$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f8878a0-b29c-3c7c-95f9-d406a4f491d8.roa File: 8f8878a0-b29c-3c7c-95f9-d406a4f491d8.roa (raw, json) Hash identifier: c9LRTj69DdRP8rn12S4C3fGc9bwaNs+piuqIHzo9TAU= Subject key identifier: 30:D9:AC:FD:E3:A9:02:B4:12:30:CE:A5:26:2B:5F:4B:84:1F:52:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA2222C0A9F59FE52616C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f8878a0-b29c-3c7c-95f9-d406a4f491d8.roa Signing time: Fri 20 Jun 2025 09:35:18 +0000 ROA not before: Fri 20 Jun 2025 09:35:18 +0000 ROA not after: Thu 18 Sep 2025 09:35:18 +0000 asID: 22773 IP address blocks: 174.68.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:22:22:c0:a9:f5:9f:e5:26:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:18 2025 GMT Not After : Sep 18 09:35:18 2025 GMT Subject: CN=82cfc363-5853-4882-b427-40a97226138d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:60:71:de:cd:23:14:f1:aa:75:84:01:d9: 8f:74:c7:b7:54:d9:83:40:01:14:8e:6b:19:ce:40: 6c:a7:40:e3:fa:8d:cc:14:e0:03:9b:91:50:1b:03: d9:d6:f6:5b:07:40:e3:2b:eb:1b:a8:0f:52:f8:24: b5:6a:f9:fe:48:b6:a9:c5:bf:d4:50:6a:a6:ad:9c: 40:5b:d1:8f:62:bc:da:c6:1d:7d:2c:a0:24:b9:af: 15:a6:e7:ef:3c:f7:b5:5e:05:8c:27:00:94:54:cc: f2:22:13:2b:03:d4:49:73:ea:d6:32:8d:b1:92:15: 27:5e:f1:07:a5:f8:25:f5:43:da:5f:06:e8:51:c2: a0:aa:83:8c:f4:d5:42:7d:de:66:01:17:48:45:70: d2:8e:3f:c5:32:7d:f1:78:5c:ae:d2:0a:b2:c3:38: d3:f7:0d:cc:eb:e3:0b:68:53:86:05:3c:c1:38:fe: 0b:3f:4e:75:a5:bb:2b:7a:20:fc:5a:25:a7:e8:91: 8f:0f:00:2a:08:cb:0d:2e:a0:89:8d:53:e2:bd:2b: 46:40:f3:07:e5:56:45:63:bf:fe:57:4a:ad:35:e7: 5b:31:e6:61:8d:60:ef:f6:ca:e1:ac:ef:f3:72:07: c8:10:27:11:e4:d8:c7:8c:53:e6:79:e4:d9:47:98: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:AC:FD:E3:A9:02:B4:12:30:CE:A5:26:2B:5F:4B:84:1F:52:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8f8878a0-b29c-3c7c-95f9-d406a4f491d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:01:7b:54:fb:18:ee:38:6d:7f:04:f8:bf:ad:fd:17:7d:d0: d0:c7:1b:cb:67:2f:1b:35:a2:eb:7c:a1:b9:ae:0f:8b:c7:c8: 24:e9:8c:54:50:02:2a:65:4c:d7:af:8f:ec:c2:13:65:fe:06: 0e:e8:8a:62:f9:d7:15:c8:c2:90:13:52:bc:b6:af:1c:81:b5: 28:30:ae:31:62:ad:31:ad:64:eb:db:2b:1f:20:1b:cb:0f:1a: 4b:5f:f8:d1:d4:67:7e:7d:e6:7d:9e:d1:cd:36:99:90:74:d4: 0b:6d:df:ee:bf:32:f6:31:11:fc:05:29:ec:fa:ad:a6:5c:37: ef:a2:d5:be:18:7c:f8:fa:9b:ce:f2:22:26:be:57:80:de:ef: 4f:83:67:a0:3e:73:56:75:0b:f3:28:cc:72:9f:f6:25:a3:39: 24:af:f3:47:60:c2:f4:42:30:38:7d:7b:46:21:2c:f7:29:42: 19:69:06:22:57:dd:23:d3:45:b8:0a:f4:3e:a1:c9:4f:54:5a: dd:14:e0:ea:5c:f0:e6:bf:50:8d:99:66:37:c5:5f:da:35:93: 71:38:c1:75:f5:a4:2a:23:07:74:24:2a:6c:1f:e2:db:ab:00: a4:82:09:8e:61:ed:40:2f:90:6a:9c:19:45:40:e5:ce:4d:44: b8:0b:eb:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiIiwKn1n+UmFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxOFoXDTI1MDkxODA5MzUxOFowLzEtMCsGA1UEAxMk ODJjZmMzNjMtNTg1My00ODgyLWI0MjctNDBhOTcyMjYxMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmVgcd7NIxTxqnWEAdmPdMe3VNmDQAEUjmsZ zkBsp0Dj+o3MFOADm5FQGwPZ1vZbB0DjK+sbqA9S+CS1avn+SLapxb/UUGqmrZxA W9GPYrzaxh19LKAkua8VpufvPPe1XgWMJwCUVMzyIhMrA9RJc+rWMo2xkhUnXvEH pfgl9UPaXwboUcKgqoOM9NVCfd5mARdIRXDSjj/FMn3xeFyu0gqywzjT9w3M6+ML aFOGBTzBOP4LP051pbsreiD8WiWn6JGPDwAqCMsNLqCJjVPivStGQPMH5VZFY7/+ V0qtNedbMeZhjWDv9srhrO/zcgfIECcR5NjHjFPmeeTZR5h7fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDZrP3jqQK0EjDOpSYrX0uEH1KlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGY4ODc4YTAtYjI5Yy0z YzdjLTk1ZjktZDQwNmE0ZjQ5MWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQBe1T7GO44bX8E+L+t/Rd90NDHG8tnLxs1out8obmuD4vHyCTpjFRQ AiplTNevj+zCE2X+Bg7oimL51xXIwpATUry2rxyBtSgwrjFirTGtZOvbKx8gG8sP Gktf+NHUZ3595n2e0c02mZB01Att3+6/MvYxEfwFKez6raZcN++i1b4YfPj6m87y Iia+V4De70+DZ6A+c1Z1C/MozHKf9iWjOSSv80dgwvRCMDh9e0YhLPcpQhlpBiJX 3SPTRbgK9D6hyU9UWt0U4Opc8Oa/UI2ZZjfFX9o1k3E4wXX1pCojB3QkKmwf4tur AKSCCY5h7UAvkGqcGUVA5c5NRLgL6wU= -----END CERTIFICATE-----Generated at Tue Jul 1 04:22:41 2025 by rpki-client