$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1ab5a07-0dc4-3e45-8606-2036bb2bea44.roa File: d1ab5a07-0dc4-3e45-8606-2036bb2bea44.roa (raw, json) Hash identifier: ZRHtlbeLTbGztBaQgwdoxYjESlV0WT2Nhwg7Tqp3TM4= Subject key identifier: DE:15:8A:B9:D9:7D:B8:B1:C6:90:33:7B:A3:01:FA:73:86:C3:9D:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD65C47F23AE7740D536940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1ab5a07-0dc4-3e45-8606-2036bb2bea44.roa Signing time: Thu 19 Jun 2025 09:16:59 +0000 ROA not before: Thu 19 Jun 2025 09:16:59 +0000 ROA not after: Wed 17 Sep 2025 09:16:59 +0000 asID: 22773 IP address blocks: 68.226.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:5c:47:f2:3a:e7:74:0d:53:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:59 2025 GMT Not After : Sep 17 09:16:59 2025 GMT Subject: CN=6964f64e-95e1-4b69-ba2a-a6c160d3dc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:ef:7e:98:57:6c:da:63:66:ae:2a:2d:33: f6:4f:75:b6:33:08:ac:2b:29:82:28:80:1f:f6:6e: a8:e5:c6:2d:52:cc:e3:c5:39:17:11:c6:e2:2f:7c: 01:4e:f3:69:90:a7:f2:1d:81:49:53:e2:96:b3:de: f8:26:d9:25:ab:ac:46:53:85:68:d0:d3:c0:83:11: 45:09:5b:85:a9:6a:dc:60:58:e1:a3:ba:03:86:67: 5c:05:38:09:3d:12:99:0a:6d:ee:cf:b8:fa:f5:09: c3:e3:78:6d:b4:a6:21:ae:39:3c:c6:f9:f2:5a:60: f0:c5:a7:39:f4:ac:62:f6:c7:45:06:5c:b4:66:0a: 0b:8f:32:3f:24:e2:d8:e2:ed:d1:5b:fc:19:f5:57: 2b:b3:11:0c:ae:be:a0:f8:e4:a8:50:aa:5d:39:0c: 3b:39:39:ae:08:83:b1:ed:56:ea:a8:39:99:a5:87: 27:e9:c0:15:41:f7:0e:8f:49:80:f8:a0:b8:da:10: a0:b7:1d:9c:34:f1:12:d0:2b:c9:a2:eb:9b:a4:c0: bc:44:06:4c:91:34:37:22:6f:45:f0:75:47:b6:bb: 95:3c:c8:cc:f1:51:1e:cc:ff:6e:68:85:1f:66:b4: dd:b0:68:d4:40:e4:8d:59:4f:1b:c3:a9:fa:32:5d: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:8A:B9:D9:7D:B8:B1:C6:90:33:7B:A3:01:FA:73:86:C3:9D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1ab5a07-0dc4-3e45-8606-2036bb2bea44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ad:72:38:89:df:17:77:21:d6:5b:98:a1:ca:ae:28:fb:b9: 64:0b:7f:2d:54:be:d9:16:00:67:5f:7e:8c:0e:a8:05:ef:e2: f0:2f:4f:e2:26:2e:ab:11:fc:2b:5d:f9:c8:e7:82:49:fa:fb: 4e:9e:62:dc:8b:b5:f8:b4:8c:5f:92:d7:fe:20:70:28:bd:b6: b9:78:49:fb:41:46:c4:83:a6:1e:81:65:3a:62:68:1e:0a:50: bf:17:e5:7e:36:99:95:7d:c6:e6:62:f5:3f:dc:f1:66:07:e6: a2:22:16:dd:5b:7d:33:4c:1d:99:8f:d9:76:6f:c4:d7:72:10: 5f:ea:de:9c:18:88:6e:10:90:ef:92:0b:73:94:17:fb:70:22: 1a:29:59:f2:e5:09:ea:8f:aa:d9:ea:98:91:d1:3c:b4:5b:70: 64:f4:9f:68:62:24:cc:5f:07:43:6f:97:b0:41:72:72:c7:48: 0f:8a:91:a5:7a:71:a1:a4:0f:78:ec:9a:36:c3:c5:78:85:8d: a6:c2:62:46:1d:0b:40:70:cd:ac:03:d1:2a:ba:b0:0a:6d:f2: d9:9b:d4:bb:15:0b:c9:dc:a5:ab:0c:bd:bc:70:79:d1:93:20: d3:ac:56:f6:01:30:9f:30:b9:89:5c:3f:a1:19:33:26:24:06: 21:2c:8a:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91lxH8jrndA1TaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTY1OVoXDTI1MDkxNzA5MTY1OVowLzEtMCsGA1UEAxMk Njk2NGY2NGUtOTVlMS00YjY5LWJhMmEtYTZjMTYwZDNkYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVLvfphXbNpjZq4qLTP2T3W2MwisKymCKIAf 9m6o5cYtUszjxTkXEcbiL3wBTvNpkKfyHYFJU+KWs974Jtklq6xGU4Vo0NPAgxFF CVuFqWrcYFjho7oDhmdcBTgJPRKZCm3uz7j69QnD43httKYhrjk8xvnyWmDwxac5 9Kxi9sdFBly0ZgoLjzI/JOLY4u3RW/wZ9VcrsxEMrr6g+OSoUKpdOQw7OTmuCIOx 7VbqqDmZpYcn6cAVQfcOj0mA+KC42hCgtx2cNPES0CvJouubpMC8RAZMkTQ3Im9F 8HVHtruVPMjM8VEezP9uaIUfZrTdsGjUQOSNWU8bw6n6Ml2KNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4VirnZfbixxpAze6MB+nOGw513MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFhYjVhMDctMGRjNC0z ZTQ1LTg2MDYtMjAzNmJiMmJlYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAatcjiJ3xd3IdZbmKHKrij7uWQLfy1UvtkWAGdffowOqAXv4vAvT+Im LqsR/Ctd+cjngkn6+06eYtyLtfi0jF+S1/4gcCi9trl4SftBRsSDph6BZTpiaB4K UL8X5X42mZV9xuZi9T/c8WYH5qIiFt1bfTNMHZmP2XZvxNdyEF/q3pwYiG4QkO+S C3OUF/twIhopWfLlCeqPqtnqmJHRPLRbcGT0n2hiJMxfB0Nvl7BBcnLHSA+KkaV6 caGkD3jsmjbDxXiFjabCYkYdC0BwzawD0Sq6sApt8tmb1LsVC8ncpasMvbxwedGT INOsVvYBMJ8wuYlcP6EZMyYkBiEsis8= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:01 2025 by rpki-client