$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa File: 0e027394-5b58-3aff-87a9-a4632ee64c1e.roa (raw, json) Hash identifier: EkzEWDln4zMOSTkcRlYXjP0YGzQVpIJqqgUi6E62Un4= Subject key identifier: 54:A3:9F:E6:E7:87:29:D4:63:A7:82:66:A3:18:E7:A6:DC:63:2C:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD595DDA58BF48FF722F500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa Signing time: Thu 19 Jun 2025 09:15:25 +0000 ROA not before: Thu 19 Jun 2025 09:15:25 +0000 ROA not after: Wed 17 Sep 2025 09:15:25 +0000 asID: 22773 IP address blocks: 68.104.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:95:dd:a5:8b:f4:8f:f7:22:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:25 2025 GMT Not After : Sep 17 09:15:25 2025 GMT Subject: CN=b50013bb-56b8-4670-ae77-c5a4c6c37c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:df:e8:ef:b4:fd:31:f3:c5:89:41:43:8d:db: 75:23:b7:b8:b9:ff:93:92:0e:e6:9c:ff:ae:e5:51: 4c:79:48:cf:2b:3a:09:10:22:b3:79:81:83:54:8a: 5c:eb:05:bf:ac:b4:80:53:34:c3:41:d6:bf:8f:cc: c4:56:67:0a:f3:5d:b9:40:b9:79:a9:f1:6b:c7:f1: fa:4f:c4:4f:8f:18:e6:f3:61:30:23:08:f4:f1:e8: 8b:84:30:72:28:37:7f:9f:cf:97:8a:cc:11:f8:4a: 0d:dc:ce:7a:58:89:02:d0:be:59:a0:13:c7:6f:89: 0d:74:83:ea:4c:c5:00:1b:07:37:bb:d3:df:d6:de: 9f:6f:0b:70:66:72:7f:85:dd:1c:7b:99:3b:51:4d: 39:f5:ca:e4:e6:10:8a:8f:28:c7:41:5e:1a:d7:0d: ae:8f:4a:76:81:4a:35:c2:2a:57:29:08:bc:bf:5a: 02:09:21:46:10:17:44:72:97:36:7e:3b:60:19:97: 9d:93:32:fc:46:5e:91:57:a3:58:6b:8d:bc:7e:a6: 7f:20:7f:fe:4b:6c:ba:b8:7f:ab:4d:8c:73:fe:96: 88:3e:87:f4:bb:4b:fd:a1:42:aa:0f:02:ac:37:04: 60:c8:45:1a:15:6e:81:01:7d:b0:51:a2:35:6c:3f: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A3:9F:E6:E7:87:29:D4:63:A7:82:66:A3:18:E7:A6:DC:63:2C:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:69:89:d6:4e:b8:34:e7:89:cf:06:bc:48:e5:48:4c:3e:0e: 58:b1:11:8b:cf:d3:28:e1:15:8c:1a:3f:81:aa:9a:a1:72:4f: 33:54:28:d6:3b:69:de:35:67:cd:36:54:f2:e4:c2:5b:1d:6b: 33:a3:54:f9:c3:6c:33:03:89:6e:72:9a:eb:7a:d3:27:98:0f: 0f:c1:f9:f1:d7:5f:5c:09:7b:30:09:6a:8b:5f:51:d5:e0:4c: 78:ba:01:2f:cb:18:ef:d6:1b:b6:b2:59:7a:b3:44:55:f7:a2: 81:96:e3:5b:23:3d:64:f4:07:27:8c:a3:86:a3:9d:5e:86:f0: d2:32:1f:c3:76:6e:f7:fa:b0:1e:3c:15:41:04:18:8e:cd:8c: de:0a:4e:fc:71:5d:86:88:b8:ed:17:2d:ec:56:a6:fe:a2:d2: 15:aa:bb:9b:2d:ed:af:34:92:84:22:44:6d:85:8c:37:9f:a2: 5e:7e:3f:3d:67:d9:29:c9:4c:ce:fb:3f:64:23:a7:d5:06:43: c9:86:8c:e8:98:94:67:88:6b:1a:76:b0:8b:28:2c:75:ca:f6: 5d:b9:f9:95:92:9a:74:4a:66:c2:84:4a:db:0e:1d:fb:e5:75: b8:50:ff:dd:bf:04:97:ac:7b:51:68:ac:f8:c5:8e:92:a2:92: b0:9b:a9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91ZXdpYv0j/ci9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTUyNVoXDTI1MDkxNzA5MTUyNVowLzEtMCsGA1UEAxMk YjUwMDEzYmItNTZiOC00NjcwLWFlNzctYzVhNGM2YzM3YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/d/o77T9MfPFiUFDjdt1I7e4uf+Tkg7mnP+u 5VFMeUjPKzoJECKzeYGDVIpc6wW/rLSAUzTDQda/j8zEVmcK8125QLl5qfFrx/H6 T8RPjxjm82EwIwj08eiLhDByKDd/n8+XiswR+EoN3M56WIkC0L5ZoBPHb4kNdIPq TMUAGwc3u9Pf1t6fbwtwZnJ/hd0ce5k7UU059crk5hCKjyjHQV4a1w2uj0p2gUo1 wipXKQi8v1oCCSFGEBdEcpc2fjtgGZedkzL8Rl6RV6NYa428fqZ/IH/+S2y6uH+r TYxz/paIPof0u0v9oUKqDwKsNwRgyEUaFW6BAX2wUaI1bD9P+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSjn+bnhynUY6eCZqMY56bcYyzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGUwMjczOTQtNWI1OC0z YWZmLTg3YTktYTQ2MzJlZTY0YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1pidZOuDTnic8GvEjlSEw+DlixEYvP0yjhFYwaP4GqmqFyTzNUKNY7 ad41Z802VPLkwlsdazOjVPnDbDMDiW5ymut60yeYDw/B+fHXX1wJezAJaotfUdXg THi6AS/LGO/WG7ayWXqzRFX3ooGW41sjPWT0ByeMo4ajnV6G8NIyH8N2bvf6sB48 FUEEGI7NjN4KTvxxXYaIuO0XLexWpv6i0hWqu5st7a80koQiRG2FjDefol5+Pz1n 2SnJTM77P2Qjp9UGQ8mGjOiYlGeIaxp2sIsoLHXK9l25+ZWSmnRKZsKEStsOHfvl dbhQ/92/BJese1ForPjFjpKikrCbqRM= -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:59 2025 by rpki-client