVs8PLGpcrTWOOglYx4agStAxD5dshMTQYSoghrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmKPAxDxuykqwik3LSy/qBJUWt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWNjOGJkNmUtMzRlMy0z MGJkLTgwZjUtMTc3ZGJlZjBmNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKc+ewtWvFp93RL9/QrtZpAyVUFFKY9kE8xU37DX9O/Rc0rgwu4MEluK 5FXlWQ5PYQCKg74Ysewc+f8kn3HokcPZ0WlImHDOzXxK7RS1tVrThJh2kRmNSeD9 1Ai3nN1BlPwd4MqwNSBVtIWnHHODAK5hVJZqZ8arSvUyTrhrqQfEQBQhsOl76BDQ dHr1XfUHdCZM0kX6jSRLAkFzNJtfEU+6sMc4jom+2v7PqbJMudpQSjQiTfWy+sz/ wok8QdJgbdL85e1mcfqrUP4v9n4+LUUrFytDD54WtCTzwHmJa8jeewPSiLGEalPV CmAfOreRG8bvxhwy3jWkTZ6Fw7Oxbwk= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:44 2025 by rpki-client