$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cec4a9ec-be01-3c8b-81d5-0d07e80600ed.roa File: cec4a9ec-be01-3c8b-81d5-0d07e80600ed.roa (raw, json) Hash identifier: gI6qZRZtTvLhIMV82I/y2NCRC8maXV0561h6rdZD7D8= Subject key identifier: 18:49:1C:5A:72:E7:DF:2B:58:FB:81:B5:DF:E1:63:1A:B0:CE:2F:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5A047212EB66116B36D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cec4a9ec-be01-3c8b-81d5-0d07e80600ed.roa Signing time: Thu 19 Jun 2025 09:15:30 +0000 ROA not before: Thu 19 Jun 2025 09:15:30 +0000 ROA not after: Wed 17 Sep 2025 09:15:30 +0000 asID: 22773 IP address blocks: 68.104.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:a0:47:21:2e:b6:61:16:b3:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:30 2025 GMT Not After : Sep 17 09:15:30 2025 GMT Subject: CN=a44f1ba0-f085-42f9-b5b5-cbc9cd855bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d3:a7:a2:63:0c:14:4a:ef:0e:bd:93:09:18: c8:14:4a:b1:0b:6e:76:8b:0d:96:85:e2:6e:7b:07: 8c:8a:cc:7c:13:9e:66:26:06:c5:3d:79:23:09:43: 0b:5b:5a:8e:01:79:5e:79:3d:38:57:53:92:f2:33: 79:b7:7a:6b:22:a5:b5:da:59:59:cb:89:9e:a0:72: 98:6c:96:0c:3c:c8:2d:08:4b:e4:53:b0:41:ae:b2: 3e:2f:cb:22:06:5f:a1:de:25:eb:32:a9:96:f5:15: c5:13:ad:1c:a9:52:a5:a8:ef:28:32:34:ad:22:95: 73:0c:ef:48:cb:72:88:67:74:79:af:a9:a2:39:75: b9:ba:ea:2b:fa:0b:95:6b:bf:6e:3e:55:a1:a2:2b: 41:ed:43:a4:ad:7d:21:b6:59:aa:f1:b6:30:82:86: b3:9e:69:60:38:08:92:e2:45:16:b1:45:97:b1:9a: 4c:fe:e1:cf:f3:23:f0:29:6b:3e:9d:bb:c3:08:0a: 37:4d:54:45:be:df:cf:08:5e:0f:f4:0a:a5:37:2f: bd:9f:5f:a2:cc:19:c7:79:11:29:92:93:4a:18:a7: 24:a9:95:83:c0:3d:08:75:5e:0c:ef:85:bd:17:57: ae:3b:92:7d:7a:c0:ea:b7:53:1a:7b:86:c6:8d:68: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:49:1C:5A:72:E7:DF:2B:58:FB:81:B5:DF:E1:63:1A:B0:CE:2F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cec4a9ec-be01-3c8b-81d5-0d07e80600ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a6:e5:20:49:4a:72:7e:59:e3:50:93:83:fc:df:00:e5:f3: 80:e0:d5:f5:26:d8:d7:e9:08:5c:df:d2:69:24:fa:a2:ce:93: 00:a6:51:2a:3a:49:c3:4e:a9:0c:0c:53:32:38:57:59:4c:04: d3:d6:43:19:2b:7b:92:80:19:5b:5c:cf:5a:36:cb:44:22:1a: a3:5e:f9:ee:c4:4e:ea:19:f0:c3:0c:95:53:b5:ae:ef:40:b4: b6:a1:80:10:00:32:ec:a9:9c:fc:43:39:cf:15:dc:9f:3f:ed: a4:1c:ed:0b:02:b1:9e:28:2d:05:ed:46:5f:79:a2:b9:61:70: 04:64:0e:28:5c:46:cd:20:b6:9a:30:c8:fc:7f:2b:db:14:a0: 7b:b1:5b:c7:04:ad:80:94:db:c2:d0:1a:c3:4b:1e:a1:83:4c: 4d:92:0c:1a:3c:9c:45:82:00:4b:8d:bb:22:cd:3d:1e:ed:42: c2:9b:85:ab:ee:64:13:31:f8:80:fa:ab:fb:5f:7e:56:23:6e: a7:a4:ac:e8:12:63:93:8e:44:4f:d3:f6:60:fd:17:42:20:c5: af:37:fc:f4:11:dd:f4:d9:e1:e2:53:a7:f3:a7:95:c9:fd:38: a6:19:c8:74:cd:2e:b1:c3:2c:01:11:34:67:55:be:a8:f4:71: 2f:80:25:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91aBHIS62YRazbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTUzMFoXDTI1MDkxNzA5MTUzMFowLzEtMCsGA1UEAxMk YTQ0ZjFiYTAtZjA4NS00MmY5LWI1YjUtY2JjOWNkODU1YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9OnomMMFErvDr2TCRjIFEqxC252iw2WheJu eweMisx8E55mJgbFPXkjCUMLW1qOAXleeT04V1OS8jN5t3prIqW12llZy4meoHKY bJYMPMgtCEvkU7BBrrI+L8siBl+h3iXrMqmW9RXFE60cqVKlqO8oMjStIpVzDO9I y3KIZ3R5r6miOXW5uuor+guVa79uPlWhoitB7UOkrX0htlmq8bYwgoaznmlgOAiS 4kUWsUWXsZpM/uHP8yPwKWs+nbvDCAo3TVRFvt/PCF4P9AqlNy+9n1+izBnHeREp kpNKGKckqZWDwD0IdV4M74W9F1euO5J9esDqt1Mae4bGjWjdoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhJHFpy598rWPuBtd/hYxqwzi8PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VjNGE5ZWMtYmUwMS0z YzhiLTgxZDUtMGQwN2U4MDYwMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHim5SBJSnJ+WeNQk4P83wDl84Dg1fUm2NfpCFzf0mkk+qLOkwCmUSo6 ScNOqQwMUzI4V1lMBNPWQxkre5KAGVtcz1o2y0QiGqNe+e7ETuoZ8MMMlVO1ru9A tLahgBAAMuypnPxDOc8V3J8/7aQc7QsCsZ4oLQXtRl95orlhcARkDihcRs0gtpow yPx/K9sUoHuxW8cErYCU28LQGsNLHqGDTE2SDBo8nEWCAEuNuyLNPR7tQsKbhavu ZBMx+ID6q/tfflYjbqekrOgSY5OORE/T9mD9F0Igxa83/PQR3fTZ4eJTp/Onlcn9 OKYZyHTNLrHDLAERNGdVvqj0cS+AJYU= -----END CERTIFICATE-----Generated at Tue Jul 1 17:18:16 2025 by rpki-client