$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/beaff9d4-1fa0-3b6d-8dbe-f74eb725709b.roa File: beaff9d4-1fa0-3b6d-8dbe-f74eb725709b.roa (raw, json) Hash identifier: 9/R5RknQbtAOZ6zbboJj7W9l51TwoY4WCl5f205rPLU= Subject key identifier: 32:4B:48:88:B2:0C:75:5E:0C:CD:6D:86:32:83:6C:DB:E7:E2:9D:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39909C0A6B7E7934B96F8140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/beaff9d4-1fa0-3b6d-8dbe-f74eb725709b.roa Signing time: Tue 17 Jun 2025 20:33:13 +0000 ROA not before: Tue 17 Jun 2025 20:33:13 +0000 ROA not after: Mon 15 Sep 2025 20:33:13 +0000 asID: 22773 IP address blocks: 68.2.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:9c:0a:6b:7e:79:34:b9:6f:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:33:13 2025 GMT Not After : Sep 15 20:33:13 2025 GMT Subject: CN=4aa8998a-ca4d-4139-a3e0-6a22e5774213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:ea:bb:c5:7d:2a:7c:7a:b1:8b:94:73:b8: b5:7c:97:32:f6:e5:94:a5:61:3d:99:c8:9a:b5:03: 3a:ab:e1:25:2e:ef:8c:53:9f:2b:21:3d:8d:d2:a3: 8e:72:83:96:a8:0f:12:ee:20:aa:bd:66:a5:b0:e5: 23:c0:09:fe:52:22:9d:b5:94:94:90:e4:59:2f:28: c8:55:e6:10:b1:32:3c:85:ab:67:73:87:0e:32:f0: ea:a3:b9:1c:1b:4e:ec:0b:1c:82:5e:8e:af:e6:12: 55:d1:d2:1f:0c:e2:b3:b3:27:f5:e6:50:18:26:37: e7:a2:56:8a:75:c8:79:7f:c7:05:e8:5d:53:b3:c9: 3e:48:35:3f:dd:fc:41:fb:dd:c1:d0:28:dc:e5:4a: 8e:80:56:f3:7b:37:de:ee:22:55:c1:7e:ae:3c:4e: 65:08:7a:ee:62:ef:52:59:61:f3:a2:a7:56:40:47: 13:21:e3:51:36:16:3f:45:59:14:c0:db:79:8a:e6: ef:62:68:7c:89:e6:da:77:f5:c8:da:b1:3b:59:cf: 3e:e6:e5:63:b2:60:33:1f:cf:ef:a8:08:e1:a3:9c: ce:78:7b:29:07:50:92:f6:69:9f:97:24:93:0c:94: 1c:c0:21:e4:28:73:ae:05:85:5b:4c:1a:1d:69:3a: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4B:48:88:B2:0C:75:5E:0C:CD:6D:86:32:83:6C:DB:E7:E2:9D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/beaff9d4-1fa0-3b6d-8dbe-f74eb725709b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a8:7a:ab:9b:65:ec:77:ab:67:e0:de:63:69:fb:ac:2c:bf: 60:a3:24:fb:f9:8f:df:79:1d:d0:ee:1d:a0:4d:b9:e6:5b:ec: ce:2d:23:9b:ee:0c:eb:34:42:83:5f:8a:0e:f3:91:43:b5:79: ce:bd:e1:f8:1a:0c:93:c9:7d:2b:8e:af:97:68:8f:1a:d3:16: fb:6b:18:94:d0:97:05:11:4d:31:8a:c0:d4:80:b4:ab:86:c2: 9b:8d:e8:50:93:ac:4d:21:1f:e4:53:95:f1:9c:77:47:02:b8: 7c:87:dd:78:16:57:d1:98:5d:70:20:9f:42:e5:55:b1:9d:46: 73:70:73:2a:99:36:b4:ba:59:42:43:20:b8:fc:18:68:11:7b: 7b:3c:e6:75:59:89:1e:97:12:e8:98:84:56:ae:12:11:19:9f: fc:2f:02:e5:e8:fa:17:25:2b:4f:f9:e9:ec:0f:cb:2b:eb:5c: de:be:9e:6f:1b:14:40:46:54:e2:bf:63:33:42:41:87:3f:04: 1b:f4:aa:30:2c:44:d9:31:48:99:1c:8f:c0:6a:5f:6e:41:7e: 60:60:1d:23:af:16:23:04:9d:b9:25:91:8b:0f:6a:39:68:1e: c2:1a:99:cd:1d:89:9e:3d:70:fa:71:d8:1a:73:62:42:04:36: 6a:bc:e1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kJwKa355NLlvgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzMxM1oXDTI1MDkxNTIwMzMxM1owLzEtMCsGA1UEAxMk NGFhODk5OGEtY2E0ZC00MTM5LWEzZTAtNmEyMmU1Nzc0MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzqu8V9Knx6sYuUc7i1fJcy9uWUpWE9mcia tQM6q+ElLu+MU58rIT2N0qOOcoOWqA8S7iCqvWalsOUjwAn+UiKdtZSUkORZLyjI VeYQsTI8hatnc4cOMvDqo7kcG07sCxyCXo6v5hJV0dIfDOKzsyf15lAYJjfnolaK dch5f8cF6F1Ts8k+SDU/3fxB+93B0Cjc5UqOgFbzezfe7iJVwX6uPE5lCHruYu9S WWHzoqdWQEcTIeNRNhY/RVkUwNt5iubvYmh8iebad/XI2rE7Wc8+5uVjsmAzH8/v qAjho5zOeHspB1CS9mmflySTDJQcwCHkKHOuBYVbTBodaTrd6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJLSIiyDHVeDM1thjKDbNvn4p1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmVhZmY5ZDQtMWZhMC0z YjZkLThkYmUtZjc0ZWI3MjU3MDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARALBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGoequbZex3q2fg3mNp+6wsv2CjJPv5j995HdDuHaBNueZb7M4tI5vu DOs0QoNfig7zkUO1ec694fgaDJPJfSuOr5dojxrTFvtrGJTQlwURTTGKwNSAtKuG wpuN6FCTrE0hH+RTlfGcd0cCuHyH3XgWV9GYXXAgn0LlVbGdRnNwcyqZNrS6WUJD ILj8GGgRe3s85nVZiR6XEuiYhFauEhEZn/wvAuXo+hclK0/56ewPyyvrXN6+nm8b FEBGVOK/YzNCQYc/BBv0qjAsRNkxSJkcj8BqX25BfmBgHSOvFiMEnbklkYsPajlo HsIamc0diZ49cPpx2BpzYkIENmq84eM= -----END CERTIFICATE-----Generated at Tue Jul 1 06:16:39 2025 by rpki-client