$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58a300d9-072d-3b11-98f9-5dba92c732fc.roa File: 58a300d9-072d-3b11-98f9-5dba92c732fc.roa (raw, json) Hash identifier: fMdKlk1XmVVZbB27gKZIE98XZSKR6BmqtUfzuJFQ/Ao= Subject key identifier: 5A:29:6A:1B:8C:45:20:B6:D0:04:2E:0B:6B:9A:C0:0D:FC:39:22:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6C72DBC8BA04E90AD88A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58a300d9-072d-3b11-98f9-5dba92c732fc.roa Signing time: Thu 19 Jun 2025 09:17:49 +0000 ROA not before: Thu 19 Jun 2025 09:17:49 +0000 ROA not after: Wed 17 Sep 2025 09:17:49 +0000 asID: 22773 IP address blocks: 68.230.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:c7:2d:bc:8b:a0:4e:90:ad:88:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:49 2025 GMT Not After : Sep 17 09:17:49 2025 GMT Subject: CN=f3e86f34-7041-4103-93e1-1c05013f62a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:36:8b:9c:19:50:8c:f5:2f:7d:53:1b:cb: e1:86:86:d3:62:bc:ec:77:08:74:49:9c:3c:31:1c: d3:57:5b:f2:22:4d:55:ba:12:35:12:22:d9:03:ed: 94:08:c0:54:0b:c3:12:38:6f:8c:6e:05:70:b5:33: 9e:62:33:39:27:f3:68:7b:81:50:d7:1d:ef:74:ec: cb:78:7a:47:1d:55:93:31:5d:f1:07:17:ad:6e:0d: c6:12:5a:de:79:dc:d6:b6:dc:f1:4a:af:27:71:ac: b6:84:ea:6e:3d:2b:06:62:e0:f4:66:60:ce:10:07: 25:c6:87:f3:0e:80:1c:52:fa:2a:ef:b0:b4:dd:ba: 50:b0:6c:ba:0d:19:71:3c:86:83:be:4a:89:6f:6f: f2:4d:60:93:cc:ee:7f:e4:8b:16:a5:c7:3e:a8:37: ee:ca:a4:3e:0f:2e:4f:f3:cb:89:5b:20:5f:8c:12: 88:36:74:15:aa:97:72:63:49:93:0f:bf:d5:b7:1c: 15:73:5b:d2:d0:8b:2d:86:b0:97:05:f2:c0:37:39: e4:89:d3:d2:a0:2c:e5:ac:e9:c8:77:d7:35:95:f8: 92:9e:c9:42:3f:a8:4a:a6:e0:09:8c:64:33:f9:de: 0f:ac:1b:4e:6a:83:db:0d:5e:af:ff:9e:8d:02:f9: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:29:6A:1B:8C:45:20:B6:D0:04:2E:0B:6B:9A:C0:0D:FC:39:22:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58a300d9-072d-3b11-98f9-5dba92c732fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:3a:7b:a7:8e:f1:a8:0d:1f:34:56:bb:4f:2a:4c:8e:77:a4: 75:83:c5:c8:51:a2:cc:78:8e:98:0d:f8:8d:d9:f1:47:a9:a7: 2b:27:02:6e:80:50:b5:c8:c2:be:bc:fd:cf:25:fe:9a:ee:96: 39:2b:a6:26:df:8c:54:00:60:6e:bd:5f:b5:56:2c:bb:fa:7d: ed:80:31:6d:72:6f:76:e9:03:48:fb:d2:49:79:c1:66:e3:40: ba:96:e4:ab:d9:a2:78:74:8a:28:39:27:cf:8a:5a:7b:5d:52: 32:cb:ea:4e:36:a1:bf:a6:e3:79:6c:0f:f4:97:f4:0f:ad:be: c9:03:3f:25:81:13:bc:e4:12:60:ac:0e:89:98:eb:4d:ee:72: f8:59:f0:95:e6:20:ed:1e:07:82:b6:fa:1e:30:ec:9a:86:0a: 26:c0:a6:9d:30:bd:62:cf:69:65:d8:f2:08:33:c0:c3:68:ba: 52:5c:83:6b:a7:57:e8:60:65:ad:1f:75:c3:93:1f:50:4f:87: c8:d3:42:48:12:a0:60:f4:b4:0b:f9:c0:5d:f1:63:37:64:fc: 41:9e:12:ee:eb:50:d3:56:fd:cc:6a:26:37:72:48:c1:7c:60: 87:29:6b:15:b8:81:5e:bc:0a:82:2a:b2:e0:50:ba:23:c7:d2: d3:c8:1d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91sctvIugTpCtiKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc0OVoXDTI1MDkxNzA5MTc0OVowLzEtMCsGA1UEAxMk ZjNlODZmMzQtNzA0MS00MTAzLTkzZTEtMWMwNTAxM2Y2MmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheQ2i5wZUIz1L31TG8vhhobTYrzsdwh0SZw8 MRzTV1vyIk1VuhI1EiLZA+2UCMBUC8MSOG+MbgVwtTOeYjM5J/Noe4FQ1x3vdOzL eHpHHVWTMV3xBxetbg3GElreedzWttzxSq8ncay2hOpuPSsGYuD0ZmDOEAclxofz DoAcUvoq77C03bpQsGy6DRlxPIaDvkqJb2/yTWCTzO5/5IsWpcc+qDfuyqQ+Dy5P 88uJWyBfjBKINnQVqpdyY0mTD7/VtxwVc1vS0IsthrCXBfLANznkidPSoCzlrOnI d9c1lfiSnslCP6hKpuAJjGQz+d4PrBtOaoPbDV6v/56NAvlInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFopahuMRSC20AQuC2uawA38OSLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNThhMzAwZDktMDcyZC0z YjExLTk4ZjktNWRiYTkyYzczMmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE6e6eO8agNHzRWu08qTI53pHWDxchRosx4jpgN+I3Z8UeppysnAm6A ULXIwr68/c8l/pruljkrpibfjFQAYG69X7VWLLv6fe2AMW1yb3bpA0j70kl5wWbj QLqW5KvZonh0iig5J8+KWntdUjLL6k42ob+m43lsD/SX9A+tvskDPyWBE7zkEmCs DomY603ucvhZ8JXmIO0eB4K2+h4w7JqGCibApp0wvWLPaWXY8ggzwMNoulJcg2un V+hgZa0fdcOTH1BPh8jTQkgSoGD0tAv5wF3xYzdk/EGeEu7rUNNW/cxqJjdySMF8 YIcpaxW4gV68CoIqsuBQuiPH0tPIHfQ= -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:21 2025 by rpki-client