$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c11ac1c-d6f0-3387-9572-aa35f440dc97.roa File: 7c11ac1c-d6f0-3387-9572-aa35f440dc97.roa (raw, json) Hash identifier: UCR5DU9h2At+ADft3DbF6SG7UyT/1htA5Ge/mIoTsrw= Subject key identifier: 0B:F0:0D:3E:FB:09:5D:C2:21:6F:10:B8:FA:3E:24:C0:F9:B5:7A:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5C363B4E22C8C52FD6100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c11ac1c-d6f0-3387-9572-aa35f440dc97.roa Signing time: Thu 19 Jun 2025 09:15:47 +0000 ROA not before: Thu 19 Jun 2025 09:15:47 +0000 ROA not after: Wed 17 Sep 2025 09:15:47 +0000 asID: 22773 IP address blocks: 68.106.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:c3:63:b4:e2:2c:8c:52:fd:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:47 2025 GMT Not After : Sep 17 09:15:47 2025 GMT Subject: CN=4d124d97-692e-4725-a26f-e1bb4fe7ae07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f9:c1:75:39:0e:5e:b1:57:e2:21:18:9a:56: fc:07:52:3e:75:20:32:22:7d:b3:c7:c6:69:a7:28: 13:26:3d:86:84:e2:42:27:35:e8:53:93:d9:9e:9e: e2:a1:89:e8:9f:17:bb:07:ce:4d:10:60:4e:f8:48: f7:9b:0b:7c:46:0b:6d:cd:42:0b:da:29:24:37:cc: 74:74:53:55:a0:e9:d1:f3:3d:73:2a:07:6d:e0:bf: 07:07:2d:4b:62:7e:73:85:93:9a:6c:82:17:6c:e3: c0:b7:c4:59:d0:e3:e1:67:80:6b:ed:a7:1c:b9:e8: 4c:03:7f:67:5f:b3:7d:9a:da:c4:bd:5b:d6:01:0f: a1:1a:aa:a7:d9:42:06:85:4b:3b:1c:0c:5c:ea:b7: 36:16:2b:20:5d:87:69:9b:87:b5:fa:91:e1:62:ab: 3c:de:63:2e:19:0c:db:90:10:0f:f1:04:5d:d8:84: 14:b0:6e:5b:96:a7:5a:e8:87:9f:18:c3:dd:78:05: 07:ee:c9:ac:67:bf:25:1b:26:0e:2e:9f:5b:e0:15: de:31:ec:0d:c7:84:48:c3:fd:27:b3:24:12:75:9f: af:9a:2f:fd:50:a3:25:e3:08:fc:c7:44:e8:09:bb: 5c:b5:c3:93:27:06:87:90:cf:2d:0c:3b:1e:04:2d: 3d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:0D:3E:FB:09:5D:C2:21:6F:10:B8:FA:3E:24:C0:F9:B5:7A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c11ac1c-d6f0-3387-9572-aa35f440dc97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:66:34:4b:3f:29:37:98:e2:09:a4:75:81:d6:2b:9f:50:fd: 84:f6:4b:02:9f:a7:f6:fa:de:41:41:1b:dd:e7:e8:c8:97:20: ae:fe:43:a2:c9:49:43:57:72:fd:27:9a:0e:e2:5a:2d:81:6b: 22:3f:6e:f2:48:10:8c:5a:40:66:f5:72:a4:31:f6:00:62:49: 58:37:ef:f3:07:ce:9f:cd:3b:e8:9a:5e:13:33:4f:ab:45:a6: 66:b3:a2:be:f3:81:a0:3d:a7:65:b9:dc:73:ac:b9:ab:04:d2: ee:6e:24:a5:ba:83:96:44:48:9d:12:50:9b:40:b9:ab:88:a6: 6b:cb:dd:9a:8b:4c:d7:31:c5:bb:24:de:61:ac:48:b2:5d:54: ba:67:f8:af:99:45:0f:8c:c9:bd:ae:0f:a6:0b:c1:1f:01:2e: 05:61:b7:14:3c:04:ae:a8:06:f6:3d:e1:3c:01:cc:59:38:53: aa:58:73:94:a7:8c:af:81:66:5c:36:c9:ba:8d:7f:8d:2b:13: c9:ec:96:d7:b8:39:72:80:ac:d1:23:cb:73:dd:b5:e0:ad:f1: 21:b8:76:94:1c:af:ef:ef:42:65:21:df:29:f6:04:18:f4:87: 9e:88:20:43:52:b9:e8:45:f5:bf:ba:e9:12:8f:7a:6b:5e:f9: d1:d1:b2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91cNjtOIsjFL9YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTU0N1oXDTI1MDkxNzA5MTU0N1owLzEtMCsGA1UEAxMk NGQxMjRkOTctNjkyZS00NzI1LWEyNmYtZTFiYjRmZTdhZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/nBdTkOXrFX4iEYmlb8B1I+dSAyIn2zx8Zp pygTJj2GhOJCJzXoU5PZnp7ioYnonxe7B85NEGBO+Ej3mwt8RgttzUIL2ikkN8x0 dFNVoOnR8z1zKgdt4L8HBy1LYn5zhZOabIIXbOPAt8RZ0OPhZ4Br7accuehMA39n X7N9mtrEvVvWAQ+hGqqn2UIGhUs7HAxc6rc2FisgXYdpm4e1+pHhYqs83mMuGQzb kBAP8QRd2IQUsG5blqda6IefGMPdeAUH7smsZ78lGyYOLp9b4BXeMewNx4RIw/0n syQSdZ+vmi/9UKMl4wj8x0ToCbtctcOTJwaHkM8tDDseBC09eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvwDT77CV3CIW8QuPo+JMD5tXqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2MxMWFjMWMtZDZmMC0z Mzg3LTk1NzItYWEzNWY0NDBkYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRmNEs/KTeY4gmkdYHWK59Q/YT2SwKfp/b63kFBG93n6MiXIK7+Q6LJ SUNXcv0nmg7iWi2BayI/bvJIEIxaQGb1cqQx9gBiSVg37/MHzp/NO+iaXhMzT6tF pmazor7zgaA9p2W53HOsuasE0u5uJKW6g5ZESJ0SUJtAuauIpmvL3ZqLTNcxxbsk 3mGsSLJdVLpn+K+ZRQ+Myb2uD6YLwR8BLgVhtxQ8BK6oBvY94TwBzFk4U6pYc5Sn jK+BZlw2ybqNf40rE8nslte4OXKArNEjy3PdteCt8SG4dpQcr+/vQmUh3yn2BBj0 h56IIENSuehF9b+66RKPemte+dHRsgU= -----END CERTIFICATE-----Generated at Wed Jul 2 12:23:07 2025 by rpki-client