$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cedaa25c-dceb-3be8-8c3f-e119f65db2e7.roa File: cedaa25c-dceb-3be8-8c3f-e119f65db2e7.roa (raw, json) Hash identifier: yq2GM1nVfEKybk1doUqzvW97h/n6OezTS4/Q9W8hNkY= Subject key identifier: 87:27:8E:5E:3C:BF:38:A7:9E:EC:3C:36:FB:1F:6F:3B:56:65:0E:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1014B73F62404E497E9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cedaa25c-dceb-3be8-8c3f-e119f65db2e7.roa Signing time: Wed 18 Jun 2025 18:01:40 +0000 ROA not before: Wed 18 Jun 2025 18:01:40 +0000 ROA not after: Tue 16 Sep 2025 18:01:40 +0000 asID: 22773 IP address blocks: 68.3.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:14:b7:3f:62:40:4e:49:7e:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:40 2025 GMT Not After : Sep 16 18:01:40 2025 GMT Subject: CN=2c226659-9d4a-4056-b31f-4b10b12d5435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:8f:32:27:fc:65:14:ae:96:38:b2:f1:fc: 2e:1e:71:b0:03:5f:91:88:4e:78:31:9b:68:cb:7e: 24:cf:a8:22:11:48:bf:4a:84:25:18:5a:a9:3e:98: cc:d6:b1:64:f9:6f:2d:fc:2a:f1:e6:bb:c5:0d:b5: 23:03:ef:42:b4:cf:c3:a9:56:fb:fe:ec:6b:7b:63: b5:e9:e0:36:ac:a2:c6:ee:1a:82:c2:9e:30:3f:e1: f9:d3:46:78:a2:79:20:4b:16:25:2c:e4:4a:65:a4: fc:45:84:d3:d1:d2:5b:95:0d:a5:5a:cc:f4:ff:f5: c5:7c:a8:a6:10:39:b5:48:91:55:9b:ad:de:fb:cd: 96:77:d7:69:90:57:a2:f2:22:ae:d9:b3:28:7f:eb: a5:2d:b9:d5:2e:14:3f:9a:12:59:ae:7e:00:f5:bb: fb:d7:24:b5:10:3a:74:76:ad:21:d7:f9:32:a6:b2: 4f:80:c4:05:a0:a2:ba:6e:e6:b0:48:e0:e2:3d:8c: 15:2d:bd:91:72:2b:12:f5:8d:e5:d6:b2:b6:d1:40: 34:e2:74:24:31:f0:c4:b9:df:5d:c0:c3:47:c6:1a: bc:f8:ca:26:49:b6:95:d3:cc:4d:fb:db:55:74:9d: 2a:a0:c1:a2:49:b1:d3:e9:30:bd:0d:a8:78:df:6c: 09:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:27:8E:5E:3C:BF:38:A7:9E:EC:3C:36:FB:1F:6F:3B:56:65:0E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cedaa25c-dceb-3be8-8c3f-e119f65db2e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:11:63:37:b0:38:83:30:60:c7:96:09:0f:96:ba:ce:40:48: 5c:be:dd:32:ff:83:50:72:3d:ad:85:26:65:84:f8:e9:05:04: 0f:89:5d:b9:23:cb:94:2d:dd:83:d8:8f:7e:0f:f7:6e:18:83: 55:b6:54:2b:7f:03:21:3c:7f:ee:28:eb:39:fe:1f:12:44:fb: 92:6f:44:b2:90:ec:be:03:b8:0c:9c:0a:cc:c6:ac:19:42:a8: a4:d4:d8:7b:89:bb:47:f0:ea:8c:af:57:1a:5d:97:bf:6d:ed: e6:86:c2:66:d3:78:1a:fc:c6:75:bd:f8:eb:e8:5b:34:ef:aa: 5d:eb:15:f4:7b:3b:0b:31:1a:f6:59:52:c4:c1:63:41:0a:30: b0:19:f3:65:21:bd:92:31:4a:93:88:a2:71:76:72:96:70:c7: 56:c2:68:3f:74:84:74:a5:3e:b5:68:f7:c1:30:ac:d0:33:0e: 91:4b:a9:e1:07:7f:55:49:87:82:d5:42:66:c2:b0:59:4d:11: db:81:9b:b1:4a:66:a7:c0:a4:62:bc:dd:9f:83:a6:a4:0d:b7: df:42:d3:0e:d7:5e:12:78:84:27:5a:fc:6a:49:a3:6e:e5:7b: b0:83:fc:7a:8e:0b:79:39:fe:16:2f:48:56:9e:57:24:d3:44: 68:58:90:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EBS3P2JATkl+nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE0MFoXDTI1MDkxNjE4MDE0MFowLzEtMCsGA1UEAxMk MmMyMjY2NTktOWQ0YS00MDU2LWIzMWYtNGIxMGIxMmQ1NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AyPMif8ZRSuljiy8fwuHnGwA1+RiE54MZto y34kz6giEUi/SoQlGFqpPpjM1rFk+W8t/Crx5rvFDbUjA+9CtM/DqVb7/uxre2O1 6eA2rKLG7hqCwp4wP+H500Z4onkgSxYlLORKZaT8RYTT0dJblQ2lWsz0//XFfKim EDm1SJFVm63e+82Wd9dpkFei8iKu2bMof+ulLbnVLhQ/mhJZrn4A9bv71yS1EDp0 dq0h1/kyprJPgMQFoKK6buawSODiPYwVLb2RcisS9Y3l1rK20UA04nQkMfDEud9d wMNHxhq8+MomSbaV08xN+9tVdJ0qoMGiSbHT6TC9Dah432wJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcnjl48vzinnuw8NvsfbztWZQ4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VkYWEyNWMtZGNlYi0z YmU4LThjM2YtZTExOWY2NWRiMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8RYzewOIMwYMeWCQ+Wus5ASFy+3TL/g1ByPa2FJmWE+OkFBA+JXbkj y5Qt3YPYj34P924Yg1W2VCt/AyE8f+4o6zn+HxJE+5JvRLKQ7L4DuAycCszGrBlC qKTU2HuJu0fw6oyvVxpdl79t7eaGwmbTeBr8xnW9+OvoWzTvql3rFfR7OwsxGvZZ UsTBY0EKMLAZ82UhvZIxSpOIonF2cpZwx1bCaD90hHSlPrVo98EwrNAzDpFLqeEH f1VJh4LVQmbCsFlNEduBm7FKZqfApGK83Z+DpqQNt99C0w7XXhJ4hCda/GpJo27l e7CD/HqOC3k5/hYvSFaeVyTTRGhYkMY= -----END CERTIFICATE-----Generated at Mon Jun 30 02:13:23 2025 by rpki-client