$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d02d6e66-027d-3375-a027-c592f3be8711.roa File: d02d6e66-027d-3375-a027-c592f3be8711.roa (raw, json) Hash identifier: wP8QQlXOWEW+v/r8yr/DGcPJZ6VJ0/KGgTCjbLvrbng= Subject key identifier: FC:B3:1C:BD:BD:89:BE:53:C9:04:56:F6:A8:10:06:F9:A6:7B:1D:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1046EF2AF2704D4A7A5B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d02d6e66-027d-3375-a027-c592f3be8711.roa Signing time: Wed 18 Jun 2025 18:02:04 +0000 ROA not before: Wed 18 Jun 2025 18:02:04 +0000 ROA not after: Tue 16 Sep 2025 18:02:04 +0000 asID: 22773 IP address blocks: 68.3.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:46:ef:2a:f2:70:4d:4a:7a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:04 2025 GMT Not After : Sep 16 18:02:04 2025 GMT Subject: CN=1568418d-075d-41e3-85de-a2fa216872e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:88:59:63:8c:75:7a:f6:f6:c1:6e:a6:ce: e6:80:06:c8:01:35:57:53:0c:4f:b1:c4:db:22:27: b8:68:0b:10:ad:7a:aa:46:e5:c4:2c:f2:8e:47:ed: ac:4f:46:e9:2e:12:16:8f:54:9c:09:c0:eb:e7:6d: ed:f9:1a:6a:dd:6e:53:7c:e0:6d:76:9d:97:00:31: ac:23:52:f3:46:55:74:c5:c2:93:bd:83:2b:f3:22: 66:15:13:31:69:77:7f:a1:eb:2a:82:e4:63:d0:70: 7e:c1:71:4f:be:bf:f7:a4:a6:7e:3a:ef:63:9e:98: 0f:e8:8e:9f:49:0c:c0:a0:81:d3:8c:6f:53:87:fb: e6:c6:d8:89:4f:e6:49:74:dc:b4:2e:a4:b2:23:d5: 91:94:1c:25:1a:33:23:ff:f4:d4:84:a2:6b:c1:ab: 6c:74:94:1b:7c:25:29:aa:b3:99:42:4d:90:25:7a: b0:76:2e:ee:52:51:c0:d6:7f:96:37:85:39:d4:71: 26:f4:2a:1e:8c:ac:b8:4f:76:d2:d6:7d:e2:26:86: 94:0c:8e:b0:74:91:ca:8b:47:2c:5f:0e:3b:d4:26: 92:7e:53:00:de:44:cd:00:f0:71:02:78:fd:c2:0d: 19:32:03:6f:6b:10:a0:3c:46:10:e4:3d:53:66:dd: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B3:1C:BD:BD:89:BE:53:C9:04:56:F6:A8:10:06:F9:A6:7B:1D:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d02d6e66-027d-3375-a027-c592f3be8711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ec:ff:f2:15:05:c1:9a:d9:e6:29:95:b1:a3:c5:c5:15:47: 84:9c:ee:bd:0b:55:c5:25:46:77:85:59:d5:be:51:dd:2a:19: 93:3f:46:c6:ad:1e:5a:16:e4:d7:e8:ad:ab:2b:d6:af:4d:1b: fc:81:01:38:1b:dd:fd:ca:20:b0:01:a0:12:56:0e:38:1a:9c: 05:fe:1e:ef:aa:0e:0a:57:0e:92:b0:9e:03:23:4a:7c:de:63: 70:2e:e3:4f:9a:b4:35:d5:27:ea:13:73:d5:8d:5e:c2:5a:c3: 7e:a2:ba:6a:45:c7:83:a0:91:53:0a:34:2a:b6:21:9c:21:3b: f0:9c:9a:a7:e5:f2:dc:52:f0:54:0b:5e:2d:c3:83:f5:f7:7e: 2f:c8:84:fc:dd:35:0c:c9:c8:d0:34:43:1f:6e:d3:b5:21:fc: ef:e0:fd:b3:bc:16:1e:80:1d:12:70:20:1a:55:2d:18:1c:5a: 63:c6:38:8c:81:dc:b9:46:f7:92:74:53:9e:d1:96:a0:4f:4b: 6d:e0:6d:b6:c9:28:ae:64:f2:41:c5:42:e3:c7:5a:58:83:e5: 71:87:79:2a:13:ba:e6:7b:03:ec:b8:ae:0e:d5:81:b6:00:27: d1:70:f7:e1:64:d3:3e:9e:dc:9f:cd:36:2c:f4:2d:1c:f5:34: 0c:da:b8:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EEbvKvJwTUp6W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIwNFoXDTI1MDkxNjE4MDIwNFowLzEtMCsGA1UEAxMk MTU2ODQxOGQtMDc1ZC00MWUzLTg1ZGUtYTJmYTIxNjg3MmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTGIWWOMdXr29sFups7mgAbIATVXUwxPscTb Iie4aAsQrXqqRuXELPKOR+2sT0bpLhIWj1ScCcDr523t+Rpq3W5TfOBtdp2XADGs I1LzRlV0xcKTvYMr8yJmFRMxaXd/oesqguRj0HB+wXFPvr/3pKZ+Ou9jnpgP6I6f SQzAoIHTjG9Th/vmxtiJT+ZJdNy0LqSyI9WRlBwlGjMj//TUhKJrwatsdJQbfCUp qrOZQk2QJXqwdi7uUlHA1n+WN4U51HEm9CoejKy4T3bS1n3iJoaUDI6wdJHKi0cs Xw471CaSflMA3kTNAPBxAnj9wg0ZMgNvaxCgPEYQ5D1TZt2A4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyzHL29ib5TyQRW9qgQBvmmex1hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDAyZDZlNjYtMDI3ZC0z Mzc1LWEwMjctYzU5MmYzYmU4NzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAOyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHs//IVBcGa2eYplbGjxcUVR4Sc7r0LVcUlRneFWdW+Ud0qGZM/Rsat HloW5Nforasr1q9NG/yBATgb3f3KILABoBJWDjganAX+Hu+qDgpXDpKwngMjSnze Y3Au40+atDXVJ+oTc9WNXsJaw36iumpFx4OgkVMKNCq2IZwhO/Ccmqfl8txS8FQL Xi3Dg/X3fi/IhPzdNQzJyNA0Qx9u07Uh/O/g/bO8Fh6AHRJwIBpVLRgcWmPGOIyB 3LlG95J0U57RlqBPS23gbbbJKK5k8kHFQuPHWliD5XGHeSoTuuZ7A+y4rg7VgbYA J9Fw9+Fk0z6e3J/NNiz0LRz1NAzauI0= -----END CERTIFICATE-----Generated at Tue Jul 1 17:40:26 2025 by rpki-client