$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36f7f1-831f-3500-aced-a1836cd664d2.roa File: 5d36f7f1-831f-3500-aced-a1836cd664d2.roa (raw, json) Hash identifier: vfmS+IUEz3fAoDkuDmdxzP/jgMAtNScjLAd+K4wYTvE= Subject key identifier: 24:F5:64:30:F0:99:95:92:72:4D:01:FF:20:B0:45:1A:94:49:BB:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A75958CEBC3DEF88A8F7E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36f7f1-831f-3500-aced-a1836cd664d2.roa Signing time: Fri 20 Jun 2025 09:29:41 +0000 ROA not before: Fri 20 Jun 2025 09:29:41 +0000 ROA not after: Thu 18 Sep 2025 09:29:41 +0000 asID: 22773 IP address blocks: 68.108.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:59:58:ce:bc:3d:ef:88:a8:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:41 2025 GMT Not After : Sep 18 09:29:41 2025 GMT Subject: CN=dd1c5a9e-5ed1-42e6-8c1f-1b3c1268b59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:86:8a:bc:99:90:37:26:0f:ef:38:6e:e7: 13:e4:cc:bb:4c:fc:d1:47:f3:a0:21:30:95:a9:4a: db:83:60:61:a4:2c:08:0f:52:40:98:3d:b8:62:4a: f5:4f:d2:03:60:cc:02:63:72:00:db:cb:9e:8a:a0: d4:6c:e1:43:ab:2e:a0:71:7a:da:51:75:55:2d:24: 29:76:ac:44:61:5a:5b:77:7a:3e:5f:db:64:e9:81: 15:2a:93:c3:81:7e:34:df:fd:5c:ad:ed:5b:2b:fe: 1a:ea:77:20:26:55:79:ef:82:ff:46:e7:d0:c3:19: b1:c0:2a:b2:5a:f7:d2:68:e8:9e:40:60:1b:40:fd: 06:85:04:6e:82:05:9c:d2:b9:75:76:f1:68:b3:a3: 3a:3a:5c:4e:85:00:c4:0e:54:9b:65:84:0e:fe:af: 73:25:68:3b:d7:aa:8c:09:db:f4:b8:3c:11:e8:65: 1e:db:7c:02:b4:05:f2:ca:33:8e:c0:b5:8d:bb:65: d6:40:63:2d:c8:40:76:7b:30:80:03:74:74:c1:03: 17:60:01:74:0a:b4:1b:72:21:8b:33:d0:39:af:96: 48:18:6a:22:b8:de:18:bc:6c:86:52:a5:5b:49:2e: 09:d3:23:42:4b:b0:a8:54:a6:1e:ff:06:3d:95:2f: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:64:30:F0:99:95:92:72:4D:01:FF:20:B0:45:1A:94:49:BB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36f7f1-831f-3500-aced-a1836cd664d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:7d:0f:be:1d:b4:d0:e1:27:4c:55:0b:2c:d4:df:ab:b1:eb: aa:bf:69:22:3e:91:4e:fd:dd:6a:f3:0c:e9:37:89:c1:b5:a6: 29:c4:4a:d9:dc:fb:7b:cf:5c:2e:89:6d:3c:c6:b8:4d:e1:ee: 5d:cb:e7:c0:9f:ce:5b:6a:f1:f5:23:1f:0a:86:c5:4e:c4:b3: c3:3c:e5:51:84:5f:63:b9:3c:0a:57:19:45:e1:f9:13:c0:07: 1d:2a:31:26:32:78:64:11:42:c1:ce:87:66:14:5a:d9:18:db: c2:ce:86:ae:ad:e6:a1:6b:c1:05:67:2b:32:cf:ee:f0:ca:ad: 89:35:32:ed:e0:30:46:15:55:2e:bd:1d:64:f5:7e:ae:72:6d: d4:84:b7:18:71:1a:76:a2:ce:96:24:a3:76:31:04:a2:2d:d8: 0c:1b:ad:42:a9:5a:1f:98:ff:92:72:0c:c7:9f:c1:3c:c6:af: f0:ee:ab:ec:8d:dd:4d:0a:d9:73:fa:8b:2e:5b:be:31:cd:d8: f0:ea:1a:91:31:1b:96:42:b4:b8:ee:ae:b8:83:c4:50:3c:61: cd:0f:e1:be:9f:39:c7:47:f7:47:79:2c:18:ae:6c:f1:d7:d7: 8e:35:5d:53:5b:c5:1a:ed:88:40:79:a9:57:4d:a4:50:b5:2d: 27:1b:5a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp1lYzrw974io9+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0MVoXDTI1MDkxODA5Mjk0MVowLzEtMCsGA1UEAxMk ZGQxYzVhOWUtNWVkMS00MmU2LThjMWYtMWIzYzEyNjhiNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46GiryZkDcmD+84bucT5My7TPzRR/OgITCV qUrbg2BhpCwID1JAmD24Ykr1T9IDYMwCY3IA28ueiqDUbOFDqy6gcXraUXVVLSQp dqxEYVpbd3o+X9tk6YEVKpPDgX403/1cre1bK/4a6ncgJlV574L/RufQwxmxwCqy WvfSaOieQGAbQP0GhQRuggWc0rl1dvFos6M6OlxOhQDEDlSbZYQO/q9zJWg716qM Cdv0uDwR6GUe23wCtAXyyjOOwLWNu2XWQGMtyEB2ezCAA3R0wQMXYAF0CrQbciGL M9A5r5ZIGGoiuN4YvGyGUqVbSS4J0yNCS7CoVKYe/wY9lS8zKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT1ZDDwmZWSck0B/yCwRRqUSbv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWQzNmY3ZjEtODMxZi0z NTAwLWFjZWQtYTE4MzZjZDY2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR9D74dtNDhJ0xVCyzU36ux66q/aSI+kU793WrzDOk3icG1pinEStnc +3vPXC6JbTzGuE3h7l3L58Cfzltq8fUjHwqGxU7Es8M85VGEX2O5PApXGUXh+RPA Bx0qMSYyeGQRQsHOh2YUWtkY28LOhq6t5qFrwQVnKzLP7vDKrYk1Mu3gMEYVVS69 HWT1fq5ybdSEtxhxGnaizpYko3YxBKIt2AwbrUKpWh+Y/5JyDMefwTzGr/Duq+yN 3U0K2XP6iy5bvjHN2PDqGpExG5ZCtLjurriDxFA8Yc0P4b6fOcdH90d5LBiubPHX 1441XVNbxRrtiEB5qVdNpFC1LScbWsg= -----END CERTIFICATE-----Generated at Tue Jul 1 19:40:42 2025 by rpki-client