$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa File: b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa (raw, json) Hash identifier: AqfAks1uEayuzLs/EFJc34OwCDMrV8IYDQogg0kNr6o= Subject key identifier: 8C:CB:87:8E:01:0C:5B:66:A7:E2:47:30:BD:D1:A5:EF:74:8D:32:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5E7B806D33DAC1B197A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa Signing time: Thu 19 Jun 2025 09:16:04 +0000 ROA not before: Thu 19 Jun 2025 09:16:04 +0000 ROA not after: Wed 17 Sep 2025 09:16:04 +0000 asID: 22773 IP address blocks: 68.106.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:e7:b8:06:d3:3d:ac:1b:19:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:04 2025 GMT Not After : Sep 17 09:16:04 2025 GMT Subject: CN=14a7827d-01fc-4dd2-bf6d-588686c79ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:b9:65:33:65:6d:47:20:46:ad:71:a5:07: b3:1a:72:e0:86:34:de:fe:7f:f8:c7:b2:89:cd:a7: 57:3f:34:da:51:2e:5c:02:19:12:72:fa:e6:7b:1e: cb:47:18:6e:c1:92:06:ce:f1:50:42:45:d1:4f:ad: 25:2a:3a:4e:07:f2:b7:c2:b8:40:58:7b:24:2d:99: 59:8d:19:24:11:bf:22:c6:d6:f3:82:89:57:d5:1f: 80:a6:aa:a9:a2:f8:a9:e5:dc:4b:fb:f9:1a:96:4f: bd:95:6f:b6:11:b5:7c:e2:21:48:d2:9e:b1:33:22: 94:a4:75:80:a9:03:0a:a2:be:28:d9:f0:5c:a9:c2: fb:90:e9:14:7f:10:a5:8f:ca:e0:9f:cc:e7:3a:24: f1:4e:87:1a:fe:f3:8e:33:07:6b:11:dc:5d:75:6e: ce:3b:00:4a:ab:9c:06:43:b7:86:7d:2a:28:a4:ab: 17:15:43:b5:1a:3b:64:42:c0:a9:88:8c:2c:71:9e: f6:49:ff:a4:40:1c:5e:28:b8:86:a3:91:c5:76:bf: 75:28:f2:0d:e2:40:c0:3e:84:e2:85:f6:cb:23:2b: 31:b7:8c:cf:ec:f5:75:93:0a:ff:3b:28:a0:50:24: 51:d1:b9:94:6f:81:ae:22:18:26:4b:82:be:dd:7b: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CB:87:8E:01:0C:5B:66:A7:E2:47:30:BD:D1:A5:EF:74:8D:32:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7e:59:20:61:90:62:e4:1c:b6:d1:c6:25:75:56:4c:7d:f5: f2:4f:4e:ff:81:f4:2c:9a:ef:91:e1:63:15:af:13:55:0e:30: 79:94:de:55:33:c1:64:28:44:a1:42:af:3a:46:f1:24:99:8b: 82:57:68:d3:dc:35:fb:89:f8:b5:ee:1a:cb:16:18:bf:23:b1: 75:ab:9a:8c:ca:2f:1e:5a:4a:3c:df:65:e0:ab:19:c6:d2:93: e8:5f:78:78:df:e4:bd:78:b6:21:66:8a:6a:7e:d1:77:e6:db: 73:80:03:44:fa:f3:60:f4:fc:1c:bd:75:81:5f:ee:13:9b:8d: a5:76:b3:56:33:01:54:ef:2b:b4:ed:43:35:80:82:40:5e:37: 33:59:82:01:df:a5:ea:57:80:72:29:e7:d9:56:31:04:3e:62: 87:40:b6:66:ff:6f:6d:1d:24:2b:34:c6:b1:30:84:d1:99:d8: b5:50:e7:4e:5c:2e:9d:b1:c4:fd:f6:95:37:34:64:4d:0d:54: e7:73:b1:4c:ef:e2:2d:a7:ce:70:66:12:68:29:90:2b:de:5c: fa:bf:92:45:88:e9:01:19:73:f8:74:bd:2b:59:62:aa:b3:33: 76:5d:35:a4:ca:79:18:5f:0b:a2:d9:db:ae:3a:be:43:8a:40: 4b:84:20:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91ee4BtM9rBsZegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYwNFoXDTI1MDkxNzA5MTYwNFowLzEtMCsGA1UEAxMk MTRhNzgyN2QtMDFmYy00ZGQyLWJmNmQtNTg4Njg2Yzc5ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB25ZTNlbUcgRq1xpQezGnLghjTe/n/4x7KJ zadXPzTaUS5cAhkScvrmex7LRxhuwZIGzvFQQkXRT60lKjpOB/K3wrhAWHskLZlZ jRkkEb8ixtbzgolX1R+Apqqpovip5dxL+/kalk+9lW+2EbV84iFI0p6xMyKUpHWA qQMKor4o2fBcqcL7kOkUfxClj8rgn8znOiTxToca/vOOMwdrEdxddW7OOwBKq5wG Q7eGfSoopKsXFUO1GjtkQsCpiIwscZ72Sf+kQBxeKLiGo5HFdr91KPIN4kDAPoTi hfbLIysxt4zP7PV1kwr/OyigUCRR0bmUb4GuIhgmS4K+3XuBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzLh44BDFtmp+JHML3Rpe90jTLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjI0ZDdhNjEtMTJlYi0z MWQ1LTgwMWEtMWI0Nzg5YTZmMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ+WSBhkGLkHLbRxiV1Vkx99fJPTv+B9Cya75HhYxWvE1UOMHmU3lUz wWQoRKFCrzpG8SSZi4JXaNPcNfuJ+LXuGssWGL8jsXWrmozKLx5aSjzfZeCrGcbS k+hfeHjf5L14tiFmimp+0Xfm23OAA0T682D0/By9dYFf7hObjaV2s1YzAVTvK7Tt QzWAgkBeNzNZggHfpepXgHIp59lWMQQ+YodAtmb/b20dJCs0xrEwhNGZ2LVQ505c Lp2xxP32lTc0ZE0NVOdzsUzv4i2nznBmEmgpkCveXPq/kkWI6QEZc/h0vStZYqqz M3ZdNaTKeRhfC6LZ2646vkOKQEuEIFI= -----END CERTIFICATE-----Generated at Tue Jul 1 10:03:06 2025 by rpki-client