$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa File: 42560064-0659-32dc-a3b0-1a01cfca664e.roa (raw, json) Hash identifier: NBN7MC6idp2n4azM7c/iRpwoEUv1O574xPQ0vBO7WGM= Subject key identifier: 72:FB:F5:8C:AD:E5:35:CF:1C:77:58:92:B0:A1:8A:DC:CA:F8:DE:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FE6F82F738310DAA2F238 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa Signing time: Wed 18 Jun 2025 18:01:18 +0000 ROA not before: Wed 18 Jun 2025 18:01:18 +0000 ROA not after: Tue 16 Sep 2025 18:01:18 +0000 asID: 22773 IP address blocks: 68.0.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:e6:f8:2f:73:83:10:da:a2:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:18 2025 GMT Not After : Sep 16 18:01:18 2025 GMT Subject: CN=2cd40ef4-bd7f-40e5-a9d6-c0a7973ef0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:44:43:8a:9d:4c:4e:53:f4:79:d3:f6:1a:1e: 7d:0e:e9:79:44:c7:07:f4:ac:b1:de:ac:99:8a:e0: ab:2a:5d:39:b4:10:a6:4a:db:33:a5:d8:1e:2d:87: 65:48:82:4d:6f:c7:f4:dc:ae:fb:7b:ef:16:20:58: 9d:cf:52:58:ef:0d:5c:8f:f2:f3:4e:c0:cb:f7:d2: b5:0b:23:23:08:70:0c:08:aa:3d:3d:29:82:fd:b3: e4:dd:7d:d7:5b:0c:00:6b:15:fc:e3:b2:8c:d5:04: 58:80:de:3e:eb:bf:fd:1f:fa:50:ef:7e:8d:bb:73: 26:a0:98:ff:41:f0:56:dc:f5:7c:8c:ad:1a:2c:57: 50:7c:9a:0f:51:52:fe:32:99:0f:b1:05:82:a7:dc: 80:6c:56:4b:1d:27:fe:0d:46:b3:a8:7b:8a:64:90: 2b:7e:38:27:50:dc:df:44:74:cd:98:90:3d:e8:54: 81:1e:59:86:7d:0e:fd:3f:8c:94:71:33:a9:0c:c6: 0a:43:4c:29:eb:be:9f:aa:43:7f:ce:65:3b:c9:f3: 77:29:be:f7:6a:73:9c:60:d0:77:65:12:94:13:34: 2a:b0:33:94:7e:80:e4:9e:f9:99:ee:af:24:9b:d1: 1b:2d:75:da:79:2d:6d:8a:d3:3c:74:bf:37:8d:29: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:F5:8C:AD:E5:35:CF:1C:77:58:92:B0:A1:8A:DC:CA:F8:DE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42560064-0659-32dc-a3b0-1a01cfca664e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:89:8e:0a:22:8c:26:97:2c:84:cd:43:15:5c:1e:7b:ac:5f: 21:e5:7d:2f:5b:15:42:aa:7e:0b:f8:c2:9f:39:95:1d:50:e0: 4a:28:79:1e:d0:86:d0:49:d3:eb:19:23:8a:5c:76:87:2d:67: 53:3e:a7:f0:a2:3c:8c:bc:9a:e0:49:64:b0:07:1c:4e:1f:d6: b8:f0:46:c8:20:39:65:af:17:c1:46:e1:58:75:b1:a7:39:92: 18:7e:88:e7:27:b6:85:d1:2b:ca:2b:39:f4:87:76:7f:39:b8: 65:48:33:7e:5e:38:da:d4:f7:67:23:15:44:79:b6:dc:02:4a: 2c:07:be:b6:99:cb:65:20:7b:73:47:1f:6f:0e:47:bd:2a:7e: 62:1a:9d:77:6a:c4:b0:1f:6a:bd:69:b9:e1:a7:91:2d:f0:18: 2d:fe:ff:0d:ba:c4:ac:b1:e1:b7:bc:83:17:c3:df:75:a6:55: fa:93:6d:17:6e:2a:a6:92:c9:a4:ee:8b:8e:70:71:32:02:28: 65:bb:68:43:de:51:93:4d:0e:01:3c:77:bd:f1:91:f2:18:f8: d0:19:50:93:b1:c4:1a:14:a0:92:c7:9b:30:b9:27:75:1e:b0: de:69:72:b3:c1:27:32:2f:4e:8a:b8:0e:2a:75:69:0a:37:8d: ec:1a:a8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D+b4L3ODENqi8jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDExOFoXDTI1MDkxNjE4MDExOFowLzEtMCsGA1UEAxMk MmNkNDBlZjQtYmQ3Zi00MGU1LWE5ZDYtYzBhNzk3M2VmMGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0RDip1MTlP0edP2Gh59Dul5RMcH9Kyx3qyZ iuCrKl05tBCmStszpdgeLYdlSIJNb8f03K77e+8WIFidz1JY7w1cj/LzTsDL99K1 CyMjCHAMCKo9PSmC/bPk3X3XWwwAaxX847KM1QRYgN4+67/9H/pQ736Nu3MmoJj/ QfBW3PV8jK0aLFdQfJoPUVL+MpkPsQWCp9yAbFZLHSf+DUazqHuKZJArfjgnUNzf RHTNmJA96FSBHlmGfQ79P4yUcTOpDMYKQ0wp676fqkN/zmU7yfN3Kb73anOcYNB3 ZRKUEzQqsDOUfoDknvmZ7q8km9EbLXXaeS1titM8dL83jSk/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL79Yyt5TXPHHdYkrChitzK+N4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDI1NjAwNjQtMDY1OS0z MmRjLWEzYjAtMWEwMWNmY2E2NjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqJjgoijCaXLITNQxVcHnusXyHlfS9bFUKqfgv4wp85lR1Q4EooeR7Q htBJ0+sZI4pcdoctZ1M+p/CiPIy8muBJZLAHHE4f1rjwRsggOWWvF8FG4Vh1sac5 khh+iOcntoXRK8orOfSHdn85uGVIM35eONrU92cjFUR5ttwCSiwHvraZy2Uge3NH H28OR70qfmIanXdqxLAfar1pueGnkS3wGC3+/w26xKyx4be8gxfD33WmVfqTbRdu KqaSyaTui45wcTICKGW7aEPeUZNNDgE8d73xkfIY+NAZUJOxxBoUoJLHmzC5J3Ue sN5pcrPBJzIvToq4Dip1aQo3jewaqKE= -----END CERTIFICATE-----Generated at Tue Jul 1 07:38:03 2025 by rpki-client