$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4725c4-3054-3b84-adf1-fd8be2760c35.roa File: 9b4725c4-3054-3b84-adf1-fd8be2760c35.roa (raw, json) Hash identifier: Z2HaKLIQMXRLXEws20Ul7iuq8JeCoF1T4MOoXbS7520= Subject key identifier: 30:81:F8:6C:43:81:6A:08:67:8C:1C:A6:4E:1F:01:A8:B5:CC:EB:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A792DCCF744653230D95A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4725c4-3054-3b84-adf1-fd8be2760c35.roa Signing time: Fri 20 Jun 2025 09:30:08 +0000 ROA not before: Fri 20 Jun 2025 09:30:08 +0000 ROA not after: Thu 18 Sep 2025 09:30:08 +0000 asID: 22773 IP address blocks: 68.224.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:92:dc:cf:74:46:53:23:0d:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:08 2025 GMT Not After : Sep 18 09:30:08 2025 GMT Subject: CN=74affa7b-20bd-43a0-b54f-ff4f37746d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:cb:13:0a:2f:0f:17:b5:c5:d0:5c:1c:e6: 47:29:4e:ec:d8:29:dc:a9:c5:e9:49:f7:51:7d:83: e2:eb:6c:25:95:77:a5:c2:49:88:63:a3:fc:05:77: db:7f:bc:42:b5:ac:a1:19:1e:63:b2:5a:0d:c3:52: 70:fd:88:12:96:9d:b8:cb:ae:6f:f9:71:42:5d:00: 28:49:15:f2:fc:66:09:96:38:88:dd:15:60:30:9d: 68:59:9e:d5:ac:e5:1b:67:34:6a:d5:5f:9c:7b:94: 36:b1:4b:f1:7b:10:a9:c5:85:f9:57:94:0f:ac:24: 48:bb:4c:ab:77:ab:92:39:72:7f:34:4a:c2:fd:d5: 2a:a7:d2:6f:82:b8:16:79:2d:76:1f:1f:7e:7d:ca: a3:eb:76:ae:eb:66:84:27:4b:b8:0c:6d:c8:45:a8: b5:16:c9:15:4a:fa:1b:7b:a7:2e:06:e4:c1:1d:20: dc:af:4c:5c:ef:cd:97:1c:5e:ca:20:ae:d9:fa:bc: 5a:4b:51:77:b3:ac:30:59:6c:67:20:52:4a:45:20: ae:f9:b3:d2:11:31:04:33:40:9b:49:ef:f6:3e:a4: da:d0:5c:cd:30:51:0c:e0:a1:72:d6:f5:c3:74:f4: 8c:3b:6d:20:ed:72:8e:ff:c2:c8:e2:0d:ba:2f:44: b8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:F8:6C:43:81:6A:08:67:8C:1C:A6:4E:1F:01:A8:B5:CC:EB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b4725c4-3054-3b84-adf1-fd8be2760c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:48:eb:ba:60:87:83:56:5f:19:4c:65:04:ab:e7:05:6e:a0: 8c:ad:87:4c:a6:24:33:26:04:7e:eb:44:e4:ad:e0:95:66:27: b6:e2:b3:36:39:66:ac:51:0d:dc:b5:ea:4f:e3:6e:d2:83:78: 6e:3f:8b:a1:cf:11:11:50:60:16:5c:79:7d:d3:27:9d:6f:81: ef:35:c8:15:b8:78:77:e4:59:31:f5:cc:2c:bb:e4:98:b8:86: 0a:d8:83:c1:67:d0:ca:45:c7:2c:04:75:b8:61:26:1c:9a:48: 44:d6:95:40:7b:8d:24:87:c9:5f:93:af:88:b1:2f:af:d3:6a: 77:a1:35:b9:6c:27:e8:c2:63:00:9d:01:fa:27:92:64:72:7c: 2d:76:b2:d6:76:3c:6e:61:6b:17:8e:12:04:fb:4b:ca:b5:13: 87:99:74:a1:76:aa:08:89:d8:d0:cd:d8:e3:96:29:e6:9d:c0: 61:2f:9e:25:64:7c:e7:cc:19:61:a1:7c:2a:15:1a:b2:3e:1e: a9:e3:a5:b8:ae:d5:1d:04:41:01:fc:53:ac:38:76:04:38:0c: 2f:22:93:71:2b:2d:e2:cb:cd:40:35:05:43:f2:2e:74:fa:6d: 0e:f9:b7:44:30:74:2c:e7:d2:52:7f:6b:02:65:e2:88:92:ec: 1b:67:11:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp5Lcz3RGUyMNlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAwOFoXDTI1MDkxODA5MzAwOFowLzEtMCsGA1UEAxMk NzRhZmZhN2ItMjBiZC00M2EwLWI1NGYtZmY0ZjM3NzQ2ZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRbLEwovDxe1xdBcHOZHKU7s2CncqcXpSfdR fYPi62wllXelwkmIY6P8BXfbf7xCtayhGR5jsloNw1Jw/YgSlp24y65v+XFCXQAo SRXy/GYJljiI3RVgMJ1oWZ7VrOUbZzRq1V+ce5Q2sUvxexCpxYX5V5QPrCRIu0yr d6uSOXJ/NErC/dUqp9JvgrgWeS12Hx9+fcqj63au62aEJ0u4DG3IRai1FskVSvob e6cuBuTBHSDcr0xc782XHF7KIK7Z+rxaS1F3s6wwWWxnIFJKRSCu+bPSETEEM0Cb Se/2PqTa0FzNMFEM4KFy1vXDdPSMO20g7XKO/8LI4g26L0S4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCB+GxDgWoIZ4wcpk4fAai1zOvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWI0NzI1YzQtMzA1NC0z Yjg0LWFkZjEtZmQ4YmUyNzYwYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBI67pgh4NWXxlMZQSr5wVuoIyth0ymJDMmBH7rROSt4JVmJ7biszY5 ZqxRDdy16k/jbtKDeG4/i6HPERFQYBZceX3TJ51vge81yBW4eHfkWTH1zCy75Ji4 hgrYg8Fn0MpFxywEdbhhJhyaSETWlUB7jSSHyV+Tr4ixL6/TanehNblsJ+jCYwCd AfonkmRyfC12stZ2PG5haxeOEgT7S8q1E4eZdKF2qgiJ2NDN2OOWKeadwGEvniVk fOfMGWGhfCoVGrI+Hqnjpbiu1R0EQQH8U6w4dgQ4DC8ik3ErLeLLzUA1BUPyLnT6 bQ75t0QwdCzn0lJ/awJl4oiS7BtnEak= -----END CERTIFICATE-----Generated at Tue Jul 1 09:00:09 2025 by rpki-client