$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8aa3b65-8438-32f9-b52f-4d5304e02eb2.roa File: b8aa3b65-8438-32f9-b52f-4d5304e02eb2.roa (raw, json) Hash identifier: ILslEoWO3GxvyR+ChLx4kkRZWEMCG5o8ZK+l7GrFfQ8= Subject key identifier: 4E:F8:E3:92:97:6E:E3:48:F3:6B:9E:76:B8:24:F5:C2:F1:04:C6:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6EA6C83FBA13472F92E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8aa3b65-8438-32f9-b52f-4d5304e02eb2.roa Signing time: Thu 19 Jun 2025 09:18:06 +0000 ROA not before: Thu 19 Jun 2025 09:18:06 +0000 ROA not after: Wed 17 Sep 2025 09:18:06 +0000 asID: 22773 IP address blocks: 68.231.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:ea:6c:83:fb:a1:34:72:f9:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:06 2025 GMT Not After : Sep 17 09:18:06 2025 GMT Subject: CN=f17a4117-7b9b-42ec-bd6b-dcaa7488f153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:6f:94:0f:c8:e9:0c:0f:b8:f4:df:36:c3: 4f:9e:2e:82:c5:50:4e:b2:29:88:0c:64:a3:83:a5: ef:aa:47:dd:53:e9:d5:97:d9:cf:a6:34:4b:55:e6: 46:a9:d0:85:d0:bc:2e:70:a5:ad:22:48:95:70:ae: 6f:a3:c4:16:ea:e0:23:28:4c:b5:9e:b6:08:af:ad: 33:88:bb:52:33:6e:8d:6d:0a:fa:a1:c2:7c:d3:1f: fb:9c:24:e6:18:21:69:4d:1a:ed:9c:f0:e4:fd:61: d2:71:b1:0a:2b:4a:0c:a1:32:db:f4:8f:e6:6e:ac: 42:cf:64:b8:68:96:ba:97:b6:6c:80:fb:87:b9:8b: cc:df:14:4f:d1:2e:b4:b2:60:03:32:1e:ab:57:b2: 18:0b:f1:52:16:16:38:9c:ae:05:30:97:08:ba:85: 12:c2:43:33:fb:5c:0b:e0:de:ee:81:3e:5c:16:76: fc:e2:72:b2:1f:ca:74:81:57:9e:e9:32:f8:04:d8: b4:8c:20:23:da:25:28:3e:46:59:2c:97:da:6d:72: ad:7b:8d:c7:15:e4:1c:a1:84:21:98:e4:ce:eb:8f: 56:07:32:3a:7e:8f:ba:71:ff:4b:4e:71:20:94:a8: 7b:c1:41:40:b8:c9:51:ad:ce:88:6e:97:28:22:fd: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F8:E3:92:97:6E:E3:48:F3:6B:9E:76:B8:24:F5:C2:F1:04:C6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b8aa3b65-8438-32f9-b52f-4d5304e02eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:76:e9:74:f1:00:62:ed:f5:b6:a9:c3:66:20:d1:a8:aa:cf: 03:91:04:f6:c6:52:4e:12:57:ed:22:c9:08:52:56:ab:1f:33: 1a:31:60:2d:0c:a6:c9:e2:bf:88:1a:bd:75:ef:68:1c:6b:b0: 71:0f:12:63:e3:05:f7:2c:39:23:ee:66:39:f0:09:93:42:02: 1e:a5:5e:2a:a5:0f:f1:43:a8:cf:f7:39:14:5a:9d:d2:9c:34: 5c:66:10:45:5d:70:c6:f6:c8:85:40:bb:f4:cf:11:79:65:4a: 6b:b3:32:84:e3:39:0c:22:50:65:4a:e3:6e:83:88:31:ed:00: ff:d3:58:ec:4e:6e:4b:dc:9d:e2:ff:92:b9:20:bc:fe:e1:c1: 4e:96:4d:38:48:43:1f:13:ba:3d:05:74:64:fd:3b:05:59:5a: 8b:a4:10:63:33:26:f7:d7:da:d9:ea:95:1e:ce:af:df:f3:44: 46:eb:80:34:be:ef:72:23:20:37:eb:df:e0:44:ed:ea:84:d8: 0a:d5:4e:6c:74:d1:2f:cd:75:f2:99:34:a8:70:a5:04:31:3d: 12:68:75:9c:eb:61:31:1c:1c:8a:8a:7a:43:b2:87:b8:4a:13: 75:99:ca:8c:66:ce:cc:4c:f4:2c:6e:de:79:b1:5c:31:92:f9: 71:23:4c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91upsg/uhNHL5LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwNloXDTI1MDkxNzA5MTgwNlowLzEtMCsGA1UEAxMk ZjE3YTQxMTctN2I5Yi00MmVjLWJkNmItZGNhYTc0ODhmMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOVvlA/I6QwPuPTfNsNPni6CxVBOsimIDGSj g6XvqkfdU+nVl9nPpjRLVeZGqdCF0LwucKWtIkiVcK5vo8QW6uAjKEy1nrYIr60z iLtSM26NbQr6ocJ80x/7nCTmGCFpTRrtnPDk/WHScbEKK0oMoTLb9I/mbqxCz2S4 aJa6l7ZsgPuHuYvM3xRP0S60smADMh6rV7IYC/FSFhY4nK4FMJcIuoUSwkMz+1wL 4N7ugT5cFnb84nKyH8p0gVee6TL4BNi0jCAj2iUoPkZZLJfabXKte43HFeQcoYQh mOTO649WBzI6fo+6cf9LTnEglKh7wUFAuMlRrc6IbpcoIv2VXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7445KXbuNI82uedrgk9cLxBMZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjhhYTNiNjUtODQzOC0z MmY5LWI1MmYtNGQ1MzA0ZTAyZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJN26XTxAGLt9bapw2Yg0aiqzwORBPbGUk4SV+0iyQhSVqsfMxoxYC0M psniv4gavXXvaBxrsHEPEmPjBfcsOSPuZjnwCZNCAh6lXiqlD/FDqM/3ORRandKc NFxmEEVdcMb2yIVAu/TPEXllSmuzMoTjOQwiUGVK426DiDHtAP/TWOxObkvcneL/ krkgvP7hwU6WTThIQx8Tuj0FdGT9OwVZWoukEGMzJvfX2tnqlR7Or9/zREbrgDS+ 73IjIDfr3+BE7eqE2ArVTmx00S/NdfKZNKhwpQQxPRJodZzrYTEcHIqKekOyh7hK E3WZyoxmzsxM9Cxu3nmxXDGS+XEjTKc= -----END CERTIFICATE-----Generated at Tue Jul 1 10:34:39 2025 by rpki-client