$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04259de0-42d7-39fc-98d1-fc6c9bcc9848.roa File: 04259de0-42d7-39fc-98d1-fc6c9bcc9848.roa (raw, json) Hash identifier: JlXudCNmG0I7zhMmYuCGhIv7CT9ZcB42N2yhRrRaVoM= Subject key identifier: 0D:C4:75:A1:45:DE:54:1E:4F:A3:76:90:DA:5E:5A:9B:BF:87:32:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7B0DE62EC37C0E2562880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04259de0-42d7-39fc-98d1-fc6c9bcc9848.roa Signing time: Fri 20 Jun 2025 09:30:22 +0000 ROA not before: Fri 20 Jun 2025 09:30:22 +0000 ROA not after: Thu 18 Sep 2025 09:30:22 +0000 asID: 22773 IP address blocks: 68.224.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:b0:de:62:ec:37:c0:e2:56:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:22 2025 GMT Not After : Sep 18 09:30:22 2025 GMT Subject: CN=f2a87a3a-8cb2-4295-990f-98f34ee6bfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:4b:a0:6d:3f:68:bd:2e:86:5e:e1:87:56: 2d:e8:f4:ba:ce:84:2b:5d:2a:fe:4d:6b:28:38:ee: a6:e4:1e:43:c9:0f:94:80:81:95:77:02:56:23:e2: dc:ef:00:a5:fb:89:7b:aa:d2:4f:fb:78:0f:ef:18: 7f:12:2c:31:3c:71:bf:b5:3e:5a:c0:2b:6d:b0:3c: 65:63:42:11:e1:8f:f2:55:dc:2b:55:a1:c8:e6:c6: da:0c:d4:c8:a0:46:78:17:46:b7:6d:7d:21:5d:b8: 8b:29:d5:10:3a:e0:3c:23:23:d2:27:7e:10:fb:99: 18:0e:4a:e6:b3:cb:5d:01:17:90:cc:d1:c0:4e:a4: 06:01:4e:7a:5c:eb:bd:7e:04:f6:a1:69:7e:65:bb: ca:8f:8f:d1:f5:1b:08:11:64:6f:3e:28:20:9a:2f: 03:d7:cd:73:09:c3:3e:31:21:66:98:49:db:1b:d6: d0:ee:63:d6:10:a4:29:55:d7:44:8e:45:55:a9:5c: be:ec:d4:16:8a:26:0c:c3:6f:c0:17:a1:a4:3b:9d: 7b:e8:a8:21:ce:a5:c5:6a:ec:e1:b4:bf:5d:69:89: 89:57:b3:a0:13:09:6f:82:1e:43:ce:c6:bd:0a:83: 83:37:5e:b4:71:47:fa:66:e2:38:33:09:14:25:0f: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C4:75:A1:45:DE:54:1E:4F:A3:76:90:DA:5E:5A:9B:BF:87:32:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04259de0-42d7-39fc-98d1-fc6c9bcc9848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5c:61:c7:37:07:3f:74:ca:69:16:4c:42:23:4c:00:73:b7: fe:79:c2:31:87:d9:d7:63:8a:69:2f:74:31:ad:cd:4e:cc:10: 4e:4f:00:08:42:ad:4e:66:0c:46:6b:7a:de:4a:f7:4b:6f:6d: 7b:36:4c:30:97:ae:78:2b:24:a0:93:3d:50:f6:40:09:7b:80: 24:9b:f1:fa:da:74:96:c0:36:25:a5:6d:23:5a:42:6e:3b:54: b8:5f:9a:59:5c:39:a2:b2:b9:f5:8b:84:4a:5f:f3:24:61:2d: a9:23:45:5f:e5:29:bc:45:09:a4:63:b9:0a:63:46:95:14:ce: 95:1f:bd:52:f9:16:ee:27:11:bb:6d:95:e4:99:63:e1:8f:0f: 26:62:be:b2:24:13:80:96:99:38:59:53:06:06:0b:ab:7e:67: 8e:f2:7a:c0:9e:4e:1f:bc:f0:2d:85:44:58:64:68:7d:1a:16: 89:fa:45:d7:31:ee:10:8e:f3:49:a9:d4:fb:46:15:00:0a:7a: c0:a8:33:b0:03:d3:0a:dc:d1:6b:76:85:1b:fd:87:f5:51:4c: 6e:c5:4c:60:d6:e9:23:7a:63:5f:ca:36:aa:15:ed:8b:4d:95: fc:40:4c:6b:85:f7:a4:e1:89:5c:ee:b8:f6:58:e3:87:59:a6: 1a:72:8c:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp7DeYuw3wOJWKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAyMloXDTI1MDkxODA5MzAyMlowLzEtMCsGA1UEAxMk ZjJhODdhM2EtOGNiMi00Mjk1LTk5MGYtOThmMzRlZTZiZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8dLoG0/aL0uhl7hh1Yt6PS6zoQrXSr+TWso OO6m5B5DyQ+UgIGVdwJWI+Lc7wCl+4l7qtJP+3gP7xh/EiwxPHG/tT5awCttsDxl Y0IR4Y/yVdwrVaHI5sbaDNTIoEZ4F0a3bX0hXbiLKdUQOuA8IyPSJ34Q+5kYDkrm s8tdAReQzNHATqQGAU56XOu9fgT2oWl+ZbvKj4/R9RsIEWRvPiggmi8D181zCcM+ MSFmmEnbG9bQ7mPWEKQpVddEjkVVqVy+7NQWiiYMw2/AF6GkO5176KghzqXFauzh tL9daYmJV7OgEwlvgh5Dzsa9CoODN160cUf6ZuI4MwkUJQ9x2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3EdaFF3lQeT6N2kNpeWpu/hzKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDQyNTlkZTAtNDJkNy0z OWZjLTk4ZDEtZmM2YzliY2M5ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANcYcc3Bz90ymkWTEIjTABzt/55wjGH2ddjimkvdDGtzU7MEE5PAAhC rU5mDEZret5K90tvbXs2TDCXrngrJKCTPVD2QAl7gCSb8fradJbANiWlbSNaQm47 VLhfmllcOaKyufWLhEpf8yRhLakjRV/lKbxFCaRjuQpjRpUUzpUfvVL5Fu4nEbtt leSZY+GPDyZivrIkE4CWmThZUwYGC6t+Z47yesCeTh+88C2FRFhkaH0aFon6Rdcx 7hCO80mp1PtGFQAKesCoM7AD0wrc0Wt2hRv9h/VRTG7FTGDW6SN6Y1/KNqoV7YtN lfxATGuF96ThiVzuuPZY44dZphpyjNY= -----END CERTIFICATE-----Generated at Tue Jul 1 03:52:00 2025 by rpki-client