$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/516385d5-adb9-35d4-9a29-3bab5cf5434f.roa File: 516385d5-adb9-35d4-9a29-3bab5cf5434f.roa (raw, json) Hash identifier: Xh0CUbGHSv8X9IeoFi0WzBMkTeSbKNYoC1/9QEGbrdE= Subject key identifier: F0:57:F4:AB:51:2C:51:95:A3:B1:80:8C:61:5C:01:AF:01:0B:D6:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6D158F108DBE9B4FF8B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/516385d5-adb9-35d4-9a29-3bab5cf5434f.roa Signing time: Fri 20 Jun 2025 09:28:37 +0000 ROA not before: Fri 20 Jun 2025 09:28:37 +0000 ROA not after: Thu 18 Sep 2025 09:28:37 +0000 asID: 22773 IP address blocks: 68.96.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:d1:58:f1:08:db:e9:b4:ff:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:37 2025 GMT Not After : Sep 18 09:28:37 2025 GMT Subject: CN=fa37505a-a96a-4191-8781-5d8e5096286e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:d0:71:97:95:39:a4:30:b8:43:44:fd:09: 1b:84:1b:e8:08:d5:d8:14:d0:66:0a:e3:b7:da:ab: 64:e2:80:9e:03:7a:c9:59:87:8b:21:d3:74:43:37: 44:ae:9f:4d:52:9b:5d:1b:5f:8b:b4:1e:e9:4e:15: be:5e:b5:04:39:1d:42:dc:22:06:46:6f:64:25:5f: 9e:86:55:ff:fb:6a:ef:e9:1a:f2:0c:84:3e:2a:04: 50:4f:6e:c3:47:b9:ad:58:68:8c:3f:85:bf:e2:54: f0:13:ea:6e:82:52:90:c7:80:38:41:27:da:1f:2d: 86:8b:3a:58:1f:85:5b:b9:ed:87:fc:00:ab:1b:3f: 3e:3b:be:c9:c7:f2:5a:f5:5c:29:81:5a:4a:ac:bc: e1:24:5b:fb:8c:5c:a7:86:73:b2:46:21:cd:0d:44: 84:1c:67:7f:b3:69:a7:fe:1b:d9:6f:24:d8:ec:1a: e1:ca:b2:dd:df:94:ed:8e:57:9b:b6:cc:4d:93:bc: 6f:77:a3:02:1d:84:59:53:b1:a7:3e:86:c4:c8:50: 04:ae:ec:72:c3:36:45:a9:c1:af:1f:ce:10:fc:82: 0a:67:18:c8:7d:fe:fa:9c:2f:01:31:21:98:2b:6e: 71:cf:0e:ef:03:2f:4e:f5:5d:71:24:b3:48:f1:4a: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:F4:AB:51:2C:51:95:A3:B1:80:8C:61:5C:01:AF:01:0B:D6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/516385d5-adb9-35d4-9a29-3bab5cf5434f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a6:6d:4b:c7:df:f7:27:e1:b1:a1:72:f5:fe:56:af:60:8c: ce:c5:11:af:b5:02:97:40:41:bb:7c:a4:20:c8:21:d2:61:78: 76:63:97:36:e0:6f:f5:e1:fc:56:bd:52:1a:dd:6c:8e:8d:e5: 79:29:14:f7:bf:25:cf:f1:e4:71:5c:21:ed:98:c5:4b:de:2f: 20:0d:d1:11:a1:98:44:9b:c9:eb:fe:18:c7:88:41:b0:0f:46: 4f:76:d1:0c:76:c3:3a:c9:af:5d:6b:d4:02:88:2c:18:01:33: 14:6f:4a:3c:a4:7a:51:a1:0e:82:91:51:90:53:07:fe:ad:8b: 95:02:d7:2a:af:a1:2f:be:39:ac:29:6b:a2:4f:99:8e:85:da: 5c:89:08:a2:bc:f1:ce:bc:8e:08:18:51:f3:18:c4:8b:f2:a8: 00:1f:17:a0:3a:b9:d6:f5:92:f4:3d:da:72:c8:3a:d6:6e:ed: 06:cf:6e:d7:ab:4b:81:b6:5b:d9:8e:50:5c:24:d2:28:8e:8d: 3d:6a:81:89:68:c1:53:2e:f3:c5:5a:d7:2b:cb:bc:b5:d6:80: 51:52:13:69:ee:ba:30:d1:1a:82:b1:da:9d:90:06:4c:e9:56: 3d:cd:9e:58:27:ac:fd:69:c3:39:5b:72:3d:0d:23:5b:2c:d7: 18:7c:58:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAptFY8Qjb6bT/iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgzN1oXDTI1MDkxODA5MjgzN1owLzEtMCsGA1UEAxMk ZmEzNzUwNWEtYTk2YS00MTkxLTg3ODEtNWQ4ZTUwOTYyODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY/QcZeVOaQwuENE/QkbhBvoCNXYFNBmCuO3 2qtk4oCeA3rJWYeLIdN0QzdErp9NUptdG1+LtB7pThW+XrUEOR1C3CIGRm9kJV+e hlX/+2rv6RryDIQ+KgRQT27DR7mtWGiMP4W/4lTwE+puglKQx4A4QSfaHy2GizpY H4Vbue2H/ACrGz8+O77Jx/Ja9VwpgVpKrLzhJFv7jFynhnOyRiHNDUSEHGd/s2mn /hvZbyTY7BrhyrLd35TtjlebtsxNk7xvd6MCHYRZU7GnPobEyFAEruxywzZFqcGv H84Q/IIKZxjIff76nC8BMSGYK25xzw7vAy9O9V1xJLNI8UqDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBX9KtRLFGVo7GAjGFcAa8BC9YiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTE2Mzg1ZDUtYWRiOS0z NWQ0LTlhMjktM2JhYjVjZjU0MzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKmbUvH3/cn4bGhcvX+Vq9gjM7FEa+1ApdAQbt8pCDIIdJheHZjlzbg b/Xh/Fa9UhrdbI6N5XkpFPe/Jc/x5HFcIe2YxUveLyAN0RGhmESbyev+GMeIQbAP Rk920Qx2wzrJr11r1AKILBgBMxRvSjykelGhDoKRUZBTB/6ti5UC1yqvoS++Oawp a6JPmY6F2lyJCKK88c68jggYUfMYxIvyqAAfF6A6udb1kvQ92nLIOtZu7QbPbter S4G2W9mOUFwk0iiOjT1qgYlowVMu88Va1yvLvLXWgFFSE2nuujDRGoKx2p2QBkzp Vj3NnlgnrP1pwzlbcj0NI1ss1xh8WGI= -----END CERTIFICATE-----Generated at Tue Jul 1 20:46:05 2025 by rpki-client