$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/feb52983-a8e7-3c37-a5d3-1760065136be.roa File: feb52983-a8e7-3c37-a5d3-1760065136be.roa (raw, json) Hash identifier: yAHltyUMyGPw5w+uj45fWBPgMtMR5ZMIkzJG4GafSj0= Subject key identifier: 5E:DC:13:A0:5A:6F:51:7E:23:84:E5:EB:F1:EF:E3:C3:9A:95:14:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963637305CDA776A2D1DED80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/feb52983-a8e7-3c37-a5d3-1760065136be.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.10.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:37:30:5c:da:77:6a:2d:1d:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=48c2b1d1-91b0-4b4e-b2b3-4e21a48eedf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:4a:35:13:87:d7:70:ed:7d:7c:e6:03:7d: 42:3c:26:6a:3c:f2:a7:1e:a3:f5:cf:5d:d8:63:46: 04:1f:05:b0:fb:bd:1d:6d:ac:c2:e9:48:59:86:52: 84:be:91:16:4e:5e:4a:c0:90:a9:70:b8:01:5e:40: 04:dd:11:c5:38:1e:94:a5:cb:6f:36:ef:78:04:6e: f8:e9:87:66:ec:3b:61:76:31:1b:5e:6a:23:3f:db: ed:f5:3b:fe:f6:dd:de:92:3c:51:17:61:6d:36:d4: 5f:63:c7:be:2c:c9:f2:07:46:df:90:f3:49:27:ef: 0a:41:b9:84:9d:33:d8:ac:f1:f1:06:61:9c:85:05: ae:74:a4:22:e9:a0:72:39:70:6d:25:92:99:58:40: 2c:b8:b2:88:be:55:ee:76:11:41:e5:05:6f:e2:61: c1:79:22:e6:31:33:ed:4c:95:d6:bb:13:d4:1a:16: 59:c4:72:63:6f:9c:08:bf:39:ce:25:4a:88:d7:9f: b6:2a:d1:eb:00:34:98:34:78:03:e9:eb:52:04:c5: 41:ab:da:0a:ba:37:21:e9:69:d7:59:d7:e6:b3:ae: e5:e0:0a:2e:9a:18:32:60:9c:d0:77:34:1e:db:ae: c3:3c:8f:df:bb:28:8c:3d:f9:a4:77:6e:21:40:13: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DC:13:A0:5A:6F:51:7E:23:84:E5:EB:F1:EF:E3:C3:9A:95:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/feb52983-a8e7-3c37-a5d3-1760065136be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7c:86:8f:03:34:a3:86:74:69:9e:07:94:8d:07:2c:88:a0: e0:af:48:0b:4a:e6:c9:06:2b:cb:e5:a3:3e:e5:2f:79:08:dd: 6f:82:af:51:c7:b8:43:8b:a5:16:ff:5e:23:93:8c:63:48:4a: 54:ba:80:b4:4b:1d:4d:30:02:3f:c1:62:06:32:22:f9:c6:72: 48:bc:b2:fa:9a:67:3d:07:72:54:a2:fb:c8:02:bc:97:35:f1: 9a:97:f2:ba:8e:4e:32:fa:52:26:cf:88:34:5f:73:08:73:d3: 4a:f8:83:27:93:91:4f:91:75:25:08:5b:19:3f:60:01:b7:80: 3a:33:f4:4b:76:bc:4f:7b:0d:ad:e2:30:be:a5:e7:ce:f6:50: 4a:8a:c2:b7:55:70:8e:f7:86:1e:cd:7c:66:4d:2c:14:a6:49: 87:f0:67:f9:d0:d6:12:09:45:5e:37:db:c7:8e:56:68:27:21: bb:24:e2:42:61:8e:20:bd:1f:19:52:cb:71:b1:29:30:50:67: 8f:4a:eb:78:f0:39:09:df:27:c5:55:a3:51:86:a5:80:77:c5: 34:5a:fa:ce:5e:85:97:fc:a1:c7:ad:79:ac:96:b8:93:a0:a1: 80:13:c3:46:95:51:56:20:e5:a4:e1:0d:63:e3:21:c9:65:4e: 4f:2e:70:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjcwXNp3ai0d7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDhjMmIxZDEtOTFiMC00YjRlLWIyYjMtNGUyMWE0OGVlZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon9KNROH13DtfXzmA31CPCZqPPKnHqP1z13Y Y0YEHwWw+70dbazC6UhZhlKEvpEWTl5KwJCpcLgBXkAE3RHFOB6UpctvNu94BG74 6Ydm7DthdjEbXmojP9vt9Tv+9t3ekjxRF2FtNtRfY8e+LMnyB0bfkPNJJ+8KQbmE nTPYrPHxBmGchQWudKQi6aByOXBtJZKZWEAsuLKIvlXudhFB5QVv4mHBeSLmMTPt TJXWuxPUGhZZxHJjb5wIvznOJUqI15+2KtHrADSYNHgD6etSBMVBq9oKujch6WnX Wdfms67l4AoumhgyYJzQdzQe267DPI/fuyiMPfmkd24hQBMokwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7cE6Bab1F+I4Tl6/Hv48OalRTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmViNTI5ODMtYThlNy0z YzM3LWE1ZDMtMTc2MDA2NTEzNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARApvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh8ho8DNKOGdGmeB5SNByyIoOCvSAtK5skGK8vloz7lL3kI3W+Cr1HH uEOLpRb/XiOTjGNISlS6gLRLHU0wAj/BYgYyIvnGcki8svqaZz0HclSi+8gCvJc1 8ZqX8rqOTjL6UibPiDRfcwhz00r4gyeTkU+RdSUIWxk/YAG3gDoz9Et2vE97Da3i ML6l5872UEqKwrdVcI73hh7NfGZNLBSmSYfwZ/nQ1hIJRV4328eOVmgnIbsk4kJh jiC9HxlSy3GxKTBQZ49K63jwOQnfJ8VVo1GGpYB3xTRa+s5ehZf8oceteayWuJOg oYATw0aVUVYg5aThDWPjIcllTk8ucMM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:39 2025 by rpki-client