$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49ac5eaf-a168-38e0-a4db-093d3cd186b0.roa File: 49ac5eaf-a168-38e0-a4db-093d3cd186b0.roa (raw, json) Hash identifier: yfy08qKL+cwidIhYrzsiRKtA2oO8DrLlsHSaFDI7Vo4= Subject key identifier: E9:71:B1:2C:87:1C:B3:21:DE:1F:A0:34:47:14:4E:32:84:73:16:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7C14EBD30DDB0B47FFD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49ac5eaf-a168-38e0-a4db-093d3cd186b0.roa Signing time: Fri 20 Jun 2025 09:30:30 +0000 ROA not before: Fri 20 Jun 2025 09:30:30 +0000 ROA not after: Thu 18 Sep 2025 09:30:30 +0000 asID: 22773 IP address blocks: 68.224.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:c1:4e:bd:30:dd:b0:b4:7f:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:30 2025 GMT Not After : Sep 18 09:30:30 2025 GMT Subject: CN=45826822-120b-482d-ac2f-d17a59c2293d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:2d:5a:ed:18:91:a4:15:80:ee:43:38:cb: 7c:87:99:d8:1b:a3:c3:88:9b:2f:c5:e9:37:96:d6: 33:b9:d5:a5:f0:3b:6c:4c:e9:d8:d6:36:57:dc:19: ad:a9:e3:26:42:a6:b9:50:70:63:be:f1:ca:f5:35: 51:0c:18:6b:56:50:db:bc:a6:82:7d:4e:71:07:72: e9:c0:b8:b2:4d:08:54:95:d9:77:62:44:47:2a:8c: 04:70:b5:d3:08:b8:41:53:32:e8:ef:84:a0:8b:71: 8a:4c:3e:6f:b2:cd:3d:01:6d:b9:12:a3:97:fc:d7: f1:56:0a:52:ad:17:36:e8:d0:67:77:b3:3d:6f:5b: 5c:27:24:02:20:5d:9b:6e:98:21:bb:4a:ff:70:dd: 54:b8:2d:69:95:69:0d:f7:1e:22:2a:9d:71:d3:57: 90:3d:4d:6e:6c:71:3a:c2:7d:10:0a:fb:45:3d:6e: 6b:71:7f:0e:9f:64:05:56:08:8f:3c:f0:28:7c:55: 2b:70:fb:12:d0:50:bf:dc:20:3e:09:cd:df:19:1d: de:fc:ae:46:74:96:4c:f7:66:fd:9b:c2:ce:2d:c3: 18:56:6e:91:e9:9a:92:45:d8:fe:0b:57:6d:0f:3a: 79:16:3d:ba:51:e3:04:af:d3:ea:d6:23:18:f5:75: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:B1:2C:87:1C:B3:21:DE:1F:A0:34:47:14:4E:32:84:73:16:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49ac5eaf-a168-38e0-a4db-093d3cd186b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:65:b9:c2:1f:c9:2d:cb:41:e5:30:95:4c:69:79:c5:34:51: bd:ca:6d:f7:f5:e7:bf:74:cd:8a:88:e3:1b:1c:ab:86:04:1c: b7:07:83:1b:bf:71:2d:d5:9d:5d:80:8f:5f:99:af:d1:87:01: 7c:99:05:f4:f8:2b:2b:05:61:09:f4:dc:cc:48:da:7c:db:a3: 07:af:fa:11:48:16:c2:a9:f8:0a:d1:25:5b:27:7e:7f:a3:40: 94:87:96:33:e3:52:3d:0e:40:b9:ea:ce:46:d0:f3:28:aa:61: bd:b8:df:93:54:5e:ee:42:ef:e1:54:b3:a1:3c:ca:cc:e0:5a: 14:bb:3a:ea:6f:59:16:a8:a5:c0:59:fc:84:ae:1b:00:37:1f: 37:b7:ed:5b:b9:62:4f:07:89:b4:64:57:d4:44:fc:2e:7e:da: f8:c3:64:36:89:0a:8e:d5:52:80:8c:89:c7:b0:c3:a4:be:4d: db:1f:cd:77:9f:77:79:49:5d:cb:27:f4:f5:87:26:c4:a4:2f: fd:94:fe:e3:9e:b6:c0:ee:9d:7e:04:38:60:de:81:c1:82:42: 8d:66:72:17:4a:3a:9c:b9:2c:c5:77:a7:ed:37:fd:f8:05:e8: 94:c8:a0:35:c7:da:a0:c2:79:85:39:b9:62:46:ee:07:6c:57: 93:ee:d0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp8FOvTDdsLR//QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzMFoXDTI1MDkxODA5MzAzMFowLzEtMCsGA1UEAxMk NDU4MjY4MjItMTIwYi00ODJkLWFjMmYtZDE3YTU5YzIyOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuYtWu0YkaQVgO5DOMt8h5nYG6PDiJsvxek3 ltYzudWl8DtsTOnY1jZX3BmtqeMmQqa5UHBjvvHK9TVRDBhrVlDbvKaCfU5xB3Lp wLiyTQhUldl3YkRHKowEcLXTCLhBUzLo74Sgi3GKTD5vss09AW25EqOX/NfxVgpS rRc26NBnd7M9b1tcJyQCIF2bbpghu0r/cN1UuC1plWkN9x4iKp1x01eQPU1ubHE6 wn0QCvtFPW5rcX8On2QFVgiPPPAofFUrcPsS0FC/3CA+Cc3fGR3e/K5GdJZM92b9 m8LOLcMYVm6R6ZqSRdj+C1dtDzp5Fj26UeMEr9Pq1iMY9XU9SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlxsSyHHLMh3h+gNEcUTjKEcxYFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDlhYzVlYWYtYTE2OC0z OGUwLWE0ZGItMDkzZDNjZDE4NmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5lucIfyS3LQeUwlUxpecU0Ub3Kbff15790zYqI4xscq4YEHLcHgxu/ cS3VnV2Aj1+Zr9GHAXyZBfT4KysFYQn03MxI2nzbowev+hFIFsKp+ArRJVsnfn+j QJSHljPjUj0OQLnqzkbQ8yiqYb2435NUXu5C7+FUs6E8yszgWhS7OupvWRaopcBZ /ISuGwA3Hze37Vu5Yk8HibRkV9RE/C5+2vjDZDaJCo7VUoCMiceww6S+TdsfzXef d3lJXcsn9PWHJsSkL/2U/uOetsDunX4EOGDegcGCQo1mchdKOpy5LMV3p+03/fgF 6JTIoDXH2qDCeYU5uWJG7gdsV5Pu0DE= -----END CERTIFICATE-----Generated at Tue Jul 1 10:03:57 2025 by rpki-client