$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b33e63d-9e1b-387e-8fe8-9f3689dd53a4.roa File: 5b33e63d-9e1b-387e-8fe8-9f3689dd53a4.roa (raw, json) Hash identifier: 4cvEqKm+sO1xA6Jeos6IWfd9b2iWg2BuKNinkk4jA7E= Subject key identifier: 83:70:79:29:2B:66:55:1F:64:9B:B9:AA:7B:04:3E:4E:97:2E:C8:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6E4B6749A3B1A68693C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b33e63d-9e1b-387e-8fe8-9f3689dd53a4.roa Signing time: Thu 19 Jun 2025 09:18:03 +0000 ROA not before: Thu 19 Jun 2025 09:18:03 +0000 ROA not after: Wed 17 Sep 2025 09:18:03 +0000 asID: 22773 IP address blocks: 68.231.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:e4:b6:74:9a:3b:1a:68:69:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:03 2025 GMT Not After : Sep 17 09:18:03 2025 GMT Subject: CN=4b8800dd-64df-46fa-adec-79c8c48c77c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:4d:00:8c:f4:2d:8c:a2:26:29:89:d1:a9: a8:e7:21:c6:c6:35:bf:7d:11:9e:71:2c:f6:7c:8d: 33:fa:af:f9:72:5c:90:de:05:4b:d3:32:b0:f4:99: dd:c3:39:54:2e:7b:0c:8e:d1:ec:28:a8:c8:5b:86: 98:a8:31:6b:87:2f:42:82:bc:6c:37:b0:80:44:6b: 80:c9:81:4c:a4:12:ee:31:b9:57:e9:42:20:df:04: 58:27:f7:28:b4:16:45:bb:f5:5e:0f:49:93:7b:61: 01:3e:87:88:b8:6c:ed:15:ca:86:dc:6e:c1:ac:ae: 9a:ca:07:87:ea:f0:5e:ae:14:0f:f0:09:84:fb:c7: b8:dd:a0:73:1b:a0:65:f9:c7:3b:c5:6e:8b:c8:fe: cf:2c:d1:4a:33:33:81:ee:c0:2c:07:ea:37:66:bc: d6:32:38:af:f1:24:f7:d3:c5:e3:a9:80:9e:23:00: 7b:ba:03:f7:f4:35:81:8e:c8:f7:b7:2d:a9:5b:a8: fd:de:59:b5:58:cd:4e:d1:15:ad:7b:33:f2:34:93: 2f:55:c9:81:84:4f:85:4e:89:f9:e3:45:45:8d:33: 41:c2:ce:97:bd:13:e6:3c:cb:14:79:1c:51:06:cf: 8a:a6:9a:3a:b3:f8:82:99:68:42:d3:6e:0b:7c:14: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:70:79:29:2B:66:55:1F:64:9B:B9:AA:7B:04:3E:4E:97:2E:C8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b33e63d-9e1b-387e-8fe8-9f3689dd53a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cf:f5:4a:68:4e:4f:7e:5f:71:d0:66:c0:5d:6b:1d:65:a4: 09:9d:91:67:b4:a7:8d:64:63:4d:65:65:5f:21:10:b1:fc:e1: 0a:b0:3c:c7:f8:4b:25:66:c1:f3:19:ee:0e:83:26:e8:a9:7c: fe:c6:fc:a3:00:1e:2b:04:69:ff:b1:9b:ef:85:7a:e9:bb:a4: 05:21:a1:8d:55:5d:24:c7:73:fe:4f:a7:6b:c3:41:1c:ad:1c: de:77:7e:09:d0:78:4a:ea:a1:af:12:a6:32:5f:0c:3a:14:37: 5c:54:b7:74:0c:db:85:69:d2:f2:7c:7c:ea:82:b6:29:f4:66: d6:5c:a6:f7:b8:ca:eb:49:a6:eb:24:da:d4:0b:05:14:d4:e6: fc:4c:93:e9:fb:6f:20:73:ad:04:fc:5d:6d:7a:a7:a4:82:75: 53:92:34:85:65:8d:b4:ce:51:81:45:dd:94:e3:b4:e6:7b:3c: 33:d0:a3:a1:35:78:78:da:d2:bd:95:6f:2b:20:2e:89:d1:ef: 44:d9:ab:73:58:00:c1:54:a1:77:92:32:ec:a8:05:a0:43:57: 30:26:3c:60:0d:a8:e6:bf:98:1c:39:7c:82:5f:a5:68:1a:a9: ce:9b:99:08:0f:0b:11:01:9f:a7:d9:06:96:24:6a:38:01:19: 14:57:eb:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91uS2dJo7GmhpPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwM1oXDTI1MDkxNzA5MTgwM1owLzEtMCsGA1UEAxMk NGI4ODAwZGQtNjRkZi00NmZhLWFkZWMtNzljOGM0OGM3N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDFNAIz0LYyiJimJ0amo5yHGxjW/fRGecSz2 fI0z+q/5clyQ3gVL0zKw9JndwzlULnsMjtHsKKjIW4aYqDFrhy9CgrxsN7CARGuA yYFMpBLuMblX6UIg3wRYJ/cotBZFu/VeD0mTe2EBPoeIuGztFcqG3G7BrK6aygeH 6vBerhQP8AmE+8e43aBzG6Bl+cc7xW6LyP7PLNFKMzOB7sAsB+o3ZrzWMjiv8ST3 08XjqYCeIwB7ugP39DWBjsj3ty2pW6j93lm1WM1O0RWtezPyNJMvVcmBhE+FTon5 40VFjTNBws6XvRPmPMsUeRxRBs+Kppo6s/iCmWhC024LfBTIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINweSkrZlUfZJu5qnsEPk6XLsgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWIzM2U2M2QtOWUxYi0z ODdlLThmZTgtOWYzNjg5ZGQ1M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITP9UpoTk9+X3HQZsBdax1lpAmdkWe0p41kY01lZV8hELH84QqwPMf4 SyVmwfMZ7g6DJuipfP7G/KMAHisEaf+xm++Feum7pAUhoY1VXSTHc/5Pp2vDQRyt HN53fgnQeErqoa8SpjJfDDoUN1xUt3QM24Vp0vJ8fOqCtin0ZtZcpve4yutJpusk 2tQLBRTU5vxMk+n7byBzrQT8XW16p6SCdVOSNIVljbTOUYFF3ZTjtOZ7PDPQo6E1 eHja0r2VbysgLonR70TZq3NYAMFUoXeSMuyoBaBDVzAmPGANqOa/mBw5fIJfpWga qc6bmQgPCxEBn6fZBpYkajgBGRRX63k= -----END CERTIFICATE-----Generated at Tue Jul 1 04:22:48 2025 by rpki-client