$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/570816ad-3a11-3a7e-83bf-1fb63a23ea55.roa File: 570816ad-3a11-3a7e-83bf-1fb63a23ea55.roa (raw, json) Hash identifier: CXk4PkM3vwr4/6TsKe+vHhmCB7eV8yTbPhX2y8ngWYE= Subject key identifier: 1B:BF:43:DE:5B:3F:99:04:45:E8:89:36:09:1F:DA:9E:F9:44:A4:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD696C442A8879B9E7F5C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/570816ad-3a11-3a7e-83bf-1fb63a23ea55.roa Signing time: Thu 19 Jun 2025 09:17:27 +0000 ROA not before: Thu 19 Jun 2025 09:17:27 +0000 ROA not after: Wed 17 Sep 2025 09:17:27 +0000 asID: 22773 IP address blocks: 68.228.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:96:c4:42:a8:87:9b:9e:7f:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:27 2025 GMT Not After : Sep 17 09:17:27 2025 GMT Subject: CN=b8fd8f04-24a3-44c6-b412-59312e1290a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:e5:51:3d:d9:f1:26:2a:20:b1:64:f1:f5: 8a:bb:d3:ef:cf:00:ab:46:af:7b:38:6d:7a:9f:f4: ff:a8:eb:28:44:0f:4a:65:c7:a7:e5:fa:8a:83:c3: c5:15:e5:f5:55:fc:fb:41:c8:56:df:4b:30:f1:a0: c7:91:96:aa:a8:05:ca:f7:fa:fe:a5:e2:b3:55:f9: a1:ac:c4:d9:cb:3b:f1:e9:d0:b8:cb:f8:51:6f:f3: c4:47:fa:fb:5c:e0:ae:86:96:79:f0:36:4c:72:e1: eb:66:ae:ea:21:04:06:46:c6:45:be:4d:78:50:d3: 89:82:3e:4c:8f:49:24:b0:c6:02:8f:9d:35:50:63: 08:f7:92:82:d3:7b:d0:70:57:37:55:43:50:71:27: 44:9d:db:2b:43:96:06:04:23:0c:39:2c:8e:4a:f4: 78:e3:55:86:f5:b8:0c:d6:da:22:65:84:fb:94:c7: 00:9e:71:98:c6:26:1d:e3:ad:26:1d:d7:d1:99:9f: 9d:51:47:85:01:2d:bb:57:29:ae:0a:71:a3:67:ec: 5b:62:58:a4:37:6d:f4:4c:5a:fc:1c:97:55:87:00: 00:66:b3:4f:68:1e:77:22:4e:a2:9b:65:d7:4c:44: 40:70:d2:49:34:55:83:c1:81:ec:7f:0a:02:c5:6f: b5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BF:43:DE:5B:3F:99:04:45:E8:89:36:09:1F:DA:9E:F9:44:A4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/570816ad-3a11-3a7e-83bf-1fb63a23ea55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f3:fc:04:f5:07:8f:af:12:0d:1e:81:4f:c8:69:bf:4d:7d: 17:dd:ba:06:d9:e1:16:a0:14:a7:5b:0e:42:7e:81:96:21:bb: f6:bc:ed:8f:cf:cd:ce:cd:51:4b:e2:dd:de:bc:9f:14:ef:30: 08:6f:58:03:60:20:99:d0:7c:14:c1:b4:2a:10:50:d5:fa:57: 29:f3:4f:a7:d6:f7:0c:97:8e:1b:87:c0:8d:ba:9c:88:fe:8c: ce:08:e7:63:e5:f2:68:ba:a2:52:14:99:84:8b:fd:fd:67:a4: 14:3c:b1:b5:6e:c2:d2:92:f8:d0:d3:8d:06:92:87:a2:58:6a: 7b:55:c4:26:24:96:81:eb:bf:81:8c:5e:12:c9:83:7d:ce:f6: 0d:a7:d7:79:cd:f2:47:7d:d5:10:ea:51:32:e4:72:be:ab:1d: 7b:ce:8a:eb:8a:92:cd:e4:7a:a1:18:a0:d3:c6:de:ea:bc:ca: e6:cc:19:d6:56:1a:6d:6b:5b:29:fb:17:b8:cc:93:7b:dc:40: de:fe:36:c0:04:bf:b4:67:56:cd:ec:5e:5b:ec:ab:e0:ee:a9: 1c:f3:3d:6d:30:7f:4a:7a:fd:f9:72:3b:0b:92:fe:de:4b:bd: 87:3d:d7:7b:78:74:e1:ba:a8:a4:eb:be:51:bc:c5:80:5c:b0: 1e:f0:71:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91pbEQqiHm55/XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcyN1oXDTI1MDkxNzA5MTcyN1owLzEtMCsGA1UEAxMk YjhmZDhmMDQtMjRhMy00NGM2LWI0MTItNTkzMTJlMTI5MGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBPlUT3Z8SYqILFk8fWKu9PvzwCrRq97OG16 n/T/qOsoRA9KZcen5fqKg8PFFeX1Vfz7QchW30sw8aDHkZaqqAXK9/r+peKzVfmh rMTZyzvx6dC4y/hRb/PER/r7XOCuhpZ58DZMcuHrZq7qIQQGRsZFvk14UNOJgj5M j0kksMYCj501UGMI95KC03vQcFc3VUNQcSdEndsrQ5YGBCMMOSyOSvR441WG9bgM 1toiZYT7lMcAnnGYxiYd460mHdfRmZ+dUUeFAS27VymuCnGjZ+xbYlikN230TFr8 HJdVhwAAZrNPaB53Ik6im2XXTERAcNJJNFWDwYHsfwoCxW+18wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu/Q95bP5kEReiJNgkf2p75RKT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTcwODE2YWQtM2ExMS0z YTdlLTgzYmYtMWZiNjNhMjNlYTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/z/AT1B4+vEg0egU/Iab9NfRfdugbZ4RagFKdbDkJ+gZYhu/a87Y/P zc7NUUvi3d68nxTvMAhvWANgIJnQfBTBtCoQUNX6VynzT6fW9wyXjhuHwI26nIj+ jM4I52Pl8mi6olIUmYSL/f1npBQ8sbVuwtKS+NDTjQaSh6JYantVxCYkloHrv4GM XhLJg33O9g2n13nN8kd91RDqUTLkcr6rHXvOiuuKks3keqEYoNPG3uq8yubMGdZW Gm1rWyn7F7jMk3vcQN7+NsAEv7RnVs3sXlvsq+DuqRzzPW0wf0p6/flyOwuS/t5L vYc913t4dOG6qKTrvlG8xYBcsB7wcSY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:51 2025 by rpki-client