$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86fbb59f-95ac-3e64-9f14-d5d84d6bdabc.roa File: 86fbb59f-95ac-3e64-9f14-d5d84d6bdabc.roa (raw, json) Hash identifier: Rl3tZ6a4b/tuSnYtYkpxOjwZy+EsBwRz7uOlZyx5yUU= Subject key identifier: 29:73:26:3D:A4:C6:D9:C3:F1:43:49:D6:59:05:67:B8:64:22:D0:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7531E832AA5EB73E9F580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86fbb59f-95ac-3e64-9f14-d5d84d6bdabc.roa Signing time: Fri 20 Jun 2025 09:29:38 +0000 ROA not before: Fri 20 Jun 2025 09:29:38 +0000 ROA not after: Thu 18 Sep 2025 09:29:38 +0000 asID: 22773 IP address blocks: 68.108.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:53:1e:83:2a:a5:eb:73:e9:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:38 2025 GMT Not After : Sep 18 09:29:38 2025 GMT Subject: CN=cccb07cb-4d4a-469c-9e4f-6f3a887149ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:ef:97:17:96:bb:95:25:6d:54:c0:ef:67: 6f:81:e7:55:ad:13:0c:ba:33:f6:e0:d6:22:25:df: 33:49:ef:05:0e:1b:01:e5:23:6d:71:4e:8e:7a:7f: 3b:31:aa:3a:8e:e4:8e:5e:cc:32:dd:e4:dd:be:ec: 5d:70:97:fc:a1:c3:0d:14:bb:20:9e:15:8f:35:ca: 13:87:61:df:0a:54:65:3e:e3:a2:e3:91:c5:25:d1: f8:37:fa:11:f3:ff:40:d2:b3:12:14:6e:17:9b:ee: f3:5f:fd:16:e3:e1:55:e4:79:b4:1f:34:91:0c:88: fd:9c:2f:27:ab:61:53:9a:c3:f0:ab:6f:ad:c0:11: 02:f3:cb:14:ae:0f:dc:37:2b:23:74:65:11:86:5d: 5b:f5:b8:91:22:f3:ad:c8:59:cf:c5:ed:34:d3:5d: e8:99:32:83:cb:ea:f6:f4:7f:56:af:90:ec:16:cd: 9e:f3:8a:e2:66:bb:1e:0f:b5:48:70:45:f1:7b:17: 4d:0e:32:42:88:74:29:6f:29:f8:4c:ec:91:92:c7: cf:de:aa:1b:89:79:b0:41:45:f0:c0:af:23:e9:cc: 54:cb:5d:b2:a0:2f:b5:9c:52:0d:43:26:17:bf:94: c8:cc:69:c9:72:15:a2:5e:08:e2:b6:be:7f:f3:07: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:26:3D:A4:C6:D9:C3:F1:43:49:D6:59:05:67:B8:64:22:D0:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86fbb59f-95ac-3e64-9f14-d5d84d6bdabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ce:23:4b:f8:46:d0:fa:04:1f:b7:67:aa:40:b0:62:9e:1f: e8:a4:c6:c1:9e:7a:fe:af:f4:aa:cf:2c:22:4d:13:54:b7:a2: f6:9b:07:5a:38:cb:f9:a3:85:32:fe:2b:2b:e9:dc:7f:ff:23: f0:0b:f6:1c:04:bc:b7:53:f1:fb:f7:f7:2f:d2:8a:58:89:f7: 1c:cd:d5:a6:ea:b3:ac:97:4c:e3:93:bf:3d:5f:80:f3:b8:3b: b1:8c:19:5a:bb:18:f4:9c:e5:e4:4c:89:e9:4b:5b:5c:ba:14: e7:d3:b3:57:7e:ac:d5:b0:63:a3:8d:52:5b:b8:f9:ed:2b:14: ed:8c:af:5b:e4:77:9f:9d:98:e2:37:80:7c:07:d3:03:2c:e1: 15:e4:fb:21:25:f9:d0:eb:c7:2b:66:3d:dd:ee:26:0e:29:7b: 78:26:6a:6a:c8:6e:bd:67:be:4f:e3:72:6e:f4:eb:bc:75:4c: f9:e5:2a:8f:45:e6:53:02:3c:80:bd:3a:19:b5:d1:5c:22:a5: 5c:05:30:8a:ac:72:05:70:3e:b1:a4:e5:ad:66:69:f3:9b:73: 63:ee:32:8e:a2:6b:48:78:7a:00:9d:02:d9:f9:f1:d9:ca:0f: 31:95:15:27:2d:57:68:e3:98:11:e9:4e:3e:4b:16:2e:58:ec: 41:73:2f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp1Megyql63Pp9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkzOFoXDTI1MDkxODA5MjkzOFowLzEtMCsGA1UEAxMk Y2NjYjA3Y2ItNGQ0YS00NjljLTllNGYtNmYzYTg4NzE0OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHfvlxeWu5UlbVTA72dvgedVrRMMujP24NYi Jd8zSe8FDhsB5SNtcU6Oen87Mao6juSOXswy3eTdvuxdcJf8ocMNFLsgnhWPNcoT h2HfClRlPuOi45HFJdH4N/oR8/9A0rMSFG4Xm+7zX/0W4+FV5Hm0HzSRDIj9nC8n q2FTmsPwq2+twBEC88sUrg/cNysjdGURhl1b9biRIvOtyFnPxe00013omTKDy+r2 9H9Wr5DsFs2e84riZrseD7VIcEXxexdNDjJCiHQpbyn4TOyRksfP3qobiXmwQUXw wK8j6cxUy12yoC+1nFINQyYXv5TIzGnJchWiXgjitr5/8wfKwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClzJj2kxtnD8UNJ1lkFZ7hkItBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZmYmI1OWYtOTVhYy0z ZTY0LTlmMTQtZDVkODRkNmJkYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGw9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvOI0v4RtD6BB+3Z6pAsGKeH+ikxsGeev6v9KrPLCJNE1S3ovabB1o4 y/mjhTL+Kyvp3H//I/AL9hwEvLdT8fv39y/SiliJ9xzN1abqs6yXTOOTvz1fgPO4 O7GMGVq7GPSc5eRMielLW1y6FOfTs1d+rNWwY6ONUlu4+e0rFO2Mr1vkd5+dmOI3 gHwH0wMs4RXk+yEl+dDrxytmPd3uJg4pe3gmamrIbr1nvk/jcm7067x1TPnlKo9F 5lMCPIC9Ohm10VwipVwFMIqscgVwPrGk5a1mafObc2PuMo6ia0h4egCdAtn58dnK DzGVFSctV2jjmBHpTj5LFi5Y7EFzL6M= -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:57 2025 by rpki-client