$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7044c97f-13b6-3f55-b5e4-69a122e171d9.roa File: 7044c97f-13b6-3f55-b5e4-69a122e171d9.roa (raw, json) Hash identifier: 2NcE98yyT6qTcZ4o806y30GxN3b7gQ1g7km7VNLYMj8= Subject key identifier: 74:1E:DA:17:80:77:DD:E1:41:B9:01:0C:4F:63:F5:6A:8A:A8:FA:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7557AF49B4CCEF3383780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7044c97f-13b6-3f55-b5e4-69a122e171d9.roa Signing time: Fri 20 Jun 2025 09:29:39 +0000 ROA not before: Fri 20 Jun 2025 09:29:39 +0000 ROA not after: Thu 18 Sep 2025 09:29:39 +0000 asID: 22773 IP address blocks: 68.108.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:55:7a:f4:9b:4c:ce:f3:38:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:39 2025 GMT Not After : Sep 18 09:29:39 2025 GMT Subject: CN=37212c4b-3009-4d02-8380-ac9268002775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:7c:50:eb:77:86:8b:77:fd:d0:5c:10:46: ef:0f:a6:bd:03:49:5e:90:77:11:c9:36:9e:eb:27: ca:9e:ab:89:a1:54:ca:e7:49:b9:cf:db:6b:92:f0: 1c:aa:74:fe:3b:a0:26:9d:5d:1e:0b:e2:aa:61:13: 57:1b:62:b9:0f:cb:95:ae:fa:78:0b:2f:c5:bd:bb: 42:67:67:0f:96:c1:bb:b1:5a:a3:57:c7:b5:50:9b: f2:cb:29:11:38:45:ac:84:5e:e4:6a:9b:b8:f3:0f: 66:85:71:bc:16:8b:81:1e:e5:7d:83:66:0f:af:1c: 14:a6:bb:bd:6d:87:98:35:36:db:78:42:9b:9d:fc: a8:30:65:ac:69:51:e1:22:46:4f:3b:0f:18:8b:ed: 50:a8:78:71:8e:8d:1c:7b:d9:a6:e0:a2:46:a0:cc: 53:f8:42:8e:b1:88:a7:c2:2d:e4:77:e9:e5:31:49: b4:f1:93:ff:dd:ea:17:2e:ac:95:19:77:67:71:23: c0:b6:b0:fb:9d:f2:0f:6a:52:68:eb:27:99:a6:4c: b3:27:50:7a:54:da:c5:d1:80:ea:02:88:a1:e3:e3: c9:48:88:08:22:0d:b5:6d:05:7b:f8:80:e4:9d:94: 91:78:df:de:81:24:26:cf:9a:66:c8:1c:9a:ba:da: c5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1E:DA:17:80:77:DD:E1:41:B9:01:0C:4F:63:F5:6A:8A:A8:FA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7044c97f-13b6-3f55-b5e4-69a122e171d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:34:5a:9f:ea:0b:d6:38:f2:8e:f6:02:d5:95:c9:e5:e0:3d: 5c:a0:62:0b:68:47:91:36:a1:74:4f:1a:c7:de:4c:59:a9:b4: 9b:f4:1b:e3:5b:cd:9a:e3:bc:ec:61:bc:fa:9c:12:02:54:3e: 03:d3:80:1e:b6:7a:09:d9:d4:90:b5:c9:b2:b5:ad:bf:5c:77: b3:4f:4c:c4:6f:3f:41:27:5d:81:d3:48:c9:06:0a:2f:57:03: d7:95:d5:55:be:41:52:44:86:26:91:d1:90:e9:cd:3d:a8:18: b7:de:77:3e:b5:be:40:c9:48:ad:43:a0:75:a0:c2:f2:bc:c9: 87:08:3e:5b:45:ac:48:18:15:2a:c2:e5:75:f2:0d:34:8d:59: cf:8b:93:52:a5:a4:42:55:fe:91:58:13:cd:cf:2c:78:6e:d7: 77:ec:fb:68:35:69:92:ff:f8:ee:4b:3d:f8:31:5e:c0:67:15: b9:d1:12:8d:19:6c:fb:e0:ca:f6:4d:a8:02:c2:28:1b:69:3e: 6c:e8:d9:a1:f9:d8:48:d0:4a:2c:9b:07:a5:66:27:9d:fc:2f: e6:5a:90:ef:37:f4:1a:d3:15:a7:4a:de:46:6f:6d:4d:ed:e8: 7a:83:ed:52:45:2a:2c:db:14:26:8a:37:3d:4e:91:9a:07:df: b0:91:5a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp1V69JtMzvM4N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkzOVoXDTI1MDkxODA5MjkzOVowLzEtMCsGA1UEAxMk MzcyMTJjNGItMzAwOS00ZDAyLTgzODAtYWM5MjY4MDAyNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KB8UOt3hot3/dBcEEbvD6a9A0lekHcRyTae 6yfKnquJoVTK50m5z9trkvAcqnT+O6AmnV0eC+KqYRNXG2K5D8uVrvp4Cy/FvbtC Z2cPlsG7sVqjV8e1UJvyyykROEWshF7kapu48w9mhXG8FouBHuV9g2YPrxwUpru9 bYeYNTbbeEKbnfyoMGWsaVHhIkZPOw8Yi+1QqHhxjo0ce9mm4KJGoMxT+EKOsYin wi3kd+nlMUm08ZP/3eoXLqyVGXdncSPAtrD7nfIPalJo6yeZpkyzJ1B6VNrF0YDq Aoih4+PJSIgIIg21bQV7+IDknZSReN/egSQmz5pmyByautrF6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQe2heAd93hQbkBDE9j9WqKqPqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA0NGM5N2YtMTNiNi0z ZjU1LWI1ZTQtNjlhMTIyZTE3MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH40Wp/qC9Y48o72AtWVyeXgPVygYgtoR5E2oXRPGsfeTFmptJv0G+Nb zZrjvOxhvPqcEgJUPgPTgB62egnZ1JC1ybK1rb9cd7NPTMRvP0EnXYHTSMkGCi9X A9eV1VW+QVJEhiaR0ZDpzT2oGLfedz61vkDJSK1DoHWgwvK8yYcIPltFrEgYFSrC 5XXyDTSNWc+Lk1KlpEJV/pFYE83PLHhu13fs+2g1aZL/+O5LPfgxXsBnFbnREo0Z bPvgyvZNqALCKBtpPmzo2aH52EjQSiybB6VmJ538L+ZakO839BrTFadK3kZvbU3t 6HqD7VJFKizbFCaKNz1OkZoH37CRWpk= -----END CERTIFICATE-----Generated at Tue Jul 1 20:49:07 2025 by rpki-client