$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baaa710c-f24f-388a-9eab-a8a866b5e2d5.roa File: baaa710c-f24f-388a-9eab-a8a866b5e2d5.roa (raw, json) Hash identifier: J6xrUDV6uu9XEJUKfZo7wxsT7agHSrjrFFCQkR7WLWQ= Subject key identifier: 7D:D2:58:F1:B6:96:B0:2B:97:D4:6E:FD:87:88:3A:7A:D0:53:C4:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A74A6F5BFF207080193900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baaa710c-f24f-388a-9eab-a8a866b5e2d5.roa Signing time: Fri 20 Jun 2025 09:29:34 +0000 ROA not before: Fri 20 Jun 2025 09:29:34 +0000 ROA not after: Thu 18 Sep 2025 09:29:34 +0000 asID: 22773 IP address blocks: 68.108.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:4a:6f:5b:ff:20:70:80:19:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:34 2025 GMT Not After : Sep 18 09:29:34 2025 GMT Subject: CN=ab23a1bc-4c4f-4ea4-8e05-233f5145b698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7a:03:50:6a:9f:cb:dd:a5:07:55:16:64:9f: ab:16:78:c9:09:60:18:1c:8c:92:a3:38:d5:b6:4e: 60:b6:97:44:8b:7c:de:a9:14:0b:1f:8a:f0:22:f0: ee:ef:f4:99:1a:cf:58:55:17:8f:e6:58:b1:b7:8d: 76:83:d6:82:02:d2:6c:93:b2:03:da:10:5a:61:ae: ac:7d:fc:05:8e:e8:27:7e:33:80:46:f3:5e:67:bf: ab:13:7e:38:ba:5a:a4:43:ef:8e:a7:34:a4:87:10: 22:3d:44:5f:30:2c:27:ae:3e:0a:32:d1:18:77:ee: f8:d7:6f:08:8b:bb:f7:83:9f:0b:05:b3:98:86:0c: 09:cb:3e:0d:b9:32:27:7d:12:9e:b9:a3:59:0b:5e: 41:9a:64:a1:01:b1:23:8e:0f:53:ea:bc:f0:7e:43: c8:24:2a:99:3d:3c:8a:a7:9e:7d:4c:29:e5:5e:f5: 83:13:c4:16:33:d2:26:e5:16:2a:1d:3e:06:7e:4b: bc:83:63:59:67:ba:c1:67:7c:9a:d4:49:8b:9f:0a: 90:b9:f1:b8:eb:73:7d:bf:d1:93:28:7c:46:10:0b: ea:ce:28:3e:fd:55:c3:94:2f:df:70:ae:96:21:f4: 77:0e:08:ea:94:63:68:20:d0:35:4a:27:c0:03:c9: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D2:58:F1:B6:96:B0:2B:97:D4:6E:FD:87:88:3A:7A:D0:53:C4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baaa710c-f24f-388a-9eab-a8a866b5e2d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ef:5d:ae:16:39:60:0c:c0:5e:62:18:ae:96:07:a5:0a:5e: e7:06:47:fc:5a:9f:ee:05:66:d3:a4:67:35:72:04:d7:1a:76: 67:93:ba:25:e5:1d:05:01:95:3e:63:96:f2:60:8f:db:25:33: 13:b5:1f:0f:ce:ae:73:f9:bd:61:12:09:d4:a5:d7:a2:d2:5b: 41:4e:46:c4:1c:2a:1c:1b:11:6b:6b:35:16:c5:4a:0d:99:8a: 55:2a:92:c2:42:f8:a7:c2:f3:55:2c:e3:02:6e:bf:3c:9a:0d: 3c:79:c9:7f:e4:f8:90:95:a4:a7:52:fb:61:7c:b8:d4:62:07: b2:1d:89:e1:a7:d6:51:a2:a0:7b:1a:0e:b0:ec:3c:cf:b0:80: be:30:04:d0:c9:ea:c7:12:c0:75:01:11:f7:7c:ae:a7:ab:e6: eb:7e:51:2d:29:ad:a0:f1:b7:f8:c6:43:a1:bf:9d:a8:67:08: 91:65:3c:9d:d5:97:cd:ff:06:dc:41:a3:39:ac:44:5c:90:9e: 4a:ae:51:f7:b1:d8:9d:eb:2f:0d:19:a5:82:8f:a6:e0:48:cf: a0:35:cc:55:8a:b0:e4:d6:13:3f:e9:a7:02:c6:ce:af:9c:02: d4:36:8d:89:f9:3c:1e:d3:72:a8:c3:c6:a5:2c:e0:a1:b0:9c: 9b:78:4d:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp0pvW/8gcIAZOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkzNFoXDTI1MDkxODA5MjkzNFowLzEtMCsGA1UEAxMk YWIyM2ExYmMtNGM0Zi00ZWE0LThlMDUtMjMzZjUxNDViNjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHoDUGqfy92lB1UWZJ+rFnjJCWAYHIySozjV tk5gtpdEi3zeqRQLH4rwIvDu7/SZGs9YVReP5lixt412g9aCAtJsk7ID2hBaYa6s ffwFjugnfjOARvNeZ7+rE344ulqkQ++OpzSkhxAiPURfMCwnrj4KMtEYd+74128I i7v3g58LBbOYhgwJyz4NuTInfRKeuaNZC15BmmShAbEjjg9T6rzwfkPIJCqZPTyK p559TCnlXvWDE8QWM9Im5RYqHT4Gfku8g2NZZ7rBZ3ya1EmLnwqQufG463N9v9GT KHxGEAvqzig+/VXDlC/fcK6WIfR3DgjqlGNoINA1SifAA8mHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3SWPG2lrArl9Ru/YeIOnrQU8R2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFhYTcxMGMtZjI0Zi0z ODhhLTllYWItYThhODY2YjVlMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzvXa4WOWAMwF5iGK6WB6UKXucGR/xan+4FZtOkZzVyBNcadmeTuiXl HQUBlT5jlvJgj9slMxO1Hw/OrnP5vWESCdSl16LSW0FORsQcKhwbEWtrNRbFSg2Z ilUqksJC+KfC81Us4wJuvzyaDTx5yX/k+JCVpKdS+2F8uNRiB7IdieGn1lGioHsa DrDsPM+wgL4wBNDJ6scSwHUBEfd8rqer5ut+US0praDxt/jGQ6G/nahnCJFlPJ3V l83/BtxBozmsRFyQnkquUfex2J3rLw0ZpYKPpuBIz6A1zFWKsOTWEz/ppwLGzq+c AtQ2jYn5PB7TcqjDxqUs4KGwnJt4TWE= -----END CERTIFICATE-----Generated at Mon Jun 30 18:26:08 2025 by rpki-client