$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa File: 1452b328-d831-367d-a65e-e7aa9eb71a7f.roa (raw, json) Hash identifier: zOOiP4XOv40PQVbDihCAjSe4DmgtIuaf4IVidWnQNos= Subject key identifier: FD:1A:04:62:26:3E:54:2E:F5:AC:ED:5A:E8:47:90:DA:F4:64:79:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7393CF1C9F342542910C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa Signing time: Fri 20 Jun 2025 09:29:26 +0000 ROA not before: Fri 20 Jun 2025 09:29:26 +0000 ROA not after: Thu 18 Sep 2025 09:29:26 +0000 asID: 22773 IP address blocks: 68.108.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:39:3c:f1:c9:f3:42:54:29:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:26 2025 GMT Not After : Sep 18 09:29:26 2025 GMT Subject: CN=4c5aeff9-8f76-4c0c-bfbf-9f2eaf2b9092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:77:07:15:be:0d:a0:07:82:a8:fe:1a:5b: 4d:02:ba:fb:43:47:79:fb:5a:2a:95:ec:be:ea:23: 0a:05:09:1d:8f:80:90:36:33:9c:1a:0e:0f:3b:ce: eb:8c:0b:09:7d:30:d1:43:ee:1f:1b:0b:69:13:fc: 77:5a:8e:ca:51:99:e6:7e:58:18:99:9b:36:36:d0: a4:91:e6:25:98:da:1a:41:9b:5d:32:c8:47:0f:c0: b6:82:70:cd:77:26:16:59:e2:50:b3:4b:c1:94:a4: 0c:57:9d:09:46:b2:7d:58:4d:84:4c:8e:c3:2c:0c: c1:35:48:9e:cd:c1:ff:49:00:82:4c:44:bd:48:a8: 1f:f3:fb:c7:eb:8a:5c:47:ef:0b:57:54:4e:2c:ca: 75:73:1a:db:72:99:20:35:5e:98:62:a2:90:0d:21: a7:d7:72:60:9e:74:42:0d:48:4b:cb:5c:16:de:15: 3d:6d:1f:ec:fc:21:22:72:1f:ca:ac:11:b8:af:26: 1d:70:c0:d8:5b:ab:0c:bb:05:15:de:53:3d:63:b5: 52:52:39:e4:5e:94:ea:02:56:a2:83:8e:6c:89:68: d5:e3:b6:70:b0:25:45:6d:89:5d:38:a1:fe:52:09: 2f:7c:3b:58:39:ec:3c:74:01:c5:e2:87:5a:75:9f: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:04:62:26:3E:54:2E:F5:AC:ED:5A:E8:47:90:DA:F4:64:79:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:68:b6:76:dd:f5:b7:f2:f4:c7:0a:27:8b:3a:99:b8:e2:5d: 4a:4e:6c:7a:3d:61:62:72:92:30:df:38:97:51:f3:7e:2f:45: 00:4e:a0:cb:70:80:4d:47:5d:67:38:af:1e:8e:ab:b2:8c:ea: cc:7a:f4:6c:0c:d5:7a:f9:9f:88:d3:3a:b9:9d:e7:ca:f6:b3: eb:f2:33:36:4e:6f:38:1d:d8:fc:d7:af:e2:0c:f3:ba:be:e5: 15:80:b6:8b:46:79:9e:f1:0a:51:dc:b1:d0:8f:3f:76:75:3e: 2b:74:72:78:41:8b:88:1b:51:d9:27:15:0d:cc:82:1b:46:54: 9f:38:b3:35:6d:15:b2:fc:2b:10:b2:21:76:cc:b1:85:73:47: ac:bd:e8:a6:02:8f:8a:02:58:dc:64:a0:4d:72:8e:fd:79:2a: 26:c8:3b:31:6c:fa:35:cf:d3:34:af:fe:f2:9a:07:8c:79:48: d8:cc:dc:ee:8e:2c:03:bb:de:bc:9d:89:47:5f:f1:b9:27:6e: e6:f5:d4:05:37:33:de:d9:d0:94:fd:70:9d:d8:04:33:af:75: b9:ff:9d:e3:a4:2d:47:c2:a5:73:38:80:2d:82:99:aa:fe:be: 46:6c:c2:83:b3:60:53:ea:4f:18:84:0f:12:76:a0:52:b2:d6: 86:15:46:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApzk88cnzQlQpEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkyNloXDTI1MDkxODA5MjkyNlowLzEtMCsGA1UEAxMk NGM1YWVmZjktOGY3Ni00YzBjLWJmYmYtOWYyZWFmMmI5MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjt3BxW+DaAHgqj+GltNArr7Q0d5+1oqley+ 6iMKBQkdj4CQNjOcGg4PO87rjAsJfTDRQ+4fGwtpE/x3Wo7KUZnmflgYmZs2NtCk keYlmNoaQZtdMshHD8C2gnDNdyYWWeJQs0vBlKQMV50JRrJ9WE2ETI7DLAzBNUie zcH/SQCCTES9SKgf8/vH64pcR+8LV1ROLMp1cxrbcpkgNV6YYqKQDSGn13JgnnRC DUhLy1wW3hU9bR/s/CEich/KrBG4ryYdcMDYW6sMuwUV3lM9Y7VSUjnkXpTqAlai g45siWjV47ZwsCVFbYldOKH+UgkvfDtYOew8dAHF4odadZ+uEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0aBGImPlQu9aztWuhHkNr0ZHk4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQ1MmIzMjgtZDgzMS0z NjdkLWE2NWUtZTdhYTllYjcxYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhotnbd9bfy9McKJ4s6mbjiXUpObHo9YWJykjDfOJdR834vRQBOoMtw gE1HXWc4rx6Oq7KM6sx69GwM1Xr5n4jTOrmd58r2s+vyMzZObzgd2PzXr+IM87q+ 5RWAtotGeZ7xClHcsdCPP3Z1Pit0cnhBi4gbUdknFQ3MghtGVJ84szVtFbL8KxCy IXbMsYVzR6y96KYCj4oCWNxkoE1yjv15KibIOzFs+jXP0zSv/vKaB4x5SNjM3O6O LAO73rydiUdf8bknbub11AU3M97Z0JT9cJ3YBDOvdbn/neOkLUfCpXM4gC2Cmar+ vkZswoOzYFPqTxiEDxJ2oFKy1oYVRtE= -----END CERTIFICATE-----Generated at Tue Jul 1 03:49:13 2025 by rpki-client