$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71888518-5733-3949-a797-db844c20a824.roa File: 71888518-5733-3949-a797-db844c20a824.roa (raw, json) Hash identifier: pTwb6DfIBE1NHhU2Y7veenl6u2n3Tb79gq8VdEgBXpo= Subject key identifier: 4A:42:06:31:1C:F6:4E:5D:85:E5:97:44:F4:67:B6:27:60:FC:B6:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7E8AA35D5AA4C2A399840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71888518-5733-3949-a797-db844c20a824.roa Signing time: Fri 20 Jun 2025 09:30:49 +0000 ROA not before: Fri 20 Jun 2025 09:30:49 +0000 ROA not after: Thu 18 Sep 2025 09:30:49 +0000 asID: 22773 IP address blocks: 68.229.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:e8:aa:35:d5:aa:4c:2a:39:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:49 2025 GMT Not After : Sep 18 09:30:49 2025 GMT Subject: CN=d42f20b4-80c7-4b16-adc1-dc526d153ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:0d:f6:ce:87:46:f8:2f:f5:ef:bf:13:7d: 80:e7:bb:a2:7b:16:e2:fc:a3:e8:24:45:bd:a2:d0: c4:c9:c8:5e:c7:59:42:63:9f:e7:1e:ba:a3:a8:96: 6a:88:ee:b1:83:2c:d6:0c:b1:e7:56:90:97:d4:62: 82:f3:35:a6:10:61:6a:52:2a:67:6c:df:c2:84:aa: be:5e:61:37:e6:0f:88:6c:37:ec:5a:71:5d:b0:25: 2d:cc:dc:04:bd:b5:33:ca:6e:47:c3:de:7a:6c:22: f8:b3:cf:99:78:a5:b6:d2:de:37:4c:c8:7f:ab:14: 84:d3:a9:b8:21:ed:ad:8e:b9:29:db:2e:f5:c2:15: 10:ed:59:b0:9d:81:e3:4a:51:50:30:e0:2e:75:7d: 0f:9e:79:99:f5:d1:3b:06:78:f3:23:3b:d3:df:d9: a3:f4:20:3a:74:de:54:80:f7:b0:15:09:86:63:f2: 97:4d:af:1c:89:66:85:e6:57:02:5d:9f:69:54:4f: 41:68:6b:4b:1c:72:e7:6e:42:d6:99:c9:d9:3a:0a: 09:5a:a9:5b:0e:41:d3:b4:cc:ba:20:f2:d3:c6:ca: 5b:65:0a:6d:15:b7:e9:3f:50:b2:24:c9:8c:46:78: 5d:21:a9:f3:7f:92:d6:e9:b1:9d:47:3d:d4:27:d2: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:06:31:1C:F6:4E:5D:85:E5:97:44:F4:67:B6:27:60:FC:B6:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71888518-5733-3949-a797-db844c20a824.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:2d:88:fd:9d:73:e0:38:11:ef:3f:03:38:e3:64:36:8e:26: 12:1b:7b:c6:4e:cc:40:07:5e:6e:15:cd:26:26:f7:e7:47:e4: 7a:cd:b3:53:81:f2:02:1b:94:36:ea:ef:a1:0f:4a:f2:1f:db: b8:5f:9f:75:87:ab:15:f8:11:74:01:e2:38:6b:9d:f4:b9:dc: ed:bb:5d:08:c9:02:9a:e9:d6:01:53:f9:01:ce:e2:7b:54:f6: bf:88:ac:f7:71:a8:03:26:dd:c9:ed:ca:36:e4:dd:58:c4:78: ef:4a:74:6d:d5:43:52:79:b4:db:46:2a:be:1a:db:32:5a:05: ed:2a:3b:fd:5e:63:27:b4:06:0d:92:cc:ef:31:92:c6:3d:ee: c9:18:1c:cd:12:83:66:e6:a5:8e:3e:14:88:cf:f7:da:34:9d: d0:02:c4:69:58:2d:da:ff:d5:58:ac:cb:55:e7:80:6a:f7:15: 59:50:ab:9e:63:3a:a1:a7:93:18:47:f8:ec:eb:30:d6:61:e9: 9a:43:6f:d6:65:81:e4:dc:3d:da:6d:33:3e:a0:27:dc:47:34: 65:49:cb:c6:90:1d:de:00:0a:ee:a8:31:9b:3d:10:22:a6:ae: 69:be:b6:b1:0b:c9:97:c7:95:1a:ba:5c:9a:89:e0:74:86:95: 02:d9:75:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp+iqNdWqTCo5mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA0OVoXDTI1MDkxODA5MzA0OVowLzEtMCsGA1UEAxMk ZDQyZjIwYjQtODBjNy00YjE2LWFkYzEtZGM1MjZkMTUzZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKIN9s6HRvgv9e+/E32A57uiexbi/KPoJEW9 otDEychex1lCY5/nHrqjqJZqiO6xgyzWDLHnVpCX1GKC8zWmEGFqUipnbN/ChKq+ XmE35g+IbDfsWnFdsCUtzNwEvbUzym5Hw956bCL4s8+ZeKW20t43TMh/qxSE06m4 Ie2tjrkp2y71whUQ7VmwnYHjSlFQMOAudX0PnnmZ9dE7BnjzIzvT39mj9CA6dN5U gPewFQmGY/KXTa8ciWaF5lcCXZ9pVE9BaGtLHHLnbkLWmcnZOgoJWqlbDkHTtMy6 IPLTxspbZQptFbfpP1CyJMmMRnhdIanzf5LW6bGdRz3UJ9JCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpCBjEc9k5dheWXRPRntidg/LagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzE4ODg1MTgtNTczMy0z OTQ5LWE3OTctZGI4NDRjMjBhODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMtiP2dc+A4Ee8/AzjjZDaOJhIbe8ZOzEAHXm4VzSYm9+dH5HrNs1OB 8gIblDbq76EPSvIf27hfn3WHqxX4EXQB4jhrnfS53O27XQjJAprp1gFT+QHO4ntU 9r+IrPdxqAMm3cntyjbk3VjEeO9KdG3VQ1J5tNtGKr4a2zJaBe0qO/1eYye0Bg2S zO8xksY97skYHM0Sg2bmpY4+FIjP99o0ndACxGlYLdr/1Visy1XngGr3FVlQq55j OqGnkxhH+OzrMNZh6ZpDb9ZlgeTcPdptMz6gJ9xHNGVJy8aQHd4ACu6oMZs9ECKm rmm+trELyZfHlRq6XJqJ4HSGlQLZdWQ= -----END CERTIFICATE-----Generated at Tue Jul 1 10:35:04 2025 by rpki-client