$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8a175f-e3b3-33b0-8908-502ce9b1592f.roa File: 3e8a175f-e3b3-33b0-8908-502ce9b1592f.roa (raw, json) Hash identifier: hB1je17zUaoA/HCqiad6bFsrL7w58JAewDBT84N7yyc= Subject key identifier: 05:FF:65:E3:FF:D9:07:EC:85:1F:23:A0:C2:11:EC:94:03:9F:7F:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6B81B9EE3CBDA3F7C4C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8a175f-e3b3-33b0-8908-502ce9b1592f.roa Signing time: Thu 19 Jun 2025 09:17:42 +0000 ROA not before: Thu 19 Jun 2025 09:17:42 +0000 ROA not after: Wed 17 Sep 2025 09:17:42 +0000 asID: 22773 IP address blocks: 68.230.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:b8:1b:9e:e3:cb:da:3f:7c:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:42 2025 GMT Not After : Sep 17 09:17:42 2025 GMT Subject: CN=0967db6c-8f35-4da8-957e-57846a78b755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7e:32:65:3a:cb:43:d7:cf:36:eb:1d:c4:94: ab:8e:68:af:42:56:10:58:2c:5c:c8:f9:57:11:f0: 6f:55:4b:5c:a6:a1:1c:9d:3a:87:5f:ea:ab:68:21: bd:1d:0b:1e:c8:ea:a5:6c:56:0c:77:8a:f9:ba:29: 55:03:9f:4f:2e:13:d7:2f:8b:24:fb:0e:6b:1b:22: c1:a3:f7:e1:7a:12:3b:2a:12:a8:5f:cb:65:26:61: 6a:13:82:c2:68:56:5f:3d:18:14:34:4a:8c:89:72: 01:d0:93:46:2c:b9:65:61:83:9a:2c:fc:c6:c8:56: 1a:28:fe:b3:88:84:cf:cf:7b:9c:1f:b8:f5:d2:d7: a8:34:26:66:99:ad:55:19:43:c9:91:89:66:b5:2e: bf:83:32:ac:5c:08:e0:65:cf:ae:30:86:ad:80:86: df:fb:29:37:5e:81:95:1f:85:e2:6c:9e:ec:97:09: df:9b:1f:e4:0c:0a:a2:a6:b5:2c:29:96:2b:61:98: ad:4b:00:19:c2:29:b8:a6:ab:96:bc:c3:2e:8d:d1: b4:9f:d5:84:c2:1f:5d:0b:30:07:75:58:30:ef:6b: 24:81:15:b2:8e:95:a3:74:2e:f8:41:4d:84:77:f2: 6f:71:e7:42:66:60:aa:d3:6d:64:18:da:eb:8d:c3: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:65:E3:FF:D9:07:EC:85:1F:23:A0:C2:11:EC:94:03:9F:7F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8a175f-e3b3-33b0-8908-502ce9b1592f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ed:e1:8f:e4:83:0d:6f:b4:c1:62:d4:3f:b1:3f:98:44:3a: b6:95:e9:26:57:d9:91:34:fa:cf:79:91:83:ea:9f:68:4f:4f: 82:78:ef:93:c2:68:df:6e:8f:1c:38:f4:89:99:2a:4e:1b:76: 60:a5:1e:4d:4b:18:c5:02:80:64:28:9b:be:20:cd:b9:d2:00: 53:8e:43:c9:9a:6b:f4:ec:ec:78:f2:6e:45:1d:00:c9:d6:86: fe:28:82:07:ea:8d:77:78:29:41:43:96:55:18:80:8a:a3:ab: 25:d0:c9:45:d2:b8:8d:7c:09:2a:b4:79:a7:02:63:b1:d2:ce: 0c:87:0f:17:5c:9d:95:d9:51:b0:5c:18:e9:63:d9:a9:b3:81: fa:eb:fe:ce:f7:fe:90:7f:1f:32:c2:72:44:3a:ac:30:e9:1d: ec:3f:a0:02:b9:a4:4a:20:18:a7:8d:99:07:b9:af:48:db:ff: d6:3b:b4:a6:b4:71:a3:41:f3:a5:9e:bd:c7:4d:49:5d:44:be: 6c:18:52:fd:d5:36:79:0c:c4:34:41:f2:a7:49:65:04:5a:4f: e0:ae:72:13:82:8f:da:f8:f3:51:5d:72:08:3f:1b:9e:a1:52: bd:a9:a3:d9:14:e1:22:65:70:b8:e4:3d:18:46:fc:4d:8e:f7: 54:50:62:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91rgbnuPL2j98TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc0MloXDTI1MDkxNzA5MTc0MlowLzEtMCsGA1UEAxMk MDk2N2RiNmMtOGYzNS00ZGE4LTk1N2UtNTc4NDZhNzhiNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX4yZTrLQ9fPNusdxJSrjmivQlYQWCxcyPlX EfBvVUtcpqEcnTqHX+qraCG9HQseyOqlbFYMd4r5uilVA59PLhPXL4sk+w5rGyLB o/fhehI7KhKoX8tlJmFqE4LCaFZfPRgUNEqMiXIB0JNGLLllYYOaLPzGyFYaKP6z iITPz3ucH7j10teoNCZmma1VGUPJkYlmtS6/gzKsXAjgZc+uMIatgIbf+yk3XoGV H4XibJ7slwnfmx/kDAqiprUsKZYrYZitSwAZwim4pquWvMMujdG0n9WEwh9dCzAH dVgw72skgRWyjpWjdC74QU2Ed/JvcedCZmCq021kGNrrjcPJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX/ZeP/2QfshR8joMIR7JQDn3+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U4YTE3NWYtZTNiMy0z M2IwLTg5MDgtNTAyY2U5YjE1OTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzt4Y/kgw1vtMFi1D+xP5hEOraV6SZX2ZE0+s95kYPqn2hPT4J475PC aN9ujxw49ImZKk4bdmClHk1LGMUCgGQom74gzbnSAFOOQ8maa/Ts7HjybkUdAMnW hv4oggfqjXd4KUFDllUYgIqjqyXQyUXSuI18CSq0eacCY7HSzgyHDxdcnZXZUbBc GOlj2amzgfrr/s73/pB/HzLCckQ6rDDpHew/oAK5pEogGKeNmQe5r0jb/9Y7tKa0 caNB86WevcdNSV1EvmwYUv3VNnkMxDRB8qdJZQRaT+CuchOCj9r481Fdcgg/G56h Ur2po9kU4SJlcLjkPRhG/E2O91RQYv8= -----END CERTIFICATE-----Generated at Tue Jul 1 17:55:27 2025 by rpki-client