$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50916b9d-3310-3366-98ae-9a4302680312.roa File: 50916b9d-3310-3366-98ae-9a4302680312.roa (raw, json) Hash identifier: oQvbE9GrfxBZtUSHD7wPPYBTOKMQStkCCjx7hLnlV9U= Subject key identifier: 00:A9:37:55:20:4B:D2:93:5E:B9:51:4D:03:28:5F:D6:89:39:EE:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C102258BE2C9711080C6200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50916b9d-3310-3366-98ae-9a4302680312.roa Signing time: Wed 18 Jun 2025 18:01:46 +0000 ROA not before: Wed 18 Jun 2025 18:01:46 +0000 ROA not after: Tue 16 Sep 2025 18:01:46 +0000 asID: 22773 IP address blocks: 68.3.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:22:58:be:2c:97:11:08:0c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:46 2025 GMT Not After : Sep 16 18:01:46 2025 GMT Subject: CN=eb792f8b-e138-49d6-a7d1-72ac7af75412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:61:fa:42:d5:e3:ab:da:42:ed:7b:26:77: 32:e8:2a:ae:59:f4:2d:20:18:43:7a:f9:32:c0:2f: e0:83:5d:3c:5f:83:27:38:97:8d:06:c0:66:03:89: c7:26:e7:87:f3:54:d0:94:bf:1e:c5:76:1f:ae:cd: 7e:7f:1f:23:f1:1a:87:40:3c:0c:97:74:bd:6b:61: 1d:d7:f2:a5:2b:80:65:53:93:f8:f2:a9:cc:fe:80: 56:d1:73:88:1d:5c:b4:78:67:c1:5a:8a:ff:25:03: 78:1c:45:97:d4:f8:0c:a8:2a:d1:a4:37:fc:41:66: 07:63:4e:b2:62:e4:af:c3:e0:ab:a7:68:e7:cc:69: ee:62:6e:b7:34:bb:3e:31:0e:94:3d:5e:b0:61:22: 57:0e:3b:db:49:ad:b5:aa:1a:e8:a3:e2:20:06:43: f1:af:c2:33:90:11:ed:05:64:b1:03:3b:a1:b2:19: 9a:6e:51:a4:40:e7:a3:42:9b:02:e8:fa:1d:07:c1: f3:6e:00:04:ef:ad:01:5a:1d:b2:16:4c:f9:dc:6b: 2b:d5:09:0e:c0:0e:69:ad:34:71:66:20:cc:a2:95: d8:95:6c:36:d4:55:55:da:cd:f2:9e:58:81:a7:b7: 65:3f:a5:2f:e0:24:a6:bf:63:1a:5c:e3:47:14:e5: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A9:37:55:20:4B:D2:93:5E:B9:51:4D:03:28:5F:D6:89:39:EE:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/50916b9d-3310-3366-98ae-9a4302680312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:28:50:ce:60:d0:99:79:7c:b2:9d:db:ef:de:3b:f8:9b:88: 12:77:1a:27:e5:b3:6f:b2:f9:4a:8f:a2:89:c9:e6:a6:b9:7c: a3:5e:d3:f6:15:b0:88:d8:c7:8e:c6:55:72:6a:67:dd:af:82: ec:c5:51:3b:41:5c:45:5b:51:de:e6:54:70:36:be:21:f0:08: 55:cf:35:db:1f:79:6a:46:ca:c2:b3:92:8c:fd:60:de:dc:a8: 5e:3a:44:84:dc:36:ce:32:3b:37:18:ec:24:8a:a6:52:7a:3f: 2d:33:58:4d:85:25:af:a3:0f:17:9f:86:bb:b2:14:89:ce:be: f7:f7:9e:94:13:dd:77:e4:8e:c4:dd:bb:7f:d9:85:74:43:20: 5c:ae:99:54:1b:5f:4c:de:21:ae:04:af:af:f8:8e:93:60:bd: 5e:52:60:8b:47:26:09:16:ea:e6:fe:08:d1:2b:02:e3:b9:8d: 92:9d:e0:b7:ec:d8:22:65:17:c4:35:76:01:c8:c1:a8:f0:b3: a2:87:c6:8a:88:dd:0f:12:f1:4c:25:cb:ca:77:85:70:e6:28: e5:d4:8f:97:b4:95:89:26:eb:8c:86:a2:59:8f:da:ac:36:c2: 59:fa:45:5c:a2:f8:68:37:f2:78:09:bc:e2:10:d3:90:8d:15: 71:6b:5a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8ECJYviyXEQgMYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE0NloXDTI1MDkxNjE4MDE0NlowLzEtMCsGA1UEAxMk ZWI3OTJmOGItZTEzOC00OWQ2LWE3ZDEtNzJhYzdhZjc1NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYZh+kLV46vaQu17Jncy6CquWfQtIBhDevky wC/gg108X4MnOJeNBsBmA4nHJueH81TQlL8exXYfrs1+fx8j8RqHQDwMl3S9a2Ed 1/KlK4BlU5P48qnM/oBW0XOIHVy0eGfBWor/JQN4HEWX1PgMqCrRpDf8QWYHY06y YuSvw+Crp2jnzGnuYm63NLs+MQ6UPV6wYSJXDjvbSa21qhroo+IgBkPxr8IzkBHt BWSxAzuhshmablGkQOejQpsC6PodB8HzbgAE760BWh2yFkz53Gsr1QkOwA5prTRx ZiDMopXYlWw21FVV2s3ynliBp7dlP6Uv4CSmv2MaXONHFOUhUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACpN1UgS9KTXrlRTQMoX9aJOe6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTA5MTZiOWQtMzMxMC0z MzY2LTk4YWUtOWE0MzAyNjgwMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRANWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIoUM5g0Jl5fLKd2+/eO/ibiBJ3Gifls2+y+UqPoonJ5qa5fKNe0/YV sIjYx47GVXJqZ92vguzFUTtBXEVbUd7mVHA2viHwCFXPNdsfeWpGysKzkoz9YN7c qF46RITcNs4yOzcY7CSKplJ6Py0zWE2FJa+jDxefhruyFInOvvf3npQT3XfkjsTd u3/ZhXRDIFyumVQbX0zeIa4Er6/4jpNgvV5SYItHJgkW6ub+CNErAuO5jZKd4Lfs 2CJlF8Q1dgHIwajws6KHxoqI3Q8S8Uwly8p3hXDmKOXUj5e0lYkm64yGolmP2qw2 wln6RVyi+Gg38ngJvOIQ05CNFXFrWqk= -----END CERTIFICATE-----Generated at Thu Jul 3 05:21:09 2025 by rpki-client