$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa File: a14fc5ef-24e6-3363-91a1-01681ccc5874.roa (raw, json) Hash identifier: hWfDOtSZWrNUBhnFVFb4oHfRFZmtA1AYDdn+oBNT9v4= Subject key identifier: AB:FA:34:C6:7A:4D:B7:25:EA:B1:3C:7F:B6:92:9C:2C:E0:89:11:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7665C8E730871DDF91D50 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa Signing time: Fri 20 Jun 2025 09:29:47 +0000 ROA not before: Fri 20 Jun 2025 09:29:47 +0000 ROA not after: Thu 18 Sep 2025 09:29:47 +0000 asID: 22773 IP address blocks: 68.108.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:66:5c:8e:73:08:71:dd:f9:1d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:47 2025 GMT Not After : Sep 18 09:29:47 2025 GMT Subject: CN=5576a570-8b94-4729-a32d-e506cc01b666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:53:89:89:27:17:28:b0:7c:ed:9b:d9:f4: 4f:a2:12:8f:a7:c3:62:c3:82:45:a2:bb:99:b0:6b: 65:ce:2a:29:15:48:13:56:00:39:dc:8c:23:57:61: 3b:af:89:91:75:a2:e4:d6:f3:10:86:cf:eb:bf:eb: f7:3f:c2:ec:fd:62:92:e0:65:12:80:94:41:6e:3c: 51:c3:db:f3:93:f6:ff:2a:18:85:81:e3:1c:79:41: 8d:1c:cc:8c:6f:94:ab:6b:29:28:74:47:dc:b0:34: 0d:1f:50:6f:de:61:54:02:a9:1e:72:34:35:23:07: 87:88:77:00:93:5d:35:ab:b3:d6:19:cf:e1:bb:f7: f2:05:ae:08:d0:97:6b:f6:ca:fb:0e:ac:d2:5f:f2: 98:83:e1:39:4d:06:a7:93:83:54:5f:6f:82:74:f9: ba:d2:b2:5f:01:79:61:2e:17:ec:3d:e8:ed:ff:6d: 7d:74:6f:bd:01:62:fe:bc:8b:82:05:29:69:75:50: 57:91:92:3f:8a:e5:fd:1e:38:dc:61:db:c0:45:5d: bd:d1:7f:00:e9:2c:98:7a:17:a7:4f:54:5b:39:1f: 1f:69:78:14:50:4a:fb:79:10:0b:1a:bd:cc:0c:2f: 52:bf:00:fa:a7:51:55:fe:ec:97:fc:83:b2:f9:61: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:34:C6:7A:4D:B7:25:EA:B1:3C:7F:B6:92:9C:2C:E0:89:11:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a14fc5ef-24e6-3363-91a1-01681ccc5874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:4c:ba:44:ea:1f:49:bd:42:f4:c4:15:6b:fa:8f:78:4c:69: 0b:03:db:d0:e5:56:0d:72:09:2d:1f:7c:5e:22:74:9b:cc:e6: 75:84:67:eb:f9:60:36:76:8a:e8:39:1a:d9:7d:2a:f5:db:25: d8:e4:28:bc:50:07:b2:96:e5:41:50:35:f5:bf:05:ed:63:ba: c9:ef:6c:21:36:63:91:3c:0d:4a:7a:6b:88:e8:12:f4:4a:34: 36:2f:a7:61:52:bf:4d:8c:76:7a:68:4f:77:be:e6:3c:c9:2d: 4f:e8:7e:2f:59:d7:61:48:4a:fe:7a:48:f5:64:d3:8e:cd:76: d0:e0:77:79:35:7d:1a:2a:c1:6b:99:f3:9e:74:bb:c2:a1:1d: a4:99:2d:da:00:26:a5:da:f8:1f:48:25:91:99:49:cf:d0:4b: 91:de:c8:20:7f:0f:7c:8b:b9:b6:37:08:ed:69:db:cc:f9:b5: 74:d7:7b:9d:44:3c:70:51:d7:ac:c0:49:fa:22:c6:9c:a2:9a: 5a:01:ac:2e:65:bc:21:95:e6:b6:9a:9e:6c:ca:66:c8:cc:0e: 81:dd:5a:14:53:66:19:01:81:29:ee:4f:da:03:ca:a9:f5:66: 16:6a:4f:34:b1:41:02:40:d5:6d:e7:ab:8e:35:4f:96:19:db: 19:81:26:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp2ZcjnMIcd35HVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0N1oXDTI1MDkxODA5Mjk0N1owLzEtMCsGA1UEAxMk NTU3NmE1NzAtOGI5NC00NzI5LWEzMmQtZTUwNmNjMDFiNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMlTiYknFyiwfO2b2fRPohKPp8Niw4JForuZ sGtlziopFUgTVgA53IwjV2E7r4mRdaLk1vMQhs/rv+v3P8Ls/WKS4GUSgJRBbjxR w9vzk/b/KhiFgeMceUGNHMyMb5SraykodEfcsDQNH1Bv3mFUAqkecjQ1IweHiHcA k101q7PWGc/hu/fyBa4I0Jdr9sr7DqzSX/KYg+E5TQank4NUX2+CdPm60rJfAXlh LhfsPejt/219dG+9AWL+vIuCBSlpdVBXkZI/iuX9HjjcYdvARV290X8A6SyYehen T1RbOR8faXgUUEr7eRALGr3MDC9SvwD6p1FV/uyX/IOy+WGUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKv6NMZ6Tbcl6rE8f7aSnCzgiRFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTE0ZmM1ZWYtMjRlNi0z MzYzLTkxYTEtMDE2ODFjY2M1ODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVMukTqH0m9QvTEFWv6j3hMaQsD29DlVg1yCS0ffF4idJvM5nWEZ+v5 YDZ2iug5Gtl9KvXbJdjkKLxQB7KW5UFQNfW/Be1jusnvbCE2Y5E8DUp6a4joEvRK NDYvp2FSv02MdnpoT3e+5jzJLU/ofi9Z12FISv56SPVk047NdtDgd3k1fRoqwWuZ 8550u8KhHaSZLdoAJqXa+B9IJZGZSc/QS5HeyCB/D3yLubY3CO1p28z5tXTXe51E PHBR16zASfoixpyimloBrC5lvCGV5raanmzKZsjMDoHdWhRTZhkBgSnuT9oDyqn1 ZhZqTzSxQQJA1W3nq441T5YZ2xmBJpQ= -----END CERTIFICATE-----Generated at Tue Jul 1 08:13:29 2025 by rpki-client