$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa File: a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa (raw, json) Hash identifier: 6dbTdxpGb/mO3Ufb4X4ZBkpnaccA9oP0bqiovoam65A= Subject key identifier: A7:1A:74:B5:7E:5C:27:2B:AC:F3:4D:52:5A:7E:82:D8:D3:52:66:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A76725273B0F000EAFDEC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa Signing time: Fri 20 Jun 2025 09:29:48 +0000 ROA not before: Fri 20 Jun 2025 09:29:48 +0000 ROA not after: Thu 18 Sep 2025 09:29:48 +0000 asID: 22773 IP address blocks: 68.108.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:67:25:27:3b:0f:00:0e:af:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:48 2025 GMT Not After : Sep 18 09:29:48 2025 GMT Subject: CN=93bc88bf-492b-498e-af7a-07da02fb192c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:88:51:7a:69:98:9a:53:d8:60:d5:77:0b: 85:be:d5:bd:5a:a6:13:bb:df:ee:3b:c3:5e:ab:26: 94:39:7a:e3:e9:b7:c5:e0:99:18:88:6c:41:96:e7: ac:e7:64:5f:b7:54:65:5a:fd:61:bd:50:4c:bc:f7: 43:46:7d:67:87:9e:a5:c3:20:18:64:d8:67:c7:58: 2d:02:d1:2a:93:31:81:39:1b:1d:e3:5f:65:d6:7b: f5:fb:2b:45:b2:a3:a7:c8:7e:38:10:e4:cd:0f:46: 5b:6e:5e:1f:25:10:ce:18:3a:f3:e4:93:2b:8d:d2: 90:15:1d:14:2a:72:dd:ab:f0:b5:0f:ce:db:e6:a4: 98:49:b7:bf:a9:2e:5c:aa:c0:58:21:dd:38:f7:7e: 57:ed:59:90:5a:2c:d5:b1:23:dc:ab:bf:14:44:b1: ab:4c:2a:e8:14:05:53:e9:fb:21:4f:4a:43:7f:f4: 6e:d8:79:0a:1c:39:e0:a4:df:d2:d1:ff:3b:25:c7: 19:0c:ee:ee:16:b6:ba:00:89:8a:eb:08:bd:8d:63: ed:ce:bc:f8:8a:20:da:cf:f7:86:39:75:cf:c7:80: b9:d9:77:0c:75:38:a3:02:0d:a2:d9:6b:ff:1d:ea: 4f:b2:17:06:15:e5:a1:0c:5e:ac:87:f2:88:04:ca: 2f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:74:B5:7E:5C:27:2B:AC:F3:4D:52:5A:7E:82:D8:D3:52:66:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0b:14:14:ae:b1:97:42:82:db:15:52:44:85:3a:7a:6a:e7: 17:ec:e2:c4:6a:c0:c4:6d:66:79:75:2a:47:0f:35:10:ad:7f: e1:fb:08:01:9d:65:de:06:9a:3e:da:f9:f5:6d:23:a5:57:cb: b6:58:bf:75:72:f6:e3:1d:45:c8:86:cc:26:c1:a4:46:9c:78: 49:36:2a:8a:79:e7:87:52:a9:0f:14:a5:93:c9:57:12:04:af: ec:77:47:49:c8:6b:ea:95:86:84:6a:4e:eb:37:bc:d1:4b:93: 1d:5c:55:e3:a7:c0:84:d9:ec:21:26:82:58:36:05:a1:9e:93: 8d:c0:1b:93:3f:ce:66:c5:f9:2d:31:52:6b:a5:64:37:78:18: 3c:10:40:10:0a:bc:57:05:07:82:08:59:a7:e8:b5:f6:21:c0: d9:01:d1:b5:d5:df:9d:bb:7a:a9:32:33:d6:0d:9e:c1:70:62: 34:1b:52:ce:5b:c0:8c:e4:ea:c0:cd:d9:aa:da:b6:70:17:1f: 53:9e:d3:8c:87:f4:b2:a5:40:c0:42:0b:19:fb:f8:4a:84:de: 8b:38:f3:53:a0:20:29:32:4a:59:79:d9:37:eb:f3:91:44:89: 7f:7b:9e:61:b6:bd:60:f9:05:d4:ef:25:40:a3:54:f3:ed:b3: 74:cc:82:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp2clJzsPAA6v3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0OFoXDTI1MDkxODA5Mjk0OFowLzEtMCsGA1UEAxMk OTNiYzg4YmYtNDkyYi00OThlLWFmN2EtMDdkYTAyZmIxOTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjeIUXppmJpT2GDVdwuFvtW9WqYTu9/uO8Ne qyaUOXrj6bfF4JkYiGxBlues52Rft1RlWv1hvVBMvPdDRn1nh56lwyAYZNhnx1gt AtEqkzGBORsd419l1nv1+ytFsqOnyH44EOTND0Zbbl4fJRDOGDrz5JMrjdKQFR0U KnLdq/C1D87b5qSYSbe/qS5cqsBYId04935X7VmQWizVsSPcq78URLGrTCroFAVT 6fshT0pDf/Ru2HkKHDngpN/S0f87JccZDO7uFra6AImK6wi9jWPtzrz4iiDaz/eG OXXPx4C52XcMdTijAg2i2Wv/HepPshcGFeWhDF6sh/KIBMov0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcadLV+XCcrrPNNUlp+gtjTUmaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJmOGRjMWQtMzM3NC0z ZmMwLTgzNDAtMmVlNmIxZTc0MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsLFBSusZdCgtsVUkSFOnpq5xfs4sRqwMRtZnl1KkcPNRCtf+H7CAGd Zd4Gmj7a+fVtI6VXy7ZYv3Vy9uMdRciGzCbBpEaceEk2Kop554dSqQ8UpZPJVxIE r+x3R0nIa+qVhoRqTus3vNFLkx1cVeOnwITZ7CEmglg2BaGek43AG5M/zmbF+S0x UmulZDd4GDwQQBAKvFcFB4IIWafotfYhwNkB0bXV3527eqkyM9YNnsFwYjQbUs5b wIzk6sDN2aratnAXH1Oe04yH9LKlQMBCCxn7+EqE3os481OgICkySll52Tfr85FE iX97nmG2vWD5BdTvJUCjVPPts3TMgg8= -----END CERTIFICATE-----Generated at Tue Jul 1 03:58:17 2025 by rpki-client