$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa File: 415680e9-0467-3544-800d-0ccb6f77c841.roa (raw, json) Hash identifier: x56IvADSkKMalDpjU00BzjahyQs1n0v6+S/zqr8v7Sw= Subject key identifier: 28:47:6B:48:94:2B:56:91:75:C5:4C:70:82:8A:E6:22:31:BB:E6:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6CD7CB153ECD9E0FB3780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa Signing time: Fri 20 Jun 2025 09:28:35 +0000 ROA not before: Fri 20 Jun 2025 09:28:35 +0000 ROA not after: Thu 18 Sep 2025 09:28:35 +0000 asID: 22773 IP address blocks: 68.96.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:cd:7c:b1:53:ec:d9:e0:fb:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:35 2025 GMT Not After : Sep 18 09:28:35 2025 GMT Subject: CN=7ffb6090-6033-4e31-b7e2-c945bb06106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:80:7b:35:f5:c7:a0:78:4f:af:ac:22:83: 96:4b:f9:eb:64:d4:2c:a5:8d:98:df:24:a7:65:92: 2f:e4:9f:7b:24:1f:76:8e:5a:51:db:47:8d:f2:6e: ef:fb:27:7d:00:c7:f1:53:72:de:af:f2:c2:0d:32: 9b:06:d5:33:9c:49:cc:e2:1d:0e:83:6f:23:20:a7: 1c:ba:7d:1c:2a:55:fa:36:44:b7:2a:aa:71:d7:94: 95:cc:3c:e2:9e:ca:90:24:49:5d:09:e8:51:8c:a5: 26:cb:85:bc:01:0b:14:6a:89:41:43:53:f4:82:9a: f8:be:bb:5e:63:4f:d3:bf:0c:51:79:89:6d:6b:88: c4:7a:45:19:b7:dc:d7:b4:cc:8a:0d:b3:3d:c9:95: 23:8a:56:2f:5d:86:5a:cb:74:2c:00:15:f1:11:ee: 44:47:6a:8b:fe:3d:88:af:4b:4f:53:4e:53:98:fd: 09:33:89:f7:2a:99:d7:f1:87:9a:6a:ab:7a:37:66: 4f:c4:76:89:da:fc:2b:d3:0a:21:99:68:8b:8d:51: 6a:ab:03:38:db:60:7e:63:b4:09:6f:a7:80:47:c3: 92:14:70:e6:3c:39:f0:29:bb:8d:f3:c1:17:45:73: d4:fd:8e:06:ed:69:86:c1:45:ce:95:af:55:22:40: 8f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:6B:48:94:2B:56:91:75:C5:4C:70:82:8A:E6:22:31:BB:E6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/415680e9-0467-3544-800d-0ccb6f77c841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:06:5b:53:44:64:cb:03:82:87:b6:08:91:0e:83:c9:dd:79: 7b:37:0d:58:78:cc:3d:35:fe:16:bc:54:6f:45:76:68:32:fa: 55:40:7a:a1:83:c7:07:f6:81:df:f1:6b:03:50:68:ce:0c:96: ba:22:12:25:79:3a:08:9d:43:c7:f2:c8:65:e1:33:fc:ec:36: 73:c3:2a:5e:1f:36:73:e3:ac:aa:8d:c0:ef:18:f5:62:30:a7: 3d:91:44:ca:92:e0:bd:a5:07:39:6f:43:e9:62:eb:37:a4:91: c8:bf:a3:58:5e:10:8c:b9:5a:84:d7:7e:08:07:99:12:09:6a: 9a:96:fc:ac:6f:b8:22:c0:47:21:d7:59:b1:28:64:73:b0:78: 78:d2:77:1c:c2:30:75:97:8c:ac:5d:b5:72:72:81:36:03:82: 3e:52:1f:58:25:e2:d1:aa:20:e2:51:3d:9c:ff:fc:4f:ad:06: c9:30:03:fa:b7:31:cd:27:34:4c:dc:2a:bc:fa:cd:ed:3b:0b: 03:b6:ec:86:e5:20:49:06:7c:5a:48:7e:df:49:45:17:11:e1: 92:f3:0c:9a:26:1e:ce:93:9b:b0:c3:d9:9a:81:f7:11:70:ca: 88:00:33:fa:23:d3:d1:b8:fe:7b:1d:1c:f7:06:d9:ee:c2:d2: 4a:4d:8e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAps18sVPs2eD7N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgzNVoXDTI1MDkxODA5MjgzNVowLzEtMCsGA1UEAxMk N2ZmYjYwOTAtNjAzMy00ZTMxLWI3ZTItYzk0NWJiMDYxMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttyAezX1x6B4T6+sIoOWS/nrZNQspY2Y3ySn ZZIv5J97JB92jlpR20eN8m7v+yd9AMfxU3Ler/LCDTKbBtUznEnM4h0Og28jIKcc un0cKlX6NkS3Kqpx15SVzDzinsqQJEldCehRjKUmy4W8AQsUaolBQ1P0gpr4vrte Y0/TvwxReYlta4jEekUZt9zXtMyKDbM9yZUjilYvXYZay3QsABXxEe5ER2qL/j2I r0tPU05TmP0JM4n3KpnX8Yeaaqt6N2ZPxHaJ2vwr0wohmWiLjVFqqwM422B+Y7QJ b6eAR8OSFHDmPDnwKbuN88EXRXPU/Y4G7WmGwUXOla9VIkCPHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChHa0iUK1aRdcVMcIKK5iIxu+b3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDE1NjgwZTktMDQ2Ny0z NTQ0LTgwMGQtMGNjYjZmNzdjODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4GW1NEZMsDgoe2CJEOg8ndeXs3DVh4zD01/ha8VG9Fdmgy+lVAeqGD xwf2gd/xawNQaM4MlroiEiV5OgidQ8fyyGXhM/zsNnPDKl4fNnPjrKqNwO8Y9WIw pz2RRMqS4L2lBzlvQ+li6zekkci/o1heEIy5WoTXfggHmRIJapqW/KxvuCLARyHX WbEoZHOweHjSdxzCMHWXjKxdtXJygTYDgj5SH1gl4tGqIOJRPZz//E+tBskwA/q3 Mc0nNEzcKrz6ze07CwO27IblIEkGfFpIft9JRRcR4ZLzDJomHs6Tm7DD2ZqB9xFw yogAM/oj09G4/nsdHPcG2e7C0kpNjk4= -----END CERTIFICATE-----Generated at Tue Jul 1 22:51:25 2025 by rpki-client