$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa File: 52cd39d0-ea95-3d58-9d50-b4e12725907d.roa (raw, json) Hash identifier: yjgAVzi81Vl5EYADSNzJU2EJ3R+xa5yMY5D7al8PDUc= Subject key identifier: EF:AB:F1:1D:C0:A1:5A:FD:24:C6:F7:34:1B:26:09:58:40:CE:C8:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10337D9333C25A77A713C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa Signing time: Wed 18 Jun 2025 18:01:54 +0000 ROA not before: Wed 18 Jun 2025 18:01:54 +0000 ROA not after: Tue 16 Sep 2025 18:01:54 +0000 asID: 22773 IP address blocks: 68.3.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:33:7d:93:33:c2:5a:77:a7:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:54 2025 GMT Not After : Sep 16 18:01:54 2025 GMT Subject: CN=c3c4686c-f3b7-44d0-82c8-cae944f83db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:66:71:38:99:2d:b5:ed:84:fe:97:0f:a0:94: c8:fb:d5:c8:4a:03:6d:1b:b0:c7:8a:6e:2e:45:e0: e2:c4:b5:2b:e4:c0:2f:84:9a:40:f2:5a:e3:a6:58: e3:f8:a6:f6:2d:59:1b:39:58:92:d3:f8:c2:f7:81: 58:dc:54:1f:4e:8d:19:38:9f:5b:44:e9:b5:18:72: 2f:02:ec:ed:8c:62:83:d1:20:98:18:26:d8:9e:2c: 9c:b3:4a:dd:c6:65:b1:5a:c4:1d:c1:00:f6:22:bc: e0:35:e5:5f:40:07:25:01:a5:a1:b9:d3:77:32:8b: 32:1a:5e:3c:e4:e5:92:04:02:5a:68:4c:ee:35:5a: 34:a7:4e:3f:aa:c0:64:d0:6e:73:ee:25:78:3f:aa: ff:01:73:5e:06:2c:87:17:df:40:20:1e:37:62:f0: 25:bc:01:9c:90:e6:ef:88:bc:45:cb:96:b0:1e:1f: 88:4d:81:08:4b:cc:c1:e3:85:b8:21:2d:8d:04:8e: 70:f1:b7:51:df:11:c0:97:fa:69:da:a0:01:8d:15: 38:b4:89:4c:b0:f4:99:2e:f4:12:38:2a:70:8d:c0: c0:96:5d:ed:27:d4:01:a1:23:b4:74:85:a8:6b:f8: 66:61:87:39:e6:af:30:42:d7:b5:e3:35:74:fd:78: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AB:F1:1D:C0:A1:5A:FD:24:C6:F7:34:1B:26:09:58:40:CE:C8:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cd39d0-ea95-3d58-9d50-b4e12725907d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:32:14:7b:71:cc:b4:54:66:53:ad:08:14:2e:2e:60:80:c0: 40:ce:1a:2b:82:92:a8:f0:71:63:13:b1:7e:4f:68:d4:19:e3: 5b:2e:9d:da:0f:e1:81:af:68:44:b6:76:5f:02:19:61:49:aa: 86:3a:14:5e:6c:6e:48:2f:d0:67:ac:ec:d6:d1:ab:ab:6f:0d: 02:71:08:9e:7f:12:3c:00:73:0a:92:f3:70:cd:7e:02:cf:35: 0a:75:cf:b1:e4:52:5f:a7:86:a1:5b:db:dd:32:1d:48:8c:7d: 82:3c:86:6e:d4:99:f7:5d:f1:94:36:b1:05:03:f7:bb:62:e9: e0:9a:df:43:48:90:ca:58:a2:a1:ef:cb:5c:a2:6e:c0:c5:00: 42:2a:eb:da:ae:64:7d:a5:6f:8e:59:ea:f7:4c:46:42:53:c9: 66:c5:69:48:0d:9e:15:52:81:71:8d:3d:05:90:41:f6:ec:18: 89:f0:5d:87:8c:58:d0:72:e1:1d:21:c7:6d:8b:63:cc:dd:78: 75:ac:8a:6f:37:ba:36:3e:f4:6b:a8:5f:71:3a:36:4a:ab:2a: 99:1f:16:ab:6d:24:2f:c3:0c:d1:f8:1f:e1:5f:e8:15:00:d8: d7:52:37:d4:a8:20:e5:36:2c:ce:fc:f0:f4:17:88:59:00:73: a6:2d:5f:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EDN9kzPCWnenE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE1NFoXDTI1MDkxNjE4MDE1NFowLzEtMCsGA1UEAxMk YzNjNDY4NmMtZjNiNy00NGQwLTgyYzgtY2FlOTQ0ZjgzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmZxOJktte2E/pcPoJTI+9XISgNtG7DHim4u ReDixLUr5MAvhJpA8lrjpljj+Kb2LVkbOViS0/jC94FY3FQfTo0ZOJ9bROm1GHIv AuztjGKD0SCYGCbYniycs0rdxmWxWsQdwQD2IrzgNeVfQAclAaWhudN3MosyGl48 5OWSBAJaaEzuNVo0p04/qsBk0G5z7iV4P6r/AXNeBiyHF99AIB43YvAlvAGckObv iLxFy5awHh+ITYEIS8zB44W4IS2NBI5w8bdR3xHAl/pp2qABjRU4tIlMsPSZLvQS OCpwjcDAll3tJ9QBoSO0dIWoa/hmYYc55q8wQte14zV0/Xjr/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+r8R3AoVr9JMb3NBsmCVhAzsgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJjZDM5ZDAtZWE5NS0z ZDU4LTlkNTAtYjRlMTI3MjU5MDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYyFHtxzLRUZlOtCBQuLmCAwEDOGiuCkqjwcWMTsX5PaNQZ41sundoP 4YGvaES2dl8CGWFJqoY6FF5sbkgv0Ges7NbRq6tvDQJxCJ5/EjwAcwqS83DNfgLP NQp1z7HkUl+nhqFb290yHUiMfYI8hm7Umfdd8ZQ2sQUD97ti6eCa30NIkMpYoqHv y1yibsDFAEIq69quZH2lb45Z6vdMRkJTyWbFaUgNnhVSgXGNPQWQQfbsGInwXYeM WNBy4R0hx22LY8zdeHWsim83ujY+9GuoX3E6NkqrKpkfFqttJC/DDNH4H+Ff6BUA 2NdSN9SoIOU2LM788PQXiFkAc6YtX5o= -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:10 2025 by rpki-client