$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa File: 47c85bc3-ee3d-3de4-9180-5daca1128f51.roa (raw, json) Hash identifier: Oua9rF925T2H7MSbKVu0kUJ3Wjkx2O4Tjz6CKnMb4YI= Subject key identifier: 4E:C2:3F:7E:49:BB:FD:3E:05:75:C9:D1:83:69:38:68:21:69:88:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA2C312C75587C15A74340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa Signing time: Fri 20 Jun 2025 09:35:22 +0000 ROA not before: Fri 20 Jun 2025 09:35:22 +0000 ROA not after: Thu 18 Sep 2025 09:35:22 +0000 asID: 22773 IP address blocks: 174.68.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:2c:31:2c:75:58:7c:15:a7:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:22 2025 GMT Not After : Sep 18 09:35:22 2025 GMT Subject: CN=f8fba6fc-d3cc-4e9b-b16a-622dedb07f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:b6:8a:7e:5b:0e:d4:b9:18:a9:4c:23:45: f7:1e:3a:3d:28:18:37:cc:92:ba:ab:0a:99:45:f5: 49:27:9b:c2:31:ed:0c:23:77:a5:90:33:cd:9e:83: 21:72:e8:17:c1:2b:19:89:9d:9b:32:00:2a:d2:58: 5d:16:b2:52:9a:94:b9:af:bc:94:37:87:f8:b5:b4: 8d:a6:13:09:02:ab:9c:97:be:0f:0b:85:21:f3:1c: b6:b7:b3:34:20:36:75:33:61:2c:39:89:68:9f:bc: 9c:2b:c8:39:06:dd:63:4f:8d:08:67:49:ea:ce:9b: 77:58:bf:3b:3c:ab:b4:a6:a6:8d:8f:a5:e5:37:a2: 04:27:ef:be:6f:1c:9d:92:3b:28:04:30:32:a1:50: 63:0d:c3:06:dc:6e:26:a9:31:0a:a2:42:19:ec:36: 0d:d0:f5:65:96:9f:39:42:8d:67:4e:d9:c3:b8:33: 6b:ca:78:5b:9d:20:b6:c1:e6:fb:67:a2:90:99:6e: 28:16:3c:0a:9d:99:67:e1:e2:6a:fb:78:04:98:97: f9:1c:2c:88:94:9f:08:20:03:7a:92:9c:c7:77:7e: d8:1e:49:02:23:f6:ac:4f:77:5a:b7:31:cc:c5:d7: 77:21:44:0e:6d:8b:08:c2:8a:c8:f5:bd:41:d9:dc: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C2:3F:7E:49:BB:FD:3E:05:75:C9:D1:83:69:38:68:21:69:88:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c85bc3-ee3d-3de4-9180-5daca1128f51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:77:0f:dc:cf:91:1a:3d:54:99:b2:18:83:1a:61:b9:21:28: 5e:79:91:0a:79:a9:45:5b:9f:46:2d:30:ff:97:16:35:73:74: e9:75:e9:b1:2b:c1:4b:97:ce:f4:ee:9e:b0:21:82:4f:6a:69: 4f:44:20:01:6b:32:80:7d:fe:90:77:16:24:b7:aa:04:d1:a3: ac:a0:8e:ba:0c:e1:93:46:5c:b3:1e:4c:e6:cc:4d:e0:03:0b: ce:65:e5:01:17:33:37:41:28:90:86:b9:91:e2:c3:0a:fb:ce: 0b:db:46:ea:2c:b0:9d:1c:22:07:b2:a3:97:1f:6f:ab:ea:95: bd:2c:46:e5:b2:bc:50:13:99:75:88:c1:2e:24:7f:59:f2:fd: ed:44:94:3b:28:6e:53:23:a8:a1:d9:11:c8:70:8f:e6:c7:b8: cf:a9:05:ac:38:2d:06:d2:6f:6b:84:03:83:18:79:e8:2b:75: 75:bb:6b:4a:f0:6e:b9:ca:ae:67:a3:e7:63:f1:2d:4d:66:19: f4:83:73:0b:23:bb:2a:ee:9e:60:8a:c8:5f:90:1a:e7:c8:f9: 32:4f:62:6d:fc:ee:c0:c6:dc:0f:a0:ae:41:2a:48:ef:98:d1: 1b:b6:00:8d:54:b5:cf:0d:91:d5:6f:bc:9b:bd:2b:f0:2e:b1: 3a:28:95:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiwxLHVYfBWnQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUyMloXDTI1MDkxODA5MzUyMlowLzEtMCsGA1UEAxMk ZjhmYmE2ZmMtZDNjYy00ZTliLWIxNmEtNjIyZGVkYjA3ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vW2in5bDtS5GKlMI0X3Hjo9KBg3zJK6qwqZ RfVJJ5vCMe0MI3elkDPNnoMhcugXwSsZiZ2bMgAq0lhdFrJSmpS5r7yUN4f4tbSN phMJAqucl74PC4Uh8xy2t7M0IDZ1M2EsOYlon7ycK8g5Bt1jT40IZ0nqzpt3WL87 PKu0pqaNj6XlN6IEJ+++bxydkjsoBDAyoVBjDcMG3G4mqTEKokIZ7DYN0PVllp85 Qo1nTtnDuDNrynhbnSC2web7Z6KQmW4oFjwKnZln4eJq+3gEmJf5HCyIlJ8IIAN6 kpzHd37YHkkCI/asT3datzHMxdd3IUQObYsIworI9b1B2dzj3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7CP35Ju/0+BXXJ0YNpOGghaYiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDdjODViYzMtZWUzZC0z ZGU0LTkxODAtNWRhY2ExMTI4ZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt3D9zPkRo9VJmyGIMaYbkhKF55kQp5qUVbn0YtMP+XFjVzdOl16bEr wUuXzvTunrAhgk9qaU9EIAFrMoB9/pB3FiS3qgTRo6ygjroM4ZNGXLMeTObMTeAD C85l5QEXMzdBKJCGuZHiwwr7zgvbRuossJ0cIgeyo5cfb6vqlb0sRuWyvFATmXWI wS4kf1ny/e1ElDsoblMjqKHZEchwj+bHuM+pBaw4LQbSb2uEA4MYeegrdXW7a0rw brnKrmej52PxLU1mGfSDcwsjuyrunmCKyF+QGufI+TJPYm387sDG3A+grkEqSO+Y 0Ru2AI1Utc8NkdVvvJu9K/AusToolX4= -----END CERTIFICATE-----Generated at Tue Jul 1 22:44:40 2025 by rpki-client