$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b972af75-a984-31d9-8cb9-ebc1c59a9be5.roa File: b972af75-a984-31d9-8cb9-ebc1c59a9be5.roa (raw, json) Hash identifier: jztc3xNblUnZCHlruM/J0uec8VQ3FP8eNFWbfqTzxJ8= Subject key identifier: 6E:2B:2F:6D:07:09:9A:7C:DB:B3:FE:B8:1A:AF:B4:CB:73:13:D9:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963654F311117CFCD437D100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b972af75-a984-31d9-8cb9-ebc1c59a9be5.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.6.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:54:f3:11:11:7c:fc:d4:37:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0c9895ef-75a0-418a-bcd4-65e591766289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:41:f8:e1:de:14:0e:ce:a7:28:97:a7:43: 5d:80:b1:c7:ce:b2:47:02:b6:63:c2:4f:3b:b7:7f: 5f:23:35:cb:2f:79:76:80:f1:31:2f:4b:32:2f:5d: 26:9e:f0:00:00:7f:b2:59:9a:c4:5c:d0:22:92:e8: 87:db:6f:13:48:6c:f4:e4:48:ba:b6:6b:8e:b3:a4: 66:b8:67:10:9f:b0:73:6b:80:42:61:0e:9e:63:1e: 76:bd:73:67:00:7d:1e:9a:77:61:f6:92:b7:e8:78: 33:6c:80:5f:9a:c0:de:c3:f8:d6:19:7c:1f:63:44: bf:80:1b:15:b8:93:9e:03:ce:8d:52:3c:fc:a0:bc: 74:69:94:7e:fe:08:f3:16:59:18:31:9e:68:7e:db: 43:45:5e:56:8e:23:f1:ca:64:49:8f:b3:9b:ed:0a: b4:6c:91:aa:71:c3:e7:36:11:d2:32:5b:8a:c0:1e: ab:e6:80:de:c9:5b:49:d3:27:9c:65:0e:4c:98:89: d0:96:8f:47:8b:26:8c:dc:00:ce:94:cb:73:15:2d: 6e:d1:96:e1:e9:c8:49:e7:29:e8:6e:08:f3:47:44: 0c:c6:84:ce:56:a1:e6:43:db:c3:74:7e:71:a8:04: 37:b2:3a:84:3c:83:2b:fd:c9:09:27:c8:cc:55:0a: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:2F:6D:07:09:9A:7C:DB:B3:FE:B8:1A:AF:B4:CB:73:13:D9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b972af75-a984-31d9-8cb9-ebc1c59a9be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:72:36:e9:a8:55:7f:b5:c5:4d:7b:38:95:29:4e:9c:a5:d9: e4:9e:f7:bc:67:2f:c9:52:ae:0e:93:a2:86:c1:1f:4c:4a:1a: b5:fd:dd:af:4c:06:19:79:3a:2f:b5:8f:8f:03:e7:6d:2e:76: e6:92:3b:9d:0e:95:0b:31:a3:75:85:04:a0:4c:d4:fe:ec:cd: e8:bf:2c:c3:fb:40:0b:30:75:d7:4a:ae:91:4f:5f:52:75:d7: a4:08:58:33:aa:44:60:df:b6:fd:0b:c4:3c:00:32:3f:19:f0: 5e:c0:27:8a:f2:95:a2:9c:37:ce:5e:3b:51:4d:8e:f4:9f:2c: f9:1e:12:b9:94:c4:20:54:5a:cb:27:8d:5e:51:41:85:fd:b0: 86:15:89:69:f8:a7:94:7f:0c:1c:85:08:37:f3:64:de:e5:68: 5e:16:fd:18:95:76:15:37:e8:c5:a5:4c:74:d6:10:5d:c4:b9: 11:44:07:6d:ab:08:f5:96:dd:f2:84:9f:a4:b9:e6:71:ce:d4: a6:ef:e8:c7:71:fa:1b:6d:84:95:2d:89:c1:a0:d0:1c:ce:0a: 9a:87:ed:49:29:9e:53:51:c9:5a:02:22:1f:bc:77:04:f5:35: 07:f7:42:26:87:e0:c8:ca:6b:54:3f:1e:b0:12:30:80:8f:f6: 90:1f:2b:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlTzERF8/NQ30QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGM5ODk1ZWYtNzVhMC00MThhLWJjZDQtNjVlNTkxNzY2Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPZB+OHeFA7OpyiXp0NdgLHHzrJHArZjwk87 t39fIzXLL3l2gPExL0syL10mnvAAAH+yWZrEXNAikuiH228TSGz05Ei6tmuOs6Rm uGcQn7Bza4BCYQ6eYx52vXNnAH0emndh9pK36HgzbIBfmsDew/jWGXwfY0S/gBsV uJOeA86NUjz8oLx0aZR+/gjzFlkYMZ5ofttDRV5WjiPxymRJj7Ob7Qq0bJGqccPn NhHSMluKwB6r5oDeyVtJ0yecZQ5MmInQlo9HiyaM3ADOlMtzFS1u0Zbh6chJ5yno bgjzR0QMxoTOVqHmQ9vDdH5xqAQ3sjqEPIMr/ckJJ8jMVQoCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4rL20HCZp827P+uBqvtMtzE9m2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk3MmFmNzUtYTk4NC0z MWQ5LThjYjktZWJjMWM1OWE5YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1yNumoVX+1xU17OJUpTpyl2eSe97xnL8lSrg6ToobBH0xKGrX93a9M Bhl5Oi+1j48D520uduaSO50OlQsxo3WFBKBM1P7szei/LMP7QAswdddKrpFPX1J1 16QIWDOqRGDftv0LxDwAMj8Z8F7AJ4rylaKcN85eO1FNjvSfLPkeErmUxCBUWssn jV5RQYX9sIYViWn4p5R/DByFCDfzZN7laF4W/RiVdhU36MWlTHTWEF3EuRFEB22r CPWW3fKEn6S55nHO1Kbv6Mdx+htthJUticGg0BzOCpqH7UkpnlNRyVoCIh+8dwT1 NQf3QiaH4MjKa1Q/HrASMICP9pAfK20= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:28 2025 by rpki-client