$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b418df5-6ed8-3c71-a928-63d34c78e07b.roa File: 0b418df5-6ed8-3c71-a928-63d34c78e07b.roa (raw, json) Hash identifier: nEcvaMnhh8OPKVoPfd6GlxY1JuePmD3x7oKpT2PXAeo= Subject key identifier: 95:47:CE:6D:B8:0A:20:FB:9D:44:0B:5E:A5:14:12:2E:04:D0:43:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5A1D3F04E93BA057AAC20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b418df5-6ed8-3c71-a928-63d34c78e07b.roa Signing time: Thu 19 Jun 2025 09:15:31 +0000 ROA not before: Thu 19 Jun 2025 09:15:31 +0000 ROA not after: Wed 17 Sep 2025 09:15:31 +0000 asID: 22773 IP address blocks: 68.104.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:a1:d3:f0:4e:93:ba:05:7a:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:31 2025 GMT Not After : Sep 17 09:15:31 2025 GMT Subject: CN=d13ee2f8-ee23-4771-8a06-da17dd5f4933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4b:e7:a9:78:cc:88:78:30:eb:aa:90:4a:ad: be:1c:4e:5c:cc:c4:5f:5f:0d:e5:f4:0f:3d:88:86: 3e:71:1c:c1:1d:91:51:e0:88:9b:36:f1:50:69:e6: 79:62:51:b3:ce:6a:8f:ae:97:01:da:52:5f:52:c5: 28:21:40:ad:a7:8f:75:56:a9:b9:cb:80:fb:15:60: 89:af:cc:b7:ae:7a:4a:f3:21:b6:7b:1f:aa:8d:b8: fe:08:1a:04:46:1d:ee:8a:34:43:fc:e3:1a:ba:3d: b0:d4:64:48:a3:be:3c:1e:74:3f:02:36:92:d9:98: 40:4e:ad:68:ed:6c:74:4e:78:c5:b1:62:de:d2:27: 2c:bd:27:d4:24:a5:29:5a:13:0e:df:b5:a2:80:f1: d8:dd:44:2c:04:98:76:c2:ea:a4:9e:e4:34:f3:79: e9:32:aa:67:55:17:1f:86:f4:2c:42:c8:d3:b3:8f: fc:78:72:98:fd:65:43:c4:e0:4d:d1:dc:c6:df:53: 11:72:25:a7:01:fc:96:ff:b4:4d:36:ee:41:69:d7: 7a:df:1a:17:20:06:41:5c:2d:9b:d9:aa:e2:e6:bd: 00:d3:d3:ca:fa:da:5c:33:d2:dd:ea:ae:4e:0e:77: d3:cf:f0:50:81:c6:f3:46:f1:6f:0f:87:53:99:6a: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:47:CE:6D:B8:0A:20:FB:9D:44:0B:5E:A5:14:12:2E:04:D0:43:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b418df5-6ed8-3c71-a928-63d34c78e07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6a:2c:17:56:a7:20:13:8d:7b:dd:ae:07:65:84:e1:be:dd: af:f9:81:b1:f6:8c:4a:3d:6b:48:9d:d4:1c:66:3d:1d:33:35: 11:04:23:c8:b1:14:de:a0:d4:ff:88:88:1c:0e:7e:35:17:7b: 9e:79:15:37:28:07:d0:7c:b2:98:4e:6e:ae:3d:58:7b:a3:50: 15:d1:a9:f6:ea:95:80:91:67:a1:19:6c:85:b1:58:1d:47:7d: 0f:16:03:3e:62:60:c2:7d:6b:85:f2:2b:54:ff:e3:09:f4:52: 79:d8:55:ce:98:87:ed:60:c3:44:27:7e:5f:4f:f9:14:b5:a7: 63:9f:7e:91:1b:be:1d:2c:29:3b:61:95:53:18:89:de:18:6f: 10:b2:4a:03:c0:0f:90:68:19:e4:c2:fa:13:d5:fa:c8:36:9e: 80:64:c0:a3:34:e4:1a:05:72:ea:bd:49:31:6e:ce:fe:f0:dd: 54:13:be:df:7f:ea:c6:df:c1:17:11:9b:3d:a6:4c:1f:2f:1c: e8:38:0d:68:84:69:e3:e3:73:f1:ff:a1:19:20:94:49:21:8a: b4:5a:92:1b:fc:d4:80:d8:68:4a:a2:37:a6:38:93:61:03:21: 08:62:23:50:37:86:ff:2a:c9:ec:78:6b:70:0e:5f:e3:fd:26: 52:bf:56:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91aHT8E6TugV6rCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTUzMVoXDTI1MDkxNzA5MTUzMVowLzEtMCsGA1UEAxMk ZDEzZWUyZjgtZWUyMy00NzcxLThhMDYtZGExN2RkNWY0OTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskvnqXjMiHgw66qQSq2+HE5czMRfXw3l9A89 iIY+cRzBHZFR4IibNvFQaeZ5YlGzzmqPrpcB2lJfUsUoIUCtp491Vqm5y4D7FWCJ r8y3rnpK8yG2ex+qjbj+CBoERh3uijRD/OMauj2w1GRIo748HnQ/AjaS2ZhATq1o 7Wx0TnjFsWLe0icsvSfUJKUpWhMO37WigPHY3UQsBJh2wuqknuQ083npMqpnVRcf hvQsQsjTs4/8eHKY/WVDxOBN0dzG31MRciWnAfyW/7RNNu5Badd63xoXIAZBXC2b 2ari5r0A09PK+tpcM9Ld6q5ODnfTz/BQgcbzRvFvD4dTmWrTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVHzm24CiD7nUQLXqUUEi4E0EPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGI0MThkZjUtNmVkOC0z YzcxLWE5MjgtNjNkMzRjNzhlMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdqLBdWpyATjXvdrgdlhOG+3a/5gbH2jEo9a0id1BxmPR0zNREEI8ix FN6g1P+IiBwOfjUXe555FTcoB9B8sphObq49WHujUBXRqfbqlYCRZ6EZbIWxWB1H fQ8WAz5iYMJ9a4XyK1T/4wn0UnnYVc6Yh+1gw0Qnfl9P+RS1p2OffpEbvh0sKTth lVMYid4YbxCySgPAD5BoGeTC+hPV+sg2noBkwKM05BoFcuq9STFuzv7w3VQTvt9/ 6sbfwRcRmz2mTB8vHOg4DWiEaePjc/H/oRkglEkhirRakhv81IDYaEqiN6Y4k2ED IQhiI1A3hv8qyex4a3AOX+P9JlK/Vhs= -----END CERTIFICATE-----Generated at Tue Jul 1 00:46:40 2025 by rpki-client