$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa File: bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa (raw, json) Hash identifier: 8R5cB/jzm/sCnEzI17KLGPYMFQtlB0gP6qqsibqOIRs= Subject key identifier: 99:00:BE:8D:6B:28:6B:D1:3F:A3:4F:A4:FE:63:4D:25:AF:D2:78:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FEA244A6C552F0C009900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa Signing time: Wed 18 Jun 2025 18:01:20 +0000 ROA not before: Wed 18 Jun 2025 18:01:20 +0000 ROA not after: Tue 16 Sep 2025 18:01:20 +0000 asID: 22773 IP address blocks: 68.0.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:ea:24:4a:6c:55:2f:0c:00:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:20 2025 GMT Not After : Sep 16 18:01:20 2025 GMT Subject: CN=5df2b70e-ca82-4daa-b558-e5b4e9569041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:3f:ff:eb:f5:27:b8:d7:9b:70:a9:c2:9b: d2:4f:83:3a:12:c7:fd:da:4a:18:ed:03:82:44:92: 00:2f:7a:89:33:f2:b1:4c:6a:95:8b:d0:15:a0:48: fd:40:8c:59:ae:d9:eb:dd:49:cb:18:b5:a0:23:f5: d9:35:52:34:dc:d5:19:5d:8d:08:30:59:76:ff:79: 08:88:71:64:27:33:2a:7e:3d:fd:7c:14:9f:65:fb: d8:29:3b:2c:77:ab:01:a5:5f:92:e0:f7:ce:f8:32: 3a:33:2b:86:c2:95:75:91:7d:e6:46:28:13:b8:34: 58:b2:be:85:74:f1:cf:b9:2b:f6:4b:eb:d7:fb:55: 57:ba:49:84:bf:7d:a6:98:2b:c3:c9:9c:d8:e4:e6: f8:4a:d4:10:20:84:a6:e4:1e:b4:1b:9c:32:bc:ef: 46:c2:05:79:63:89:6d:3e:ea:7e:55:9a:54:a7:e1: 08:78:5e:5e:48:93:c1:c9:af:82:4b:b1:11:6e:c6: 25:4a:16:da:65:7e:46:b4:d1:41:2c:1a:f6:02:fe: 6d:58:7e:93:59:71:e2:f0:6a:e1:f5:70:21:f1:99: b9:8e:8c:20:86:a9:63:ee:6b:c2:75:8b:86:92:01: bd:ac:b3:f3:b6:27:6f:e2:81:f6:33:ed:ea:db:5b: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:00:BE:8D:6B:28:6B:D1:3F:A3:4F:A4:FE:63:4D:25:AF:D2:78:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:34:b6:08:a2:69:54:ba:90:41:c1:4a:3e:87:56:3b:a2:7a: 8e:36:25:1e:a9:1f:85:60:7e:fc:d7:34:90:dc:eb:f9:88:5a: b0:52:19:89:80:1c:89:4b:3d:56:6b:ab:49:87:8b:29:c9:85: 1e:93:e0:3a:c5:8f:b7:7e:4d:18:55:a1:6b:67:71:b5:11:0e: fd:79:d8:71:c5:e0:ed:bc:20:a7:9e:7c:7f:9b:25:92:a2:1e: 03:52:10:47:6e:ba:9f:89:96:c1:70:a8:3f:1a:ae:e4:74:6e: ef:61:ca:91:66:85:4b:db:78:4c:b5:32:83:b1:40:38:3c:95: 5c:61:89:b6:11:88:61:67:be:a8:e6:f3:e7:47:dd:ab:e3:66: d9:99:f7:15:8a:b5:a2:e5:4d:ae:77:b3:fa:f9:f2:09:cf:54: 9b:de:f3:fa:bb:6d:ce:fb:7c:e4:90:34:6f:39:e1:59:0e:25: 42:50:39:4f:c0:8c:6a:a0:d2:05:d4:31:8e:ec:fe:f5:28:3a: db:f9:1b:ec:81:fc:27:9e:38:57:51:97:1b:1e:23:d4:a7:1a: 23:9b:26:4e:ed:d8:80:30:6b:e1:ed:bf:32:4f:1a:be:5c:90: 05:79:4d:4d:9a:58:aa:b9:d3:5b:56:a0:25:3d:e8:4a:1e:ac: 12:51:cd:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D+okSmxVLwwAmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEyMFoXDTI1MDkxNjE4MDEyMFowLzEtMCsGA1UEAxMk NWRmMmI3MGUtY2E4Mi00ZGFhLWI1NTgtZTViNGU5NTY5MDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaE//+v1J7jXm3CpwpvST4M6Esf92koY7QOC RJIAL3qJM/KxTGqVi9AVoEj9QIxZrtnr3UnLGLWgI/XZNVI03NUZXY0IMFl2/3kI iHFkJzMqfj39fBSfZfvYKTssd6sBpV+S4PfO+DI6MyuGwpV1kX3mRigTuDRYsr6F dPHPuSv2S+vX+1VXukmEv32mmCvDyZzY5Ob4StQQIISm5B60G5wyvO9GwgV5Y4lt Pup+VZpUp+EIeF5eSJPBya+CS7ERbsYlShbaZX5GtNFBLBr2Av5tWH6TWXHi8Grh 9XAh8Zm5jowghqlj7mvCdYuGkgG9rLPztidv4oH2M+3q21v+1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkAvo1rKGvRP6NPpP5jTSWv0ngIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFkMWNlMzktN2Q4Yy0z NjA4LWJmNjYtZmIyYmIyNTI3NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG80tgiiaVS6kEHBSj6HVjuieo42JR6pH4VgfvzXNJDc6/mIWrBSGYmA HIlLPVZrq0mHiynJhR6T4DrFj7d+TRhVoWtncbURDv152HHF4O28IKeefH+bJZKi HgNSEEduup+JlsFwqD8aruR0bu9hypFmhUvbeEy1MoOxQDg8lVxhibYRiGFnvqjm 8+dH3avjZtmZ9xWKtaLlTa53s/r58gnPVJve8/q7bc77fOSQNG854VkOJUJQOU/A jGqg0gXUMY7s/vUoOtv5G+yB/CeeOFdRlxseI9SnGiObJk7t2IAwa+HtvzJPGr5c kAV5TU2aWKq501tWoCU96EoerBJRzU4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:25:34 2025 by rpki-client