$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be90c8fc-002e-3c06-a7bd-47f8566227ed.roa File: be90c8fc-002e-3c06-a7bd-47f8566227ed.roa (raw, json) Hash identifier: RiflQ90ntV1z4NTgXhyGzhbtK0+E4JPhLpDjrcul/Zo= Subject key identifier: 7E:6A:7E:67:40:B9:A4:00:7A:C6:AE:9E:89:48:C9:85:0B:F9:92:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7CAB6C43B9DD33672F980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be90c8fc-002e-3c06-a7bd-47f8566227ed.roa Signing time: Fri 20 Jun 2025 09:30:35 +0000 ROA not before: Fri 20 Jun 2025 09:30:35 +0000 ROA not after: Thu 18 Sep 2025 09:30:35 +0000 asID: 22773 IP address blocks: 68.224.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:ca:b6:c4:3b:9d:d3:36:72:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:35 2025 GMT Not After : Sep 18 09:30:35 2025 GMT Subject: CN=437e6732-51aa-4365-aeaa-17a11b95abaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:8d:b1:91:61:80:22:d7:11:b9:a3:2c:26: 7f:78:e6:9f:88:3a:e8:d3:50:cf:16:a2:7d:8c:0c: 19:36:25:c1:8c:0b:a7:f7:5e:73:a9:b8:b3:77:a3: 39:ad:4e:8d:1f:55:13:51:5a:da:7e:02:22:96:0d: 27:f6:54:d5:10:95:76:58:c6:4e:cf:f1:cb:96:ab: 89:77:ae:d5:69:13:72:f7:09:a9:42:0a:80:3e:c7: 51:ea:97:c3:13:60:5b:a4:e9:31:20:27:e5:c9:c8: d0:c6:0e:29:3b:bb:ca:b3:bc:93:36:a2:bc:a9:c6: c3:9d:be:0d:85:04:92:37:52:70:41:84:80:4c:05: 5c:2b:b9:b1:d8:71:84:0c:a7:3d:ec:e5:59:e7:50: 9c:f6:4d:76:18:76:8e:a1:dd:93:9b:18:1b:58:a2: 0f:e2:57:85:0f:e4:cd:b0:b8:83:0e:db:cf:b7:67: 7d:cc:ca:23:7c:a3:d7:6f:13:73:1b:41:d5:7f:67: 17:a5:66:91:be:e5:49:f9:00:9a:f4:95:25:20:c5: 3d:ca:f1:05:0c:5f:24:8c:44:69:04:79:0c:b2:b1: 74:b4:48:fa:87:fc:37:4a:ad:e2:43:6f:70:10:54: 1a:83:4e:27:2e:df:1c:02:f8:b5:40:2a:dc:e7:d1: bd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6A:7E:67:40:B9:A4:00:7A:C6:AE:9E:89:48:C9:85:0B:F9:92:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/be90c8fc-002e-3c06-a7bd-47f8566227ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:bc:da:25:06:8a:fb:fd:3b:36:a0:fb:f4:e7:1d:ed:af:03: ed:19:4e:63:6e:bd:d2:32:ce:0e:6e:5c:6b:1c:ef:8e:e1:4d: 1c:7c:87:2d:15:6b:86:10:82:36:03:df:4c:28:ac:65:75:b1: 11:82:8c:90:21:ac:ea:d5:c1:43:b9:20:57:ba:c0:ba:aa:6d: 95:ab:25:7c:93:cf:67:d7:ec:dc:5c:92:5f:e7:2f:c7:d8:c8: 33:73:82:4a:ec:d0:2a:c6:c4:7a:04:98:c4:09:f2:40:b6:1c: fe:a0:45:90:6a:ca:69:77:82:0c:68:75:50:2d:67:11:a7:d0: de:e1:39:0f:84:0c:bc:a7:b2:b7:ec:43:fd:78:7a:1c:bf:b9: d8:4c:c1:84:43:3e:44:43:99:c1:a0:36:35:58:32:d6:6f:f0: f2:71:9b:75:06:04:83:79:71:23:cc:6b:ad:c2:a3:31:cd:a9: d8:fd:8c:00:5d:4a:9c:ed:93:93:1e:2c:bf:b5:af:0a:41:37: d6:c0:ea:c9:bf:93:9a:8f:89:dc:a7:00:83:7f:24:77:fb:9d: 36:e8:bf:4d:e8:80:ca:89:e4:fb:1a:7b:d2:62:93:bf:a7:b5: 2e:de:17:83:51:f7:4b:8e:36:d4:a9:10:fa:ba:2e:e3:c4:fb: 97:14:e3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp8q2xDud0zZy+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzNVoXDTI1MDkxODA5MzAzNVowLzEtMCsGA1UEAxMk NDM3ZTY3MzItNTFhYS00MzY1LWFlYWEtMTdhMTFiOTVhYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7eNsZFhgCLXEbmjLCZ/eOafiDro01DPFqJ9 jAwZNiXBjAun915zqbizd6M5rU6NH1UTUVrafgIilg0n9lTVEJV2WMZOz/HLlquJ d67VaRNy9wmpQgqAPsdR6pfDE2BbpOkxICflycjQxg4pO7vKs7yTNqK8qcbDnb4N hQSSN1JwQYSATAVcK7mx2HGEDKc97OVZ51Cc9k12GHaOod2TmxgbWKIP4leFD+TN sLiDDtvPt2d9zMojfKPXbxNzG0HVf2cXpWaRvuVJ+QCa9JUlIMU9yvEFDF8kjERp BHkMsrF0tEj6h/w3Sq3iQ29wEFQag04nLt8cAvi1QCrc59G96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5qfmdAuaQAesaunolIyYUL+ZKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmU5MGM4ZmMtMDAyZS0z YzA2LWE3YmQtNDdmODU2NjIyN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK82iUGivv9Ozag+/TnHe2vA+0ZTmNuvdIyzg5uXGsc747hTRx8hy0V a4YQgjYD30worGV1sRGCjJAhrOrVwUO5IFe6wLqqbZWrJXyTz2fX7Nxckl/nL8fY yDNzgkrs0CrGxHoEmMQJ8kC2HP6gRZBqyml3ggxodVAtZxGn0N7hOQ+EDLynsrfs Q/14ehy/udhMwYRDPkRDmcGgNjVYMtZv8PJxm3UGBIN5cSPMa63CozHNqdj9jABd Spztk5MeLL+1rwpBN9bA6sm/k5qPidynAIN/JHf7nTbov03ogMqJ5Psae9Jik7+n tS7eF4NR90uONtSpEPq6LuPE+5cU4+c= -----END CERTIFICATE-----Generated at Mon Jun 30 19:28:06 2025 by rpki-client