$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba28cb40-ccb2-309c-a21e-639cf598c9f7.roa File: ba28cb40-ccb2-309c-a21e-639cf598c9f7.roa (raw, json) Hash identifier: zFn3h66Sm9xYR1dRMRFlc1G3+KfNgQ/JBQg6pyQlCfA= Subject key identifier: 11:E0:16:3E:DF:9C:20:73:8B:BE:56:6B:A9:D6:C1:29:C0:E7:5C:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7CDEE3209289F7F3C0880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba28cb40-ccb2-309c-a21e-639cf598c9f7.roa Signing time: Fri 20 Jun 2025 09:30:36 +0000 ROA not before: Fri 20 Jun 2025 09:30:36 +0000 ROA not after: Thu 18 Sep 2025 09:30:36 +0000 asID: 22773 IP address blocks: 68.224.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:cd:ee:32:09:28:9f:7f:3c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:36 2025 GMT Not After : Sep 18 09:30:36 2025 GMT Subject: CN=5aa33a45-6cc9-490c-8015-e001a6b8160f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:57:4c:95:23:a6:5c:96:5d:4e:f6:3b:ca:99: 48:93:a7:cc:9d:e1:98:36:a6:fa:df:db:c0:68:91: e6:ca:25:32:39:e8:ba:ce:b4:83:6e:9c:f5:9a:4c: b2:66:12:7b:2a:93:29:ae:9f:7c:f3:b9:83:3a:63: 91:1a:f7:87:f4:a5:0c:20:91:b5:3c:92:6e:81:ad: df:4a:2b:a6:e0:45:bf:19:b7:11:35:33:6b:e1:ca: 07:7a:53:7b:b8:19:48:a7:a8:aa:b3:32:8b:13:b6: 5a:00:6a:1d:d6:16:b5:dd:29:d9:04:b6:a0:a5:6d: d1:7d:2e:90:13:a0:4c:5b:a4:fa:f2:20:89:12:ff: 64:1a:c1:4c:22:c7:4e:d1:4e:40:a4:cf:73:6b:57: 83:48:db:13:cd:ed:2b:dc:c8:04:78:bd:cb:c5:02: 51:35:66:02:81:96:25:12:cc:f6:f6:ef:44:33:c1: c4:de:cc:1d:8b:c3:a5:e3:8d:30:3b:94:54:d3:7a: 7e:e2:64:be:9a:be:bf:01:58:d4:71:dc:e3:d7:de: 11:6e:ce:c2:30:e9:10:f4:c9:d7:73:b7:7d:73:12: 11:95:9a:5e:00:01:85:36:2b:bb:53:0f:c7:ff:7c: c7:ff:a7:b0:7b:30:5b:28:4a:0c:6e:11:64:fb:e4: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:16:3E:DF:9C:20:73:8B:BE:56:6B:A9:D6:C1:29:C0:E7:5C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba28cb40-ccb2-309c-a21e-639cf598c9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:21:93:b7:55:a6:79:60:0a:1a:2e:4d:71:a8:5f:03:29:77: 09:6e:49:19:cf:e9:ed:2c:23:ca:48:7d:9b:a7:ae:41:38:e6: 2c:33:a7:4c:b3:b8:2e:e0:d5:85:1b:58:a4:84:92:80:c1:37: c5:fe:d9:6f:1b:5e:00:ec:b1:f1:6a:b8:e4:7b:41:84:2d:7f: 87:71:aa:9e:78:4e:39:64:2b:4a:24:c4:bc:4c:3b:bf:e7:25: b9:7f:36:46:ee:22:f9:f1:9f:d6:34:ad:02:51:61:10:da:1f: 95:e0:ae:e3:bf:23:52:98:d2:29:60:91:08:23:55:2c:e4:0b: 94:f6:c4:7c:81:97:e7:06:6c:71:27:3a:ba:e3:74:fa:3b:3d: fc:f1:27:49:93:f8:c7:89:f7:aa:88:73:f8:81:ba:ec:b4:58: 41:4e:77:d3:07:c8:e8:9e:64:ec:96:11:7a:91:14:85:59:7a: 54:55:3b:bf:ac:4f:f5:af:c1:d4:5b:87:fd:6e:67:6f:ca:d9: 61:f4:1e:e1:35:af:9d:47:74:cd:8c:f0:b8:d1:72:8e:ad:f2: 5b:aa:a2:6a:3c:c4:00:06:3d:db:a8:cf:21:fd:ac:a3:bc:3a: 16:7e:24:23:4b:69:53:1b:3a:ab:5d:48:94:e3:d1:98:36:89: ab:bb:57:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp83uMgkon388CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzNloXDTI1MDkxODA5MzAzNlowLzEtMCsGA1UEAxMk NWFhMzNhNDUtNmNjOS00OTBjLTgwMTUtZTAwMWE2YjgxNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1dMlSOmXJZdTvY7yplIk6fMneGYNqb639vA aJHmyiUyOei6zrSDbpz1mkyyZhJ7KpMprp9887mDOmORGveH9KUMIJG1PJJuga3f Sium4EW/GbcRNTNr4coHelN7uBlIp6iqszKLE7ZaAGod1ha13SnZBLagpW3RfS6Q E6BMW6T68iCJEv9kGsFMIsdO0U5ApM9za1eDSNsTze0r3MgEeL3LxQJRNWYCgZYl Esz29u9EM8HE3swdi8Ol440wO5RU03p+4mS+mr6/AVjUcdzj194Rbs7CMOkQ9MnX c7d9cxIRlZpeAAGFNiu7Uw/H/3zH/6ewezBbKEoMbhFk++QcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHgFj7fnCBzi75Wa6nWwSnA51yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmEyOGNiNDAtY2NiMi0z MDljLWEyMWUtNjM5Y2Y1OThjOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRODgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4hk7dVpnlgChouTXGoXwMpdwluSRnP6e0sI8pIfZunrkE45iwzp0yz uC7g1YUbWKSEkoDBN8X+2W8bXgDssfFquOR7QYQtf4dxqp54TjlkK0okxLxMO7/n Jbl/NkbuIvnxn9Y0rQJRYRDaH5XgruO/I1KY0ilgkQgjVSzkC5T2xHyBl+cGbHEn OrrjdPo7PfzxJ0mT+MeJ96qIc/iBuuy0WEFOd9MHyOieZOyWEXqRFIVZelRVO7+s T/WvwdRbh/1uZ2/K2WH0HuE1r51HdM2M8LjRco6t8luqomo8xAAGPduozyH9rKO8 OhZ+JCNLaVMbOqtdSJTj0Zg2iau7V0Y= -----END CERTIFICATE-----Generated at Wed Jul 2 05:03:28 2025 by rpki-client