$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa File: 604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa (raw, json) Hash identifier: 42GCw9Bd9e5+29WM8RmDy6n5Lrbdsk1WBLYbpLl5l/Y= Subject key identifier: 18:8F:AC:D1:E0:7A:5D:B8:34:08:AF:F4:D9:FB:1A:C5:BF:9F:E4:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5BE951F79AC6043C23AB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa Signing time: Thu 19 Jun 2025 09:15:44 +0000 ROA not before: Thu 19 Jun 2025 09:15:44 +0000 ROA not after: Wed 17 Sep 2025 09:15:44 +0000 asID: 22773 IP address blocks: 68.106.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:be:95:1f:79:ac:60:43:c2:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:44 2025 GMT Not After : Sep 17 09:15:44 2025 GMT Subject: CN=7e1d0da1-7c0e-48b8-8444-97b9ad5ab700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0e:8f:02:fc:93:99:eb:98:ce:7c:40:02:31: e2:ee:4a:70:eb:74:d7:0c:6e:0b:6c:88:3d:80:f3: c6:8c:eb:45:b9:10:c2:06:f3:16:ad:59:0c:04:98: f8:c5:1c:12:5a:ca:bc:5b:44:fb:5d:8e:91:cb:64: dc:f8:04:6a:e2:3c:ed:d1:b4:ee:58:e9:0c:cd:52: 3b:1b:b9:72:ce:54:a5:15:8a:5d:e1:dd:04:d7:87: f6:f1:16:7f:38:a6:ef:30:8f:02:72:66:34:83:1c: 4a:91:6c:84:4e:fd:6f:31:d0:2c:6e:c0:b3:28:16: 93:c3:a6:c4:4e:c8:85:a6:fc:93:19:95:0b:8c:cd: ef:3e:ac:7c:32:ec:45:a6:1b:bd:b3:3d:88:3b:e6: 9a:07:8b:e4:e0:cd:de:05:53:59:9e:e6:5e:2b:d5: 51:6e:b2:9b:7b:dd:0d:47:f0:b1:3d:8d:d0:a0:f4: be:42:c2:8c:d4:a5:c0:b8:fe:af:62:32:27:18:90: 29:0a:bd:85:d7:37:c8:cf:30:eb:c8:5d:11:bb:b2: c4:e1:43:ae:6d:53:aa:04:1d:87:ba:17:4c:65:9f: 8f:21:1c:fe:ad:d3:f4:24:d4:c0:a1:a5:21:91:fe: 81:a1:ad:18:0c:6e:6d:6d:bf:ab:6b:ad:84:6a:98: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8F:AC:D1:E0:7A:5D:B8:34:08:AF:F4:D9:FB:1A:C5:BF:9F:E4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/604c1ebb-9f87-3896-9c51-29a1d7d9e740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d0:26:9f:af:05:7d:13:c9:0d:a1:ab:5b:d8:f0:3a:3b:06: 89:5e:12:53:0a:1d:b5:6c:56:65:97:73:b6:d8:1b:7d:8c:be: 14:31:9a:c1:82:59:4d:41:0d:85:b8:80:e5:e9:b0:f6:78:7e: 2c:5d:90:59:bb:e3:c3:58:c3:53:1c:bb:34:ac:cd:72:19:61: 1d:d9:77:a1:01:8d:28:75:6c:b7:01:e7:42:a3:5f:ee:4d:66: 93:09:d3:9c:ae:6f:fb:ef:22:0b:92:dd:96:6e:09:f3:8d:5f: e8:f6:ad:f7:15:f7:d6:87:2e:8a:18:af:61:f4:36:d2:61:c7: ec:f2:8f:dc:f0:16:b5:7f:b4:7d:b6:4c:6f:61:e5:51:be:ae: 46:68:41:27:67:38:94:eb:da:16:a6:34:c1:5b:96:44:7a:cc: 57:a3:81:0c:18:4b:e0:b2:77:a2:97:6b:5d:26:45:74:a5:9e: 9e:11:af:d7:2f:62:43:6c:e0:75:83:d2:be:ec:05:04:56:46: 8a:d7:08:71:36:fc:70:ee:2b:fd:45:99:41:b3:60:e6:e6:01: 1f:4e:17:f8:21:52:86:18:e8:b4:72:82:df:a2:49:94:1d:bb: 17:2c:b6:a9:6a:a9:bb:07:a7:f0:ba:e7:f9:17:4d:39:a8:81: 5c:82:c3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91b6VH3msYEPCOrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTU0NFoXDTI1MDkxNzA5MTU0NFowLzEtMCsGA1UEAxMk N2UxZDBkYTEtN2MwZS00OGI4LTg0NDQtOTdiOWFkNWFiNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ6PAvyTmeuYznxAAjHi7kpw63TXDG4LbIg9 gPPGjOtFuRDCBvMWrVkMBJj4xRwSWsq8W0T7XY6Ry2Tc+ARq4jzt0bTuWOkMzVI7 G7lyzlSlFYpd4d0E14f28RZ/OKbvMI8CcmY0gxxKkWyETv1vMdAsbsCzKBaTw6bE TsiFpvyTGZULjM3vPqx8MuxFphu9sz2IO+aaB4vk4M3eBVNZnuZeK9VRbrKbe90N R/CxPY3QoPS+QsKM1KXAuP6vYjInGJApCr2F1zfIzzDryF0Ru7LE4UOubVOqBB2H uhdMZZ+PIRz+rdP0JNTAoaUhkf6Boa0YDG5tbb+ra62EapiGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiPrNHgel24NAiv9Nn7GsW/n+SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjA0YzFlYmItOWY4Ny0z ODk2LTljNTEtMjlhMWQ3ZDllNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXQJp+vBX0TyQ2hq1vY8Do7BoleElMKHbVsVmWXc7bYG32MvhQxmsGC WU1BDYW4gOXpsPZ4fixdkFm748NYw1McuzSszXIZYR3Zd6EBjSh1bLcB50KjX+5N ZpMJ05yub/vvIguS3ZZuCfONX+j2rfcV99aHLooYr2H0NtJhx+zyj9zwFrV/tH22 TG9h5VG+rkZoQSdnOJTr2hamNMFblkR6zFejgQwYS+Cyd6KXa10mRXSlnp4Rr9cv YkNs4HWD0r7sBQRWRorXCHE2/HDuK/1FmUGzYObmAR9OF/ghUoYY6LRygt+iSZQd uxcstqlqqbsHp/C65/kXTTmogVyCw2k= -----END CERTIFICATE-----Generated at Wed Jul 2 19:25:44 2025 by rpki-client