$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/380b5158-acda-3d0d-9c3f-c0652802d455.roa File: 380b5158-acda-3d0d-9c3f-c0652802d455.roa (raw, json) Hash identifier: xTZ2AXsKGV/2GF1GwTAFMIxfrt7lKqRDhR8b5xOyqiA= Subject key identifier: 95:62:41:B1:80:E3:B9:C1:12:9D:02:6E:46:FB:07:3D:4B:23:E4:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7E4D0261D4910F91FE080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/380b5158-acda-3d0d-9c3f-c0652802d455.roa Signing time: Fri 20 Jun 2025 09:30:47 +0000 ROA not before: Fri 20 Jun 2025 09:30:47 +0000 ROA not after: Thu 18 Sep 2025 09:30:47 +0000 asID: 22773 IP address blocks: 68.229.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:e4:d0:26:1d:49:10:f9:1f:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:47 2025 GMT Not After : Sep 18 09:30:47 2025 GMT Subject: CN=6d7f4b69-1dd5-42bd-8e6d-d0ea1485ef9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:2c:c8:1a:c1:af:a2:2c:18:78:c2:c9:89: 25:36:3c:f5:83:90:3a:e5:0c:2d:1d:a2:c7:3a:65: cb:37:d6:b7:2a:9b:e1:8e:82:23:ec:8a:f1:dd:2d: 6a:3a:07:f9:a8:94:b9:5c:c1:f7:50:17:8b:a1:52: c5:94:37:85:28:20:b7:66:1c:8c:50:c3:80:85:c4: 99:0e:eb:0f:51:6a:89:bb:de:73:6b:74:47:7e:98: 1b:15:ab:42:c4:4f:aa:26:4e:8f:98:b9:22:5e:b1: 0e:a2:6e:72:fb:ba:27:a5:bc:cd:b5:ed:7e:cf:f7: 8f:35:56:18:1f:71:6f:fa:e9:5e:a6:be:41:2e:91: 8a:4a:f3:c7:13:36:50:2e:2b:bc:57:0f:0c:c9:23: c8:f9:7f:d6:8e:d0:02:7e:fb:93:99:6a:89:35:e4: c2:11:60:74:05:30:b4:c2:34:63:77:a9:ad:fa:70: 6f:cc:73:35:97:ac:1c:70:7b:22:5c:68:0b:ed:e4: e2:ba:7b:86:5c:e6:a9:47:e4:5a:52:f7:e7:37:5b: bb:ff:04:58:a5:cf:23:08:88:51:11:af:40:e1:b4: a4:6e:83:ac:7f:70:fd:df:1a:f4:81:e4:fd:02:61: 99:66:31:b2:cd:51:e4:72:c8:4c:99:bc:5e:36:ac: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:41:B1:80:E3:B9:C1:12:9D:02:6E:46:FB:07:3D:4B:23:E4:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/380b5158-acda-3d0d-9c3f-c0652802d455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:54:73:20:b4:cc:9d:0f:45:9e:76:a7:5e:1d:3f:ee:07:39: 73:15:d5:57:71:07:e5:46:8d:43:9b:6c:91:b7:0a:f9:63:b2: ca:87:4f:81:13:2d:bf:9d:21:0c:71:56:71:50:60:1e:56:81: 1e:62:4a:14:07:9f:58:15:71:03:3f:2a:87:43:b8:80:f6:7c: fa:39:5e:63:2f:40:49:67:1a:da:13:3d:e9:4f:13:96:f2:95: f0:d0:aa:32:a7:c8:ff:7a:9c:5b:fa:a4:f8:3d:19:5f:ba:99: 8c:73:37:d6:8f:16:b7:67:a6:45:ef:18:3d:a3:38:23:c6:b5: 5d:ca:22:8f:f3:48:e0:b1:ad:8a:22:09:5c:5f:3f:66:94:9b: 30:d0:bf:5f:c4:27:df:81:87:e1:f9:1d:ee:0e:79:d1:b2:7f: 9f:de:43:5d:03:43:d7:95:31:1a:62:7f:c9:7d:b9:7b:47:7a: 73:e9:b7:54:cd:85:6b:a4:72:5f:7f:cc:d7:27:cf:68:b9:9c: 71:dd:7e:59:0e:42:6a:1c:5d:3d:4e:bb:f6:2b:3d:c1:af:80: 24:0f:f4:f9:9c:14:a2:e9:04:ad:8a:63:54:e1:e5:5e:8e:68: 68:0e:8f:e0:91:8c:54:6a:f6:bc:16:b3:5a:37:a0:25:74:4d: 74:43:30:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp+TQJh1JEPkf4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA0N1oXDTI1MDkxODA5MzA0N1owLzEtMCsGA1UEAxMk NmQ3ZjRiNjktMWRkNS00MmJkLThlNmQtZDBlYTE0ODVlZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD8syBrBr6IsGHjCyYklNjz1g5A65QwtHaLH OmXLN9a3KpvhjoIj7Irx3S1qOgf5qJS5XMH3UBeLoVLFlDeFKCC3ZhyMUMOAhcSZ DusPUWqJu95za3RHfpgbFatCxE+qJk6PmLkiXrEOom5y+7onpbzNte1+z/ePNVYY H3Fv+ulepr5BLpGKSvPHEzZQLiu8Vw8MySPI+X/WjtACfvuTmWqJNeTCEWB0BTC0 wjRjd6mt+nBvzHM1l6wccHsiXGgL7eTiunuGXOapR+RaUvfnN1u7/wRYpc8jCIhR Ea9A4bSkboOsf3D93xr0geT9AmGZZjGyzVHkcshMmbxeNqwDOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJViQbGA47nBEp0Cbkb7Bz1LI+TPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzgwYjUxNTgtYWNkYS0z ZDBkLTljM2YtYzA2NTI4MDJkNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtUcyC0zJ0PRZ52p14dP+4HOXMV1VdxB+VGjUObbJG3CvljssqHT4ET Lb+dIQxxVnFQYB5WgR5iShQHn1gVcQM/KodDuID2fPo5XmMvQElnGtoTPelPE5by lfDQqjKnyP96nFv6pPg9GV+6mYxzN9aPFrdnpkXvGD2jOCPGtV3KIo/zSOCxrYoi CVxfP2aUmzDQv1/EJ9+Bh+H5He4OedGyf5/eQ10DQ9eVMRpif8l9uXtHenPpt1TN hWukcl9/zNcnz2i5nHHdflkOQmocXT1Ou/YrPcGvgCQP9PmcFKLpBK2KY1Th5V6O aGgOj+CRjFRq9rwWs1o3oCV0TXRDMEQ= -----END CERTIFICATE-----Generated at Mon Jun 30 16:01:10 2025 by rpki-client