$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa File: 1d796d8c-1f95-3494-8875-1d36b77a7481.roa (raw, json) Hash identifier: gKniSls+/1HGRFe5dU4zuiYFc7GXGT8BXtABGZ3M85c= Subject key identifier: B2:39:34:10:7F:13:CD:5B:82:08:14:AA:EB:2B:0B:65:17:C7:B7:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6CC9DE253E9E7C9593900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa Signing time: Thu 19 Jun 2025 09:17:52 +0000 ROA not before: Thu 19 Jun 2025 09:17:52 +0000 ROA not after: Wed 17 Sep 2025 09:17:52 +0000 asID: 22773 IP address blocks: 68.230.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:cc:9d:e2:53:e9:e7:c9:59:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:52 2025 GMT Not After : Sep 17 09:17:52 2025 GMT Subject: CN=8ad2bdd4-5b80-49f6-9a7c-d2b304cfa586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:76:81:f3:63:4f:d8:86:99:9d:4e:ca:9a:4e: 54:e1:08:52:b9:86:99:79:b2:5c:a3:11:8c:46:63: da:5b:ca:d2:10:46:b0:d3:1a:5d:2d:01:06:c3:69: 82:3c:d9:41:f4:f3:04:c7:45:b0:d0:7a:5c:82:f8: 31:fd:88:c0:13:c3:c9:e1:d0:56:3a:84:a0:b2:d8: 61:b1:37:5e:9f:c2:50:c7:60:38:6e:ee:59:1e:e7: 6b:1f:51:04:8b:5f:e9:ab:b5:e8:bc:ee:24:52:01: 51:61:3a:39:33:b6:ef:de:df:3c:89:9e:80:66:44: f9:ae:30:1d:a5:4b:9b:4c:62:0a:3a:55:47:a4:af: 75:dc:51:dd:41:ad:98:20:47:77:40:d5:9f:e6:d9: e8:26:5e:92:b6:5e:ae:6d:36:ba:e2:81:c2:e1:57: 2b:84:a8:6e:12:0f:d3:6f:ab:b8:29:3f:41:d7:45: f8:65:18:ab:1c:1a:1c:ee:62:c7:2c:cb:7a:30:4c: 11:4a:86:f9:16:d4:a7:8a:07:b5:25:54:32:86:a1: c5:70:d5:b6:61:a3:d5:e2:e1:c0:2f:f9:43:82:de: 68:af:81:7f:74:b1:84:ae:18:a0:73:fc:92:a9:e4: e7:05:35:08:09:8e:04:c2:9c:16:fa:88:e0:4b:f9: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:39:34:10:7F:13:CD:5B:82:08:14:AA:EB:2B:0B:65:17:C7:B7:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d796d8c-1f95-3494-8875-1d36b77a7481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3c:84:c1:b2:54:a5:9b:50:e7:76:25:f5:07:6e:24:79:8e: 03:a1:91:a2:3f:db:2a:8f:b7:89:db:7e:cd:7e:1c:f3:51:9f: 99:4d:a3:81:36:46:32:1b:4e:ca:72:9c:5b:6f:a9:6d:6a:28: 42:2a:da:5e:6f:74:a3:63:3e:83:b7:5b:15:3c:c8:f8:87:e3: 9f:55:31:bc:03:55:83:ae:a2:b6:a6:f9:dd:91:54:2e:74:3a: 68:f6:2b:28:26:72:46:39:12:07:36:7a:18:ed:65:ad:90:d1: 34:0a:49:82:70:ee:dc:88:d3:9a:16:b0:27:8e:75:5c:08:c9: 2b:0f:fa:6c:09:ef:8e:1c:04:4f:9d:e2:27:69:3b:14:a3:bc: a7:85:f2:4b:8b:83:22:85:3d:da:02:a5:c0:8a:c3:d8:e0:9d: 91:b1:71:4e:f6:ba:4b:ef:a1:92:73:08:8d:57:78:07:9b:0f: 1b:88:3e:8d:97:b7:e9:56:d7:46:4d:45:c8:d2:e0:03:dd:5d: f3:be:03:7a:7c:95:51:be:82:56:46:80:0f:a6:3e:ab:d6:a3: 94:1b:00:ae:37:cf:6a:07:44:dc:32:07:f2:02:d3:b4:70:6b: af:bf:44:af:6f:be:54:79:ad:5d:14:7d:82:d2:0b:1b:0f:da: 79:cc:48:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91syd4lPp58lZOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc1MloXDTI1MDkxNzA5MTc1MlowLzEtMCsGA1UEAxMk OGFkMmJkZDQtNWI4MC00OWY2LTlhN2MtZDJiMzA0Y2ZhNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnaB82NP2IaZnU7Kmk5U4QhSuYaZebJcoxGM RmPaW8rSEEaw0xpdLQEGw2mCPNlB9PMEx0Ww0Hpcgvgx/YjAE8PJ4dBWOoSgsthh sTden8JQx2A4bu5ZHudrH1EEi1/pq7XovO4kUgFRYTo5M7bv3t88iZ6AZkT5rjAd pUubTGIKOlVHpK913FHdQa2YIEd3QNWf5tnoJl6Stl6ubTa64oHC4VcrhKhuEg/T b6u4KT9B10X4ZRirHBoc7mLHLMt6MEwRSob5FtSnige1JVQyhqHFcNW2YaPV4uHA L/lDgt5or4F/dLGErhigc/ySqeTnBTUICY4EwpwW+ojgS/mvkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI5NBB/E81bgggUqusrC2UXx7cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ3OTZkOGMtMWY5NS0z NDk0LTg4NzUtMWQzNmI3N2E3NDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA8hMGyVKWbUOd2JfUHbiR5jgOhkaI/2yqPt4nbfs1+HPNRn5lNo4E2 RjIbTspynFtvqW1qKEIq2l5vdKNjPoO3WxU8yPiH459VMbwDVYOuoram+d2RVC50 Omj2KygmckY5Egc2ehjtZa2Q0TQKSYJw7tyI05oWsCeOdVwIySsP+mwJ744cBE+d 4idpOxSjvKeF8kuLgyKFPdoCpcCKw9jgnZGxcU72ukvvoZJzCI1XeAebDxuIPo2X t+lW10ZNRcjS4APdXfO+A3p8lVG+glZGgA+mPqvWo5QbAK43z2oHRNwyB/IC07Rw a6+/RK9vvlR5rV0UfYLSCxsP2nnMSKs= -----END CERTIFICATE-----Generated at Wed Jul 2 05:36:00 2025 by rpki-client