$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecea78c6-8aa9-3d78-80f8-c2aa6b88080a.roa File: ecea78c6-8aa9-3d78-80f8-c2aa6b88080a.roa (raw, json) Hash identifier: I9etvYQB4bRTZYF//VpuWuWFQPqKpfV6qmRifKgioiQ= Subject key identifier: 44:81:10:C0:0C:F5:01:D8:0B:D0:A9:84:B7:65:74:1D:FE:41:BC:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963619823D39759FB8E0E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecea78c6-8aa9-3d78-80f8-c2aa6b88080a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.14.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:19:82:3d:39:75:9f:b8:e0:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=04891d28-dbe6-4414-a725-44f84f606b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:03:18:5c:1d:2f:ff:7f:92:ae:61:90:82: 01:e0:98:f7:69:6b:8a:06:8e:aa:a9:34:96:1d:12: 44:c0:f6:b5:5c:df:3d:88:08:1d:05:b3:f8:3b:c8: 49:e6:99:a9:6f:d6:9d:1a:d9:4a:1d:9e:c1:bd:55: 02:42:f9:b3:3f:64:fd:fa:67:eb:6c:f3:71:a0:ec: 95:27:d3:ae:99:dd:07:1e:47:63:11:fd:34:c2:ee: 94:f4:f4:ed:c9:83:ac:6c:71:98:9e:cc:d6:f1:1f: b5:4f:8c:2d:6b:5b:00:58:34:5f:7d:79:1b:32:f0: 81:81:c8:13:1c:33:94:6e:3b:6d:b1:c7:b9:1a:c8: 78:29:3e:a9:37:21:0c:86:79:92:64:85:fe:c6:09: dc:15:32:74:62:3e:4e:f4:a6:b5:a7:57:5d:5d:79: 42:25:b7:2b:36:98:24:e0:7d:51:15:ee:e9:6e:0d: a8:66:ac:55:bd:0a:9e:e3:d7:eb:e7:0d:99:e1:94: c0:82:6f:3a:bd:5e:9e:e3:25:32:09:ce:f2:77:53: dc:ae:0c:fe:6d:e1:f3:f8:31:b8:8b:72:00:9f:5c: 5d:96:8c:78:e1:98:dd:d5:b9:e0:6b:4d:4a:09:9f: de:0a:a5:fe:9d:3c:3e:7a:8f:6c:e9:5e:e4:4c:9e: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:81:10:C0:0C:F5:01:D8:0B:D0:A9:84:B7:65:74:1D:FE:41:BC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ecea78c6-8aa9-3d78-80f8-c2aa6b88080a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9c:29:5b:11:5e:9d:1c:a3:2a:e1:dc:0e:2b:01:e6:ac:86: 9c:1f:78:bc:61:c3:75:c4:8d:9d:ec:45:c5:90:b6:0b:24:0a: 69:48:3f:89:e4:93:dc:af:ee:0d:cc:de:b3:28:09:62:3f:60: e0:61:18:34:68:f3:17:9b:c0:36:a8:10:f5:2b:1c:00:f8:76: 38:7e:b3:c6:82:0d:d2:e1:4f:97:6b:83:fe:f9:84:b8:1c:5d: c7:f5:d1:80:e3:1c:76:87:32:de:10:b6:19:23:68:27:23:0d: 70:ac:38:b5:2e:04:0d:a8:1b:69:04:35:8e:c7:9f:cf:fc:c3: 2c:e1:2f:20:d6:60:d9:f4:66:4a:90:c3:ed:ea:fc:2f:10:1f: 33:aa:06:7c:61:59:07:91:a0:81:9d:6c:ae:96:ad:11:e9:54: 85:f3:48:8d:b3:19:fe:54:fa:72:ba:1e:d3:10:a0:11:19:39: 41:27:64:5f:ae:ea:db:e5:3e:f0:db:72:b4:76:5f:96:9c:2e: 21:3f:24:6a:c1:86:3f:6a:28:58:84:9f:39:4b:1f:fc:de:86: 2d:6b:ba:d2:22:4a:03:24:90:82:ae:6e:39:10:3a:db:e3:0e: e2:dc:5a:86:33:bc:93:e4:b3:df:e5:08:1b:00:47:a8:8f:e9: 97:6d:47:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhmCPTl1n7jg4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDQ4OTFkMjgtZGJlNi00NDE0LWE3MjUtNDRmODRmNjA2YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoigDGFwdL/9/kq5hkIIB4Jj3aWuKBo6qqTSW HRJEwPa1XN89iAgdBbP4O8hJ5pmpb9adGtlKHZ7BvVUCQvmzP2T9+mfrbPNxoOyV J9Oumd0HHkdjEf00wu6U9PTtyYOsbHGYnszW8R+1T4wta1sAWDRffXkbMvCBgcgT HDOUbjttsce5Gsh4KT6pNyEMhnmSZIX+xgncFTJ0Yj5O9Ka1p1ddXXlCJbcrNpgk 4H1RFe7pbg2oZqxVvQqe49fr5w2Z4ZTAgm86vV6e4yUyCc7yd1Pcrgz+beHz+DG4 i3IAn1xdlox44Zjd1bnga01KCZ/eCqX+nTw+eo9s6V7kTJ5BvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESBEMAM9QHYC9CphLdldB3+Qbw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWNlYTc4YzYtOGFhOS0z ZDc4LTgwZjgtYzJhYTZiODgwODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKcKVsRXp0coyrh3A4rAeashpwfeLxhw3XEjZ3sRcWQtgskCmlIP4nk k9yv7g3M3rMoCWI/YOBhGDRo8xebwDaoEPUrHAD4djh+s8aCDdLhT5drg/75hLgc Xcf10YDjHHaHMt4QthkjaCcjDXCsOLUuBA2oG2kENY7Hn8/8wyzhLyDWYNn0ZkqQ w+3q/C8QHzOqBnxhWQeRoIGdbK6WrRHpVIXzSI2zGf5U+nK6HtMQoBEZOUEnZF+u 6tvlPvDbcrR2X5acLiE/JGrBhj9qKFiEnzlLH/zehi1rutIiSgMkkIKubjkQOtvj DuLcWoYzvJPks9/lCBsAR6iP6ZdtRwQ= -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:53 2025 by rpki-client