$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cb6be7-55fc-3c1d-a680-f8f23d120352.roa File: 21cb6be7-55fc-3c1d-a680-f8f23d120352.roa (raw, json) Hash identifier: 2q60kKhHPgpdTBR19PriaQPluxsBH7R9c1rVU1y96/g= Subject key identifier: 3A:68:48:00:F5:60:94:A0:5E:A1:E9:75:EC:3A:FD:0F:99:26:E1:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7CEC1A229034ABEFA0780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cb6be7-55fc-3c1d-a680-f8f23d120352.roa Signing time: Fri 20 Jun 2025 09:30:36 +0000 ROA not before: Fri 20 Jun 2025 09:30:36 +0000 ROA not after: Thu 18 Sep 2025 09:30:36 +0000 asID: 22773 IP address blocks: 68.224.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:ce:c1:a2:29:03:4a:be:fa:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:36 2025 GMT Not After : Sep 18 09:30:36 2025 GMT Subject: CN=818dc9e5-1670-444f-bfa1-ffd9dbde9656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:80:3e:5b:cb:37:7a:95:45:50:78:93:81: 45:05:c1:29:8f:a5:9c:7d:69:15:ad:9d:98:9f:9f: a9:22:f6:06:93:03:ac:97:b4:02:67:77:67:2a:f3: bc:8d:a4:91:a0:86:1b:d5:08:e0:6b:64:3e:70:97: c2:34:e5:27:42:26:ae:12:a4:87:55:03:08:f7:b4: 7b:fa:d0:cc:51:71:c2:26:12:5c:d6:c4:09:5b:87: a9:76:6f:d3:25:0a:10:b2:d1:a7:1e:0b:06:23:3e: 03:bb:bd:05:de:b9:ff:1b:65:f8:9d:12:cf:ef:19: 0a:bc:49:1b:c6:29:36:84:32:48:39:d6:df:a0:4b: f8:e2:d0:d5:4b:fd:59:a4:f7:d0:61:82:e9:ee:80: 26:92:6a:71:27:57:d4:22:f2:1e:ad:7c:29:c4:c6: eb:3c:8d:44:40:bf:b0:08:dc:4e:59:06:ad:e8:90: 03:da:e5:0a:3c:24:90:d1:a5:09:a1:06:ad:c9:cf: f4:79:2f:af:3b:1c:f4:04:e5:3f:bd:18:1e:91:a4: 88:cf:da:04:67:cb:21:0a:12:30:46:bf:08:cd:ca: c0:cb:39:57:31:34:e6:16:b8:c3:de:1e:d7:c6:0e: 01:3e:f7:ee:1d:19:b4:41:dc:dd:71:15:d4:bc:e9: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:48:00:F5:60:94:A0:5E:A1:E9:75:EC:3A:FD:0F:99:26:E1:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21cb6be7-55fc-3c1d-a680-f8f23d120352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a4:f5:c7:9b:7a:f8:ad:2e:43:81:18:ab:bf:bd:38:5a:d4: 4f:d8:05:8a:3f:ce:01:29:74:5e:56:dd:fa:e6:71:24:ca:57: 7b:70:4d:e0:0c:79:98:8c:5b:a8:58:ac:7a:bc:5f:0a:f0:6b: a1:23:6e:68:69:28:78:13:d2:90:ef:43:48:8a:03:2f:ab:e0: 1c:86:37:b1:db:b8:3f:9a:86:e2:df:0b:8f:f5:df:e8:e7:ab: 33:33:6f:1b:c3:77:06:53:6c:3b:78:13:e0:60:b3:9b:f5:1c: a0:11:cb:04:28:e9:1c:86:57:51:93:5d:7d:65:57:a5:f0:ab: 86:a5:47:2d:29:5c:a9:88:c3:c2:56:f4:ad:53:12:9c:d9:03: c8:51:72:ab:9a:97:2d:4f:87:a4:51:0d:33:92:c2:1a:16:35: 96:ed:6d:1c:6b:10:86:f3:e2:2f:e3:e7:8f:20:ee:7e:d5:cd: c4:02:93:ff:a3:dd:ff:ed:e6:6e:d9:30:8a:70:17:75:80:50: e3:ea:14:c5:54:df:85:6b:79:b9:2a:99:70:12:1c:7d:87:36: 6f:65:9f:dc:8f:c7:d0:c7:ee:7a:e3:f7:1e:f5:bf:8f:10:57: 59:50:6a:fa:89:8c:d3:da:2f:8b:77:76:b0:d9:88:32:3c:a9: 57:ee:b8:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp87BoikDSr76B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzNloXDTI1MDkxODA5MzAzNlowLzEtMCsGA1UEAxMk ODE4ZGM5ZTUtMTY3MC00NDRmLWJmYTEtZmZkOWRiZGU5NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQqAPlvLN3qVRVB4k4FFBcEpj6WcfWkVrZ2Y n5+pIvYGkwOsl7QCZ3dnKvO8jaSRoIYb1Qjga2Q+cJfCNOUnQiauEqSHVQMI97R7 +tDMUXHCJhJc1sQJW4epdm/TJQoQstGnHgsGIz4Du70F3rn/G2X4nRLP7xkKvEkb xik2hDJIOdbfoEv44tDVS/1ZpPfQYYLp7oAmkmpxJ1fUIvIerXwpxMbrPI1EQL+w CNxOWQat6JAD2uUKPCSQ0aUJoQatyc/0eS+vOxz0BOU/vRgekaSIz9oEZ8shChIw Rr8IzcrAyzlXMTTmFrjD3h7Xxg4BPvfuHRm0QdzdcRXUvOlc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpoSAD1YJSgXqHpdew6/Q+ZJuG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFjYjZiZTctNTVmYy0z YzFkLWE2ODAtZjhmMjNkMTIwMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyk9cebevitLkOBGKu/vTha1E/YBYo/zgEpdF5W3frmcSTKV3twTeAM eZiMW6hYrHq8Xwrwa6EjbmhpKHgT0pDvQ0iKAy+r4ByGN7HbuD+ahuLfC4/13+jn qzMzbxvDdwZTbDt4E+Bgs5v1HKARywQo6RyGV1GTXX1lV6Xwq4alRy0pXKmIw8JW 9K1TEpzZA8hRcqualy1Ph6RRDTOSwhoWNZbtbRxrEIbz4i/j548g7n7VzcQCk/+j 3f/t5m7ZMIpwF3WAUOPqFMVU34VrebkqmXASHH2HNm9ln9yPx9DH7nrj9x71v48Q V1lQavqJjNPaL4t3drDZiDI8qVfuuFs= -----END CERTIFICATE-----Generated at Mon Jun 30 18:26:09 2025 by rpki-client