$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50118ca6-605f-3b8a-a5d0-a95500ca5722.roa File: 50118ca6-605f-3b8a-a5d0-a95500ca5722.roa (raw, json) Hash identifier: j/YDyuzhkOqqVeOQJ+bX2arGiENRHGZubfNOyYFaSSI= Subject key identifier: 81:CB:64:3A:11:2F:64:A3:F2:37:1B:C8:D9:FC:F1:BF:F4:BD:0A:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6DB59D2F4E979E92BA080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50118ca6-605f-3b8a-a5d0-a95500ca5722.roa Signing time: Thu 19 Jun 2025 09:17:59 +0000 ROA not before: Thu 19 Jun 2025 09:17:59 +0000 ROA not after: Wed 17 Sep 2025 09:17:59 +0000 asID: 22773 IP address blocks: 68.231.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:db:59:d2:f4:e9:79:e9:2b:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:59 2025 GMT Not After : Sep 17 09:17:59 2025 GMT Subject: CN=8112fbfb-12db-478e-917e-01042f136171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:06:96:bc:c6:e1:53:78:6a:18:98:ff:dc: 05:07:f7:88:87:c9:10:93:07:55:74:35:27:5e:36: 6b:df:3a:48:b3:df:21:d4:d8:a3:5b:52:e3:e6:1c: 27:31:64:36:60:47:d4:07:1e:c2:fa:d2:6b:ff:ae: e7:e0:d7:28:30:f5:02:9d:03:ef:4f:fd:30:fb:5b: 86:31:7b:76:3b:13:5d:f7:ff:4a:e1:12:7f:6b:a3: 57:47:d6:ef:a3:f2:ed:1b:54:9e:ae:7f:02:bf:a7: 57:40:d8:74:bd:2a:4c:27:d2:07:a6:f9:7b:25:93: 71:84:ee:6c:b3:a4:42:43:7a:b6:e9:59:b5:be:e1: 8e:f6:9c:96:68:97:30:d5:98:0e:40:60:aa:5d:79: a3:89:b0:ff:31:b2:ac:ac:bb:47:60:39:f2:93:9e: e1:0a:96:49:8f:54:88:75:d5:ab:eb:20:10:16:e9: 5d:5c:d4:e1:f1:80:a9:06:6c:f6:53:05:e7:75:5e: f3:f1:03:4e:ed:1e:66:14:8a:93:52:b6:11:89:9c: f5:bf:0d:92:0f:77:83:f1:f0:09:ce:c9:c0:8f:fd: 44:75:5d:02:df:0e:2d:46:b7:c9:19:5d:e2:04:a1: de:ca:7c:38:29:7d:40:e7:73:30:a7:56:e3:a2:fd: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CB:64:3A:11:2F:64:A3:F2:37:1B:C8:D9:FC:F1:BF:F4:BD:0A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50118ca6-605f-3b8a-a5d0-a95500ca5722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:30:93:59:10:22:93:b1:ef:5c:9a:90:a9:c6:89:57:7b:35: 4c:c6:92:57:23:8a:65:b3:ea:b9:7e:9b:f4:e6:3b:1f:60:69: 53:e8:76:14:f6:7a:fb:9b:ad:9c:30:9c:7f:3b:8a:9f:e7:41: 36:0d:bb:e9:5b:f1:19:d9:c9:c7:e7:0a:fc:97:05:c2:d7:ea: 67:af:be:89:03:ef:ca:a0:f3:25:10:ac:2d:f9:c1:f2:a4:b0: b8:52:74:fa:02:99:9d:03:b0:47:70:a3:c7:6e:1f:dd:f6:57: 71:9a:b5:36:d6:55:1c:03:11:35:5a:70:59:48:84:6e:d1:58: 95:06:c8:2d:2c:25:5c:61:98:b3:3e:6d:18:34:b2:57:db:8c: cd:e6:51:de:70:e6:2b:fe:8b:92:67:0b:a0:8d:f7:a3:27:07: e3:3e:25:77:8d:bf:77:7b:eb:e8:b9:9e:db:85:79:e2:c0:91: a2:b0:6c:db:09:61:50:dc:30:54:ce:47:04:b1:a3:40:64:a0: c5:17:f4:6c:14:b1:f0:39:35:ce:de:4a:36:b2:1c:8e:3c:36: 80:1d:e0:f7:b4:cc:61:2f:e2:33:19:4e:e5:66:0f:49:1a:b2: e2:e7:c8:81:1c:c0:91:13:ce:0d:63:f9:a8:1c:fe:61:4f:7d: 09:56:33:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91ttZ0vTpeekroIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc1OVoXDTI1MDkxNzA5MTc1OVowLzEtMCsGA1UEAxMk ODExMmZiZmItMTJkYi00NzhlLTkxN2UtMDEwNDJmMTM2MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRcGlrzG4VN4ahiY/9wFB/eIh8kQkwdVdDUn XjZr3zpIs98h1NijW1Lj5hwnMWQ2YEfUBx7C+tJr/67n4NcoMPUCnQPvT/0w+1uG MXt2OxNd9/9K4RJ/a6NXR9bvo/LtG1Sern8Cv6dXQNh0vSpMJ9IHpvl7JZNxhO5s s6RCQ3q26Vm1vuGO9pyWaJcw1ZgOQGCqXXmjibD/MbKsrLtHYDnyk57hCpZJj1SI ddWr6yAQFuldXNTh8YCpBmz2UwXndV7z8QNO7R5mFIqTUrYRiZz1vw2SD3eD8fAJ zsnAj/1EdV0C3w4tRrfJGV3iBKHeynw4KX1A53Mwp1bjov156wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHLZDoRL2Sj8jcbyNn88b/0vQqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTAxMThjYTYtNjA1Zi0z YjhhLWE1ZDAtYTk1NTAwY2E1NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROcRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8wk1kQIpOx71yakKnGiVd7NUzGklcjimWz6rl+m/TmOx9gaVPodhT2 evubrZwwnH87ip/nQTYNu+lb8RnZycfnCvyXBcLX6mevvokD78qg8yUQrC35wfKk sLhSdPoCmZ0DsEdwo8duH932V3GatTbWVRwDETVacFlIhG7RWJUGyC0sJVxhmLM+ bRg0slfbjM3mUd5w5iv+i5JnC6CN96MnB+M+JXeNv3d76+i5ntuFeeLAkaKwbNsJ YVDcMFTORwSxo0BkoMUX9GwUsfA5Nc7eSjayHI48NoAd4Pe0zGEv4jMZTuVmD0ka suLnyIEcwJETzg1j+agc/mFPfQlWMzw= -----END CERTIFICATE-----Generated at Tue Jul 1 18:03:18 2025 by rpki-client