$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff90d959-226f-372c-9a1e-51604999859f.roa File: ff90d959-226f-372c-9a1e-51604999859f.roa (raw, json) Hash identifier: /CtDmX0VIJEWsF6QvjziqgSER8xxnieTEdctb2Twgcw= Subject key identifier: 35:E0:90:52:07:2B:29:30:88:B0:AE:76:93:C2:F7:FA:56:93:39:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636118C7ECF6C15A292EE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff90d959-226f-372c-9a1e-51604999859f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:11:8c:7e:cf:6c:15:a2:92:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=2e8e37c4-9cd5-4b6b-a3f6-fa3eb27aed56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:ae:20:68:c1:a2:1d:7a:f1:43:f7:c0:54: 8f:25:c3:fe:92:95:6e:a3:15:e1:73:a9:42:8c:ec: 74:c8:b8:92:d5:92:75:6d:c5:99:4a:89:dd:df:3d: 6b:1c:cb:a5:b6:40:7a:f0:64:4a:d8:80:05:8b:01: 74:f3:1f:3b:47:02:58:ba:8e:a0:73:a5:d5:85:4a: 3a:d2:82:35:f1:b3:78:d8:e6:d7:ad:e5:59:a2:e0: 22:bf:93:86:ae:e7:b6:03:a8:82:bc:c9:17:e0:9f: 4d:c3:52:3f:90:03:c2:f6:53:aa:3e:d0:40:1b:0f: 02:4b:fc:ab:3b:bc:a1:d5:8e:da:10:9c:7d:f7:99: b3:b8:cd:1d:be:5b:aa:88:c4:5d:c0:69:3d:94:3d: 1d:12:64:c8:93:3b:a8:38:8d:33:af:58:93:02:d7: 4f:c1:91:4a:7e:1c:44:e6:81:c7:0f:42:ab:c6:6d: bb:0c:8b:72:b2:8b:80:a8:22:0a:06:59:2b:a7:ce: 5d:d6:57:18:a1:a8:ce:85:b6:93:49:ab:4a:16:82: 20:30:3c:97:1d:b2:94:a6:2d:52:e6:aa:a3:e8:6b: 00:95:4e:c2:52:5e:0e:8e:c3:26:88:8d:16:af:65: 2c:16:1f:ad:03:95:ce:0a:5f:5c:fa:6b:49:cc:f4: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E0:90:52:07:2B:29:30:88:B0:AE:76:93:C2:F7:FA:56:93:39:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff90d959-226f-372c-9a1e-51604999859f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:14:e5:d1:89:16:5c:4e:c6:ae:95:cf:e2:b0:13:ab:df:83: c3:49:6f:69:1d:90:98:89:17:b7:2d:3a:40:ad:5c:34:d3:b9: e1:d7:62:dd:fe:08:b2:d8:e8:bc:0f:4c:fd:4f:66:e8:96:dd: 03:ae:e9:9a:2b:06:15:36:ce:62:90:ac:83:d0:69:85:6c:5e: 54:f0:3e:ae:b3:a4:d6:15:9f:85:05:8e:61:b0:f2:d1:cb:45: 1c:d0:8b:80:ab:42:68:69:65:d9:af:f5:5e:31:8f:81:f0:9c: 88:e7:2d:27:60:0e:54:59:f4:bb:7c:37:13:a5:70:d3:65:56: 13:01:a6:18:59:3d:51:51:4f:d5:ce:af:47:e6:c7:f2:f5:60: 10:bb:db:96:dd:b6:d3:74:9a:be:f1:01:b4:a5:a4:c1:eb:2e: 9e:d3:84:34:64:8e:2e:66:94:f6:57:0d:43:c6:94:0d:be:6a: a2:aa:b3:d5:9e:a6:aa:a0:32:2c:ee:6e:23:40:f2:0f:d6:ca: a9:22:3d:23:d0:f3:38:fe:d6:bf:55:20:9c:61:d8:25:53:4c: 00:20:26:31:c1:73:04:f3:8d:95:b3:48:96:f1:0c:c4:e0:d9: d6:3a:46:04:9e:42:10:c1:23:4b:d2:0b:75:7d:11:34:6d:d1: 67:e4:80:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhGMfs9sFaKS7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MmU4ZTM3YzQtOWNkNS00YjZiLWEzZjYtZmEzZWIyN2FlZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArriuIGjBoh168UP3wFSPJcP+kpVuoxXhc6lC jOx0yLiS1ZJ1bcWZSond3z1rHMultkB68GRK2IAFiwF08x87RwJYuo6gc6XVhUo6 0oI18bN42ObXreVZouAiv5OGrue2A6iCvMkX4J9Nw1I/kAPC9lOqPtBAGw8CS/yr O7yh1Y7aEJx995mzuM0dvluqiMRdwGk9lD0dEmTIkzuoOI0zr1iTAtdPwZFKfhxE 5oHHD0Krxm27DItysouAqCIKBlkrp85d1lcYoajOhbaTSatKFoIgMDyXHbKUpi1S 5qqj6GsAlU7CUl4OjsMmiI0Wr2UsFh+tA5XOCl9c+mtJzPSW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXgkFIHKykwiLCudpPC9/pWkznpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmY5MGQ5NTktMjI2Zi0z NzJjLTlhMWUtNTE2MDQ5OTk4NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIU5dGJFlxOxq6Vz+KwE6vfg8NJb2kdkJiJF7ctOkCtXDTTueHXYt3+ CLLY6LwPTP1PZuiW3QOu6ZorBhU2zmKQrIPQaYVsXlTwPq6zpNYVn4UFjmGw8tHL RRzQi4CrQmhpZdmv9V4xj4HwnIjnLSdgDlRZ9Lt8NxOlcNNlVhMBphhZPVFRT9XO r0fmx/L1YBC725bdttN0mr7xAbSlpMHrLp7ThDRkji5mlPZXDUPGlA2+aqKqs9We pqqgMizubiNA8g/WyqkiPSPQ8zj+1r9VIJxh2CVTTAAgJjHBcwTzjZWzSJbxDMTg 2dY6RgSeQhDBI0vSC3V9ETRt0WfkgKY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:12 2025 by rpki-client