$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4785aa2-d773-3708-a142-007250b145ab.roa File: d4785aa2-d773-3708-a142-007250b145ab.roa (raw, json) Hash identifier: M+EhEZxnp6m/k+6/7twKvZr8Fc7JyLo8zzK4LHluRN4= Subject key identifier: D2:F9:BC:9E:32:1F:6E:B0:80:15:FA:20:52:3C:45:61:28:F9:4E:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7DCF3DE24D69397225080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4785aa2-d773-3708-a142-007250b145ab.roa Signing time: Fri 20 Jun 2025 09:30:43 +0000 ROA not before: Fri 20 Jun 2025 09:30:43 +0000 ROA not after: Thu 18 Sep 2025 09:30:43 +0000 asID: 22773 IP address blocks: 68.224.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:dc:f3:de:24:d6:93:97:22:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:43 2025 GMT Not After : Sep 18 09:30:43 2025 GMT Subject: CN=90f0413d-5dac-431d-9dea-c4aaec8d1677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a0:44:9b:cc:bd:61:64:55:6d:ef:a4:3e:37: 8d:77:bf:ec:5c:3b:a3:bf:bd:4a:72:5b:6b:37:36: c8:3f:9e:6b:db:2b:bf:03:7b:d4:9e:b6:f5:13:b3: 8f:ec:4a:4b:72:5d:1b:29:c5:5d:52:9f:e6:67:e6: 63:c6:4b:6f:c2:eb:a3:bc:d8:fd:a2:30:15:69:61: fc:92:56:99:31:c4:07:17:a3:e0:8d:2e:02:a0:52: ef:36:fd:9d:03:c1:7b:04:d3:ea:93:04:1b:0d:fa: 8a:e8:5b:0b:9d:d2:79:07:0c:24:23:1a:6f:5b:38: 6d:c3:0a:43:b9:7f:b4:84:75:05:0f:3b:45:c2:49: 4b:20:96:60:a1:ca:e0:d3:7f:a7:58:e3:50:7b:56: b2:77:f7:1b:dc:b7:9b:90:5b:ce:e9:a6:71:2a:9e: f2:cb:fd:df:6e:1d:a7:4e:97:22:fe:ca:1e:bb:eb: 31:cf:c7:4e:59:e1:95:3c:98:32:96:9f:a0:cd:87: 59:2e:f1:e4:80:07:95:bd:6a:a0:b1:89:fa:54:ee: 25:9d:f7:f0:c2:97:13:cf:df:81:9d:ba:58:dd:44: 3b:43:9d:82:a0:f9:0d:2e:82:85:b7:ff:3a:ba:5c: b7:a3:5c:ae:2c:c7:4f:0e:c5:28:52:6b:89:55:bb: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:BC:9E:32:1F:6E:B0:80:15:FA:20:52:3C:45:61:28:F9:4E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4785aa2-d773-3708-a142-007250b145ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9d:d0:07:db:1c:b2:7a:36:5f:4b:c8:fa:82:6d:c4:0d:a0: 84:f4:68:b4:f3:e4:2d:6b:90:b1:ff:d5:eb:84:d3:d9:8f:e4: 76:32:f1:90:d7:47:d7:ba:19:4b:f9:08:a1:71:e1:31:ba:75: 96:fd:04:cd:3f:e2:95:3d:83:06:cb:44:c6:c9:75:e7:79:a1: 03:6a:40:90:74:04:e0:55:0d:13:a2:f8:e4:31:ac:12:10:5d: 45:1f:ed:bd:63:7e:d9:06:9b:e9:de:1c:bd:f9:f2:61:37:3b: 4d:c6:fe:ba:70:6b:06:ff:88:11:8b:ac:98:97:ab:10:78:81: a9:62:f5:79:08:78:05:06:38:03:8c:1c:fb:2e:34:e4:15:eb: dc:e7:ec:67:bf:5e:d9:b0:67:1a:e0:b8:7d:14:5b:28:61:e3: 59:a3:88:95:56:1c:26:d8:39:a6:4b:fa:b2:29:5a:86:45:20: 6a:83:6c:81:3e:c8:ee:ce:d3:83:3e:25:fe:36:76:f2:0a:67: f1:5d:45:9a:1c:86:58:7f:72:02:ed:b6:17:2c:9e:99:e6:d1: 34:cd:b1:4b:2b:7d:ce:c2:a8:c9:92:af:63:51:92:dd:f2:3a: 7c:8a:01:e6:32:c8:cd:8e:09:25:0a:5e:df:04:ea:2b:04:bd: e3:cd:6b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp9zz3iTWk5ciUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA0M1oXDTI1MDkxODA5MzA0M1owLzEtMCsGA1UEAxMk OTBmMDQxM2QtNWRhYy00MzFkLTlkZWEtYzRhYWVjOGQxNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaBEm8y9YWRVbe+kPjeNd7/sXDujv71Kcltr NzbIP55r2yu/A3vUnrb1E7OP7EpLcl0bKcVdUp/mZ+ZjxktvwuujvNj9ojAVaWH8 klaZMcQHF6PgjS4CoFLvNv2dA8F7BNPqkwQbDfqK6FsLndJ5BwwkIxpvWzhtwwpD uX+0hHUFDztFwklLIJZgocrg03+nWONQe1ayd/cb3LebkFvO6aZxKp7yy/3fbh2n Tpci/soeu+sxz8dOWeGVPJgylp+gzYdZLvHkgAeVvWqgsYn6VO4lnffwwpcTz9+B nbpY3UQ7Q52CoPkNLoKFt/86uly3o1yuLMdPDsUoUmuJVbt8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL5vJ4yH26wgBX6IFI8RWEo+U6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDQ3ODVhYTItZDc3My0z NzA4LWExNDItMDA3MjUwYjE0NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqd0AfbHLJ6Nl9LyPqCbcQNoIT0aLTz5C1rkLH/1euE09mP5HYy8ZDX R9e6GUv5CKFx4TG6dZb9BM0/4pU9gwbLRMbJded5oQNqQJB0BOBVDROi+OQxrBIQ XUUf7b1jftkGm+neHL358mE3O03G/rpwawb/iBGLrJiXqxB4gali9XkIeAUGOAOM HPsuNOQV69zn7Ge/XtmwZxrguH0UWyhh41mjiJVWHCbYOaZL+rIpWoZFIGqDbIE+ yO7O04M+Jf42dvIKZ/FdRZochlh/cgLtthcsnpnm0TTNsUsrfc7CqMmSr2NRkt3y OnyKAeYyyM2OCSUKXt8E6isEvePNa8A= -----END CERTIFICATE-----Generated at Tue Jul 1 22:28:40 2025 by rpki-client