$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa File: 54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa (raw, json) Hash identifier: CiqSDxw7wES8oUVdjPkkE3RMoM25K/jjX9yApPMEKK0= Subject key identifier: 73:2D:4F:79:A0:88:9F:76:F4:CA:70:82:F7:3A:2F:5F:23:AD:A9:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6DF4A20B4DA73463AA200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa Signing time: Thu 19 Jun 2025 09:18:01 +0000 ROA not before: Thu 19 Jun 2025 09:18:01 +0000 ROA not after: Wed 17 Sep 2025 09:18:01 +0000 asID: 22773 IP address blocks: 68.231.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:df:4a:20:b4:da:73:46:3a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:01 2025 GMT Not After : Sep 17 09:18:01 2025 GMT Subject: CN=7741ef27-2783-4853-ba28-2a8813ee300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:e6:2b:fc:c2:3d:76:2f:a9:e3:10:13:44: 72:e6:fd:a5:ec:e6:a4:d0:17:09:96:c0:9e:3d:bc: df:00:11:d1:69:bb:aa:0c:9e:61:dc:d2:9e:1b:6e: c1:03:d5:14:9c:5f:dd:38:2d:65:86:36:05:41:6e: 58:e5:b8:ef:36:87:e9:e4:2f:34:de:8e:57:90:db: 77:c3:17:35:0d:13:84:90:e7:e8:2f:64:bb:a1:29: 57:ad:10:38:dd:5b:ce:5e:50:a2:90:02:71:c2:d3: 11:8a:e0:43:cc:05:74:7f:c5:04:d1:ef:38:7e:22: 04:49:5f:e6:7b:ff:50:c3:20:a2:a4:f2:d9:ba:be: be:9a:b2:77:6a:a2:79:d2:c1:8f:69:a2:21:8f:86: af:3f:a9:36:e6:86:60:73:10:f4:19:c2:cb:7c:e6: 00:e0:17:bb:f0:18:30:d2:74:17:e8:fe:92:e7:e3: 05:bd:0d:ea:b0:50:f7:31:0e:3f:45:2b:65:f1:53: e5:69:c3:61:d7:1f:27:76:7b:ad:3f:7b:f1:a8:b6: aa:aa:7b:4a:5c:af:39:f9:c5:23:58:04:8a:cc:d4: a7:e7:36:86:e7:f5:5b:98:6b:70:5d:22:a3:37:fe: 6f:79:b1:6e:30:e2:31:94:65:e8:35:d4:df:de:cb: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2D:4F:79:A0:88:9F:76:F4:CA:70:82:F7:3A:2F:5F:23:AD:A9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:3f:dc:0c:06:11:fe:fb:1e:7c:d0:c0:bf:96:a2:0e:6f:90: 26:bc:53:0e:d5:6c:f7:86:a9:02:aa:97:32:1c:41:96:c1:ea: fb:87:93:7c:2c:a0:25:e2:87:ec:35:d4:0b:86:be:9a:59:62: 15:a7:a7:76:8e:1a:29:3b:51:fd:72:c4:bf:70:7f:d5:f4:9c: e0:f1:8f:1d:3b:05:69:cd:6a:f7:62:7d:3d:43:8b:f1:b3:bf: e6:33:bf:7a:49:00:57:27:c7:18:83:b9:68:97:fc:94:2c:f2: 0c:4a:27:27:b4:c1:e6:5e:f4:93:75:48:70:ee:b4:f4:0a:17: 8d:8e:7f:e9:a0:6b:96:db:f5:b4:7d:e3:8c:5c:7e:1c:61:c7: 6d:dc:51:d6:b3:0e:1c:7e:4d:3d:b1:ec:d1:c7:5c:5f:ff:32: 37:e0:77:fe:c3:11:c9:94:82:2b:ac:4a:6d:60:a1:77:41:cc: 95:6a:95:16:f8:00:7a:a1:a3:5a:56:ea:e7:d1:b9:0e:fb:d0: 8d:40:cf:38:24:98:df:4f:17:83:ff:66:fc:e9:19:ed:99:5c: b3:e1:3e:70:73:d6:6b:56:1b:f0:3c:26:06:a4:2f:c0:2b:35: 10:04:d1:09:a2:41:c8:e1:fd:cc:c7:65:12:e6:a8:19:a5:8d: 7f:b0:a1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91t9KILTac0Y6ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwMVoXDTI1MDkxNzA5MTgwMVowLzEtMCsGA1UEAxMk Nzc0MWVmMjctMjc4My00ODUzLWJhMjgtMmE4ODEzZWUzMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC7mK/zCPXYvqeMQE0Ry5v2l7Oak0BcJlsCe PbzfABHRabuqDJ5h3NKeG27BA9UUnF/dOC1lhjYFQW5Y5bjvNofp5C803o5XkNt3 wxc1DROEkOfoL2S7oSlXrRA43VvOXlCikAJxwtMRiuBDzAV0f8UE0e84fiIESV/m e/9QwyCipPLZur6+mrJ3aqJ50sGPaaIhj4avP6k25oZgcxD0GcLLfOYA4Be78Bgw 0nQX6P6S5+MFvQ3qsFD3MQ4/RStl8VPlacNh1x8ndnutP3vxqLaqqntKXK85+cUj WASKzNSn5zaG5/VbmGtwXSKjN/5vebFuMOIxlGXoNdTf3ssTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMtT3mgiJ929Mpwgvc6L18jranxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTRhN2Q0ZGMtZTBiYS0z NjQwLWI4YjgtMjRlMGUwYjNhNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY/3AwGEf77HnzQwL+Wog5vkCa8Uw7VbPeGqQKqlzIcQZbB6vuHk3ws oCXih+w11AuGvppZYhWnp3aOGik7Uf1yxL9wf9X0nODxjx07BWnNavdifT1Di/Gz v+Yzv3pJAFcnxxiDuWiX/JQs8gxKJye0weZe9JN1SHDutPQKF42Of+mga5bb9bR9 44xcfhxhx23cUdazDhx+TT2x7NHHXF//Mjfgd/7DEcmUgiusSm1goXdBzJVqlRb4 AHqho1pW6ufRuQ770I1AzzgkmN9PF4P/ZvzpGe2ZXLPhPnBz1mtWG/A8JgakL8Ar NRAE0QmiQcjh/czHZRLmqBmljX+woaM= -----END CERTIFICATE-----Generated at Tue Jul 1 15:14:44 2025 by rpki-client