$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bcb1f83-1892-3b6c-a276-608cee246a5c.roa File: 8bcb1f83-1892-3b6c-a276-608cee246a5c.roa (raw, json) Hash identifier: u9pps02CBe3cURwthsuubwlP8tWZU3F72eZZV1RTMsI= Subject key identifier: AC:5D:68:B3:BB:A0:A6:8B:B1:47:54:40:AD:AE:C3:BA:04:52:04:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD710AE150F05E2D9917C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bcb1f83-1892-3b6c-a276-608cee246a5c.roa Signing time: Thu 19 Jun 2025 09:18:24 +0000 ROA not before: Thu 19 Jun 2025 09:18:24 +0000 ROA not after: Wed 17 Sep 2025 09:18:24 +0000 asID: 22773 IP address blocks: 68.231.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:10:ae:15:0f:05:e2:d9:91:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:24 2025 GMT Not After : Sep 17 09:18:24 2025 GMT Subject: CN=2dcd3571-e2c0-4e30-8b68-0ebc384166de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:df:c9:98:e3:66:cd:e5:81:6a:e9:3c:6e: b6:15:7b:00:83:0f:9f:d6:63:20:e9:11:9a:19:0d: 12:e9:9e:f3:c8:f1:39:55:09:20:b9:f0:a2:6f:fc: b1:46:fa:83:30:8b:c9:bc:13:b7:a9:93:08:01:99: 8c:95:74:3d:5a:31:4b:65:1b:ca:0c:1a:cd:55:22: f4:b3:ba:71:94:da:53:73:22:23:39:b0:68:5b:a1: ac:42:72:e1:b7:b0:4d:5f:28:2a:28:f2:bc:c8:6c: c9:27:69:56:34:84:64:15:9c:09:a1:69:98:66:65: c0:bc:0c:cb:95:6e:52:4b:c9:3f:7c:2f:fc:9f:1f: bd:2d:63:7f:de:3f:a5:3a:8a:a1:6a:5f:50:f5:06: 6e:9b:f9:ac:6f:9a:69:2c:8e:c3:3a:a2:db:95:07: 27:52:36:e3:50:84:cc:c9:be:bb:cc:a3:d4:1f:2c: 90:09:37:51:1f:37:fc:27:ed:fb:ac:33:4a:c6:36: 06:00:9e:2f:15:36:22:f2:6d:3d:24:25:1f:64:77: 65:fc:62:6b:7a:ac:41:18:00:a6:de:c7:ac:c1:d1: ef:e9:89:95:3c:0a:3c:c3:49:89:83:e1:fb:3e:cf: 38:39:09:11:1b:d1:c2:05:a4:d9:fe:f6:df:85:48: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5D:68:B3:BB:A0:A6:8B:B1:47:54:40:AD:AE:C3:BA:04:52:04:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8bcb1f83-1892-3b6c-a276-608cee246a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:dc:01:f0:20:d8:c1:1c:81:22:39:18:5e:7c:88:aa:01:af: 86:01:c1:15:aa:57:3d:52:8e:db:75:4c:2d:6a:e6:e6:9b:65: 80:1c:c8:cb:e6:a4:e3:e2:13:a1:15:a3:00:29:3b:21:77:1b: e7:c3:8d:ec:f5:9a:62:20:c3:7e:9a:b3:88:0f:4b:ef:1e:90: 61:e6:b3:9c:0d:75:49:d8:8b:14:3c:9a:7a:71:78:e1:d5:23: 42:a8:32:5a:da:06:bc:9d:c0:ad:4e:25:4e:8d:c8:f4:24:2e: 87:87:bc:a6:09:65:16:91:dd:b2:15:e8:00:f2:99:ed:b4:27: 80:8b:56:27:bf:5b:f3:8e:b9:b1:99:eb:88:29:a3:b9:5c:d8: d2:d8:6c:11:6f:79:7e:13:52:e3:7a:2f:fc:82:54:8a:61:7a: 87:5c:af:87:25:8a:fb:0e:6b:56:b4:81:4e:0d:3a:31:a0:2e: f9:1d:d6:49:bf:f6:c6:69:bb:b4:3d:21:e5:65:ab:cf:4c:28: a7:09:7b:39:bb:dd:a7:7d:08:4f:f6:31:8f:46:ce:c0:8d:24: 7a:49:8a:56:29:ee:64:51:40:51:96:cb:65:ec:00:fd:62:01: 9b:86:43:df:83:1f:8f:16:91:c9:fb:56:b6:90:f8:fd:61:0d: a7:ac:07:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91xCuFQ8F4tmRfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgyNFoXDTI1MDkxNzA5MTgyNFowLzEtMCsGA1UEAxMk MmRjZDM1NzEtZTJjMC00ZTMwLThiNjgtMGViYzM4NDE2NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g/fyZjjZs3lgWrpPG62FXsAgw+f1mMg6RGa GQ0S6Z7zyPE5VQkgufCib/yxRvqDMIvJvBO3qZMIAZmMlXQ9WjFLZRvKDBrNVSL0 s7pxlNpTcyIjObBoW6GsQnLht7BNXygqKPK8yGzJJ2lWNIRkFZwJoWmYZmXAvAzL lW5SS8k/fC/8nx+9LWN/3j+lOoqhal9Q9QZum/msb5ppLI7DOqLblQcnUjbjUITM yb67zKPUHyyQCTdRHzf8J+37rDNKxjYGAJ4vFTYi8m09JCUfZHdl/GJreqxBGACm 3seswdHv6YmVPAo8w0mJg+H7Ps84OQkRG9HCBaTZ/vbfhUg7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxdaLO7oKaLsUdUQK2uw7oEUgTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGJjYjFmODMtMTg5Mi0z YjZjLWEyNzYtNjA4Y2VlMjQ2YTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDcAfAg2MEcgSI5GF58iKoBr4YBwRWqVz1Sjtt1TC1q5uabZYAcyMvm pOPiE6EVowApOyF3G+fDjez1mmIgw36as4gPS+8ekGHms5wNdUnYixQ8mnpxeOHV I0KoMlraBrydwK1OJU6NyPQkLoeHvKYJZRaR3bIV6ADyme20J4CLVie/W/OOubGZ 64gpo7lc2NLYbBFveX4TUuN6L/yCVIpheodcr4clivsOa1a0gU4NOjGgLvkd1km/ 9sZpu7Q9IeVlq89MKKcJezm73ad9CE/2MY9GzsCNJHpJilYp7mRRQFGWy2XsAP1i AZuGQ9+DH48Wkcn7VraQ+P1hDaesB/A= -----END CERTIFICATE-----Generated at Tue Jul 1 20:14:01 2025 by rpki-client