$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578a7f1c-4ff6-3dda-af07-952d89343440.roa File: 578a7f1c-4ff6-3dda-af07-952d89343440.roa (raw, json) Hash identifier: jI24wNQLgpExitau6lZDiuxAGdee4ArPnVvlU9dHNnQ= Subject key identifier: E9:13:9B:8C:A2:B0:C2:37:F0:D9:3D:A5:3B:A2:42:76:2B:F5:F2:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6EB325FA4D3DC00E4AA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578a7f1c-4ff6-3dda-af07-952d89343440.roa Signing time: Thu 19 Jun 2025 09:18:06 +0000 ROA not before: Thu 19 Jun 2025 09:18:06 +0000 ROA not after: Wed 17 Sep 2025 09:18:06 +0000 asID: 22773 IP address blocks: 68.231.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:eb:32:5f:a4:d3:dc:00:e4:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:06 2025 GMT Not After : Sep 17 09:18:06 2025 GMT Subject: CN=10ce0023-eb80-4cbb-ae2b-f3a60441fc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ae:a6:aa:c3:34:dc:2a:3a:07:50:f8:c4:27: f2:b0:d6:78:8f:e4:a9:92:e9:66:ce:20:06:a5:ab: bd:d8:88:45:dc:6b:02:5f:89:55:f7:66:ec:b1:21: 07:e8:2c:fb:6c:07:30:f5:42:11:25:e7:38:75:d6: ef:e5:45:cb:ee:18:71:9d:ac:c4:d1:e6:2c:a0:89: 5d:3a:e5:92:e5:9c:06:04:ee:16:85:f3:c4:ad:16: 4d:db:80:cf:73:0f:a6:bc:3b:bd:c1:e9:98:12:07: 96:c2:32:a3:87:9d:8b:39:3b:81:21:f1:50:ca:1e: dd:8b:5e:00:98:df:1f:9f:1a:ea:2d:d3:43:d6:67: c5:c0:88:37:ba:d0:01:f6:0d:90:51:ee:5d:0c:19: b0:c2:16:d8:56:10:27:54:e0:7a:f3:10:59:d5:b9: b4:2c:bb:3c:04:1b:f7:3f:63:40:a9:0e:fa:90:6a: 21:bc:17:84:ce:f2:3e:ec:73:27:86:27:9f:79:5d: 43:f2:75:bc:72:5c:d1:84:b5:6c:82:22:54:17:c2: 4a:cf:c2:08:29:08:74:39:6c:f0:13:a0:31:d9:4e: fa:0a:b7:47:e7:1c:56:d8:54:6b:1e:6d:3f:e8:ca: 5b:60:3b:7b:0e:c5:6d:51:5d:86:e0:77:2e:54:15: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:13:9B:8C:A2:B0:C2:37:F0:D9:3D:A5:3B:A2:42:76:2B:F5:F2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/578a7f1c-4ff6-3dda-af07-952d89343440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b3:80:bb:b6:f8:8f:64:b5:bc:99:2f:87:6a:a0:82:a1:01: e7:8e:24:d5:87:eb:0b:e1:f3:a6:08:85:8e:80:2b:99:0e:1e: e0:b2:45:89:d5:2a:b6:57:da:71:c9:ff:d6:46:b2:99:e1:13: 38:d1:f1:49:79:43:12:60:39:81:5a:51:03:b2:49:de:04:d8: dc:19:04:59:30:a9:9d:48:d0:ad:87:db:2d:ef:20:de:9a:72: 72:33:46:5f:ad:ca:cf:64:8e:09:dd:bb:1b:b2:ce:84:23:9f: 85:aa:d3:e8:3e:ae:29:11:d7:53:9b:6a:6a:fb:ea:1d:a3:b8: 9c:b1:62:ee:8a:ac:15:de:2d:13:2d:50:2d:f3:c0:50:b0:ec: 66:16:57:90:f5:34:90:b3:ce:33:cf:bb:99:ac:6a:ca:3f:06: 6c:98:f3:85:b4:21:42:65:6c:e7:73:b6:b8:e8:56:ec:ce:a0: d8:d6:b3:5a:e4:7a:d6:44:3f:98:bd:82:27:9d:6f:44:fd:0c: cd:be:62:8e:bb:e4:a8:aa:a1:1b:68:52:a1:d9:9e:8b:d1:22: 64:8b:fb:62:ec:34:2a:44:02:b1:49:63:8a:df:a6:d3:2e:fe: c0:f2:2e:03:bf:67:26:a7:9a:7a:59:29:d1:ed:7c:4f:c4:3f: ef:5d:f6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91usyX6TT3ADkqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwNloXDTI1MDkxNzA5MTgwNlowLzEtMCsGA1UEAxMk MTBjZTAwMjMtZWI4MC00Y2JiLWFlMmItZjNhNjA0NDFmYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja6mqsM03Co6B1D4xCfysNZ4j+SpkulmziAG pau92IhF3GsCX4lV92bssSEH6Cz7bAcw9UIRJec4ddbv5UXL7hhxnazE0eYsoIld OuWS5ZwGBO4WhfPErRZN24DPcw+mvDu9wemYEgeWwjKjh52LOTuBIfFQyh7di14A mN8fnxrqLdND1mfFwIg3utAB9g2QUe5dDBmwwhbYVhAnVOB68xBZ1bm0LLs8BBv3 P2NAqQ76kGohvBeEzvI+7HMnhiefeV1D8nW8clzRhLVsgiJUF8JKz8IIKQh0OWzw E6Ax2U76CrdH5xxW2FRrHm0/6MpbYDt7DsVtUV2G4HcuVBXVmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkTm4yisMI38Nk9pTuiQnYr9fJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTc4YTdmMWMtNGZmNi0z ZGRhLWFmMDctOTUyZDg5MzQzNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWzgLu2+I9ktbyZL4dqoIKhAeeOJNWH6wvh86YIhY6AK5kOHuCyRYnV KrZX2nHJ/9ZGspnhEzjR8Ul5QxJgOYFaUQOySd4E2NwZBFkwqZ1I0K2H2y3vIN6a cnIzRl+tys9kjgnduxuyzoQjn4Wq0+g+rikR11Obamr76h2juJyxYu6KrBXeLRMt UC3zwFCw7GYWV5D1NJCzzjPPu5msaso/BmyY84W0IUJlbOdztrjoVuzOoNjWs1rk etZEP5i9giedb0T9DM2+Yo675KiqoRtoUqHZnovRImSL+2LsNCpEArFJY4rfptMu /sDyLgO/ZyanmnpZKdHtfE/EP+9d9v8= -----END CERTIFICATE-----Generated at Mon Jun 30 18:34:53 2025 by rpki-client