$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61d7bc39-c751-3290-8d95-b9e498af2eef.roa File: 61d7bc39-c751-3290-8d95-b9e498af2eef.roa (raw, json) Hash identifier: QLmRrZ2DC4R9c7zc/iwRwn4G2dtfOUNsX2hfP/EidZc= Subject key identifier: A0:86:07:2D:CF:E5:73:BB:54:64:56:AE:12:B4:07:4E:C3:12:A7:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1061E75F06F2A67CD73380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61d7bc39-c751-3290-8d95-b9e498af2eef.roa Signing time: Wed 18 Jun 2025 18:02:16 +0000 ROA not before: Wed 18 Jun 2025 18:02:16 +0000 ROA not after: Tue 16 Sep 2025 18:02:16 +0000 asID: 22773 IP address blocks: 68.3.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:61:e7:5f:06:f2:a6:7c:d7:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:16 2025 GMT Not After : Sep 16 18:02:16 2025 GMT Subject: CN=e43edae8-132b-44f5-8b26-b947e73f5523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:2c:e5:87:da:98:b1:27:56:9c:04:d5:3e: f4:73:7f:d7:b3:16:2d:d0:e6:ca:af:1c:2b:6f:5f: 79:c2:5e:84:61:08:2d:cf:c5:f2:fc:a2:d1:e6:f8: 87:f8:f1:79:5b:d1:76:67:b3:f3:97:a4:65:40:1d: 06:2a:f7:7d:e9:b3:76:69:e6:9b:bd:c9:94:f2:64: c5:53:bf:74:67:11:72:3d:c8:2d:01:be:e1:f2:0f: 2d:04:05:36:24:36:51:65:b3:16:5d:d7:25:1f:3b: f1:dc:b3:31:02:b1:ae:2e:f5:f7:b4:93:d6:35:36: d4:fc:c8:b7:90:03:9a:6e:d5:04:20:35:9f:a3:9f: 57:13:6d:35:87:39:8f:8d:ee:60:ff:81:94:be:fb: cb:77:b5:d7:d6:a6:77:ca:59:13:19:9b:d3:15:27: 41:6b:9e:4f:f6:29:be:98:2a:4e:66:5f:2e:96:39: 2a:4b:a5:fa:5d:e7:03:3f:23:ea:1a:e0:c7:a8:9e: db:b8:b0:e2:dd:b2:04:0f:d7:87:8b:c3:ba:9e:95: fe:b9:46:f1:3c:94:c8:d1:ab:27:05:b6:b4:84:4f: 04:04:f8:16:1e:45:8a:6c:d4:71:be:fd:9e:c4:eb: 81:50:40:00:1e:f3:e6:3f:86:e2:41:76:89:97:8f: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:86:07:2D:CF:E5:73:BB:54:64:56:AE:12:B4:07:4E:C3:12:A7:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61d7bc39-c751-3290-8d95-b9e498af2eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d7:8f:26:bf:ae:42:f7:cd:cc:1d:da:46:36:69:a7:2a:8d: 19:c3:00:d4:55:f2:c6:7c:4c:63:52:fb:d2:a4:5a:db:30:28: 85:00:df:fc:a6:0e:3f:d1:3d:17:e3:e6:04:ed:d7:94:ac:34: 64:80:62:85:0b:82:e5:ef:08:36:31:2a:22:55:7b:e4:41:b4: 30:49:b5:8d:aa:00:ef:99:61:bb:09:b9:55:38:0e:8e:de:a2: 79:67:b0:16:28:e7:96:86:f2:37:62:8a:97:86:a0:ce:23:b7: 47:a6:2a:31:c1:5a:6a:98:0d:71:35:4e:89:f4:63:3c:90:38: c7:d3:13:79:b5:53:8f:e0:7b:0a:5c:76:cc:d4:90:d8:af:a9: 1b:96:62:fd:8d:ff:cb:6d:4d:14:30:7a:fe:40:37:b4:ee:1f: 2b:90:d3:36:07:0e:e6:f3:29:41:66:30:a5:c9:6b:bd:7f:f3: cf:c6:ed:d6:5b:55:9b:63:4e:b8:a2:c5:7d:c8:d1:ca:5a:9d: fe:41:64:71:fe:52:26:3d:cd:ef:43:9e:89:e2:a0:49:a3:67: 1f:67:4a:4f:d1:0f:f0:55:1e:8c:ae:a9:71:fc:50:9e:b3:dd: e0:c2:45:2c:b3:4d:91:b0:b1:43:12:3a:d5:8c:54:f0:d1:fb: 1e:8a:84:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EGHnXwbypnzXM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIxNloXDTI1MDkxNjE4MDIxNlowLzEtMCsGA1UEAxMk ZTQzZWRhZTgtMTMyYi00NGY1LThiMjYtYjk0N2U3M2Y1NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNMs5YfamLEnVpwE1T70c3/XsxYt0ObKrxwr b195wl6EYQgtz8Xy/KLR5viH+PF5W9F2Z7Pzl6RlQB0GKvd96bN2aeabvcmU8mTF U790ZxFyPcgtAb7h8g8tBAU2JDZRZbMWXdclHzvx3LMxArGuLvX3tJPWNTbU/Mi3 kAOabtUEIDWfo59XE201hzmPje5g/4GUvvvLd7XX1qZ3ylkTGZvTFSdBa55P9im+ mCpOZl8uljkqS6X6XecDPyPqGuDHqJ7buLDi3bIED9eHi8O6npX+uUbxPJTI0asn Bba0hE8EBPgWHkWKbNRxvv2exOuBUEAAHvPmP4biQXaJl4+80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCGBy3P5XO7VGRWrhK0B07DEqdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjFkN2JjMzktYzc1MS0z MjkwLThkOTUtYjllNDk4YWYyZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnXjya/rkL3zcwd2kY2aacqjRnDANRV8sZ8TGNS+9KkWtswKIUA3/ym Dj/RPRfj5gTt15SsNGSAYoULguXvCDYxKiJVe+RBtDBJtY2qAO+ZYbsJuVU4Do7e onlnsBYo55aG8jdiipeGoM4jt0emKjHBWmqYDXE1Ton0YzyQOMfTE3m1U4/gewpc dszUkNivqRuWYv2N/8ttTRQwev5AN7TuHyuQ0zYHDubzKUFmMKXJa71/88/G7dZb VZtjTriixX3I0cpanf5BZHH+UiY9ze9DnonioEmjZx9nSk/RD/BVHoyuqXH8UJ6z 3eDCRSyzTZGwsUMSOtWMVPDR+x6KhKE= -----END CERTIFICATE-----Generated at Tue Jul 1 18:20:34 2025 by rpki-client