$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa File: 81cfece7-8250-3276-a17b-0ae54e860039.roa (raw, json) Hash identifier: 4gBntvSHXg6t7AC0XGfxrN8Z68XFGDmVcZcb0oRyvKU= Subject key identifier: F9:0E:28:14:61:F5:3D:4D:22:24:7E:41:A9:E6:3A:45:01:DA:8B:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365F64AEDA46E0C6C75F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.8.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5f:64:ae:da:46:e0:c6:c7:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=899e364e-f9e1-4691-84a9-9f29d790d247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:1b:91:92:73:75:7a:d1:a8:93:b4:06:03: 0a:9e:6f:66:ab:af:40:7e:64:b9:24:0c:36:27:ac: b0:55:98:e8:80:3a:68:29:f8:6d:15:78:18:ec:08: b9:ad:5b:99:99:1f:65:dc:58:c1:1c:27:a8:c1:f1: 43:b1:0b:9f:7b:a5:d0:0f:c5:ef:05:3d:bc:90:34: d0:0f:fc:73:a9:8a:22:f7:c2:c0:75:f1:16:58:d4: f8:2f:91:2a:69:9a:53:d9:19:2a:81:28:06:dc:62: d5:10:e6:e5:2e:34:6e:a8:1b:4e:18:08:ae:c4:89: e4:2f:dd:ce:4e:bc:a4:69:92:53:87:81:89:b2:03: 8e:b7:83:e8:44:e9:f1:1f:47:a6:1e:4c:5a:37:32: 17:f4:69:a1:bf:e6:0f:2a:5d:48:4e:20:b7:0a:0a: 40:d9:51:40:1b:20:9c:cc:29:3a:ef:71:01:02:1c: e9:64:3e:25:a5:8d:87:75:56:f3:51:3d:79:b9:24: a6:66:70:b8:12:44:34:ed:ca:ab:4c:8d:c7:1f:1a: 1d:04:2a:6f:7e:b1:26:e0:d0:76:45:c5:8a:06:ac: f6:3f:4c:db:32:60:b7:53:b0:22:0d:c0:74:32:a2: de:a3:37:7a:f9:e1:34:64:c0:ea:90:35:51:8e:50: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:28:14:61:F5:3D:4D:22:24:7E:41:A9:E6:3A:45:01:DA:8B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:76:ce:64:4f:ea:d1:31:51:9d:6a:56:90:2d:c6:1b:55:c6: 88:9d:3f:b0:ae:e9:1d:4c:3e:54:85:d0:a4:5d:b1:64:5d:2a: b4:6f:ae:49:42:5e:77:8b:62:50:68:dc:6d:c6:cd:99:e2:ec: c0:44:5f:1e:b4:90:6f:a1:f6:9c:23:82:b5:eb:68:1c:ff:d4: fa:20:b8:03:b2:d4:ec:18:00:6a:3c:08:42:b3:3a:ab:c4:d7: ed:73:4a:fb:85:14:48:cd:4d:50:d9:b5:a7:eb:b1:dd:b4:e0: 90:77:b6:55:ad:d5:b2:2b:cd:69:58:75:0b:df:65:60:50:12: 4a:d1:fa:cf:ba:c0:76:a5:0c:c0:9a:6c:db:42:31:c3:d7:88: 03:55:55:94:ac:bf:dc:4e:3f:84:7f:98:43:4b:84:6c:9f:b1: 90:4f:cf:88:cc:a3:9a:a6:ea:82:cd:fe:2b:6d:64:95:a1:25: b3:6d:fc:f4:a5:a2:5e:12:57:8d:8b:c3:20:c6:fe:77:24:1d: 77:68:a6:18:e1:92:03:4b:a4:ef:4d:80:49:b5:de:e8:99:ec: 0d:03:d1:83:ba:54:fa:38:50:8b:38:db:7a:a1:d1:c7:fc:7f: 53:6f:9d:0e:3b:a9:f1:e9:fa:fa:8c:97:05:ca:a7:eb:1b:e9: 6c:f6:5b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNl9krtpG4MbHXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODk5ZTM2NGUtZjllMS00NjkxLTg0YTktOWYyOWQ3OTBkMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF8bkZJzdXrRqJO0BgMKnm9mq69AfmS5JAw2 J6ywVZjogDpoKfhtFXgY7Ai5rVuZmR9l3FjBHCeowfFDsQufe6XQD8XvBT28kDTQ D/xzqYoi98LAdfEWWNT4L5EqaZpT2RkqgSgG3GLVEOblLjRuqBtOGAiuxInkL93O TrykaZJTh4GJsgOOt4PoROnxH0emHkxaNzIX9Gmhv+YPKl1ITiC3CgpA2VFAGyCc zCk673EBAhzpZD4lpY2HdVbzUT15uSSmZnC4EkQ07cqrTI3HHxodBCpvfrEm4NB2 RcWKBqz2P0zbMmC3U7AiDcB0MqLeozd6+eE0ZMDqkDVRjlBkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkOKBRh9T1NIiR+QanmOkUB2otHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODFjZmVjZTctODI1MC0z Mjc2LWExN2ItMGFlNTRlODYwMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER2zmRP6tExUZ1qVpAtxhtVxoidP7Cu6R1MPlSF0KRdsWRdKrRvrklC XneLYlBo3G3GzZni7MBEXx60kG+h9pwjgrXraBz/1PoguAOy1OwYAGo8CEKzOqvE 1+1zSvuFFEjNTVDZtafrsd204JB3tlWt1bIrzWlYdQvfZWBQEkrR+s+6wHalDMCa bNtCMcPXiANVVZSsv9xOP4R/mENLhGyfsZBPz4jMo5qm6oLN/ittZJWhJbNt/PSl ol4SV42LwyDG/nckHXdophjhkgNLpO9NgEm13uiZ7A0D0YO6VPo4UIs423qh0cf8 f1NvnQ47qfHp+vqMlwXKp+sb6Wz2WxI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:20 2025 by rpki-client