$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd24b8d-bd00-34b1-87f4-b724e5a7fd01.roa File: 0cd24b8d-bd00-34b1-87f4-b724e5a7fd01.roa (raw, json) Hash identifier: zddzcMxLaQySfo/QBRLAn8wwKTEy8UP01EzzJUCYOgw= Subject key identifier: 72:AE:9D:6F:9D:D7:93:CE:4D:21:24:12:D1:3F:AD:A6:32:D2:5A:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD60FBFDC824A632D913540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd24b8d-bd00-34b1-87f4-b724e5a7fd01.roa Signing time: Thu 19 Jun 2025 09:16:23 +0000 ROA not before: Thu 19 Jun 2025 09:16:23 +0000 ROA not after: Wed 17 Sep 2025 09:16:23 +0000 asID: 22773 IP address blocks: 68.109.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:0f:bf:dc:82:4a:63:2d:91:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:23 2025 GMT Not After : Sep 17 09:16:23 2025 GMT Subject: CN=79eaf03f-aada-42ac-92b2-a37a43249a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:5e:4f:e9:e1:07:e7:b9:46:23:3c:31:22: 22:ef:7d:83:fc:85:f5:3d:7a:d6:f7:48:79:2a:f2: 68:20:db:42:ca:3b:43:08:18:18:dc:e3:1b:22:18: 5a:65:5f:68:8b:73:06:26:83:d0:06:77:49:70:f7: 01:be:f8:f5:e3:90:9e:b8:2a:66:6a:1b:e4:46:b7: 40:5f:5b:43:64:68:14:c5:fb:9d:43:b1:e2:a3:9c: 6c:ad:19:ae:7e:4e:8f:37:0f:43:a4:de:cf:f1:85: 1f:b0:25:5f:fa:58:63:a4:83:97:a1:68:ce:f5:c9: 9b:45:47:25:9f:92:5f:a3:45:fc:ee:35:cd:21:2d: 6f:51:1f:9d:4c:e8:4a:f6:c9:b5:95:05:69:a1:74: b8:26:3b:a1:9a:1f:84:dd:9a:0c:30:bf:d3:db:de: 6d:97:d8:f7:84:9a:32:35:95:1d:7b:22:59:ff:20: 89:c8:60:23:d2:71:fd:b5:5a:59:d8:cb:b1:f9:82: 13:c8:a0:19:c5:3b:40:93:3e:cd:46:18:e5:27:5b: 57:c9:1f:88:cf:8c:df:4f:3d:1b:d9:80:99:5b:6b: 89:c8:56:80:75:cb:9d:98:63:97:8d:5c:cb:c5:71: 91:7c:0a:9e:aa:fe:06:22:9f:e6:20:95:51:9d:cb: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:9D:6F:9D:D7:93:CE:4D:21:24:12:D1:3F:AD:A6:32:D2:5A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd24b8d-bd00-34b1-87f4-b724e5a7fd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f2:62:13:01:30:62:68:03:5c:58:aa:82:af:3c:ac:77:33: 0c:bb:88:03:22:4e:03:21:ed:24:b2:6f:28:e2:cb:87:64:a5: 90:8e:3c:1f:71:2f:6a:e2:64:ae:cd:54:c1:8b:8d:db:71:09: 0b:fb:8a:5b:1c:c7:a6:19:f5:d3:d9:6d:8e:2a:3b:14:5e:70: a6:f9:64:34:4b:14:88:6d:60:8f:1c:66:92:28:c9:ff:d2:07: bd:e3:bf:fd:e7:21:27:03:a3:5f:6b:8c:87:fc:ec:45:77:8c: ed:23:54:f3:91:62:b4:be:54:52:13:f6:23:be:8c:32:a8:a6: 24:e6:44:6f:30:19:d2:85:ad:5b:1e:e3:3b:32:40:8e:01:2b: 79:7f:ec:8f:4f:b7:e6:d1:15:63:f8:bf:ce:aa:ed:cf:6f:b8: e2:dd:6c:c6:f8:7f:5b:9f:42:9e:81:5b:72:5e:9a:07:25:2a: e4:12:86:c6:c5:68:8d:42:86:e1:e7:b9:8d:6e:81:b5:20:82: f4:62:0c:35:91:cb:53:ca:a9:25:36:15:d5:09:ca:f8:96:0d: ea:8d:60:da:aa:e8:3c:3e:b3:92:17:27:a9:96:cc:dc:f8:78: e6:82:f9:57:b4:5c:91:88:e9:d7:24:cf:49:8a:0a:01:2e:20: c4:a8:4f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91g+/3IJKYy2RNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYyM1oXDTI1MDkxNzA5MTYyM1owLzEtMCsGA1UEAxMk NzllYWYwM2YtYWFkYS00MmFjLTkyYjItYTM3YTQzMjQ5YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPFeT+nhB+e5RiM8MSIi732D/IX1PXrW90h5 KvJoINtCyjtDCBgY3OMbIhhaZV9oi3MGJoPQBndJcPcBvvj145CeuCpmahvkRrdA X1tDZGgUxfudQ7Hio5xsrRmufk6PNw9DpN7P8YUfsCVf+lhjpIOXoWjO9cmbRUcl n5Jfo0X87jXNIS1vUR+dTOhK9sm1lQVpoXS4Jjuhmh+E3ZoMML/T295tl9j3hJoy NZUdeyJZ/yCJyGAj0nH9tVpZ2Mux+YITyKAZxTtAkz7NRhjlJ1tXyR+Iz4zfTz0b 2YCZW2uJyFaAdcudmGOXjVzLxXGRfAqeqv4GIp/mIJVRncuPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKunW+d15POTSEkEtE/raYy0loxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNkMjRiOGQtYmQwMC0z NGIxLTg3ZjQtYjcyNGU1YTdmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnyYhMBMGJoA1xYqoKvPKx3Mwy7iAMiTgMh7SSybyjiy4dkpZCOPB9x L2riZK7NVMGLjdtxCQv7ilscx6YZ9dPZbY4qOxRecKb5ZDRLFIhtYI8cZpIoyf/S B73jv/3nIScDo19rjIf87EV3jO0jVPORYrS+VFIT9iO+jDKopiTmRG8wGdKFrVse 4zsyQI4BK3l/7I9Pt+bRFWP4v86q7c9vuOLdbMb4f1ufQp6BW3JemgclKuQShsbF aI1ChuHnuY1ugbUggvRiDDWRy1PKqSU2FdUJyviWDeqNYNqq6Dw+s5IXJ6mWzNz4 eOaC+Ve0XJGI6dckz0mKCgEuIMSoT1c= -----END CERTIFICATE-----Generated at Mon Jun 30 09:39:33 2025 by rpki-client