$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38016438-7975-3354-80f4-d5240b6f007c.roa File: 38016438-7975-3354-80f4-d5240b6f007c.roa (raw, json) Hash identifier: iJYvOQsJ4KHYvVOt7btmcw7Lk6sPI7H20wDPGKW8S4I= Subject key identifier: C4:7B:8D:9B:25:AB:13:42:45:AD:49:69:E4:FF:F2:BB:56:B1:A5:6D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F50ADEA18334C8494BEB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38016438-7975-3354-80f4-d5240b6f007c.roa Signing time: Thu 01 May 2025 17:08:52 +0000 ROA not before: Thu 01 May 2025 17:08:52 +0000 ROA not after: Wed 30 Jul 2025 17:08:52 +0000 asID: 22773 IP address blocks: 68.9.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:0a:de:a1:83:34:c8:49:4b:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:52 2025 GMT Not After : Jul 30 17:08:52 2025 GMT Subject: CN=861508b0-719b-4b6d-a914-aa6509fb01d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:e0:fe:97:ec:15:1d:d2:91:78:0a:30:a4: 6d:2c:1a:39:29:84:fe:45:b7:03:4e:69:67:88:9d: 81:74:e8:24:b7:06:44:99:4b:50:ae:92:db:a5:f0: 7d:da:28:1a:62:50:f2:44:8d:ee:89:c5:b7:f8:72: 5e:0d:84:43:6a:7e:db:85:18:eb:71:21:b3:c3:b4: 72:fc:52:4f:50:b1:4d:26:7c:7b:14:fa:7f:3d:72: 3c:08:51:ac:96:e6:4f:93:25:36:6a:c4:68:05:e4: ba:c9:55:34:58:84:3a:b0:c2:b9:83:8f:c8:0a:1a: d4:97:df:fb:74:0a:e6:c5:dd:d3:aa:3c:b7:be:37: e2:50:b3:90:e4:08:2c:6c:52:ce:e8:67:15:1a:97: 4b:e3:05:0e:b3:07:6c:cc:e9:06:3a:07:93:60:3d: 3c:71:62:4a:86:c8:d1:cd:ab:c9:71:ff:be:48:92: bf:0c:2f:79:fb:63:6d:19:93:87:f3:67:4b:82:27: f5:7c:77:58:ad:4a:73:be:01:74:54:30:59:35:5e: 7c:d3:8c:2d:eb:64:e0:2c:a5:bb:9d:33:f4:00:9a: 92:b0:9d:5d:05:09:5a:5f:dd:f0:03:f7:b4:fb:8b: 91:e7:9e:7a:bb:42:61:d6:2a:90:0c:49:a6:c3:79: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:8D:9B:25:AB:13:42:45:AD:49:69:E4:FF:F2:BB:56:B1:A5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38016438-7975-3354-80f4-d5240b6f007c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:77:1d:a8:4a:eb:e9:48:f3:61:55:2d:3e:40:8d:90:19:60: 12:e2:04:3e:c9:47:51:43:44:93:44:40:e6:41:16:49:88:d9: 69:e7:25:47:b1:b3:2f:76:ce:84:75:57:ab:aa:0c:7c:c0:ad: 6a:c3:d6:03:62:8c:8e:81:ba:58:fb:d4:ba:5c:88:75:08:a7: 4e:e6:04:12:82:e8:9d:ee:be:a3:8f:f2:3d:c0:b5:d8:2f:4f: fc:5f:96:23:59:ab:63:65:57:38:36:10:09:85:f9:09:bd:82: 67:79:72:bf:84:ac:42:78:eb:d2:00:31:c5:ff:b7:7d:92:7f: 92:f9:02:5d:c5:3f:63:93:e6:a2:0d:7d:11:cd:eb:f8:d7:bd: fb:08:4c:73:7e:2a:6f:a1:dd:87:c5:a0:6e:12:f0:95:ef:5d: fe:dd:7e:87:6e:6f:30:14:a6:be:3f:78:23:36:d6:1e:c9:c1: 10:33:4f:06:8c:04:71:e4:f2:23:ae:5d:fb:fd:f5:f4:be:42: 69:e7:75:78:a2:8c:c0:37:54:4a:3a:f5:79:c9:1b:53:67:ba: 5e:ad:4d:fd:1a:b8:27:1a:d7:63:31:af:a0:da:05:b4:9e:d1: 9e:49:4a:1a:13:b1:dc:6d:2b:a2:6b:c5:f4:d7:60:36:d4:6f: 91:c9:fd:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19QreoYM0yElL6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1MloXDTI1MDczMDE3MDg1MlowLzEtMCsGA1UEAxMk ODYxNTA4YjAtNzE5Yi00YjZkLWE5MTQtYWE2NTA5ZmIwMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdXg/pfsFR3SkXgKMKRtLBo5KYT+RbcDTmln iJ2BdOgktwZEmUtQrpLbpfB92igaYlDyRI3uicW3+HJeDYRDan7bhRjrcSGzw7Ry /FJPULFNJnx7FPp/PXI8CFGsluZPkyU2asRoBeS6yVU0WIQ6sMK5g4/IChrUl9/7 dArmxd3Tqjy3vjfiULOQ5AgsbFLO6GcVGpdL4wUOswdszOkGOgeTYD08cWJKhsjR zavJcf++SJK/DC95+2NtGZOH82dLgif1fHdYrUpzvgF0VDBZNV5804wt62TgLKW7 nTP0AJqSsJ1dBQlaX93wA/e0+4uR5556u0Jh1iqQDEmmw3nCTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR7jZslqxNCRa1JaeT/8rtWsaVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzgwMTY0MzgtNzk3NS0z MzU0LTgwZjQtZDUyNDBiNmYwMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA13HahK6+lI82FVLT5AjZAZYBLiBD7JR1FDRJNEQOZBFkmI2WnnJUex sy92zoR1V6uqDHzArWrD1gNijI6Bulj71LpciHUIp07mBBKC6J3uvqOP8j3Atdgv T/xfliNZq2NlVzg2EAmF+Qm9gmd5cr+ErEJ469IAMcX/t32Sf5L5Al3FP2OT5qIN fRHN6/jXvfsITHN+Km+h3YfFoG4S8JXvXf7dfodubzAUpr4/eCM21h7JwRAzTwaM BHHk8iOuXfv99fS+QmnndXiijMA3VEo69XnJG1Nnul6tTf0auCca12Mxr6DaBbSe 0Z5JShoTsdxtK6JrxfTXYDbUb5HJ/co= -----END CERTIFICATE-----Generated at Wed Jul 2 22:38:36 2025 by rpki-client