$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7df950-0536-3691-8324-97bb3fd412e0.roa File: fd7df950-0536-3691-8324-97bb3fd412e0.roa (raw, json) Hash identifier: 0ukNdebnNm6HVN1MhZnvhkT+GUYITtSLq244zFsPx+0= Subject key identifier: 64:07:1B:E9:8E:63:F3:4E:E2:ED:78:D4:1C:E1:5E:28:E7:CE:3C:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365C4B9028602A64E1A1B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7df950-0536-3691-8324-97bb3fd412e0.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.8.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5c:4b:90:28:60:2a:64:e1:a1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=8eec1761-d77d-472b-95a5-7b89bcd7ce8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:c4:e6:63:01:97:06:10:2b:e9:66:95:07: 8d:1b:0f:fc:1d:0b:42:cb:b6:dd:5f:8e:41:a0:08: 8a:c7:5f:29:37:d0:3d:1b:ba:5a:c6:e5:59:09:53: 8f:36:e4:e4:8d:9a:e3:60:17:f7:f4:9a:97:f4:51: b1:61:08:30:b5:82:08:94:36:c8:e3:35:2b:ca:bf: 38:ce:5d:dd:8d:14:64:e1:b3:03:17:9c:ba:44:be: 5b:a5:6c:36:10:9c:7a:b7:e8:d8:90:26:d1:4e:e3: fd:07:85:2c:d7:12:a0:87:65:96:94:cf:76:16:d1: bb:23:55:12:7a:8a:06:c7:1e:78:bb:53:22:21:9d: 18:c5:b6:c9:a8:2d:a3:f9:8b:c1:07:ef:11:af:2d: 26:69:17:18:7d:58:64:88:e5:4e:16:64:23:9a:4c: e9:07:07:02:0e:aa:b3:cb:1b:23:f6:d3:7c:a5:66: 60:7d:0a:93:2e:12:eb:8a:8a:5d:ca:60:cb:c1:8a: 7f:a2:78:53:37:0e:52:27:c3:11:42:e6:56:05:b1: 11:93:e7:c5:4f:96:ca:68:8f:b5:a0:0f:5d:c5:0f: 16:42:3b:e0:12:b9:a4:64:29:44:69:76:8a:74:7d: 91:d3:d4:17:8e:2d:37:ca:ff:e8:24:c3:fb:f8:b0: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:07:1B:E9:8E:63:F3:4E:E2:ED:78:D4:1C:E1:5E:28:E7:CE:3C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd7df950-0536-3691-8324-97bb3fd412e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4b:6e:61:c7:3d:7f:82:83:2f:ef:f9:31:89:82:94:78:96: d4:6d:86:2e:74:5b:cc:17:7e:6f:d8:39:89:6e:c3:05:4d:c7: 4f:51:7a:f2:e7:39:71:a8:26:ea:25:6a:ec:b8:2c:72:59:51: 42:42:0a:dc:51:05:32:e6:50:6f:72:67:9d:92:1b:b0:01:a9: 41:98:5f:3f:1e:3f:56:e0:9d:c8:5c:b6:43:c7:4b:68:15:82: 0d:cf:4f:7b:9f:ed:68:9c:25:18:23:e9:af:79:32:2c:81:e6: 65:d8:60:24:fa:2f:26:60:37:99:86:b0:ed:08:8a:9a:29:3f: e4:c4:af:46:d2:71:ce:5f:7f:c3:d2:72:a6:44:45:f9:61:d9: 31:9c:19:3c:c1:ca:3c:73:b2:5a:2d:a9:9d:50:d7:cf:32:9a: 53:5e:d2:ac:39:82:56:2c:a4:24:d2:ed:1e:41:77:8c:85:ea: 36:f3:43:e6:90:59:de:e8:dd:d2:76:89:5f:47:d2:99:15:af: e4:13:4e:99:b3:b6:fc:e9:fb:97:da:d2:03:da:92:7a:00:68: 33:bc:6a:e9:4b:a8:15:e6:d1:d5:38:c6:f4:6a:10:ce:f5:2f: 1f:67:05:69:d7:bd:b7:f4:68:00:0d:9c:b0:a4:d3:ba:c9:6c: ab:ca:37:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlxLkChgKmThobAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OGVlYzE3NjEtZDc3ZC00NzJiLTk1YTUtN2I4OWJjZDdjZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zE5mMBlwYQK+lmlQeNGw/8HQtCy7bdX45B oAiKx18pN9A9G7paxuVZCVOPNuTkjZrjYBf39JqX9FGxYQgwtYIIlDbI4zUryr84 zl3djRRk4bMDF5y6RL5bpWw2EJx6t+jYkCbRTuP9B4Us1xKgh2WWlM92FtG7I1US eooGxx54u1MiIZ0YxbbJqC2j+YvBB+8Rry0maRcYfVhkiOVOFmQjmkzpBwcCDqqz yxsj9tN8pWZgfQqTLhLriopdymDLwYp/onhTNw5SJ8MRQuZWBbERk+fFT5bKaI+1 oA9dxQ8WQjvgErmkZClEaXaKdH2R09QXji03yv/oJMP7+LAJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQHG+mOY/NO4u141BzhXijnzjw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQ3ZGY5NTAtMDUzNi0z NjkxLTgzMjQtOTdiYjNmZDQxMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlLbmHHPX+Cgy/v+TGJgpR4ltRthi50W8wXfm/YOYluwwVNx09RevLn OXGoJuolauy4LHJZUUJCCtxRBTLmUG9yZ52SG7ABqUGYXz8eP1bgnchctkPHS2gV gg3PT3uf7WicJRgj6a95MiyB5mXYYCT6LyZgN5mGsO0IipopP+TEr0bScc5ff8PS cqZERflh2TGcGTzByjxzslotqZ1Q188ymlNe0qw5glYspCTS7R5Bd4yF6jbzQ+aQ Wd7o3dJ2iV9H0pkVr+QTTpmztvzp+5fa0gPaknoAaDO8aulLqBXm0dU4xvRqEM71 Lx9nBWnXvbf0aAANnLCk07rJbKvKN4Y= -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:04 2025 by rpki-client