$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa File: 901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa (raw, json) Hash identifier: EVZLjIlVW6rMvz1EE4D75HXg/kn2FDviCgq/Q9uQq44= Subject key identifier: 12:78:09:CB:0B:DE:C5:B5:B2:5F:03:79:FF:9E:30:82:90:59:E5:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A77CC14D8347DD20AF1580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa Signing time: Fri 20 Jun 2025 09:29:58 +0000 ROA not before: Fri 20 Jun 2025 09:29:58 +0000 ROA not after: Thu 18 Sep 2025 09:29:58 +0000 asID: 22773 IP address blocks: 68.108.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:7c:c1:4d:83:47:dd:20:af:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:58 2025 GMT Not After : Sep 18 09:29:58 2025 GMT Subject: CN=cfc7ab8b-a5ac-462b-83d2-e2c2491dcad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:8d:8a:a6:0d:71:7d:a1:f6:82:a3:ce:96: 0a:d3:1e:37:2b:aa:92:b3:42:96:d4:e8:6a:a8:1d: b9:1f:f9:25:52:15:4c:bb:08:11:dd:e3:c7:47:9f: 15:77:a8:32:46:bc:cf:6c:15:01:36:39:bc:fe:d4: a2:32:b6:a0:74:1d:36:79:67:f0:b1:92:af:53:34: 6a:2e:5e:fa:7d:d2:fb:f4:83:44:80:90:49:ee:cc: 30:61:48:df:b1:f1:87:24:d0:d8:14:09:12:79:03: 27:c0:96:22:1a:87:21:cb:b2:f7:01:8c:41:90:25: 91:1c:96:bb:a3:7d:21:4d:b4:09:0b:f9:c3:8c:0d: 30:2d:ee:3f:ea:c6:1c:58:f0:1c:eb:55:00:25:ac: 4d:67:d4:01:f5:f2:8f:37:a0:a7:f1:10:58:2c:74: 93:a7:24:bf:ed:6f:a7:23:ec:8b:de:c7:f9:10:a9: 2c:30:16:3b:e5:9a:86:04:1d:0e:73:08:ce:46:c0: a4:56:1d:d3:d3:b6:d9:72:bb:23:3f:b7:4b:0f:5b: 3c:5e:3c:08:2c:09:06:06:03:2c:aa:dc:29:c0:73: 0b:57:65:57:a6:82:97:a5:e4:a6:f4:33:e5:67:81: 8b:fc:b8:1f:b4:35:f5:a6:39:e7:9e:c9:0c:6d:15: c3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:78:09:CB:0B:DE:C5:B5:B2:5F:03:79:FF:9E:30:82:90:59:E5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901b00cf-9d36-3ec7-9ed5-368ee54e9f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3a:f1:2f:53:e0:94:5a:a6:ee:fe:f2:c5:be:ab:05:d1:d3: 6e:0c:ef:a4:fc:fe:1f:ec:ea:b9:ab:0c:4f:66:06:fb:a0:d9: 9b:fd:c7:9f:29:a3:78:2c:91:d2:6b:bc:f8:72:79:1a:d7:3e: 95:88:3a:80:8e:5b:03:c8:8b:0a:fb:29:c2:59:d2:7a:d1:e7: 41:4c:2b:a2:53:81:71:f4:f9:de:82:b6:9e:2a:c0:8d:40:d5: c1:88:ae:bb:a1:f3:d2:9c:21:5e:ae:e2:59:6e:b4:bd:d5:52: d2:4c:57:e7:f5:bd:de:8d:23:47:b0:ac:0b:bd:ec:dd:a5:fa: 47:1f:6c:4a:a7:bf:1a:89:f3:3a:cc:bf:27:be:b9:55:08:a0: 0d:46:98:80:39:84:c8:36:00:8d:b6:d5:ee:ff:f3:22:72:db: dc:e9:ce:4e:af:7e:af:08:06:a5:59:d0:d4:6a:34:ef:cc:a0: 0d:3e:6c:2a:fe:12:e6:d5:f3:88:c0:55:d9:4a:ff:bb:0f:45: 9b:6f:d1:7e:73:01:ef:a7:21:45:7c:51:d8:d8:77:99:96:25: e9:35:c0:4c:ad:12:42:8a:8f:f4:72:a2:59:f9:8c:ed:f4:4e: 5a:e0:f8:53:33:ef:a2:57:23:32:ec:f4:79:b7:c9:ab:c1:7d: 39:6a:44:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp3zBTYNH3SCvFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk1OFoXDTI1MDkxODA5Mjk1OFowLzEtMCsGA1UEAxMk Y2ZjN2FiOGItYTVhYy00NjJiLTgzZDItZTJjMjQ5MWRjYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHaNiqYNcX2h9oKjzpYK0x43K6qSs0KW1Ohq qB25H/klUhVMuwgR3ePHR58Vd6gyRrzPbBUBNjm8/tSiMragdB02eWfwsZKvUzRq Ll76fdL79INEgJBJ7swwYUjfsfGHJNDYFAkSeQMnwJYiGochy7L3AYxBkCWRHJa7 o30hTbQJC/nDjA0wLe4/6sYcWPAc61UAJaxNZ9QB9fKPN6Cn8RBYLHSTpyS/7W+n I+yL3sf5EKksMBY75ZqGBB0OcwjORsCkVh3T07bZcrsjP7dLD1s8XjwILAkGBgMs qtwpwHMLV2VXpoKXpeSm9DPlZ4GL/LgftDX1pjnnnskMbRXD9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ4CcsL3sW1sl8Def+eMIKQWeX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTAxYjAwY2YtOWQzNi0z ZWM3LTllZDUtMzY4ZWU1NGU5ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo68S9T4JRapu7+8sW+qwXR024M76T8/h/s6rmrDE9mBvug2Zv9x58p o3gskdJrvPhyeRrXPpWIOoCOWwPIiwr7KcJZ0nrR50FMK6JTgXH0+d6Ctp4qwI1A 1cGIrruh89KcIV6u4llutL3VUtJMV+f1vd6NI0ewrAu97N2l+kcfbEqnvxqJ8zrM vye+uVUIoA1GmIA5hMg2AI221e7/8yJy29zpzk6vfq8IBqVZ0NRqNO/MoA0+bCr+ EubV84jAVdlK/7sPRZtv0X5zAe+nIUV8UdjYd5mWJek1wEytEkKKj/Ryoln5jO30 Tlrg+FMz76JXIzLs9Hm3yavBfTlqRLY= -----END CERTIFICATE-----Generated at Mon Jun 30 00:51:00 2025 by rpki-client