$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1844c701-0af5-3e1c-96df-747620f4af31.roa File: 1844c701-0af5-3e1c-96df-747620f4af31.roa (raw, json) Hash identifier: CKDLA7xe5YYrULl0NW+mkAaGNoEgvDTRPl/ZwNQvwKY= Subject key identifier: 1D:38:CF:F6:85:B1:A2:1E:1A:BC:C4:E2:06:F4:34:2C:B6:32:E1:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6E58842CECBCB2F111300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1844c701-0af5-3e1c-96df-747620f4af31.roa Signing time: Thu 19 Jun 2025 09:18:04 +0000 ROA not before: Thu 19 Jun 2025 09:18:04 +0000 ROA not after: Wed 17 Sep 2025 09:18:04 +0000 asID: 22773 IP address blocks: 68.231.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:e5:88:42:ce:cb:cb:2f:11:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:04 2025 GMT Not After : Sep 17 09:18:04 2025 GMT Subject: CN=dbb7439d-a850-4fc8-9a4c-605b7ab81dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:f4:bc:4a:79:c4:08:0a:ee:6a:a7:36:76: 7f:78:20:95:51:dc:6c:65:8c:e9:7f:ea:f9:7a:2e: f0:9c:5f:89:05:1f:6a:6d:86:65:e2:9c:1f:68:4e: 39:d7:89:ff:0f:0c:ca:d4:73:48:b7:73:a7:b3:2a: 5f:94:dc:51:f5:b1:c0:9d:a7:2c:29:de:c8:b4:38: de:34:e3:2e:49:15:b4:9f:ab:56:44:ea:44:a1:1a: d4:c9:b8:5f:e5:95:e1:7a:50:5a:6e:40:98:d9:ea: 03:6f:5c:3a:bf:c3:4f:68:d6:06:6a:2b:6d:30:47: 98:5b:6e:93:bf:c3:0e:96:dc:8a:05:b4:db:a4:3a: e6:1f:d6:c1:61:3f:a4:fe:8c:03:31:ee:a9:c8:b4: 84:e6:d5:84:d5:24:fa:c3:d5:64:f8:db:2d:70:e0: 2f:87:ee:72:77:72:02:1c:2a:c6:cc:27:70:65:b1: a6:3d:1f:c7:4b:d6:f0:6a:19:48:8d:40:ae:95:e8: 37:44:00:5c:67:ea:ad:87:5a:c0:5f:74:ad:6b:88: 94:d8:75:fa:d6:1b:ce:d9:e5:94:cb:a8:03:2e:ff: bb:f0:9e:da:f0:75:95:d2:00:2e:20:52:44:53:e8: 3f:c4:bb:b1:6a:ec:1a:5d:87:bf:5b:d6:92:ed:a4: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:CF:F6:85:B1:A2:1E:1A:BC:C4:E2:06:F4:34:2C:B6:32:E1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1844c701-0af5-3e1c-96df-747620f4af31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:4e:fa:fd:f4:40:a2:5f:34:46:52:5d:17:5a:d5:a2:67: a2:70:b1:08:0d:ec:ea:3e:bc:fe:ec:58:f1:90:67:92:cc:50: 8d:64:3d:40:cb:72:11:01:2a:ca:91:85:c8:7b:d0:b0:c5:7c: 02:89:f6:4b:82:fc:91:c4:eb:94:b2:a9:15:2c:6c:11:d8:f5: 29:96:f0:64:df:a7:06:66:ed:98:51:9d:7c:f2:17:02:e3:12: af:6a:85:28:b8:25:13:4f:55:ae:e2:65:13:e4:80:3a:3e:5d: ed:8c:2c:23:02:4e:e5:63:d3:f8:3b:17:ef:25:ed:f0:cd:db: d0:4b:36:77:43:07:0d:53:6a:3e:49:7d:32:0e:73:8e:af:2a: fe:46:85:49:47:20:e9:4d:21:72:38:46:21:84:d4:59:de:84: 3a:0e:6c:21:90:51:d1:2f:74:cf:69:0f:0f:f3:bf:be:d3:27: 55:79:59:9b:f1:56:a5:2f:48:17:cd:2f:ac:8b:45:3a:f5:9b: d0:b0:50:fe:bc:25:40:fa:0e:82:79:2a:65:4c:48:ae:b8:15: 07:6a:2e:ba:65:93:0f:64:b2:05:d4:84:a5:9d:66:5a:ce:80: 08:ad:65:a4:54:07:87:ea:e7:37:50:43:44:5b:70:e2:83:4e: 5f:62:8c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91uWIQs7Lyy8REwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwNFoXDTI1MDkxNzA5MTgwNFowLzEtMCsGA1UEAxMk ZGJiNzQzOWQtYTg1MC00ZmM4LTlhNGMtNjA1YjdhYjgxZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQT0vEp5xAgK7mqnNnZ/eCCVUdxsZYzpf+r5 ei7wnF+JBR9qbYZl4pwfaE4514n/DwzK1HNIt3OnsypflNxR9bHAnacsKd7ItDje NOMuSRW0n6tWROpEoRrUybhf5ZXhelBabkCY2eoDb1w6v8NPaNYGaittMEeYW26T v8MOltyKBbTbpDrmH9bBYT+k/owDMe6pyLSE5tWE1ST6w9Vk+NstcOAvh+5yd3IC HCrGzCdwZbGmPR/HS9bwahlIjUCuleg3RABcZ+qth1rAX3Sta4iU2HX61hvO2eWU y6gDLv+78J7a8HWV0gAuIFJEU+g/xLuxauwaXYe/W9aS7aSdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB04z/aFsaIeGrzE4gb0NCy2MuHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg0NGM3MDEtMGFmNS0z ZTFjLTk2ZGYtNzQ3NjIwZjRhZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9VTvr99ECiXzRGUl0XWtWiZ6JwsQgN7Oo+vP7sWPGQZ5LMUI1kPUDL chEBKsqRhch70LDFfAKJ9kuC/JHE65SyqRUsbBHY9SmW8GTfpwZm7ZhRnXzyFwLj Eq9qhSi4JRNPVa7iZRPkgDo+Xe2MLCMCTuVj0/g7F+8l7fDN29BLNndDBw1Taj5J fTIOc46vKv5GhUlHIOlNIXI4RiGE1FnehDoObCGQUdEvdM9pDw/zv77TJ1V5WZvx VqUvSBfNL6yLRTr1m9CwUP68JUD6DoJ5KmVMSK64FQdqLrplkw9ksgXUhKWdZlrO gAitZaRUB4fq5zdQQ0RbcOKDTl9ijJk= -----END CERTIFICATE-----Generated at Tue Jul 1 10:31:54 2025 by rpki-client