$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1bc2e6-44ed-3df6-9655-9a2b22a70dd0.roa File: 3e1bc2e6-44ed-3df6-9655-9a2b22a70dd0.roa (raw, json) Hash identifier: BSBxD4By6fFblmH7dm2eizZ2qAB/jB836DAixOZkEBM= Subject key identifier: 69:48:D3:2D:A5:21:14:29:20:9F:E4:31:34:45:F8:37:EE:81:00:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7B33EA909C10E26416100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1bc2e6-44ed-3df6-9655-9a2b22a70dd0.roa Signing time: Fri 20 Jun 2025 09:30:24 +0000 ROA not before: Fri 20 Jun 2025 09:30:24 +0000 ROA not after: Thu 18 Sep 2025 09:30:24 +0000 asID: 22773 IP address blocks: 68.224.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:b3:3e:a9:09:c1:0e:26:41:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:24 2025 GMT Not After : Sep 18 09:30:24 2025 GMT Subject: CN=a9243b02-ccba-46ca-845c-2badf8c10a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:ba:fb:60:61:fa:84:47:95:aa:c8:2d:b5: 9c:a3:43:b0:6f:ca:5a:e6:a4:57:61:4d:d7:29:8c: f3:a4:25:07:53:75:0a:8b:2e:d9:dd:2f:77:4b:e2: be:97:1c:4b:e0:d0:ad:f7:48:cf:b8:eb:49:2b:a4: 07:0b:69:02:f8:fa:43:53:7a:5f:14:2b:65:31:8e: 5e:a4:d9:ac:f7:75:e0:24:c2:8d:32:cf:45:dc:83: 17:2e:cb:b5:54:43:49:b7:d4:e9:5b:0f:d1:ad:64: 1f:6a:e4:42:0d:4d:40:41:19:42:f8:15:f7:0b:f8: b7:49:0b:66:29:c4:7b:b3:dc:db:7e:18:b6:b0:05: d5:86:02:2b:0e:0e:0a:11:86:ad:0c:fd:42:71:45: 8b:45:3c:14:42:02:a0:4f:ba:54:8a:97:65:79:fe: 53:b8:90:f9:e6:ec:6b:3b:c9:56:ed:b6:1c:15:09: 1a:4d:b0:d8:90:bb:84:28:28:e7:75:4b:b2:32:f8: 85:99:68:7c:b7:a8:dc:d9:e2:b9:6a:6e:9b:28:2b: e4:94:a8:01:9b:c4:0c:cb:b5:91:8f:f3:b7:8e:aa: 82:fd:00:e5:f7:49:fa:80:51:6d:ae:5c:48:22:64: d9:1b:42:71:92:c9:c9:3f:48:8d:d4:41:66:fd:87: 1f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:48:D3:2D:A5:21:14:29:20:9F:E4:31:34:45:F8:37:EE:81:00:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1bc2e6-44ed-3df6-9655-9a2b22a70dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cf:c5:49:7a:84:b5:da:cd:f2:a4:49:df:5b:6e:93:28:3e: ea:f4:a9:e3:bc:1a:e3:bb:06:2f:df:00:20:f7:0d:fd:19:62: f6:e5:31:35:80:06:0b:61:66:83:ec:72:23:0d:cf:08:81:9e: f2:ed:d0:e9:4c:11:30:b4:27:25:82:1e:2b:4a:31:f3:71:67: b0:1f:96:c6:77:b9:67:33:c8:98:3c:2c:cf:5b:f0:be:d3:d2: 19:2e:e9:53:fd:dd:07:a8:67:9d:14:8a:ab:e2:27:d5:30:69: 57:68:0b:03:77:70:5b:bb:ba:82:a7:12:64:a5:b6:b2:ef:47: 26:ba:07:9c:04:01:47:c3:e1:e8:53:92:45:53:f9:ad:84:7e: 76:c8:5a:82:dc:a6:b7:cd:47:76:99:ad:83:d8:cd:25:14:59: 7f:d3:8f:88:94:fb:ca:6c:ce:aa:66:ed:2f:a2:73:16:dd:61: 05:1a:92:5a:f8:d1:0d:08:b1:7e:a3:69:d7:2f:81:e9:ea:0a: a2:d7:69:4a:51:86:01:78:c4:b2:57:7f:45:2a:cf:5f:eb:98: 1e:c8:c8:28:0f:ca:c4:64:4a:4f:44:cc:25:90:8b:75:f3:59: e3:43:b5:b9:0f:d5:df:6f:1d:1a:8c:df:8c:97:30:10:33:f5: 93:0e:a4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp7M+qQnBDiZBYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAyNFoXDTI1MDkxODA5MzAyNFowLzEtMCsGA1UEAxMk YTkyNDNiMDItY2NiYS00NmNhLTg0NWMtMmJhZGY4YzEwYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2na6+2Bh+oRHlarILbWco0Owb8pa5qRXYU3X KYzzpCUHU3UKiy7Z3S93S+K+lxxL4NCt90jPuOtJK6QHC2kC+PpDU3pfFCtlMY5e pNms93XgJMKNMs9F3IMXLsu1VENJt9TpWw/RrWQfauRCDU1AQRlC+BX3C/i3SQtm KcR7s9zbfhi2sAXVhgIrDg4KEYatDP1CcUWLRTwUQgKgT7pUipdlef5TuJD55uxr O8lW7bYcFQkaTbDYkLuEKCjndUuyMviFmWh8t6jc2eK5am6bKCvklKgBm8QMy7WR j/O3jqqC/QDl90n6gFFtrlxIImTZG0JxksnJP0iN1EFm/YcfTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlI0y2lIRQpIJ/kMTRF+DfugQCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2UxYmMyZTYtNDRlZC0z ZGY2LTk2NTUtOWEyYjIyYTcwZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvPxUl6hLXazfKkSd9bbpMoPur0qeO8GuO7Bi/fACD3Df0ZYvblMTWA BgthZoPsciMNzwiBnvLt0OlMETC0JyWCHitKMfNxZ7AflsZ3uWczyJg8LM9b8L7T 0hku6VP93QeoZ50UiqviJ9UwaVdoCwN3cFu7uoKnEmSltrLvRya6B5wEAUfD4ehT kkVT+a2EfnbIWoLcprfNR3aZrYPYzSUUWX/Tj4iU+8pszqpm7S+icxbdYQUaklr4 0Q0IsX6jadcvgenqCqLXaUpRhgF4xLJXf0Uqz1/rmB7IyCgPysRkSk9EzCWQi3Xz WeNDtbkP1d9vHRqM34yXMBAz9ZMOpPg= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:15 2025 by rpki-client