$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d25ad3b-67be-39cf-a367-7ea342a74ea4.roa File: 6d25ad3b-67be-39cf-a367-7ea342a74ea4.roa (raw, json) Hash identifier: +L+Ouklb44yctO4sSy4tV5guX390mlICtQpJGpfLOSA= Subject key identifier: B8:A3:C1:F2:C1:C5:D0:29:56:3F:BA:0A:92:04:F6:71:9F:C7:C5:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10959D7B739A9AB9C05A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d25ad3b-67be-39cf-a367-7ea342a74ea4.roa Signing time: Wed 18 Jun 2025 18:02:41 +0000 ROA not before: Wed 18 Jun 2025 18:02:41 +0000 ROA not after: Tue 16 Sep 2025 18:02:41 +0000 asID: 22773 IP address blocks: 68.98.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:95:9d:7b:73:9a:9a:b9:c0:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:41 2025 GMT Not After : Sep 16 18:02:41 2025 GMT Subject: CN=d0f78dec-69a2-45dc-9b98-006746b8c501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:d7:aa:cf:7d:13:47:25:04:27:0e:0c:66: 1e:3f:76:cd:5d:01:64:5a:1d:b5:34:84:59:fa:d3: ce:2d:a7:03:dd:70:48:c7:76:a1:b3:46:83:e1:37: 28:f0:7b:fd:de:82:3b:37:5e:56:f1:fb:7c:e6:c8: e3:5c:20:5a:bb:8d:b1:bd:e7:13:b1:75:7b:21:0d: 39:a0:75:57:83:5d:19:a9:b3:32:39:20:ac:a2:c9: 7e:d8:91:ae:0e:48:8a:97:bd:8d:f5:75:63:b1:54: ef:39:c1:68:4f:2d:b8:7b:f1:db:5e:f1:3a:dd:dd: 35:68:a9:a9:61:4d:90:12:4d:78:81:4b:e4:91:7e: 25:e7:61:84:21:f7:65:9d:f0:5d:c2:45:e7:ce:1f: f1:5d:d5:85:29:d9:c7:be:78:15:8b:ba:2e:10:8d: 5f:2c:c0:a2:0a:48:6d:b0:19:77:8d:b2:cf:4a:96: 2d:3d:7f:5b:e3:67:e1:25:7f:3c:d7:88:22:99:a2: 2a:23:8a:94:8c:c4:62:c2:84:c1:37:74:44:19:ea: 2b:a6:92:cd:05:ff:ab:69:a4:09:70:34:d7:b9:94: e7:ba:56:d6:dc:01:13:2f:f0:e4:27:d9:62:62:5f: 2c:85:9a:7f:37:d7:75:a3:92:6c:c2:0d:50:22:db: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:C1:F2:C1:C5:D0:29:56:3F:BA:0A:92:04:F6:71:9F:C7:C5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d25ad3b-67be-39cf-a367-7ea342a74ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:7c:77:5a:32:37:0d:09:d5:cf:08:9f:ea:d6:5b:ab:a2:04: e5:85:98:c3:a8:51:35:99:ab:a3:9b:12:ae:89:c0:70:82:e5: ac:5a:9d:25:75:bb:73:fe:24:15:0b:af:45:a9:26:5b:f4:a0: 54:64:d8:99:f2:1a:79:e5:fd:d8:b3:57:88:8e:ef:95:61:09: 4a:49:a5:c9:78:ab:88:32:c0:6b:19:c4:e7:bc:9e:22:d2:04: 2d:e0:25:94:65:df:ce:8d:1c:71:c6:55:87:8b:c4:83:6d:02: 21:68:ed:1f:61:b1:b9:7a:60:f7:b0:7c:83:b8:d8:0c:8f:92: 86:83:50:1d:c1:77:fc:27:30:d5:c2:38:96:cb:30:93:22:95: 20:8a:64:95:af:4a:3b:71:aa:de:16:9f:44:e1:3a:15:58:5e: 41:0b:75:9e:90:b8:45:88:b7:09:9e:c2:d7:e3:4c:88:b5:91: 7b:a8:17:05:96:9b:05:9a:a2:c8:7a:52:be:93:f3:c0:2a:36: 8b:4d:73:45:6f:c5:5b:3a:2a:14:05:d2:26:52:14:41:a0:16: e9:a5:3c:cc:16:b0:20:5f:e0:21:22:a0:36:5b:59:de:9b:e9: 85:9d:77:c0:87:b6:cf:37:d0:f4:de:66:cc:eb:26:a4:b8:f7: 79:32:96:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EJWde3OamrnAWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDI0MVoXDTI1MDkxNjE4MDI0MVowLzEtMCsGA1UEAxMk ZDBmNzhkZWMtNjlhMi00NWRjLTliOTgtMDA2NzQ2YjhjNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutzXqs99E0clBCcODGYeP3bNXQFkWh21NIRZ +tPOLacD3XBIx3ahs0aD4Tco8Hv93oI7N15W8ft85sjjXCBau42xvecTsXV7IQ05 oHVXg10ZqbMyOSCsosl+2JGuDkiKl72N9XVjsVTvOcFoTy24e/HbXvE63d01aKmp YU2QEk14gUvkkX4l52GEIfdlnfBdwkXnzh/xXdWFKdnHvngVi7ouEI1fLMCiCkht sBl3jbLPSpYtPX9b42fhJX8814gimaIqI4qUjMRiwoTBN3REGeorppLNBf+raaQJ cDTXuZTnulbW3AETL/DkJ9liYl8shZp/N9d1o5Jswg1QItvZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLijwfLBxdApVj+6CpIE9nGfx8WbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmQyNWFkM2ItNjdiZS0z OWNmLWEzNjctN2VhMzQyYTc0ZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKh8d1oyNw0J1c8In+rWW6uiBOWFmMOoUTWZq6ObEq6JwHCC5axanSV1 u3P+JBULr0WpJlv0oFRk2JnyGnnl/dizV4iO75VhCUpJpcl4q4gywGsZxOe8niLS BC3gJZRl386NHHHGVYeLxINtAiFo7R9hsbl6YPewfIO42AyPkoaDUB3Bd/wnMNXC OJbLMJMilSCKZJWvSjtxqt4Wn0ThOhVYXkELdZ6QuEWItwmewtfjTIi1kXuoFwWW mwWaosh6Ur6T88AqNotNc0VvxVs6KhQF0iZSFEGgFumlPMwWsCBf4CEioDZbWd6b 6YWdd8CHts830PTeZszrJqS493kylgM= -----END CERTIFICATE-----Generated at Tue Jul 1 18:18:51 2025 by rpki-client