$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa File: 4c1430d9-02cb-3481-8505-5f2be0891f36.roa (raw, json) Hash identifier: JLgV6j+y7u9p6CnjKb/jqHiP2cH3Mt5RQN2q/JjB2SY= Subject key identifier: 1E:7D:DC:98:26:C6:41:C2:2C:2C:C9:24:85:76:5B:CA:25:60:63:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10449BEF03F70EB8B2BE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa Signing time: Wed 18 Jun 2025 18:02:02 +0000 ROA not before: Wed 18 Jun 2025 18:02:02 +0000 ROA not after: Tue 16 Sep 2025 18:02:02 +0000 asID: 22773 IP address blocks: 68.3.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:44:9b:ef:03:f7:0e:b8:b2:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:02 2025 GMT Not After : Sep 16 18:02:02 2025 GMT Subject: CN=16a3fcd0-3297-4bd0-96ec-cd63c17afb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:22:7c:2c:0b:5a:c8:df:de:80:f8:74:5a: bb:be:4b:f0:84:68:4b:10:dc:31:3f:ea:69:ac:75: 61:72:67:44:8f:f7:0b:13:31:b1:67:44:40:f8:f2: b1:41:f1:a7:e2:f6:07:d7:8c:78:ef:2d:33:0a:15: 90:a1:39:16:45:6c:a0:b8:09:a3:40:58:ce:0d:8d: 6a:01:d7:32:39:54:f2:42:17:07:44:61:d1:7d:46: 68:a0:d8:42:d6:6c:54:2b:3a:8d:9d:03:30:49:ed: 9c:f7:34:e1:07:b0:90:c3:f6:86:c4:2d:ec:01:6d: ec:aa:33:f9:76:81:ff:67:48:ba:22:d1:1e:6b:44: 62:a4:fe:2f:e4:f6:8f:b5:91:9a:f6:a1:36:2c:0f: 9b:23:24:9b:a4:fa:d3:49:cf:b3:d2:45:e3:6a:ed: 2a:40:26:5b:f3:82:1d:5b:eb:80:3f:f4:52:4f:ac: 95:2c:18:8f:16:4d:d6:22:d8:8e:3a:3b:e5:b7:ae: 89:b2:c2:1f:29:48:73:4d:d6:02:9a:4f:d8:ea:de: 83:83:51:0d:ba:1d:1f:4f:9b:a6:7a:be:13:46:8d: a0:99:d0:7d:b3:c4:ad:43:3d:b8:f6:f7:87:64:2b: b2:16:99:eb:f2:f4:e5:97:16:57:a8:90:ed:31:e1: 62:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:DC:98:26:C6:41:C2:2C:2C:C9:24:85:76:5B:CA:25:60:63:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c1430d9-02cb-3481-8505-5f2be0891f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c0:09:86:a8:74:71:16:6f:54:23:8f:d9:6b:66:79:2b:02: 66:2f:ba:4e:2a:6d:92:c0:6b:5b:f3:88:08:42:9d:ec:35:5c: 96:d4:e4:bb:3d:a3:64:9b:3c:3e:3f:82:de:67:10:4c:93:e3: 83:b8:2b:4f:f1:b6:60:0e:95:9e:2a:08:b7:21:35:50:94:61: da:a0:ed:d4:26:fe:6c:d0:30:a8:e9:6b:c6:26:e9:6e:34:6b: 1e:bf:ef:5b:8a:ad:1d:45:94:59:3c:4d:da:29:c8:59:db:fb: 86:69:99:c7:9d:42:6f:14:50:09:0f:8d:bd:f1:c1:de:7b:0e: ff:3f:58:3a:45:5b:f1:43:b5:ff:d3:ba:66:25:9d:be:ab:fc: 46:d2:67:3b:69:a7:28:79:72:22:66:5a:24:71:01:21:fb:3e: cd:90:14:33:65:2f:8d:02:4f:c5:6d:c9:17:16:8e:ed:28:e6: b8:f7:ad:57:3e:7d:24:8f:bf:e0:94:14:2d:6c:51:e2:aa:e2: 1e:aa:b7:69:ac:9b:0d:74:6a:e3:9f:71:74:cb:08:51:9b:7a: cc:fb:6a:f4:b5:dc:09:e0:6f:d8:82:9c:4c:f9:c6:24:eb:48: 26:06:76:0b:96:f9:87:0a:f6:88:00:38:eb:9b:87:85:15:57: 98:84:30:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EESb7wP3DriyvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIwMloXDTI1MDkxNjE4MDIwMlowLzEtMCsGA1UEAxMk MTZhM2ZjZDAtMzI5Ny00YmQwLTk2ZWMtY2Q2M2MxN2FmYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltMifCwLWsjf3oD4dFq7vkvwhGhLENwxP+pp rHVhcmdEj/cLEzGxZ0RA+PKxQfGn4vYH14x47y0zChWQoTkWRWyguAmjQFjODY1q AdcyOVTyQhcHRGHRfUZooNhC1mxUKzqNnQMwSe2c9zThB7CQw/aGxC3sAW3sqjP5 doH/Z0i6ItEea0RipP4v5PaPtZGa9qE2LA+bIySbpPrTSc+z0kXjau0qQCZb84Id W+uAP/RST6yVLBiPFk3WItiOOjvlt66JssIfKUhzTdYCmk/Y6t6Dg1ENuh0fT5um er4TRo2gmdB9s8StQz249veHZCuyFpnr8vTllxZXqJDtMeFi3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB593JgmxkHCLCzJJIV2W8olYGOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGMxNDMwZDktMDJjYi0z NDgxLTg1MDUtNWYyYmUwODkxZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDACYaodHEWb1Qjj9lrZnkrAmYvuk4qbZLAa1vziAhCnew1XJbU5Ls9 o2SbPD4/gt5nEEyT44O4K0/xtmAOlZ4qCLchNVCUYdqg7dQm/mzQMKjpa8Ym6W40 ax6/71uKrR1FlFk8TdopyFnb+4ZpmcedQm8UUAkPjb3xwd57Dv8/WDpFW/FDtf/T umYlnb6r/EbSZztppyh5ciJmWiRxASH7Ps2QFDNlL40CT8VtyRcWju0o5rj3rVc+ fSSPv+CUFC1sUeKq4h6qt2msmw10auOfcXTLCFGbesz7avS13Angb9iCnEz5xiTr SCYGdguW+YcK9ogAOOubh4UVV5iEMB8= -----END CERTIFICATE-----Generated at Wed Jul 2 21:44:25 2025 by rpki-client