$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa File: 6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa (raw, json) Hash identifier: B+FWDmUukBMM06L3g8dGH1muaZsKeIGPLkNYm8BV/Lw= Subject key identifier: 0D:8D:9D:E3:E9:23:C9:EC:4A:D2:65:0C:BB:BB:01:74:AB:75:DC:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7B016ED3534C89B055880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa Signing time: Fri 20 Jun 2025 09:30:22 +0000 ROA not before: Fri 20 Jun 2025 09:30:22 +0000 ROA not after: Thu 18 Sep 2025 09:30:22 +0000 asID: 22773 IP address blocks: 68.224.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:b0:16:ed:35:34:c8:9b:05:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:22 2025 GMT Not After : Sep 18 09:30:22 2025 GMT Subject: CN=0a19d682-314d-4129-ab01-47883b0453fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:5e:39:ab:8d:8f:0b:dc:92:1c:91:7f:fa: de:5c:23:1b:12:6e:84:4a:8e:44:da:e8:58:b5:4d: 7d:06:1f:37:bc:e7:87:09:ba:ba:57:f8:fb:d0:9f: 80:e2:12:56:96:9f:b7:fa:bb:08:ea:6a:c1:f7:7a: 38:a3:3c:73:0e:eb:d4:b2:70:b1:30:b0:c8:20:21: 37:9b:06:06:97:a8:8e:a4:77:6e:c7:1a:04:fa:91: 22:b6:b7:1b:fb:09:91:68:f4:89:4a:51:21:7a:ae: cf:80:e9:c8:b9:4f:75:cc:fb:03:3f:39:8d:86:d8: cb:bd:5e:7d:98:f8:03:27:21:79:d0:d8:a7:ff:b9: 66:cd:eb:6d:4f:85:74:6e:4e:63:a6:1a:d2:17:4e: a5:35:21:fa:75:87:84:e5:57:9c:37:28:b6:ce:df: c0:db:5b:7e:6b:31:79:99:d6:c2:ec:86:a1:2b:56: 46:69:28:dd:a5:63:ac:19:1b:44:15:e3:a4:21:28: 05:4f:f4:5e:5b:a9:e6:52:f0:d4:5a:00:a4:5c:cf: de:d3:30:f1:1a:56:34:37:c4:9e:9b:9a:30:87:bf: f5:5d:a2:99:94:12:93:a4:72:2a:74:59:99:dd:c8: 48:3e:e5:fb:db:46:18:26:50:ff:62:d5:18:d3:d0: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8D:9D:E3:E9:23:C9:EC:4A:D2:65:0C:BB:BB:01:74:AB:75:DC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6909f3a5-6c94-3a0c-998d-5bf0b6003981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:62:12:ec:2e:f0:44:77:d5:26:16:de:e6:f3:5b:b5:5c:c5: 26:73:80:96:24:16:7e:d3:b7:a4:2e:0c:82:d8:0d:e4:56:73: 42:a4:03:2b:00:35:b6:b6:3f:bd:77:1a:27:fb:71:72:1a:a0: 71:ff:79:f1:56:01:5a:19:97:1a:d0:0f:af:89:e4:0c:fc:67: aa:4f:0c:96:aa:6b:30:7e:87:2d:74:8d:e9:b6:ac:2f:17:2f: 4c:89:73:b4:3f:d7:91:78:26:54:4a:cf:dc:46:f7:57:8d:f3: c5:55:63:14:3f:a5:fd:a8:80:91:b1:76:d2:69:53:e2:7c:b2: f3:9f:29:ea:a8:2b:34:bb:6b:b4:90:5e:69:89:22:2f:f9:1e: 6d:8c:6b:98:f3:c4:83:0a:db:fe:56:1b:aa:8d:81:25:16:bb: f5:0d:72:54:1d:7d:74:c3:c2:a2:86:3f:69:a1:ef:d8:0e:53: bd:83:e7:02:ff:63:de:06:0d:06:1d:ca:6a:ec:de:69:05:db: bc:bc:12:84:6b:ec:97:95:91:33:31:04:36:f8:93:e2:15:5b: 05:e5:c5:5f:c5:2f:a6:97:e3:68:16:6b:65:ba:6e:4a:90:82: 6a:ed:f5:d8:8d:9f:b6:44:a5:ba:0d:1e:df:53:92:d3:1a:4a: 71:f8:22:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp7AW7TU0yJsFWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAyMloXDTI1MDkxODA5MzAyMlowLzEtMCsGA1UEAxMk MGExOWQ2ODItMzE0ZC00MTI5LWFiMDEtNDc4ODNiMDQ1M2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs01eOauNjwvckhyRf/reXCMbEm6ESo5E2uhY tU19Bh83vOeHCbq6V/j70J+A4hJWlp+3+rsI6mrB93o4ozxzDuvUsnCxMLDIICE3 mwYGl6iOpHduxxoE+pEitrcb+wmRaPSJSlEheq7PgOnIuU91zPsDPzmNhtjLvV59 mPgDJyF50Nin/7lmzettT4V0bk5jphrSF06lNSH6dYeE5VecNyi2zt/A21t+azF5 mdbC7IahK1ZGaSjdpWOsGRtEFeOkISgFT/ReW6nmUvDUWgCkXM/e0zDxGlY0N8Se m5owh7/1XaKZlBKTpHIqdFmZ3chIPuX720YYJlD/YtUY09AD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2NnePpI8nsStJlDLu7AXSrddx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjkwOWYzYTUtNmM5NC0z YTBjLTk5OGQtNWJmMGI2MDAzOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRiEuwu8ER31SYW3ubzW7VcxSZzgJYkFn7Tt6QuDILYDeRWc0KkAysA Nba2P713Gif7cXIaoHH/efFWAVoZlxrQD6+J5Az8Z6pPDJaqazB+hy10jem2rC8X L0yJc7Q/15F4JlRKz9xG91eN88VVYxQ/pf2ogJGxdtJpU+J8svOfKeqoKzS7a7SQ XmmJIi/5Hm2Ma5jzxIMK2/5WG6qNgSUWu/UNclQdfXTDwqKGP2mh79gOU72D5wL/ Y94GDQYdymrs3mkF27y8EoRr7JeVkTMxBDb4k+IVWwXlxV/FL6aX42gWa2W6bkqQ gmrt9diNn7ZEpboNHt9TktMaSnH4Il8= -----END CERTIFICATE-----Generated at Wed Jul 2 10:16:34 2025 by rpki-client