$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa File: d856f05f-168c-3b0f-90d1-5c341d3c2501.roa (raw, json) Hash identifier: 9y2n1flNe+rXcxLXsv7FOh5XwA1b8CSFOGtFC7aBn08= Subject key identifier: D1:BF:D3:E0:11:25:F6:91:21:58:F6:6F:9F:7C:9D:49:2D:02:BC:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A920635B18FB29DC2EA88E080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 22773 IP address blocks: 68.15.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:35:b1:8f:b2:9d:c2:ea:88:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=666a1ca4-5c95-43c3-9a17-9b4a07cf3759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:54:08:f6:8b:14:0e:87:10:b0:e2:7c:4a: 4c:bf:ce:d9:f8:96:4e:61:9d:cd:c0:bc:65:00:70: ab:18:1c:ff:7e:af:35:1c:c9:e1:0e:31:71:98:6c: c1:e9:47:d2:03:4e:a4:35:ba:c7:97:cc:81:e7:72: c1:a4:b2:53:9b:a9:dd:a5:22:6f:3e:79:4b:82:d7: 46:fe:90:f1:c6:1d:83:f2:05:22:c5:d2:80:e4:5b: ad:8d:3f:ce:e9:02:31:09:1f:c7:73:0e:8c:23:df: 7f:e1:68:c8:ef:59:97:ea:67:d8:54:3b:2a:e6:66: 91:53:66:66:31:b1:c0:26:eb:b1:aa:a8:6a:52:1a: 63:20:a5:47:06:d8:1f:1c:98:3c:2d:6c:04:85:e4: 19:a1:9c:44:27:5c:a5:f9:f2:b2:a2:b3:17:ca:4f: 00:41:41:46:23:9e:3e:e0:75:63:db:cb:30:7c:cf: bc:7c:dc:4d:8c:27:74:5d:31:9d:4e:e6:3b:e9:a3: 03:f0:6b:2d:d0:29:40:3d:f4:6a:19:90:86:12:01: 7d:27:e5:74:d1:1e:ec:8d:d3:00:4c:e1:4a:52:6f: c6:9c:30:ea:53:d6:97:9d:e1:d4:d6:c6:3c:a3:6b: 2b:ec:76:cc:ba:d6:eb:19:96:9f:c6:d5:09:5c:2d: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:BF:D3:E0:11:25:F6:91:21:58:F6:6F:9F:7C:9D:49:2D:02:BC:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:39:48:3e:c1:39:5f:23:25:dd:ae:7c:de:a9:67:82:41:8a: 92:ca:11:ba:af:14:73:38:73:37:b4:6b:d3:d1:ac:71:26:79: 9f:ea:24:92:fc:1a:e9:e5:41:cb:84:6f:ff:26:87:eb:db:f8: 70:a3:22:00:7a:aa:94:99:c6:9a:85:3d:69:53:44:20:95:81: 2e:7e:f8:81:e9:ca:11:11:c2:a0:fe:7f:04:c3:02:29:a8:a0: 15:2f:ca:2d:c8:11:0a:d5:0f:91:4c:5c:c9:6f:0c:95:07:60: 39:ff:3b:ef:ec:66:42:09:d8:1d:c2:9a:e7:13:5f:62:c6:8b: c6:2f:e8:d8:21:12:01:42:0d:24:49:f4:e4:14:91:7d:5b:1d: ff:3a:8f:9d:9e:f3:18:9c:a5:34:ad:e7:52:08:2b:e8:d3:55: da:cc:6a:b0:dd:ec:98:c7:39:63:e5:7b:6b:9a:a7:1b:ad:d4: aa:a5:c7:32:cd:36:31:1d:04:14:b0:58:a1:83:b3:50:7e:80: 7b:09:35:f3:3d:2c:b5:b6:3f:f9:1d:a7:7b:00:ea:9f:98:f3: 0d:12:aa:8e:c3:30:3e:a8:c8:f3:fb:a6:d3:8e:1b:4e:ad:4e: 80:9f:13:fa:af:a1:b3:37:7f:93:8f:6d:13:21:cc:b6:9c:81: d3:5a:3a:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjWxj7KdwuqI4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk NjY2YTFjYTQtNWM5NS00M2MzLTlhMTctOWI0YTA3Y2YzNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRNUCPaLFA6HELDifEpMv87Z+JZOYZ3NwLxl AHCrGBz/fq81HMnhDjFxmGzB6UfSA06kNbrHl8yB53LBpLJTm6ndpSJvPnlLgtdG /pDxxh2D8gUixdKA5FutjT/O6QIxCR/Hcw6MI99/4WjI71mX6mfYVDsq5maRU2Zm MbHAJuuxqqhqUhpjIKVHBtgfHJg8LWwEheQZoZxEJ1yl+fKyorMXyk8AQUFGI54+ 4HVj28swfM+8fNxNjCd0XTGdTuY76aMD8Gst0ClAPfRqGZCGEgF9J+V00R7sjdMA TOFKUm/GnDDqU9aXneHU1sY8o2sr7HbMutbrGZafxtUJXC1S0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG/0+ARJfaRIVj2b598nUktArwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDg1NmYwNWYtMTY4Yy0z YjBmLTkwZDEtNWMzNDFkM2MyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERA+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw5SD7BOV8jJd2ufN6pZ4JBipLKEbqvFHM4cze0a9PRrHEmeZ/qJJL8 GunlQcuEb/8mh+vb+HCjIgB6qpSZxpqFPWlTRCCVgS5++IHpyhERwqD+fwTDAimo oBUvyi3IEQrVD5FMXMlvDJUHYDn/O+/sZkIJ2B3CmucTX2LGi8Yv6NghEgFCDSRJ 9OQUkX1bHf86j52e8xicpTSt51IIK+jTVdrMarDd7JjHOWPle2uapxut1KqlxzLN NjEdBBSwWKGDs1B+gHsJNfM9LLW2P/kdp3sA6p+Y8w0Sqo7DMD6oyPP7ptOOG06t ToCfE/qvobM3f5OPbRMhzLacgdNaOrg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:22:26 2025 by rpki-client