$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe0047b7-62f8-3e92-a93b-d8a3b3d8096a.roa File: fe0047b7-62f8-3e92-a93b-d8a3b3d8096a.roa (raw, json) Hash identifier: oPGccZ5AclZLp1eXrVmta8LZibJcC6kXvXZv7y9Erp0= Subject key identifier: AB:9D:E5:2A:A1:B2:10:44:AE:C7:5A:67:43:57:98:80:39:48:0B:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360EB95A45F0B8F39C7800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe0047b7-62f8-3e92-a93b-d8a3b3d8096a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0e:b9:5a:45:f0:b8:f3:9c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=954e8d85-79c3-46f0-b9b1-816fd468d8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:3b:60:90:8f:f1:b7:36:c6:69:1b:f5:46: 43:52:51:ea:78:00:df:3d:cb:1a:82:bf:ba:a2:6d: 25:7a:3e:f1:b0:13:d9:e5:41:8a:f1:96:3c:d5:83: 4b:72:0f:11:90:83:fe:c5:de:c7:9a:aa:e7:77:bb: 93:52:5d:59:70:66:c0:4c:81:90:0f:0b:b3:ab:aa: a6:26:b9:e8:1e:0e:5c:f3:38:de:f1:98:bf:9b:72: d5:6f:50:27:a3:82:98:7b:7f:f2:b3:48:fa:d2:eb: 1a:48:87:3a:3f:fc:be:7a:57:91:f5:10:48:8b:dd: d8:b8:16:74:cf:54:ba:b1:1f:d5:98:32:6e:39:06: 57:02:d6:1f:3b:17:00:d1:e0:8a:e3:1c:92:35:8e: 14:53:83:f2:f8:6a:4c:c6:b1:74:4e:b8:54:44:a9: 6b:1c:27:54:7d:f7:0c:00:21:81:ee:3e:bd:6a:f6: 55:19:65:f7:70:ad:62:4c:c5:0f:fc:fb:cb:fc:d9: 0d:b0:6a:d5:d4:1b:c4:ab:35:7d:f1:3e:35:5a:33: 6b:4f:23:f8:41:15:97:97:c9:17:33:8b:89:4c:44: 81:e6:29:02:5d:60:ac:eb:47:36:e0:2e:3d:a6:10: 50:5a:13:27:83:32:1b:59:98:c0:08:6b:c1:de:24: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:E5:2A:A1:B2:10:44:AE:C7:5A:67:43:57:98:80:39:48:0B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe0047b7-62f8-3e92-a93b-d8a3b3d8096a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:be:1d:c1:87:b6:ef:0b:c6:4a:df:91:ca:a0:70:b1:99: 29:54:b4:9f:c0:11:bd:08:e8:46:41:9e:ea:d7:50:4b:d5:c3: 67:0a:8d:bb:ca:e3:9f:75:ce:12:be:f5:a9:a4:7c:23:7f:36: cd:e7:74:0f:76:db:df:3c:47:95:4e:b1:58:52:92:8e:56:a3: e7:99:a1:42:62:bd:d5:0a:dd:0d:de:ce:ec:52:46:07:dc:5d: 13:7d:ee:a3:3d:02:69:f2:c3:f5:6f:31:bd:36:ca:44:e9:65: 4d:24:9a:86:e6:57:42:b8:6d:b9:41:b3:2e:b0:14:07:12:43: f2:a6:8f:f9:3b:e1:ae:2c:4e:17:39:61:86:b0:64:20:53:1a: 7a:cd:5c:aa:8e:d5:44:20:7b:85:69:3e:39:dd:68:06:3e:b2: 65:70:44:e3:1b:8a:cc:6f:45:78:16:1d:51:52:c8:e1:e8:16: 1c:9a:91:a4:28:87:b2:94:9c:05:50:aa:36:e5:1c:d6:8d:a2: 45:73:0a:eb:7c:bb:8d:0a:43:61:c7:05:5a:7c:be:46:43:6a: 9b:c5:03:21:8c:21:06:ec:0a:04:c4:89:f3:2b:c0:66:1d:dd: cf:e2:be:2a:a6:d1:64:b1:00:39:ba:75:a6:27:bc:0f:90:e9: f4:15:bc:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNg65WkXwuPOceAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTU0ZThkODUtNzljMy00NmYwLWI5YjEtODE2ZmQ0NjhkOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYU7YJCP8bc2xmkb9UZDUlHqeADfPcsagr+6 om0lej7xsBPZ5UGK8ZY81YNLcg8RkIP+xd7Hmqrnd7uTUl1ZcGbATIGQDwuzq6qm JrnoHg5c8zje8Zi/m3LVb1Ano4KYe3/ys0j60usaSIc6P/y+eleR9RBIi93YuBZ0 z1S6sR/VmDJuOQZXAtYfOxcA0eCK4xySNY4UU4Py+GpMxrF0TrhURKlrHCdUffcM ACGB7j69avZVGWX3cK1iTMUP/PvL/NkNsGrV1BvEqzV98T41WjNrTyP4QRWXl8kX M4uJTESB5ikCXWCs60c24C49phBQWhMngzIbWZjACGvB3iS7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKud5SqhshBErsdaZ0NXmIA5SAvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmUwMDQ3YjctNjJmOC0z ZTkyLWE5M2ItZDhhM2IzZDgwOTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyDvh3Bh7bvC8ZK35HKoHCxmSlUtJ/AEb0I6EZBnurXUEvVw2cKjbvK 4591zhK+9amkfCN/Ns3ndA922988R5VOsVhSko5Wo+eZoUJivdUK3Q3ezuxSRgfc XRN97qM9Amnyw/VvMb02ykTpZU0kmobmV0K4bblBsy6wFAcSQ/Kmj/k74a4sThc5 YYawZCBTGnrNXKqO1UQge4VpPjndaAY+smVwROMbisxvRXgWHVFSyOHoFhyakaQo h7KUnAVQqjblHNaNokVzCut8u40KQ2HHBVp8vkZDapvFAyGMIQbsCgTEifMrwGYd 3c/iviqm0WSxADm6daYnvA+Q6fQVvGQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:50 2025 by rpki-client