$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa File: 4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa (raw, json) Hash identifier: tcT5UTCRfOg2WN9obtEMeIrbpLxUfpgMjosi+QDmYCI= Subject key identifier: 40:0E:AD:89:BC:A4:30:D0:C9:5A:67:0E:F7:76:8D:52:4B:13:3B:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FFF832DED21482BFAB300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa Signing time: Wed 18 Jun 2025 18:01:30 +0000 ROA not before: Wed 18 Jun 2025 18:01:30 +0000 ROA not after: Tue 16 Sep 2025 18:01:30 +0000 asID: 22773 IP address blocks: 68.3.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:ff:83:2d:ed:21:48:2b:fa:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:30 2025 GMT Not After : Sep 16 18:01:30 2025 GMT Subject: CN=b6e4a31d-dbdc-4748-9a6a-5e54a193f634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0e:f6:62:27:34:2a:c2:3e:12:ce:4a:c0:bc: 09:1a:4e:14:13:e6:9a:ba:b8:ec:2f:95:d1:bf:cd: d2:13:92:82:2c:90:f7:df:ac:b0:ee:8e:fc:1a:ab: e2:79:69:1b:88:49:c6:9f:34:ea:4b:91:66:67:74: ec:7d:7e:be:b3:09:17:ca:10:88:27:49:14:42:68: 6a:79:3c:32:c6:f5:04:83:57:b8:52:92:2c:bb:e1: 87:b4:1f:19:af:25:d0:30:48:67:7d:a8:68:5f:50: 7f:08:fb:6c:41:73:3b:38:1c:89:fa:0e:3b:43:09: ce:e3:62:e0:f3:c6:9f:8f:cf:d3:e7:3c:af:0f:0c: 65:81:04:72:dc:e4:48:4e:df:51:fb:5a:18:a2:ff: 11:a9:d6:ec:56:7b:53:b3:e7:36:88:7d:b6:cb:8c: 80:07:8a:f2:81:8f:a8:e3:c5:ab:98:1d:e4:4e:b5: 16:5a:26:83:19:33:e9:a8:f9:9b:72:5b:6e:5e:03: 71:c8:16:8c:cb:b4:8c:89:09:1f:fd:25:b1:2f:b9: d1:33:06:e2:ad:a5:d1:e7:e7:3b:ab:1d:93:72:c0: 23:bf:d1:36:20:2c:ea:d5:f8:fe:e5:56:7e:8f:3c: 6f:42:7e:10:2f:10:dc:72:16:c3:26:a9:ed:be:57: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0E:AD:89:BC:A4:30:D0:C9:5A:67:0E:F7:76:8D:52:4B:13:3B:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e79c4fd-03e9-3d8d-8dfe-9be623ccdd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3b:25:25:c6:9b:7b:2b:21:22:78:fb:9f:23:be:db:33:96: 63:33:83:8b:04:74:f9:47:66:49:71:3f:07:40:bb:7d:e6:d7: a0:7a:63:28:59:10:67:2a:a9:ef:fa:14:55:64:6f:8e:e5:ee: d0:83:4c:7f:9d:e9:cd:d1:67:66:e9:09:4e:03:6d:49:b0:1f: f5:04:8a:b6:70:a3:06:e1:1c:1f:c5:94:be:07:5d:47:e1:7b: fc:a2:40:7c:3b:6d:72:93:27:8d:51:e3:df:50:e5:28:28:8f: a6:84:a8:18:b1:e6:71:f9:1d:1b:09:50:52:ab:31:df:82:da: 06:a0:ea:19:74:5a:5e:88:c5:b3:ce:7f:44:af:54:6d:36:db: 57:4c:ef:6e:1e:30:31:7a:bf:fe:46:48:85:15:97:35:cc:62: 34:57:d4:3a:61:45:04:42:1f:63:0d:ef:59:87:fb:54:4d:9f: 93:b4:32:ed:84:99:8a:47:c4:a2:0b:f2:ba:86:0a:d4:3c:d0: 0b:3b:f4:36:3c:eb:a6:50:4f:69:64:2f:00:88:f5:d3:67:14: c6:ad:60:fc:8f:6d:c3:f3:bc:f8:ae:2e:65:45:86:54:25:03: 03:55:6a:de:35:c4:52:e8:00:56:d6:0f:88:73:7f:3a:97:9b: c0:91:98:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D/+DLe0hSCv6swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEzMFoXDTI1MDkxNjE4MDEzMFowLzEtMCsGA1UEAxMk YjZlNGEzMWQtZGJkYy00NzQ4LTlhNmEtNWU1NGExOTNmNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ72Yic0KsI+Es5KwLwJGk4UE+aaurjsL5XR v83SE5KCLJD336yw7o78GqvieWkbiEnGnzTqS5FmZ3TsfX6+swkXyhCIJ0kUQmhq eTwyxvUEg1e4UpIsu+GHtB8ZryXQMEhnfahoX1B/CPtsQXM7OByJ+g47QwnO42Lg 88afj8/T5zyvDwxlgQRy3ORITt9R+1oYov8RqdbsVntTs+c2iH22y4yAB4rygY+o 48WrmB3kTrUWWiaDGTPpqPmbcltuXgNxyBaMy7SMiQkf/SWxL7nRMwbiraXR5+c7 qx2TcsAjv9E2ICzq1fj+5VZ+jzxvQn4QLxDcchbDJqntvleTwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAOrYm8pDDQyVpnDvd2jVJLEzvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGU3OWM0ZmQtMDNlOS0z ZDhkLThkZmUtOWJlNjIzY2NkZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB87JSXGm3srISJ4+58jvtszlmMzg4sEdPlHZklxPwdAu33m16B6YyhZ EGcqqe/6FFVkb47l7tCDTH+d6c3RZ2bpCU4DbUmwH/UEirZwowbhHB/FlL4HXUfh e/yiQHw7bXKTJ41R499Q5Sgoj6aEqBix5nH5HRsJUFKrMd+C2gag6hl0Wl6IxbPO f0SvVG0221dM724eMDF6v/5GSIUVlzXMYjRX1DphRQRCH2MN71mH+1RNn5O0Mu2E mYpHxKIL8rqGCtQ80As79DY866ZQT2lkLwCI9dNnFMatYPyPbcPzvPiuLmVFhlQl AwNVat41xFLoAFbWD4hzfzqXm8CRmKY= -----END CERTIFICATE-----Generated at Tue Jul 1 04:22:51 2025 by rpki-client