$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa File: 3ddcc118-f412-3942-b6a4-30742cd27a7c.roa (raw, json) Hash identifier: GZ1cOio+HrYHHePaVBEpG1441FvlfeAs/spow35GOh0= Subject key identifier: E0:25:F0:19:AA:46:63:3B:FC:D6:62:D7:84:21:3C:D1:E0:55:C4:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6005818AF2BBE4CC7A280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa Signing time: Thu 19 Jun 2025 09:16:15 +0000 ROA not before: Thu 19 Jun 2025 09:16:15 +0000 ROA not after: Wed 17 Sep 2025 09:16:15 +0000 asID: 22773 IP address blocks: 68.109.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:00:58:18:af:2b:be:4c:c7:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:15 2025 GMT Not After : Sep 17 09:16:15 2025 GMT Subject: CN=2dab6bcb-c145-4084-9b73-fa62c18bf3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:cd:e6:f8:73:c7:31:0c:10:36:ce:8e:27: 0a:7a:4e:60:44:d6:2f:4d:f3:89:bf:db:e4:58:20: c2:ff:69:2b:51:50:d9:10:9a:4b:17:3a:f9:94:ce: f0:8d:07:20:09:36:1b:23:d3:16:1f:e2:5e:f3:48: 52:e5:9b:79:b5:e4:8b:40:42:ed:87:e8:b6:be:d3: f9:66:bb:58:19:64:f5:ec:fd:9b:e8:a3:fb:9e:b8: 23:ae:41:14:77:15:47:f5:d9:27:55:68:db:e9:e0: 30:e8:1a:3d:9d:de:b0:ad:b1:bd:59:0d:25:6f:1a: 19:8c:18:65:4c:0d:5a:4a:12:a6:f7:ed:e0:e6:74: 74:01:cf:2a:db:ca:78:60:eb:24:f5:22:38:c4:c9: 9b:4b:7f:e6:98:d1:b5:42:de:3d:05:c6:17:81:43: 3e:ea:eb:c4:95:7f:0d:d2:0c:57:85:43:75:13:0b: fd:e9:a4:59:8b:c6:42:d6:58:78:a0:30:b8:26:aa: d2:9c:3c:3d:eb:d5:b9:54:39:66:46:cf:f2:3f:2a: 26:00:b8:68:af:8f:65:0c:5e:34:91:b0:49:4e:cf: be:a6:ab:c3:83:86:2c:2c:4c:9f:dc:6c:00:f4:32: 65:7f:0b:63:01:f8:76:6f:a0:5c:e1:95:81:2c:f9: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:25:F0:19:AA:46:63:3B:FC:D6:62:D7:84:21:3C:D1:E0:55:C4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ddcc118-f412-3942-b6a4-30742cd27a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:e2:04:8c:1d:bf:6e:cf:65:ea:1d:6f:a0:1b:fe:de:c6:8d: 72:10:1d:fa:c8:9e:a1:5d:b2:7f:9b:a0:bd:aa:d0:1f:bb:fb: 1e:ef:72:f4:7b:a7:35:67:b9:70:90:b5:7e:80:53:b1:a1:de: 5f:3b:24:85:20:c3:b4:17:b8:a4:e5:e8:5c:dc:12:c3:2e:df: fd:4d:66:d1:dd:91:40:b6:f7:70:4e:cc:ab:27:13:96:ea:7d: 5c:d0:59:69:e4:77:fa:96:a6:dd:0d:7a:cb:2e:3f:24:95:a6: a3:1d:d1:f1:28:a4:7d:5f:9f:b8:02:b8:f7:4a:82:93:81:fa: e2:44:50:34:6d:97:11:be:1d:72:dc:43:51:56:11:8b:60:24: 05:60:44:4c:9f:d6:7e:51:a1:05:34:46:3f:47:38:58:5c:bd: 39:ce:9b:99:45:30:c2:a7:f2:05:9e:e5:f6:80:15:c6:b7:d5: fe:86:46:ee:08:18:fb:e6:d7:2b:0f:f8:df:b9:96:01:4e:e1: f3:71:16:eb:3b:ac:ad:4c:c0:4a:2b:c2:bc:a6:66:7a:90:5f: 9e:9d:b3:04:11:67:2d:1b:e6:27:0e:9f:45:c2:4d:a1:1d:e0: d1:7c:5f:dc:41:d5:95:3b:3c:6b:21:dc:fd:a3:b1:fc:2d:2b: b8:3b:a4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91gBYGK8rvkzHooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYxNVoXDTI1MDkxNzA5MTYxNVowLzEtMCsGA1UEAxMk MmRhYjZiY2ItYzE0NS00MDg0LTliNzMtZmE2MmMxOGJmM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18zN5vhzxzEMEDbOjicKek5gRNYvTfOJv9vk WCDC/2krUVDZEJpLFzr5lM7wjQcgCTYbI9MWH+Je80hS5Zt5teSLQELth+i2vtP5 ZrtYGWT17P2b6KP7nrgjrkEUdxVH9dknVWjb6eAw6Bo9nd6wrbG9WQ0lbxoZjBhl TA1aShKm9+3g5nR0Ac8q28p4YOsk9SI4xMmbS3/mmNG1Qt49BcYXgUM+6uvElX8N 0gxXhUN1Ewv96aRZi8ZC1lh4oDC4JqrSnDw969W5VDlmRs/yPyomALhor49lDF40 kbBJTs++pqvDg4YsLEyf3GwA9DJlfwtjAfh2b6Bc4ZWBLPn5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAl8BmqRmM7/NZi14QhPNHgVcSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RkY2MxMTgtZjQxMi0z OTQyLWI2YTQtMzA3NDJjZDI3YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjiBIwdv27PZeodb6Ab/t7GjXIQHfrInqFdsn+boL2q0B+7+x7vcvR7 pzVnuXCQtX6AU7Gh3l87JIUgw7QXuKTl6FzcEsMu3/1NZtHdkUC293BOzKsnE5bq fVzQWWnkd/qWpt0NessuPySVpqMd0fEopH1fn7gCuPdKgpOB+uJEUDRtlxG+HXLc Q1FWEYtgJAVgREyf1n5RoQU0Rj9HOFhcvTnOm5lFMMKn8gWe5faAFca31f6GRu4I GPvm1ysP+N+5lgFO4fNxFus7rK1MwEorwrymZnqQX56dswQRZy0b5icOn0XCTaEd 4NF8X9xB1ZU7PGsh3P2jsfwtK7g7pCY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:36:42 2025 by rpki-client