$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa File: 97c69484-f2e5-3ed3-824d-146d9f761d87.roa (raw, json) Hash identifier: J1+Hi4G4i1QW4yscZMXyLF0oXWOOzkH30B/fL6vFxC0= Subject key identifier: F7:9E:2D:D5:72:B4:E9:0B:82:89:A8:F5:C3:63:A2:E6:13:95:F2:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1010E0F2773CC9FEE78680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa Signing time: Wed 18 Jun 2025 18:01:38 +0000 ROA not before: Wed 18 Jun 2025 18:01:38 +0000 ROA not after: Tue 16 Sep 2025 18:01:38 +0000 asID: 22773 IP address blocks: 68.3.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:10:e0:f2:77:3c:c9:fe:e7:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:38 2025 GMT Not After : Sep 16 18:01:38 2025 GMT Subject: CN=3119eced-0d67-4c0e-bd66-3cff46da392d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:5f:9f:a4:0c:eb:4a:1a:75:76:9d:f9:92: 60:41:e9:f0:9d:e0:35:53:c6:38:f2:2e:d9:99:8c: d0:2f:16:a5:b4:8b:f8:1f:ee:dd:f2:09:a2:c6:d4: ff:e0:c4:c7:36:e2:b0:35:96:4f:11:8d:bf:dc:39: 85:1e:0b:01:c4:1d:b8:03:c1:be:16:31:61:dc:a3: b5:50:49:1c:44:5c:12:31:26:d6:37:21:c6:36:5a: de:1b:88:24:5b:10:54:33:43:4b:fe:11:ce:db:e7: b7:78:58:34:0c:0f:ef:47:14:05:7b:0b:e6:94:90: ed:49:e3:94:51:f9:10:c0:72:a5:ff:3e:f2:94:12: 14:e9:ae:0b:cb:64:62:66:c3:9c:a7:ae:e3:7b:2e: 5c:31:66:3d:aa:e9:23:43:4c:02:16:f1:60:3d:9d: 71:81:0b:e2:ac:c3:7c:6f:2e:ef:51:ae:9c:fa:5d: 2d:0f:3e:7b:e1:a0:b3:59:70:c8:7d:c3:cc:9a:52: f0:a3:84:e3:12:13:00:10:ff:04:da:fa:3b:ea:e0: e2:43:4e:60:29:51:ab:69:85:1d:3a:82:0a:1c:67: fc:4a:c2:ea:33:48:ef:56:61:44:5b:58:07:4d:e3: ea:dc:2b:eb:49:10:db:0e:94:a8:87:6e:d6:ba:9d: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:2D:D5:72:B4:E9:0B:82:89:A8:F5:C3:63:A2:E6:13:95:F2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c69484-f2e5-3ed3-824d-146d9f761d87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:75:38:9f:ae:95:94:cf:49:64:bf:1d:55:09:5d:15:7a:4d: 98:52:15:4c:da:f9:cb:37:38:25:24:f3:6a:43:4b:bb:37:a7: 28:c9:8a:0a:7b:57:23:80:a3:8e:02:53:b6:f7:da:81:b9:0e: df:c2:3f:25:75:de:50:a6:72:39:43:c8:61:b6:54:31:e9:8b: ec:c0:47:44:37:23:92:55:4f:d8:fc:bb:85:88:42:9b:43:35: 70:25:9a:e3:4b:06:37:2c:1b:04:cb:7d:ae:34:f2:42:5a:b3: 60:e2:57:0f:93:cf:ed:29:6d:21:1f:dc:ba:e8:60:e1:35:e6: 29:b6:12:bd:ac:7b:50:be:38:f8:58:23:67:03:05:f7:21:2d: eb:ab:5d:b9:a1:4e:dd:c1:b8:64:5a:88:27:a6:b0:01:c1:71: 16:52:2b:03:2c:8d:e1:a5:e8:08:27:e7:7d:86:e7:58:7c:89: 98:81:75:7e:f4:70:af:0c:3c:05:2a:a5:fa:0e:08:b5:aa:8f: a5:d0:ae:3f:3e:17:7e:77:35:98:2d:c1:5b:10:4e:6e:db:05: a2:65:c9:e5:54:d5:80:0e:61:72:bb:16:de:05:73:96:d7:89: 94:37:f0:72:68:8c:56:57:1f:6c:c1:ae:20:a5:d0:7d:6a:49: b1:2b:c0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EBDg8nc8yf7nhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEzOFoXDTI1MDkxNjE4MDEzOFowLzEtMCsGA1UEAxMk MzExOWVjZWQtMGQ2Ny00YzBlLWJkNjYtM2NmZjQ2ZGEzOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwFfn6QM60oadXad+ZJgQenwneA1U8Y48i7Z mYzQLxaltIv4H+7d8gmixtT/4MTHNuKwNZZPEY2/3DmFHgsBxB24A8G+FjFh3KO1 UEkcRFwSMSbWNyHGNlreG4gkWxBUM0NL/hHO2+e3eFg0DA/vRxQFewvmlJDtSeOU UfkQwHKl/z7ylBIU6a4Ly2RiZsOcp67jey5cMWY9qukjQ0wCFvFgPZ1xgQvirMN8 by7vUa6c+l0tDz574aCzWXDIfcPMmlLwo4TjEhMAEP8E2vo76uDiQ05gKVGraYUd OoIKHGf8SsLqM0jvVmFEW1gHTePq3CvrSRDbDpSoh27Wup37pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeeLdVytOkLgomo9cNjouYTlfIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTdjNjk0ODQtZjJlNS0z ZWQzLTgyNGQtMTQ2ZDlmNzYxZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd1OJ+ulZTPSWS/HVUJXRV6TZhSFUza+cs3OCUk82pDS7s3pyjJigp7 VyOAo44CU7b32oG5Dt/CPyV13lCmcjlDyGG2VDHpi+zAR0Q3I5JVT9j8u4WIQptD NXAlmuNLBjcsGwTLfa408kJas2DiVw+Tz+0pbSEf3LroYOE15im2Er2se1C+OPhY I2cDBfchLeurXbmhTt3BuGRaiCemsAHBcRZSKwMsjeGl6Agn532G51h8iZiBdX70 cK8MPAUqpfoOCLWqj6XQrj8+F353NZgtwVsQTm7bBaJlyeVU1YAOYXK7Ft4Fc5bX iZQ38HJojFZXH2zBriCl0H1qSbErwBU= -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:56 2025 by rpki-client