$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a90b5000-a640-337c-b58b-6ac00faaae73.roa File: a90b5000-a640-337c-b58b-6ac00faaae73.roa (raw, json) Hash identifier: hc4y1t8TtIl1u6PrfW5a+n2l4qYmE1UG7CYgFtZDdkc= Subject key identifier: 68:7D:07:62:FC:6D:D0:E4:C9:82:ED:03:2A:97:B5:7D:DC:E2:66:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FE8991C95460366F1B780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a90b5000-a640-337c-b58b-6ac00faaae73.roa Signing time: Wed 18 Jun 2025 18:01:19 +0000 ROA not before: Wed 18 Jun 2025 18:01:19 +0000 ROA not after: Tue 16 Sep 2025 18:01:19 +0000 asID: 22773 IP address blocks: 68.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:e8:99:1c:95:46:03:66:f1:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:19 2025 GMT Not After : Sep 16 18:01:19 2025 GMT Subject: CN=fc8fd972-8f87-45dc-a5ed-519dec46fa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:bc:8f:01:4d:8f:91:ab:90:6f:9b:42:ff: 09:d8:6c:ae:4f:51:04:e9:97:fb:56:2c:13:68:52: 93:dd:46:18:59:d6:b2:20:9a:72:4a:f9:15:ba:a4: 40:8d:31:c6:04:27:c1:9c:ff:f3:8c:c5:e5:2b:f5: cc:4f:87:16:14:92:5c:54:ad:b5:e9:d6:81:f0:1c: 69:b8:cc:5c:36:7a:8a:47:dc:ee:50:29:7a:37:2f: 3b:92:9f:41:1e:b6:33:43:4b:44:90:29:ca:6b:79: 77:b2:d3:7e:ea:c2:cc:15:8d:96:ab:ec:fb:de:83: 78:e4:4a:21:e1:ed:9b:25:0c:70:a9:5e:92:38:2a: 5d:57:84:b6:2c:57:45:59:3e:50:d7:36:b0:ef:cb: c5:a2:6a:fb:2b:b7:4f:84:00:6f:be:24:ec:cd:33: 68:f0:ec:84:f4:40:ab:68:a0:0c:c2:bb:37:21:96: cd:a6:14:01:76:75:04:98:9a:af:aa:2e:00:52:5d: 4b:21:20:4c:65:63:ee:82:c0:5a:88:2a:4d:2d:86: 61:e1:47:5f:3e:7c:42:f8:0b:c8:3a:77:e4:ca:fd: 4d:3c:c4:98:9a:a5:40:50:71:6f:17:fe:82:d0:72: 12:19:d7:ac:1f:45:d4:87:ed:f6:47:90:86:94:e6: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:07:62:FC:6D:D0:E4:C9:82:ED:03:2A:97:B5:7D:DC:E2:66:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a90b5000-a640-337c-b58b-6ac00faaae73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:93:4a:d3:5e:6a:92:97:36:fa:78:4f:3a:fc:e4:01:c4:93: e3:04:cd:1b:3f:b4:70:8e:37:e6:86:04:4a:6a:c2:d4:78:7a: 2c:d5:8f:08:1a:39:99:ab:39:1b:b3:fd:39:33:07:92:ad:56: c4:da:19:6c:a5:59:53:53:89:d2:e8:49:fb:66:de:a3:d7:19: 62:24:b7:b9:9d:ab:4d:65:9c:36:70:39:89:f7:57:96:10:4e: b3:15:33:3a:76:22:19:fa:b1:59:1a:4d:77:6c:d9:20:5f:dd: 38:17:75:38:bb:f5:84:cf:b0:db:e4:88:5e:56:33:e0:6e:c6: fe:4c:89:ce:62:aa:68:1c:35:1a:49:ec:89:85:17:f8:89:5f: 5d:66:f4:b9:74:17:ec:25:03:cf:7c:00:de:b7:e5:58:82:86: 7d:71:16:e0:31:d0:9e:2b:17:7a:d1:06:15:96:bb:53:96:e6: 19:81:be:26:7e:02:04:c7:ac:d3:33:1d:74:8f:34:48:f6:4e: 05:82:71:c4:96:73:13:24:a4:1e:59:6a:57:c7:64:25:c1:ee: da:c0:f9:ee:ea:4b:d0:5a:30:77:31:d8:60:ca:18:d7:46:c8: d1:d3:ea:66:7f:04:46:61:bd:8c:61:40:41:70:bc:9a:50:4e: d0:ad:a8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D+iZHJVGA2bxt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDExOVoXDTI1MDkxNjE4MDExOVowLzEtMCsGA1UEAxMk ZmM4ZmQ5NzItOGY4Ny00NWRjLWE1ZWQtNTE5ZGVjNDZmYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXq8jwFNj5GrkG+bQv8J2GyuT1EE6Zf7ViwT aFKT3UYYWdayIJpySvkVuqRAjTHGBCfBnP/zjMXlK/XMT4cWFJJcVK216daB8Bxp uMxcNnqKR9zuUCl6Ny87kp9BHrYzQ0tEkCnKa3l3stN+6sLMFY2Wq+z73oN45Eoh 4e2bJQxwqV6SOCpdV4S2LFdFWT5Q1zaw78vFomr7K7dPhABvviTszTNo8OyE9ECr aKAMwrs3IZbNphQBdnUEmJqvqi4AUl1LISBMZWPugsBaiCpNLYZh4UdfPnxC+AvI Onfkyv1NPMSYmqVAUHFvF/6C0HISGdesH0XUh+32R5CGlObBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGh9B2L8bdDkyYLtAyqXtX3c4mb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTkwYjUwMDAtYTY0MC0z MzdjLWI1OGItNmFjMDBmYWFhZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6TStNeapKXNvp4Tzr85AHEk+MEzRs/tHCON+aGBEpqwtR4eizVjwga OZmrORuz/TkzB5KtVsTaGWylWVNTidLoSftm3qPXGWIkt7mdq01lnDZwOYn3V5YQ TrMVMzp2Ihn6sVkaTXds2SBf3TgXdTi79YTPsNvkiF5WM+Buxv5Mic5iqmgcNRpJ 7ImFF/iJX11m9Ll0F+wlA898AN635ViChn1xFuAx0J4rF3rRBhWWu1OW5hmBviZ+ AgTHrNMzHXSPNEj2TgWCccSWcxMkpB5ZalfHZCXB7trA+e7qS9BaMHcx2GDKGNdG yNHT6mZ/BEZhvYxhQEFwvJpQTtCtqHo= -----END CERTIFICATE-----Generated at Tue Jul 1 13:05:13 2025 by rpki-client