$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b598efbe-2c2f-3512-99eb-5e684ca06029.roa File: b598efbe-2c2f-3512-99eb-5e684ca06029.roa (raw, json) Hash identifier: d5utAhSYuQ67yPAGS0Hd4nEzNwKA6mm1m5VEYunyMgw= Subject key identifier: C5:21:58:BD:57:39:42:5D:20:AC:43:A2:C6:18:0C:3A:47:58:75:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39906C91975F877A8C4A8530 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b598efbe-2c2f-3512-99eb-5e684ca06029.roa Signing time: Tue 17 Jun 2025 20:32:50 +0000 ROA not before: Tue 17 Jun 2025 20:32:50 +0000 ROA not after: Mon 15 Sep 2025 20:32:50 +0000 asID: 22773 IP address blocks: 68.2.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:6c:91:97:5f:87:7a:8c:4a:85:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:50 2025 GMT Not After : Sep 15 20:32:50 2025 GMT Subject: CN=63959bb8-f981-4a2e-8032-d783c1e54015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:f7:a3:71:e0:36:67:de:2d:b6:ef:3c:9d: 63:2c:63:be:57:df:06:f9:92:a9:17:ab:0c:5b:c2: fa:13:cf:05:52:8d:f3:c5:9b:81:52:92:69:7a:74: e2:bd:ea:d8:cb:38:c2:4d:a0:41:0b:e6:02:38:13: 72:bb:d0:bd:2d:68:08:57:64:69:4b:e4:dd:7b:e2: 76:e3:88:d5:f4:29:5b:77:ee:82:92:23:59:21:95: 37:48:65:37:c2:df:48:cd:62:53:1a:3c:5b:92:be: 95:f8:ce:db:81:c4:ef:15:d4:62:36:ba:51:ca:cb: fc:ba:76:85:64:d2:f3:77:50:33:a9:7d:9d:0a:b2: b7:7b:91:34:17:2c:52:ec:56:ba:b3:d1:05:66:45: 03:c4:0b:83:1f:e9:8f:6d:98:2d:17:52:5e:a8:06: 7e:71:38:ec:a5:65:89:8b:18:30:03:af:46:4a:73: 6d:64:4a:3c:2e:38:f0:68:fd:6e:da:3c:64:9c:6e: 34:61:c2:26:18:a7:34:e1:20:2a:91:aa:29:10:1e: e0:50:7c:61:e3:e6:4a:a7:10:12:85:f0:a1:07:2c: 1f:ac:af:df:8c:c6:ff:83:a8:b0:79:af:69:c6:e6: c1:38:fe:f3:1d:77:26:ca:65:f1:c6:03:de:41:41: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:21:58:BD:57:39:42:5D:20:AC:43:A2:C6:18:0C:3A:47:58:75:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b598efbe-2c2f-3512-99eb-5e684ca06029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5c:88:36:4a:d7:9e:d8:41:fb:44:8a:40:81:c4:c7:45:fc: 81:a4:1d:a3:4c:22:fc:40:12:cb:05:81:c6:b0:7f:0d:c9:a8: 6a:af:ce:f0:11:53:35:93:e1:80:71:e7:81:77:cb:0e:82:c1: fe:83:39:e5:be:f8:a2:8b:7e:19:4b:29:2c:81:01:f2:72:e3: 3b:71:82:5c:b9:c1:81:56:94:da:63:16:90:73:db:94:a8:85: ed:78:3e:72:8e:02:19:43:02:bd:36:bc:16:31:9d:2d:44:9b: d6:80:ff:5e:27:e8:5d:4c:08:dd:69:e0:ae:96:77:36:05:4d: 4e:a2:5a:f8:85:10:07:5f:74:ef:cc:60:63:2b:cd:e3:4d:70: a8:2e:8b:0a:45:38:54:71:ea:79:8d:56:f1:91:c5:9a:15:3d: 1d:8e:6d:2c:b2:79:bd:33:3b:7b:f0:f8:0b:1f:44:19:9c:b1: fe:7f:a8:b6:ea:0a:aa:5f:41:c0:c0:12:a0:bd:ff:91:4d:7a: 15:57:78:97:06:af:0b:be:5a:c0:cb:6f:52:bd:7b:f5:7a:49: ea:51:72:4a:74:4d:ed:63:8a:40:0e:b8:c2:0e:65:74:7c:e5: df:28:f4:66:59:23:86:6c:98:ce:bc:db:21:f5:c4:32:09:29: a6:69:fb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kGyRl1+HeoxKhTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI1MFoXDTI1MDkxNTIwMzI1MFowLzEtMCsGA1UEAxMk NjM5NTliYjgtZjk4MS00YTJlLTgwMzItZDc4M2MxZTU0MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J/3o3HgNmfeLbbvPJ1jLGO+V98G+ZKpF6sM W8L6E88FUo3zxZuBUpJpenTiverYyzjCTaBBC+YCOBNyu9C9LWgIV2RpS+Tde+J2 44jV9Clbd+6CkiNZIZU3SGU3wt9IzWJTGjxbkr6V+M7bgcTvFdRiNrpRysv8unaF ZNLzd1AzqX2dCrK3e5E0FyxS7Fa6s9EFZkUDxAuDH+mPbZgtF1JeqAZ+cTjspWWJ ixgwA69GSnNtZEo8LjjwaP1u2jxknG40YcImGKc04SAqkaopEB7gUHxh4+ZKpxAS hfChBywfrK/fjMb/g6iwea9pxubBOP7zHXcmymXxxgPeQUEdkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUhWL1XOUJdIKxDosYYDDpHWHU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU5OGVmYmUtMmMyZi0z NTEyLTk5ZWItNWU2ODRjYTA2MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABciDZK157YQftEikCBxMdF/IGkHaNMIvxAEssFgcawfw3JqGqvzvAR UzWT4YBx54F3yw6Cwf6DOeW++KKLfhlLKSyBAfJy4ztxgly5wYFWlNpjFpBz25So he14PnKOAhlDAr02vBYxnS1Em9aA/14n6F1MCN1p4K6WdzYFTU6iWviFEAdfdO/M YGMrzeNNcKguiwpFOFRx6nmNVvGRxZoVPR2ObSyyeb0zO3vw+AsfRBmcsf5/qLbq CqpfQcDAEqC9/5FNehVXeJcGrwu+WsDLb1K9e/V6SepRckp0Te1jikAOuMIOZXR8 5d8o9GZZI4ZsmM682yH1xDIJKaZp+4w= -----END CERTIFICATE-----Generated at Thu Jul 3 21:27:27 2025 by rpki-client