$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa File: 2f08722c-a2da-30fc-9207-fae253ca5bd9.roa (raw, json) Hash identifier: PYD5NM/SMHzPCwEKGc2UjX9Vu9zY0FRcUtcG7VdloxM= Subject key identifier: B9:D2:C8:55:29:D8:C8:1A:71:C7:47:97:6A:10:4B:12:E1:AF:91:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA2154C4BCBC9EC3B3FC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa Signing time: Fri 20 Jun 2025 09:35:17 +0000 ROA not before: Fri 20 Jun 2025 09:35:17 +0000 ROA not after: Thu 18 Sep 2025 09:35:17 +0000 asID: 22773 IP address blocks: 174.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:21:54:c4:bc:bc:9e:c3:b3:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:17 2025 GMT Not After : Sep 18 09:35:17 2025 GMT Subject: CN=aa5361c4-9251-426e-9513-c71cc05d2b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:12:1e:84:b7:65:f7:ea:0f:8c:f1:8e:80: 26:de:dc:16:65:09:11:a4:a4:b8:64:ef:6f:6a:7f: 47:35:27:72:f1:d1:79:91:62:ca:21:96:99:5e:c6: 7a:2f:d6:da:82:93:a6:b7:fa:9e:1b:1d:3f:5e:00: 65:62:ca:39:d9:3c:52:0f:41:3e:7b:9e:ac:df:9d: 44:67:ae:38:a4:44:1c:63:44:74:49:79:8b:2d:b0: 51:2e:8c:e4:0b:4d:68:4c:32:18:84:b6:5d:1b:f0: bd:77:c6:59:c6:ed:f6:98:55:e4:db:08:38:61:0c: aa:ed:4f:12:a0:4e:14:d8:66:c8:91:00:ff:5e:db: 5d:85:cf:0e:f2:ea:53:9b:9b:ad:83:88:07:bf:92: a5:74:ed:46:bb:32:65:58:df:f8:c6:2a:a1:a4:52: 06:67:3e:24:3d:18:d9:2b:3a:07:5f:21:e3:f3:bf: 0b:5e:ae:db:60:ed:c2:45:04:23:79:5d:fc:8d:a0: 13:11:8e:e5:b7:be:e8:2b:17:e3:eb:7e:33:ac:b4: 10:4b:aa:b2:cc:bd:a7:e8:15:98:1b:9e:85:7b:3d: f3:3c:85:9f:a8:16:58:84:f7:45:bc:4c:8d:04:41: 8a:b0:51:43:54:82:55:f6:3b:bf:5e:45:3e:58:c9: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D2:C8:55:29:D8:C8:1A:71:C7:47:97:6A:10:4B:12:E1:AF:91:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f08722c-a2da-30fc-9207-fae253ca5bd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:88:33:84:e4:0a:ff:1f:23:45:be:9e:b8:b6:34:26:7c:c5: 0a:1b:84:18:06:df:98:bf:5b:19:5c:87:99:1f:28:bb:ad:6e: 23:8c:99:65:e5:d9:ff:64:c7:34:c1:a1:48:33:51:75:ec:7c: 44:ab:da:a6:7d:6d:02:6d:af:56:83:14:fb:09:4a:1a:09:62: af:bb:5f:10:52:6d:d0:1b:77:6f:e4:18:eb:28:6f:f1:fb:85: cd:3d:76:f8:38:eb:7b:e4:ef:a2:ab:29:6d:cf:b4:b5:22:81: e8:34:34:9c:3e:40:ab:7d:eb:e7:cb:19:4a:88:e0:34:80:43: 96:5f:26:19:a3:e7:1f:bb:28:0b:36:e2:30:0b:00:3f:9a:8e: a8:f9:64:b0:d6:e7:bb:f7:e0:d0:82:3e:f9:ff:2b:1f:fc:29: a5:26:ee:ae:83:99:85:c2:37:e7:6e:c0:87:20:36:83:ac:2d: 17:1b:77:76:a8:f8:3e:e3:60:8d:20:62:32:ba:61:ba:26:53: 76:b3:46:bf:4e:64:a1:86:19:7d:15:43:02:6e:79:7c:6f:ac: e2:8a:cf:d6:97:f2:29:41:1c:43:32:48:9c:e3:f8:a0:ff:13: 65:a3:e0:05:1f:64:07:c7:12:c0:d4:28:64:65:6e:f2:8c:f6: cd:d1:e1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiFUxLy8nsOz/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxN1oXDTI1MDkxODA5MzUxN1owLzEtMCsGA1UEAxMk YWE1MzYxYzQtOTI1MS00MjZlLTk1MTMtYzcxY2MwNWQyYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIISHoS3ZffqD4zxjoAm3twWZQkRpKS4ZO9v an9HNSdy8dF5kWLKIZaZXsZ6L9bagpOmt/qeGx0/XgBlYso52TxSD0E+e56s351E Z644pEQcY0R0SXmLLbBRLozkC01oTDIYhLZdG/C9d8ZZxu32mFXk2wg4YQyq7U8S oE4U2GbIkQD/Xttdhc8O8upTm5utg4gHv5KldO1GuzJlWN/4xiqhpFIGZz4kPRjZ KzoHXyHj878LXq7bYO3CRQQjeV38jaATEY7lt77oKxfj634zrLQQS6qyzL2n6BWY G56Fez3zPIWfqBZYhPdFvEyNBEGKsFFDVIJV9ju/XkU+WMlbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnSyFUp2MgaccdHl2oQSxLhr5F2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmYwODcyMmMtYTJkYS0z MGZjLTkyMDctZmFlMjUzY2E1YmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCIM4TkCv8fI0W+nri2NCZ8xQobhBgG35i/Wxlch5kfKLutbiOMmWXl 2f9kxzTBoUgzUXXsfESr2qZ9bQJtr1aDFPsJShoJYq+7XxBSbdAbd2/kGOsob/H7 hc09dvg463vk76KrKW3PtLUigeg0NJw+QKt96+fLGUqI4DSAQ5ZfJhmj5x+7KAs2 4jALAD+ajqj5ZLDW57v34NCCPvn/Kx/8KaUm7q6DmYXCN+duwIcgNoOsLRcbd3ao +D7jYI0gYjK6YbomU3azRr9OZKGGGX0VQwJueXxvrOKKz9aX8ilBHEMySJzj+KD/ E2Wj4AUfZAfHEsDUKGRlbvKM9s3R4WU= -----END CERTIFICATE-----Generated at Mon Jun 30 11:41:01 2025 by rpki-client