$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/623f8708-6233-3fa5-a42a-5d4a61a07b98.roa File: 623f8708-6233-3fa5-a42a-5d4a61a07b98.roa (raw, json) Hash identifier: xy5lbdRGuNrwyQNG8b64GhyLyg2LR0OMkEF/ZC1LgqI= Subject key identifier: 86:5E:FB:97:31:45:E9:3D:4F:9B:24:E2:69:B6:21:59:9F:A0:89:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6C56293B967F91ACAFCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/623f8708-6233-3fa5-a42a-5d4a61a07b98.roa Signing time: Thu 19 Jun 2025 09:17:49 +0000 ROA not before: Thu 19 Jun 2025 09:17:49 +0000 ROA not after: Wed 17 Sep 2025 09:17:49 +0000 asID: 22773 IP address blocks: 68.230.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:c5:62:93:b9:67:f9:1a:ca:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:49 2025 GMT Not After : Sep 17 09:17:49 2025 GMT Subject: CN=5bc297ae-d1fe-4056-bac6-4f0f6c9d860b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:44:fa:2d:3d:c0:20:26:02:ab:10:d5:cb:15: fb:5f:93:d2:0f:b7:dc:08:c8:14:e0:05:53:69:e0: 90:75:ee:5c:c7:f0:de:b1:aa:0c:8e:f7:61:88:e2: f5:67:8b:22:8f:e8:97:ba:a4:94:fc:f2:35:1f:e6: 30:be:77:95:c0:89:96:54:81:80:c0:8b:43:75:66: 30:13:fb:01:a7:0e:74:fb:33:a3:b4:78:2d:04:0d: 7a:ae:f1:85:60:0b:7f:ee:26:96:e4:c5:40:c3:1d: 12:cc:8a:fa:3b:fd:9a:0f:b0:1f:31:ba:67:cd:00: 75:10:f1:51:cd:31:6d:ec:98:a5:e5:af:71:5c:22: 18:e5:f6:b1:78:46:6a:c3:49:a3:64:74:d8:fe:aa: 0e:ab:1c:2e:fc:dc:53:bc:61:14:67:7b:90:8a:f4: d3:e6:da:ab:be:f6:43:aa:24:10:8b:b1:f9:0b:88: d1:a3:ac:ef:39:c2:3c:7e:c2:4d:20:da:dc:64:ea: d4:85:56:f8:56:b3:c5:bb:c2:78:00:55:be:94:94: 0d:6b:8b:fc:31:21:54:b6:63:5c:3d:de:82:e5:1f: 5d:98:85:05:8d:87:bb:5c:6e:ed:c5:a5:f2:51:8c: f1:34:1c:cd:58:5e:c9:77:68:28:ed:35:0b:08:d3: 15:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5E:FB:97:31:45:E9:3D:4F:9B:24:E2:69:B6:21:59:9F:A0:89:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/623f8708-6233-3fa5-a42a-5d4a61a07b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:28:a5:46:3d:54:79:e6:d8:8e:51:14:6f:4c:06:34:17:59: 3f:af:12:7b:54:cf:49:7c:b6:32:56:86:4b:26:2d:b4:7c:f5: fc:00:e2:1a:3c:ba:c6:65:5d:f8:c2:4e:ec:a3:a8:5f:52:a5: 7d:81:fa:3e:5f:ae:3b:25:bf:2c:db:15:ff:17:fb:6d:1b:70: 26:62:ee:24:78:69:50:02:e0:58:22:78:f2:53:34:38:76:cf: b5:16:e0:9a:00:bc:7b:3f:8b:54:fe:9f:3b:90:2e:60:a6:5e: fc:2e:d7:17:d5:f1:43:d6:4e:4a:03:cb:7e:12:8e:95:85:b0: 27:0e:41:1d:43:d6:5d:04:27:9b:d6:de:0c:71:df:1f:20:cf: b8:5a:ce:d0:79:6f:53:f0:b1:1f:a3:4b:5f:10:b2:6d:6a:22: 23:3c:52:7f:a6:5b:5a:18:ed:8d:8b:61:a7:bf:e8:06:27:72: 8b:99:9b:5e:ec:3c:f5:52:09:46:e9:2b:7a:24:a3:03:fc:3b: f5:05:63:c9:92:f6:c6:e3:50:25:f2:5c:45:1f:e7:07:01:e8: 6b:98:0f:85:e0:7e:31:72:72:7b:97:5b:db:b5:3d:a2:63:e6: eb:6e:a0:06:25:63:cb:ef:e8:3d:4a:2f:cd:9a:a7:48:3c:84: 3d:51:a5:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91sVik7ln+RrK/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc0OVoXDTI1MDkxNzA5MTc0OVowLzEtMCsGA1UEAxMk NWJjMjk3YWUtZDFmZS00MDU2LWJhYzYtNGYwZjZjOWQ4NjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkT6LT3AICYCqxDVyxX7X5PSD7fcCMgU4AVT aeCQde5cx/DesaoMjvdhiOL1Z4sij+iXuqSU/PI1H+YwvneVwImWVIGAwItDdWYw E/sBpw50+zOjtHgtBA16rvGFYAt/7iaW5MVAwx0SzIr6O/2aD7AfMbpnzQB1EPFR zTFt7Jil5a9xXCIY5faxeEZqw0mjZHTY/qoOqxwu/NxTvGEUZ3uQivTT5tqrvvZD qiQQi7H5C4jRo6zvOcI8fsJNINrcZOrUhVb4VrPFu8J4AFW+lJQNa4v8MSFUtmNc Pd6C5R9dmIUFjYe7XG7txaXyUYzxNBzNWF7Jd2go7TULCNMVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZe+5cxRek9T5sk4mm2IVmfoIn3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjIzZjg3MDgtNjIzMy0z ZmE1LWE0MmEtNWQ0YTYxYTA3Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkopUY9VHnm2I5RFG9MBjQXWT+vEntUz0l8tjJWhksmLbR89fwA4ho8 usZlXfjCTuyjqF9SpX2B+j5frjslvyzbFf8X+20bcCZi7iR4aVAC4FgiePJTNDh2 z7UW4JoAvHs/i1T+nzuQLmCmXvwu1xfV8UPWTkoDy34SjpWFsCcOQR1D1l0EJ5vW 3gxx3x8gz7haztB5b1PwsR+jS18Qsm1qIiM8Un+mW1oY7Y2LYae/6AYncouZm17s PPVSCUbpK3okowP8O/UFY8mS9sbjUCXyXEUf5wcB6GuYD4XgfjFycnuXW9u1PaJj 5utuoAYlY8vv6D1KL82ap0g8hD1Rpfs= -----END CERTIFICATE-----Generated at Mon Jun 30 09:55:55 2025 by rpki-client