$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json) Hash identifier: bdScuksBEZaFEqbqo3RW8DhGu6b3rxQEfbGbT4pWiJ0= Subject key identifier: 67:A3:2B:68:AA:45:74:47:9C:1F:E2:C6:EF:1C:C7:C0:E1:EF:83:A6 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584A857600B4539125CD1C936680 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 64123 IP address blocks: 128.254.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:76:00:b4:53:91:25:cd:1c:93:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=2f48cfc3-f50a-4bf7-bade-c521a28c7d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:11:44:73:58:f8:a3:7f:6f:a1:57:3b:38: 20:29:6d:79:03:8e:fc:ed:c4:26:57:65:4e:29:78: 29:0b:63:b4:57:ec:5a:9b:d7:4b:b7:c1:5d:20:f8: 87:08:c0:40:f2:ba:a4:54:bb:ae:06:88:58:64:e7: d3:e8:f0:73:a2:fb:87:8b:0e:02:56:91:ca:fc:75: 8b:b6:55:76:c3:0a:4b:87:c3:a6:66:79:3d:9e:13: 98:b4:1e:72:93:5c:d3:cf:ee:b7:40:17:72:ed:d6: e2:0d:2a:bd:e5:02:fc:8f:3f:95:07:69:90:40:39: f6:2c:04:d2:cd:5c:51:2e:0a:ba:08:22:c5:a5:59: 35:17:28:9d:72:48:c1:dc:a9:b1:e0:5b:0c:55:99: 48:0e:e7:a2:3c:17:ed:19:ed:cc:4a:8d:7f:c8:5c: 35:62:b5:19:25:29:c8:a6:fe:af:a9:d6:dd:5e:2c: 42:8d:5a:4c:5c:10:9d:c8:1a:c6:eb:71:f9:f4:30: 83:89:61:d5:3e:a8:92:04:e5:8d:55:20:b0:80:e3: 04:4d:6d:98:f8:d5:ee:0c:8c:c7:af:fc:8b:dd:13: 3c:05:25:13:08:49:37:9e:08:c1:72:6c:cf:61:ad: da:ac:0a:1f:12:f0:b7:e1:34:7a:18:6e:65:c5:c2: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A3:2B:68:AA:45:74:47:9C:1F:E2:C6:EF:1C:C7:C0:E1:EF:83:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:07:63:1a:a9:fb:f1:f6:e5:20:21:99:c5:94:14:e4:3f:37: 20:3f:64:af:22:82:99:f5:21:f0:5c:d0:a4:f6:9f:18:92:a8: 9a:6d:73:5a:b1:ce:2a:19:c4:79:88:87:87:05:a4:77:72:53: 32:41:23:1b:6d:32:8e:1d:63:b3:2f:5d:fe:80:96:b2:6e:a7: 18:ce:09:2a:06:8d:f5:61:98:c3:55:57:2a:10:c4:e1:28:8c: c0:5b:e6:6c:2b:f0:bd:31:02:8a:76:d1:60:83:9f:da:86:7a: 50:33:98:1d:53:c3:b4:40:dc:af:fa:c3:7b:9c:e3:20:07:cc: aa:cf:8d:6e:08:d8:0d:4f:6b:eb:84:72:a0:dd:81:af:af:20: 71:8f:c7:a5:57:80:e8:2e:49:9c:0b:25:62:2c:7c:c2:e9:37: c2:24:76:e9:88:34:1a:62:39:66:00:26:a6:76:8d:84:24:a5: 61:20:34:1d:0a:c6:c9:7f:22:42:9f:73:e0:bb:e2:61:ad:64: d1:01:76:25:4b:7d:0a:8c:7e:cd:b3:17:a9:d4:9e:d4:6c:b9: e3:07:cd:6d:f5:bb:2f:4c:17:f4:0b:c5:10:93:f5:02:41:de: 8b:15:99:a5:30:17:53:bc:22:e4:5b:d2:a3:60:f0:32:cb:18: 49:cb:9a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFdgC0U5ElzRyTZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MmY0OGNmYzMtZjUwYS00YmY3LWJhZGUtYzUyMWEyOGM3ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrURRHNY+KN/b6FXOzggKW15A4787cQmV2VO KXgpC2O0V+xam9dLt8FdIPiHCMBA8rqkVLuuBohYZOfT6PBzovuHiw4CVpHK/HWL tlV2wwpLh8OmZnk9nhOYtB5yk1zTz+63QBdy7dbiDSq95QL8jz+VB2mQQDn2LATS zVxRLgq6CCLFpVk1FyidckjB3Kmx4FsMVZlIDueiPBftGe3MSo1/yFw1YrUZJSnI pv6vqdbdXixCjVpMXBCdyBrG63H59DCDiWHVPqiSBOWNVSCwgOMETW2Y+NXuDIzH r/yL3RM8BSUTCEk3ngjBcmzPYa3arAofEvC34TR6GG5lxcKjjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGejK2iqRXRHnB/ixu8cx8Dh74OmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcHYxqp+/H25SAhmcWUFOQ/NyA/ZK8igpn1IfBc0KT2nxiSqJptc1qx zioZxHmIh4cFpHdyUzJBIxttMo4dY7MvXf6AlrJupxjOCSoGjfVhmMNVVyoQxOEo jMBb5mwr8L0xAop20WCDn9qGelAzmB1Tw7RA3K/6w3uc4yAHzKrPjW4I2A1Pa+uE cqDdga+vIHGPx6VXgOguSZwLJWIsfMLpN8IkdumINBpiOWYAJqZ2jYQkpWEgNB0K xsl/IkKfc+C74mGtZNEBdiVLfQqMfs2zF6nUntRsueMHzW31uy9MF/QLxRCT9QJB 3osVmaUwF1O8IuRb0qNg8DLLGEnLmlY= -----END CERTIFICATE-----Generated at Tue Jul 22 11:50:27 2025 by rpki-client