$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa File: 2129bb36-47a5-33cc-840f-6160dc0b9372.roa (raw, json) Hash identifier: CATVGzc9RPDTEWZgrh0O7j5CGiDFyskoy5z04oGTqxE= Subject key identifier: 80:18:A7:2F:D2:7C:0A:24:60:53:A8:1F:7B:C6:C7:EA:3E:FA:3A:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6BB3E7C03F00A9E155100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa Signing time: Thu 19 Jun 2025 09:17:44 +0000 ROA not before: Thu 19 Jun 2025 09:17:44 +0000 ROA not after: Wed 17 Sep 2025 09:17:44 +0000 asID: 22773 IP address blocks: 68.230.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:bb:3e:7c:03:f0:0a:9e:15:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:44 2025 GMT Not After : Sep 17 09:17:44 2025 GMT Subject: CN=30ceb85e-4bb6-495a-a569-71eb58efdf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:1b:37:28:34:f4:10:4a:a4:1b:6d:ff:61: 0f:d8:73:2c:2b:ff:2a:bf:db:d6:df:fe:91:02:0a: 91:8c:61:3a:12:d6:d9:39:fd:cd:31:c2:d0:3a:a2: d3:ff:84:3e:7b:3f:39:a5:a8:f4:87:9c:79:01:38: b5:03:5a:fa:6e:c8:84:92:95:27:98:bf:3f:f0:d4: 3c:97:44:6b:45:60:e0:26:c2:68:d1:c4:90:51:25: 17:4f:a3:45:16:08:73:4d:e3:dd:8d:12:60:36:c1: cc:05:30:29:25:e1:40:b8:4b:a6:0d:84:fb:c0:2a: b8:27:e5:e4:08:3e:58:84:04:4b:71:60:4a:43:50: 73:f9:4d:25:ea:e6:bb:b8:02:90:ee:4a:85:b4:44: d2:9c:d3:0c:36:40:e1:4b:ba:84:7f:ad:0e:5c:0a: 51:c2:06:bb:b2:a0:34:27:b3:b7:03:3e:42:64:2c: 4d:cc:14:10:f7:4b:2e:e7:19:90:56:ce:24:ac:15: 1c:8b:73:30:4f:df:e2:3e:4d:e5:bf:7f:bb:39:d5: b4:c3:63:75:8f:60:e2:15:58:bf:4e:da:5a:08:4a: 02:1e:f5:1d:8a:41:69:36:63:e1:a3:5a:b1:73:75: 85:8b:0c:ee:01:6a:74:a6:84:d9:97:fa:bd:f3:74: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:18:A7:2F:D2:7C:0A:24:60:53:A8:1F:7B:C6:C7:EA:3E:FA:3A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2129bb36-47a5-33cc-840f-6160dc0b9372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:11:09:e5:f7:a5:05:97:0a:1f:5d:73:cc:83:70:0c:01:c8: 01:bd:ed:2b:2b:14:27:0b:41:a7:16:cb:41:a2:93:62:e7:a8: 84:b5:2d:e9:a9:c7:75:8e:d8:ab:a1:2b:77:70:af:c4:82:0d: 25:3c:a4:ef:3e:c9:48:79:0f:14:a3:7d:ae:eb:ee:ad:83:0c: 6d:ab:08:4c:05:e5:52:11:bf:37:97:bb:c7:f7:90:f1:72:62: c2:1e:ca:be:10:1c:7b:05:e8:39:2d:74:88:8c:c0:0d:77:4d: f4:8e:b7:e9:2d:f4:d5:e3:15:7e:ac:d8:b9:e2:c7:a6:8a:da: de:2a:ee:91:cb:91:0d:e3:73:9c:11:49:5d:e5:52:35:97:c3: a0:fc:59:1e:9f:b3:a3:df:22:f5:71:f7:a5:61:9f:6f:1e:55: a4:8d:46:28:6b:40:85:19:1d:80:98:c1:f5:4c:a4:08:b2:7d: 79:9e:57:5a:44:f8:53:12:35:ad:57:78:c7:c3:a1:ad:02:f9: 19:af:e8:bf:21:bc:ff:fb:20:40:5c:b4:ab:e7:90:c7:dd:74: 56:ac:33:d4:9a:7d:4b:7e:0c:00:6b:75:83:a7:b5:86:29:7e: a0:ea:46:c8:7c:b7:22:4c:0a:b9:d0:4e:3a:c0:3f:6f:ff:cb: 2c:d4:ff:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91rs+fAPwCp4VUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc0NFoXDTI1MDkxNzA5MTc0NFowLzEtMCsGA1UEAxMk MzBjZWI4NWUtNGJiNi00OTVhLWE1NjktNzFlYjU4ZWZkZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0kbNyg09BBKpBtt/2EP2HMsK/8qv9vW3/6R AgqRjGE6EtbZOf3NMcLQOqLT/4Q+ez85paj0h5x5ATi1A1r6bsiEkpUnmL8/8NQ8 l0RrRWDgJsJo0cSQUSUXT6NFFghzTePdjRJgNsHMBTApJeFAuEumDYT7wCq4J+Xk CD5YhARLcWBKQ1Bz+U0l6ua7uAKQ7kqFtETSnNMMNkDhS7qEf60OXApRwga7sqA0 J7O3Az5CZCxNzBQQ90su5xmQVs4krBUci3MwT9/iPk3lv3+7OdW0w2N1j2DiFVi/ TtpaCEoCHvUdikFpNmPho1qxc3WFiwzuAWp0poTZl/q983Q5IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAYpy/SfAokYFOoH3vGx+o++jrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEyOWJiMzYtNDdhNS0z M2NjLTg0MGYtNjE2MGRjMGI5MzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMRCeX3pQWXCh9dc8yDcAwByAG97SsrFCcLQacWy0Gik2LnqIS1Lemp x3WO2KuhK3dwr8SCDSU8pO8+yUh5DxSjfa7r7q2DDG2rCEwF5VIRvzeXu8f3kPFy YsIeyr4QHHsF6DktdIiMwA13TfSOt+kt9NXjFX6s2Lnix6aK2t4q7pHLkQ3jc5wR SV3lUjWXw6D8WR6fs6PfIvVx96Vhn28eVaSNRihrQIUZHYCYwfVMpAiyfXmeV1pE +FMSNa1XeMfDoa0C+Rmv6L8hvP/7IEBctKvnkMfddFasM9SafUt+DABrdYOntYYp fqDqRsh8tyJMCrnQTjrAP2//yyzU//s= -----END CERTIFICATE-----Generated at Wed Jul 2 20:52:41 2025 by rpki-client