$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa File: 5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa (raw, json) Hash identifier: IS92WjKgSefUJNPRdPjfD7ld++2jVKtXEq+FnCOUe/E= Subject key identifier: 7E:2C:7B:43:BF:40:A3:AC:08:B2:18:82:35:8F:6C:82:CC:8D:FD:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA68DA5A93528113E2E19C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.227.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:8d:a5:a9:35:28:11:3e:2e:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=18cee168-99b6-405b-82f6-04d5bc9d8704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:8f:e1:04:e2:df:e5:49:d8:13:65:22:43: 61:df:36:84:b8:1a:ac:30:ec:a3:94:44:cf:cc:43: 96:c3:a6:42:42:47:b2:ec:70:5e:8f:90:3c:44:36: 49:04:e5:bb:b6:de:7d:32:b1:e6:14:a3:4a:36:7d: 4d:45:87:ad:2f:8a:ea:b0:2a:0f:32:a3:5e:59:31: 22:c9:be:0f:91:61:a4:bd:65:24:56:09:3a:00:05: fa:d7:b9:21:c9:de:64:93:ad:fe:72:39:de:92:71: d0:b6:e1:3a:34:6e:e9:84:23:c6:f7:44:e1:f0:77: 60:35:f5:b3:93:bc:6e:3d:56:7d:a7:74:a7:0b:8c: 61:af:c1:82:b1:49:d8:e4:fa:06:90:b7:67:20:63: a5:42:80:b3:34:00:2d:a4:19:0b:89:2a:06:a5:27: 4d:82:f8:c2:8c:47:3a:6f:8f:7d:37:87:42:a8:42: 4d:65:02:c7:d9:38:05:d3:34:8d:70:11:b2:25:91: df:20:e7:d5:23:68:2d:d8:db:7c:1d:8a:2c:58:14: 84:83:1d:b9:6e:b5:62:e7:2d:83:54:a8:62:dd:52: 9c:14:a9:ad:6f:4b:d6:c3:2a:60:35:6a:8f:5b:dd: 87:10:b4:a0:3b:68:f7:9d:ef:aa:12:b4:9e:35:53: 11:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2C:7B:43:BF:40:A3:AC:08:B2:18:82:35:8F:6C:82:CC:8D:FD:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a76e11c-e1fc-30a7-b8d7-32563b9ce481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:63:9c:66:cc:56:cd:6e:67:40:e7:39:6e:75:3c:ef:91:8b: 8a:d5:73:f3:6a:91:5a:06:eb:c7:0d:d3:bd:bd:34:c7:5a:da: 87:0a:2a:2f:f0:06:f5:5f:90:85:ff:65:39:30:9d:00:a1:95: ee:87:a8:eb:d8:48:7c:39:79:68:33:6e:96:6e:ba:d4:82:19: 7b:08:60:f3:4e:a8:27:e1:57:29:6b:8c:1b:52:e3:d9:cc:a1: 0f:ee:70:0f:e4:0b:ed:3e:e5:ec:88:33:66:65:2a:95:ff:dd: b3:0c:bb:e0:c8:17:3b:5b:45:c7:98:93:5b:cb:9a:de:dd:49: c5:19:12:37:65:c6:5c:a6:ea:94:c6:64:87:6d:d0:0e:fa:7c: ca:f9:a6:3f:24:c6:b7:28:ee:a9:31:dd:7d:78:bd:fa:0a:5d: b6:41:d9:39:1e:b8:45:b9:ec:8f:83:a9:2a:bc:22:12:59:9d: ec:e7:b1:6f:79:72:b4:d8:05:99:34:43:27:46:f3:e8:9f:77: de:9a:9b:a3:bb:30:36:f2:28:3f:91:49:b3:d8:b4:18:3c:8f: f9:a5:b6:97:89:d7:34:b6:01:51:62:04:4b:17:6f:34:74:45: c7:f3:61:dc:bc:f8:02:72:54:4f:ce:6d:e0:87:a9:24:fd:f6: de:cf:20:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpo2lqTUoET4uGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MThjZWUxNjgtOTliNi00MDViLTgyZjYtMDRkNWJjOWQ4NzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1iP4QTi3+VJ2BNlIkNh3zaEuBqsMOyjlETP zEOWw6ZCQkey7HBej5A8RDZJBOW7tt59MrHmFKNKNn1NRYetL4rqsCoPMqNeWTEi yb4PkWGkvWUkVgk6AAX617khyd5kk63+cjneknHQtuE6NG7phCPG90Th8HdgNfWz k7xuPVZ9p3SnC4xhr8GCsUnY5PoGkLdnIGOlQoCzNAAtpBkLiSoGpSdNgvjCjEc6 b499N4dCqEJNZQLH2TgF0zSNcBGyJZHfIOfVI2gt2Nt8HYosWBSEgx25brVi5y2D VKhi3VKcFKmtb0vWwypgNWqPW92HELSgO2j3ne+qErSeNVMRoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4se0O/QKOsCLIYgjWPbILMjf3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWE3NmUxMWMtZTFmYy0z MGE3LWI4ZDctMzI1NjNiOWNlNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpjnGbMVs1uZ0DnOW51PO+Ri4rVc/NqkVoG68cN0729NMda2ocKKi/w BvVfkIX/ZTkwnQChle6HqOvYSHw5eWgzbpZuutSCGXsIYPNOqCfhVylrjBtS49nM oQ/ucA/kC+0+5eyIM2ZlKpX/3bMMu+DIFztbRceYk1vLmt7dScUZEjdlxlym6pTG ZIdt0A76fMr5pj8kxrco7qkx3X14vfoKXbZB2TkeuEW57I+DqSq8IhJZneznsW95 crTYBZk0QydG8+ifd96am6O7MDbyKD+RSbPYtBg8j/mltpeJ1zS2AVFiBEsXbzR0 RcfzYdy8+AJyVE/ObeCHqST99t7PICs= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:56 2025 by rpki-client