$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511b4a96-854b-3951-befd-dc031b810cc2.roa File: 511b4a96-854b-3951-befd-dc031b810cc2.roa (raw, json) Hash identifier: 9nmC6FI7yl1HkAYcjGJM2wTrPlCnugqjNqwpg1pDaFg= Subject key identifier: 3A:1F:9C:56:D5:8A:05:84:6D:54:2D:E0:B1:E2:FF:53:BE:B9:B5:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10BE5B753B75A88BB9B630 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511b4a96-854b-3951-befd-dc031b810cc2.roa Signing time: Wed 18 Jun 2025 18:03:00 +0000 ROA not before: Wed 18 Jun 2025 18:03:00 +0000 ROA not after: Tue 16 Sep 2025 18:03:00 +0000 asID: 22773 IP address blocks: 68.99.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:be:5b:75:3b:75:a8:8b:b9:b6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:03:00 2025 GMT Not After : Sep 16 18:03:00 2025 GMT Subject: CN=180a6141-491c-48bd-bfa5-7ea597bb407f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:13:fa:98:dd:16:f3:2d:94:7f:ae:ca:00:47: a6:80:ea:5a:d3:4c:fa:a0:05:94:a2:03:a6:a5:4e: 35:7c:6a:66:e4:df:60:9a:a4:3e:b2:ee:44:58:6f: 65:ad:66:2b:85:cb:73:7c:57:ab:33:f1:0e:59:66: cf:e2:00:66:85:67:01:94:85:bc:c2:86:3d:09:23: d5:0c:96:54:93:40:14:24:23:29:31:21:ac:9e:90: d7:52:07:44:14:f6:3c:c6:ad:79:22:1b:09:df:d5: 7d:5c:f5:a8:f3:28:92:44:d5:87:02:77:ce:fd:92: cb:13:45:25:63:72:8a:4e:ed:ad:1b:93:ea:71:5b: d0:fe:bc:c7:c1:53:81:6d:42:0e:8f:da:ff:c4:e6: 46:d7:a7:8a:41:97:88:f4:1e:9e:c6:07:da:80:f3: d8:99:0f:6d:e6:82:39:1e:0f:44:19:0f:37:91:bc: a7:8a:96:d4:5e:c3:84:e7:42:bd:4e:02:f1:7b:ee: 48:95:22:40:fd:c2:ee:5d:88:ed:87:2f:8f:77:b2: a2:e5:2e:5a:7d:5e:20:e9:18:70:fa:12:02:df:92: de:ae:46:cd:37:e8:4f:32:ef:e4:7a:7c:b6:c8:5f: c8:c7:77:6a:7a:bc:e8:bf:36:3e:2d:31:38:d1:b7: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1F:9C:56:D5:8A:05:84:6D:54:2D:E0:B1:E2:FF:53:BE:B9:B5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/511b4a96-854b-3951-befd-dc031b810cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:fd:ab:3f:e8:7e:64:24:8f:d6:f0:9d:5c:f5:dc:16:96:c6: 5b:01:96:d1:ce:12:62:b5:b8:12:d7:c0:f0:45:cd:8c:7b:38: cf:d7:f0:0b:1b:b0:c2:11:f2:c4:62:6f:94:3d:e7:23:2e:42: 4f:35:59:be:5e:0e:a2:0f:98:96:99:86:68:34:19:af:94:14: e5:9a:41:0d:01:47:be:78:4a:2d:9e:8b:7b:69:6b:5b:30:80: 2e:01:cc:6b:34:9b:05:54:3b:a1:d4:1b:cc:0a:69:e2:d6:06: 66:dc:97:ba:09:9b:5b:8a:c9:bc:a6:e9:64:e4:24:41:32:27: 22:e1:46:aa:77:0d:03:64:96:d0:2a:17:fc:9f:d1:c8:5d:72: a4:58:6f:8c:47:db:fe:37:5f:03:6c:0b:e8:d4:fa:4a:01:d7: c9:2e:86:36:69:3e:1e:2b:21:c8:92:ea:03:93:ce:c9:40:a5: dd:3f:14:1b:7e:1f:03:0e:8c:91:44:24:a7:07:a0:6e:f3:ef: 63:3a:96:7b:f6:3e:ca:36:a4:64:09:53:fb:6c:f8:a6:74:c4: 43:36:24:d4:78:5b:d1:9d:38:78:39:47:30:aa:59:cd:5e:a1: 58:40:b1:b3:f0:2d:6d:34:60:e7:3d:7d:1a:d3:51:fc:1a:ca: f4:29:91:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EL5bdTt1qIu5tjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDMwMFoXDTI1MDkxNjE4MDMwMFowLzEtMCsGA1UEAxMk MTgwYTYxNDEtNDkxYy00OGJkLWJmYTUtN2VhNTk3YmI0MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhP6mN0W8y2Uf67KAEemgOpa00z6oAWUogOm pU41fGpm5N9gmqQ+su5EWG9lrWYrhctzfFerM/EOWWbP4gBmhWcBlIW8woY9CSPV DJZUk0AUJCMpMSGsnpDXUgdEFPY8xq15IhsJ39V9XPWo8yiSRNWHAnfO/ZLLE0Ul Y3KKTu2tG5PqcVvQ/rzHwVOBbUIOj9r/xOZG16eKQZeI9B6exgfagPPYmQ9t5oI5 Hg9EGQ83kbynipbUXsOE50K9TgLxe+5IlSJA/cLuXYjthy+Pd7Ki5S5afV4g6Rhw +hIC35LerkbNN+hPMu/keny2yF/Ix3dqerzovzY+LTE40bfeSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDofnFbVigWEbVQt4LHi/1O+ubW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTExYjRhOTYtODU0Yi0z OTUxLWJlZmQtZGMwMzFiODEwY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ39qz/ofmQkj9bwnVz13BaWxlsBltHOEmK1uBLXwPBFzYx7OM/X8Asb sMIR8sRib5Q95yMuQk81Wb5eDqIPmJaZhmg0Ga+UFOWaQQ0BR754Si2ei3tpa1sw gC4BzGs0mwVUO6HUG8wKaeLWBmbcl7oJm1uKybym6WTkJEEyJyLhRqp3DQNkltAq F/yf0chdcqRYb4xH2/43XwNsC+jU+koB18kuhjZpPh4rIciS6gOTzslApd0/FBt+ HwMOjJFEJKcHoG7z72M6lnv2Pso2pGQJU/ts+KZ0xEM2JNR4W9GdOHg5RzCqWc1e oVhAsbPwLW00YOc9fRrTUfwayvQpkc0= -----END CERTIFICATE-----Generated at Wed Jul 2 23:24:30 2025 by rpki-client