$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa File: 430c2e95-985d-3184-99ab-b41d0a7da738.roa (raw, json) Hash identifier: VqkvMeb7afGD0pzHb3rjDeFRsZc5Oy1cXc+8S1c1YrM= Subject key identifier: 88:7E:A8:7F:7D:43:84:B0:62:69:A9:E5:E8:E9:A1:35:5F:20:EF:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A5CFB36924069130002444900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 68.225.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:36:92:40:69:13:00:02:44:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b4036e90-ed04-4c7f-ba16-0281371eeadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1f:1e:95:4b:57:9c:46:d5:51:e7:9e:af:bf: e4:f7:b5:d9:a6:23:d8:e0:7e:97:84:a5:8b:06:83: 5c:ff:7c:ee:9e:84:b2:79:c5:d6:51:c1:e3:b3:23: 0d:20:ac:1c:db:a0:bc:e0:da:bc:c9:49:f7:0e:68: d5:c3:6c:24:b6:52:64:64:0a:6f:70:63:eb:7a:b8: 18:d6:ff:41:48:74:52:97:75:7b:6d:25:ff:1e:7b: 62:74:92:30:6b:e9:c3:ab:9b:0c:4f:b3:19:29:f0: d7:a7:d9:1b:ae:69:5a:62:27:dd:a0:e1:8a:fa:9d: 42:ed:3d:a9:b4:17:14:9d:60:8a:8e:f3:37:be:c4: 1f:25:c2:f9:b1:6c:61:33:f3:12:8c:d3:31:3c:19: 04:94:1d:b0:be:32:b0:87:68:06:df:cf:82:0a:53: 51:07:9f:02:50:68:a2:84:a3:fa:95:7a:bb:76:96: 0c:49:cc:ee:ab:5c:aa:9a:b7:55:5e:74:c0:94:c7: 19:a6:ec:57:8c:d7:1e:eb:98:ad:6a:32:96:03:4c: 03:30:c3:0d:46:27:86:2f:8f:9c:de:ab:e0:f2:91: 26:fe:ba:3d:3c:aa:bf:fd:11:0b:68:51:c4:32:4f: 3f:83:bf:d3:10:a5:ce:c6:f9:ed:74:59:41:4a:f0: 76:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7E:A8:7F:7D:43:84:B0:62:69:A9:E5:E8:E9:A1:35:5F:20:EF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ce:1b:63:b0:c0:79:33:be:d9:0d:93:21:e0:cc:dc:1a:ca: 35:b3:30:ea:b1:92:fb:19:16:a2:d3:01:62:7e:12:a9:45:c1: aa:b1:3f:60:a7:75:1c:12:30:b3:2b:3d:a4:d4:ae:a4:2c:5b: 7a:39:a2:eb:12:32:14:5c:f3:86:19:af:99:bc:0d:bc:b4:53: 13:6a:21:9b:5b:ff:4c:bf:85:79:f5:7d:fc:4e:63:7d:16:6b: 11:da:b1:85:0d:eb:ee:27:35:f6:ac:29:9b:4e:4a:14:65:70: eb:fb:13:bc:d6:13:09:9f:42:6e:a5:54:03:08:7c:b2:35:4d: da:52:97:a3:b1:90:a6:c6:56:85:8b:c8:3e:1c:43:ef:2b:8b: 75:c4:aa:d3:14:ec:5d:5d:97:b5:03:69:75:49:d0:36:16:3e: c2:3e:d4:03:7b:ed:1f:b3:f8:f0:cb:13:fd:62:0f:f0:62:4d: c3:3a:a4:11:f2:0f:2c:08:a3:35:76:23:74:bc:d9:2b:b2:7a: 20:6d:03:54:cf:da:e5:c7:a5:7d:75:7d:ed:51:e8:32:07:3f: 32:03:f4:cc:ee:f6:00:18:39:5b:b1:7d:5b:38:d1:14:cc:8b: d0:4f:17:49:0a:61:5b:b0:f0:64:f7:32:50:ed:4d:10:88:ae: ad:45:26:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+zaSQGkTAAJESQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjQwMzZlOTAtZWQwNC00YzdmLWJhMTYtMDI4MTM3MWVlYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx8elUtXnEbVUeeer7/k97XZpiPY4H6XhKWL BoNc/3zunoSyecXWUcHjsyMNIKwc26C84Nq8yUn3DmjVw2wktlJkZApvcGPrergY 1v9BSHRSl3V7bSX/HntidJIwa+nDq5sMT7MZKfDXp9kbrmlaYifdoOGK+p1C7T2p tBcUnWCKjvM3vsQfJcL5sWxhM/MSjNMxPBkElB2wvjKwh2gG38+CClNRB58CUGii hKP6lXq7dpYMSczuq1yqmrdVXnTAlMcZpuxXjNce65itajKWA0wDMMMNRieGL4+c 3qvg8pEm/ro9PKq//RELaFHEMk8/g7/TEKXOxvntdFlBSvB2EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh+qH99Q4SwYmmp5ejpoTVfIO+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDMwYzJlOTUtOTg1ZC0z MTg0LTk5YWItYjQxZDBhN2RhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPOG2OwwHkzvtkNkyHgzNwayjWzMOqxkvsZFqLTAWJ+EqlFwaqxP2Cn dRwSMLMrPaTUrqQsW3o5ousSMhRc84YZr5m8Dby0UxNqIZtb/0y/hXn1ffxOY30W axHasYUN6+4nNfasKZtOShRlcOv7E7zWEwmfQm6lVAMIfLI1TdpSl6OxkKbGVoWL yD4cQ+8ri3XEqtMU7F1dl7UDaXVJ0DYWPsI+1AN77R+z+PDLE/1iD/BiTcM6pBHy DywIozV2I3S82SuyeiBtA1TP2uXHpX11fe1R6DIHPzID9Mzu9gAYOVuxfVs40RTM i9BPF0kKYVuw8GT3MlDtTRCIrq1FJp8= -----END CERTIFICATE-----Generated at Tue Jul 1 22:45:30 2025 by rpki-client