$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa File: cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa (raw, json) Hash identifier: TceUY1Sf3O8ASc6MIDgfBePKXOXY1AlY+Zqk7fuwKBE= Subject key identifier: 95:4D:0B:7C:3D:20:EE:39:46:1B:A6:32:A4:3A:C3:14:F5:B6:73:3F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A796A58DD05EA5E6A63D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa Signing time: Fri 20 Jun 2025 09:30:10 +0000 ROA not before: Fri 20 Jun 2025 09:30:10 +0000 ROA not after: Thu 18 Sep 2025 09:30:10 +0000 asID: 22773 IP address blocks: 68.224.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:96:a5:8d:d0:5e:a5:e6:a6:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:10 2025 GMT Not After : Sep 18 09:30:10 2025 GMT Subject: CN=c6d7ffae-a4be-4b91-ae52-e11fbab58def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:20:12:f5:f5:af:a3:0a:bb:0f:44:65:1c:11: ea:27:87:b1:47:ba:b8:5e:bd:d9:4a:5e:f6:db:03: 49:b6:df:b8:0a:dc:40:17:14:70:f0:41:50:62:62: d5:7b:51:89:ef:d9:03:da:15:19:4b:8e:63:2e:02: 39:61:0c:07:61:aa:57:1e:7e:32:82:dd:ae:4d:24: 1c:5c:b5:bd:96:d8:e3:38:fc:ed:fe:63:d7:c3:22: 1a:4f:82:02:52:77:32:c2:da:da:3f:88:3c:64:48: 7f:52:c3:08:44:5f:0e:ad:ef:4e:8f:64:cb:25:f9: c9:81:c2:64:84:b9:4a:98:a2:f6:95:2e:de:5b:33: f7:2a:fc:31:46:60:97:7c:b3:cc:66:bd:00:08:4f: c9:5a:69:a4:35:2a:2a:37:5c:1b:d8:d1:cd:87:43: d5:93:66:76:b2:37:e8:07:7e:86:71:0c:d5:a7:5d: 8b:61:21:96:c4:02:dd:9c:ce:9c:3f:86:4a:68:09: 52:8c:8e:e0:3f:13:51:0c:11:b0:cb:e0:f8:d8:3b: a3:5d:77:3b:0f:85:02:04:0a:65:5e:31:4b:d5:5c: 50:da:98:54:57:7b:be:55:18:26:ef:2e:bc:9b:2d: 86:12:5f:ee:86:f4:de:2f:f2:4b:f9:f9:44:b4:f9: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:0B:7C:3D:20:EE:39:46:1B:A6:32:A4:3A:C3:14:F5:B6:73:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd43fe0f-d789-3ccd-819b-39b8a33a18ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:62:e4:f7:fc:30:cb:bf:9b:31:90:1e:e2:18:89:a7:e0:77: 68:6e:07:6f:71:67:48:5f:3b:d7:97:df:71:df:89:61:ce:f7: 6f:29:e1:76:a1:e9:64:b4:73:76:a9:01:94:85:84:f3:34:cb: 55:d5:1e:af:4f:79:7d:b9:e2:81:ac:33:7d:16:6d:48:8a:b7: 64:c4:ad:84:7a:ff:97:1a:f8:11:01:8b:c2:ea:26:90:e1:0a: 6f:c7:2e:19:23:13:53:a0:24:c1:1c:05:a6:60:36:20:cb:7b: 03:f1:3a:92:73:5a:3d:79:17:62:59:2a:07:5a:04:73:1f:fb: 2b:70:70:8f:73:71:03:a7:3a:8e:db:8e:57:e5:7f:b9:72:f4: d5:36:4f:d1:fc:d4:c0:6f:58:36:9d:6f:22:92:b5:53:b4:d8: b2:98:86:8f:61:83:29:a1:02:09:2d:e5:91:0f:d6:b8:7c:41: 54:84:39:b0:7b:fe:ed:44:71:63:f7:19:c5:c5:76:26:7a:13: a7:d9:df:e0:54:a4:2a:8c:f7:c0:7d:69:cb:c6:e9:0b:e4:fd: e0:5f:8e:ee:f4:70:aa:bc:e0:7c:58:84:a3:f2:57:68:ba:74: 10:f2:c5:68:2d:7a:ec:1a:b3:78:a0:70:56:4d:8a:8e:25:cc: c6:5e:96:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp5aljdBepeamPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAxMFoXDTI1MDkxODA5MzAxMFowLzEtMCsGA1UEAxMk YzZkN2ZmYWUtYTRiZS00YjkxLWFlNTItZTExZmJhYjU4ZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSAS9fWvowq7D0RlHBHqJ4exR7q4Xr3ZSl72 2wNJtt+4CtxAFxRw8EFQYmLVe1GJ79kD2hUZS45jLgI5YQwHYapXHn4ygt2uTSQc XLW9ltjjOPzt/mPXwyIaT4ICUncywtraP4g8ZEh/UsMIRF8Ore9Oj2TLJfnJgcJk hLlKmKL2lS7eWzP3KvwxRmCXfLPMZr0ACE/JWmmkNSoqN1wb2NHNh0PVk2Z2sjfo B36GcQzVp12LYSGWxALdnM6cP4ZKaAlSjI7gPxNRDBGwy+D42DujXXc7D4UCBApl XjFL1VxQ2phUV3u+VRgm7y68my2GEl/uhvTeL/JL+flEtPlYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVNC3w9IO45RhumMqQ6wxT1tnM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q0M2ZlMGYtZDc4OS0z Y2NkLTgxOWItMzliOGEzM2ExOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdi5Pf8MMu/mzGQHuIYiafgd2huB29xZ0hfO9eX33HfiWHO928p4Xah 6WS0c3apAZSFhPM0y1XVHq9PeX254oGsM30WbUiKt2TErYR6/5ca+BEBi8LqJpDh Cm/HLhkjE1OgJMEcBaZgNiDLewPxOpJzWj15F2JZKgdaBHMf+ytwcI9zcQOnOo7b jlflf7ly9NU2T9H81MBvWDadbyKStVO02LKYho9hgymhAgkt5ZEP1rh8QVSEObB7 /u1EcWP3GcXFdiZ6E6fZ3+BUpCqM98B9acvG6Qvk/eBfju70cKq84HxYhKPyV2i6 dBDyxWgteuwas3igcFZNio4lzMZelg8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:30:39 2025 by rpki-client