$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e35ecf5-6f24-3b84-b04c-67f5db7b154b.roa File: 8e35ecf5-6f24-3b84-b04c-67f5db7b154b.roa (raw, json) Hash identifier: Zl1pDEA9V9Uyf94DkIn+Gex7VOMB7YKRSB2O4MW3nEc= Subject key identifier: 54:73:75:0A:32:C6:D1:DD:FC:27:D9:C2:86:EC:62:AE:6A:BF:3A:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6E419CAFE5964E528E880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e35ecf5-6f24-3b84-b04c-67f5db7b154b.roa Signing time: Fri 20 Jun 2025 09:28:46 +0000 ROA not before: Fri 20 Jun 2025 09:28:46 +0000 ROA not after: Thu 18 Sep 2025 09:28:46 +0000 asID: 22773 IP address blocks: 68.96.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:e4:19:ca:fe:59:64:e5:28:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:46 2025 GMT Not After : Sep 18 09:28:46 2025 GMT Subject: CN=bad11cd5-033f-43f0-8758-ef8da7bab0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:30:77:e8:34:21:30:0d:f9:0e:2d:42:b3: 91:28:af:2d:bd:0d:a7:af:81:19:46:5e:35:48:02: 91:73:5b:f1:0f:5c:8c:71:1c:29:86:26:89:05:1b: 88:3f:b8:ff:0e:e2:f2:4d:ba:bb:6c:b4:0e:1a:01: f8:b5:db:ad:ca:bf:f0:27:1c:77:6f:7a:83:2b:ed: 3b:db:54:a4:21:c9:ea:5f:eb:81:2a:d0:da:54:42: 9f:42:1b:fd:90:11:1c:9e:5d:21:ff:8e:04:02:ec: 86:be:ee:d7:65:a7:67:6d:02:d8:56:b0:d4:69:7f: 32:5b:8f:b6:e0:ab:10:18:01:25:91:31:b5:2f:55: 09:e2:79:fe:d3:44:17:52:15:e2:1e:53:be:b4:5a: 54:f5:a4:de:1e:ca:59:42:42:e8:81:c8:ca:1e:50: 9a:a3:4b:7c:b2:db:ad:2c:b2:e9:25:48:bd:b9:89: 98:b9:00:79:b5:17:04:61:74:34:97:4c:aa:ab:7e: d0:17:96:bc:f2:1b:bf:60:3c:a6:58:64:63:5a:34: 7d:b5:50:04:dc:9a:c0:64:a1:1d:44:d9:3e:d7:f9: 67:8f:69:7e:a7:3b:95:09:bc:30:f3:3c:78:04:d0: cd:2a:73:1a:20:8d:2a:f6:78:45:35:03:d0:63:89: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:73:75:0A:32:C6:D1:DD:FC:27:D9:C2:86:EC:62:AE:6A:BF:3A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e35ecf5-6f24-3b84-b04c-67f5db7b154b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d8:1d:1b:82:30:92:21:f6:d0:06:9f:ee:d5:6a:d3:be:63: 38:b6:4a:a1:db:c1:e2:08:38:c9:a8:a2:1c:ca:9b:71:7f:66: 9e:39:a3:6a:19:a3:b5:35:63:0e:77:6b:f6:1b:c6:fa:46:50: 15:b5:9b:b9:2e:8f:d5:85:93:0a:73:a2:78:0a:ae:09:6f:da: f2:4c:a7:ca:87:85:50:3e:0f:c9:43:4e:b4:03:8b:f3:96:9d: 2f:03:b5:93:79:97:8a:15:4a:25:9b:20:9e:08:85:18:1f:f6: c8:05:9e:bd:b8:b9:a2:6e:21:a7:d7:93:be:61:fd:e7:31:fb: ad:fb:04:71:59:0e:4e:04:c5:59:5b:6b:74:50:98:34:28:64: 07:cd:9c:e2:bf:fd:b5:81:e3:69:81:e5:d3:c3:94:28:ce:0d: b7:ab:81:47:4a:1b:0a:56:3b:ff:60:9f:9d:11:f9:6c:8a:23: d8:4a:7f:ff:8b:43:d3:ec:f2:b6:db:28:33:31:09:93:f4:4a: 67:05:dd:14:bb:c9:7e:8c:12:75:43:8f:15:b6:76:59:2f:85: ff:84:89:56:9f:72:f6:2a:04:bf:9c:10:5e:70:c0:b6:ad:72: cf:9c:77:19:13:3c:f9:66:ad:25:29:85:d5:48:bd:e2:7c:06: c1:29:65:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApuQZyv5ZZOUo6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg0NloXDTI1MDkxODA5Mjg0NlowLzEtMCsGA1UEAxMk YmFkMTFjZDUtMDMzZi00M2YwLTg3NTgtZWY4ZGE3YmFiMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha4wd+g0ITAN+Q4tQrORKK8tvQ2nr4EZRl41 SAKRc1vxD1yMcRwphiaJBRuIP7j/DuLyTbq7bLQOGgH4tdutyr/wJxx3b3qDK+07 21SkIcnqX+uBKtDaVEKfQhv9kBEcnl0h/44EAuyGvu7XZadnbQLYVrDUaX8yW4+2 4KsQGAElkTG1L1UJ4nn+00QXUhXiHlO+tFpU9aTeHspZQkLogcjKHlCao0t8stut LLLpJUi9uYmYuQB5tRcEYXQ0l0yqq37QF5a88hu/YDymWGRjWjR9tVAE3JrAZKEd RNk+1/lnj2l+pzuVCbww8zx4BNDNKnMaII0q9nhFNQPQY4nQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRzdQoyxtHd/CfZwobsYq5qvzr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGUzNWVjZjUtNmYyNC0z Yjg0LWIwNGMtNjdmNWRiN2IxNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjYHRuCMJIh9tAGn+7VatO+Yzi2SqHbweIIOMmoohzKm3F/Zp45o2oZ o7U1Yw53a/YbxvpGUBW1m7kuj9WFkwpzongKrglv2vJMp8qHhVA+D8lDTrQDi/OW nS8DtZN5l4oVSiWbIJ4IhRgf9sgFnr24uaJuIafXk75h/ecx+637BHFZDk4ExVlb a3RQmDQoZAfNnOK//bWB42mB5dPDlCjODbergUdKGwpWO/9gn50R+WyKI9hKf/+L Q9Ps8rbbKDMxCZP0SmcF3RS7yX6MEnVDjxW2dlkvhf+EiVafcvYqBL+cEF5wwLat cs+cdxkTPPlmrSUphdVIveJ8BsEpZeg= -----END CERTIFICATE-----Generated at Tue Jul 1 18:14:09 2025 by rpki-client