$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6987c06-0bbc-3151-85e9-756696c72d3f.roa File: d6987c06-0bbc-3151-85e9-756696c72d3f.roa (raw, json) Hash identifier: 3/cOiOISCaq+Sc1fEYENA/rgUl+F4H/RzUZjme15FAs= Subject key identifier: 3D:69:2C:3D:1F:34:9A:D3:36:B3:2F:BB:EF:B7:33:14:86:86:2E:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A708B141D7720D07057460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6987c06-0bbc-3151-85e9-756696c72d3f.roa Signing time: Fri 20 Jun 2025 09:29:03 +0000 ROA not before: Fri 20 Jun 2025 09:29:03 +0000 ROA not after: Thu 18 Sep 2025 09:29:03 +0000 asID: 22773 IP address blocks: 68.104.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:08:b1:41:d7:72:0d:07:05:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:03 2025 GMT Not After : Sep 18 09:29:03 2025 GMT Subject: CN=7da0766d-2108-4f31-b010-df2e89a09559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:9d:73:aa:d6:5b:b4:54:d1:df:75:1b:c2: 0d:9c:2d:6f:53:20:10:5f:69:cb:c7:c3:15:2b:db: ca:32:a0:45:e4:1e:4b:f0:f1:e7:48:f4:5a:f6:91: 21:3f:50:d2:f9:b2:98:e4:36:56:fd:00:8f:24:c2: 4d:e6:c0:5c:83:7c:7a:86:b5:60:ad:93:9c:68:01: 8a:c2:49:fe:30:df:9e:4f:8d:c7:d3:91:82:d5:55: d0:85:2f:cc:c7:bb:ea:ff:b1:b0:47:f3:d7:16:60: bc:57:ac:b8:63:56:2e:d6:fc:eb:c0:40:88:a6:e5: 28:dd:2e:26:d7:f0:08:e9:99:8b:e9:18:1b:ea:58: 05:7d:c8:c9:b0:ed:bb:f9:80:3a:9b:6d:40:31:1a: 6d:6f:21:47:33:70:10:dc:3f:d7:4c:58:a8:34:67: e5:d4:26:9d:51:22:a6:03:bd:85:7e:2f:4e:04:21: 1d:01:b0:31:73:64:4f:b0:a5:db:35:48:bd:b5:ff: f7:10:d4:ea:b9:08:f0:c4:31:be:18:d3:03:20:58: 48:aa:bd:19:29:47:d3:2b:6e:5b:60:f0:60:6c:1c: 11:f4:0b:1b:46:8c:5e:01:bd:57:f7:cf:67:ca:6d: 24:6c:10:84:28:ee:96:84:d7:65:e7:c6:62:bd:d6: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:69:2C:3D:1F:34:9A:D3:36:B3:2F:BB:EF:B7:33:14:86:86:2E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6987c06-0bbc-3151-85e9-756696c72d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:39:4e:c7:6a:73:d1:3e:4c:c8:9b:67:71:a8:1c:a0:a6:fc: 24:95:7e:45:42:8b:2d:2b:b1:37:25:a9:d6:8d:14:39:9c:07: fc:83:18:c4:0c:fd:fd:d4:65:f4:88:f2:50:d9:8e:43:ad:95: c7:b1:97:e3:2f:e6:09:d1:64:5f:42:e2:c9:13:63:d4:34:0a: 88:be:fe:2f:4b:1d:d0:c1:f2:fb:f5:6c:38:a1:6e:cd:15:04: a5:52:7e:c6:b3:81:51:77:fa:d0:c4:ab:e0:3e:ca:08:39:14: a8:5d:37:45:2b:7f:5c:32:9e:e2:9c:45:48:ba:b8:64:48:42: 52:d0:b3:cf:07:51:c2:f9:0c:a7:78:0d:7b:36:da:a7:63:92: 16:de:38:7f:4a:06:78:50:96:27:af:67:da:63:ac:b7:62:40: 79:2e:6a:b6:fd:6f:0b:36:47:5e:ca:36:dc:09:fb:83:ca:58: 63:87:68:97:08:dd:08:ff:4f:53:89:64:2f:e8:54:6b:82:8f: e3:9d:90:3d:3d:fa:f8:8c:f0:fa:a1:c6:a3:00:c5:ae:26:35: 65:42:3f:aa:ae:ec:24:1a:6d:27:42:03:55:85:9d:db:9f:88: 15:24:23:88:e0:2c:97:c1:c2:fa:ae:e0:d6:34:5a:56:c8:40: 6e:94:85:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApwixQddyDQcFdGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkwM1oXDTI1MDkxODA5MjkwM1owLzEtMCsGA1UEAxMk N2RhMDc2NmQtMjEwOC00ZjMxLWIwMTAtZGYyZTg5YTA5NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E2dc6rWW7RU0d91G8INnC1vUyAQX2nLx8MV K9vKMqBF5B5L8PHnSPRa9pEhP1DS+bKY5DZW/QCPJMJN5sBcg3x6hrVgrZOcaAGK wkn+MN+eT43H05GC1VXQhS/Mx7vq/7GwR/PXFmC8V6y4Y1Yu1vzrwECIpuUo3S4m 1/AI6ZmL6Rgb6lgFfcjJsO27+YA6m21AMRptbyFHM3AQ3D/XTFioNGfl1CadUSKm A72Ffi9OBCEdAbAxc2RPsKXbNUi9tf/3ENTquQjwxDG+GNMDIFhIqr0ZKUfTK25b YPBgbBwR9AsbRoxeAb1X989nym0kbBCEKO6WhNdl58ZivdZNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1pLD0fNJrTNrMvu++3MxSGhi66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDY5ODdjMDYtMGJiYy0z MTUxLTg1ZTktNzU2Njk2YzcyZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGg2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC05Tsdqc9E+TMibZ3GoHKCm/CSVfkVCiy0rsTclqdaNFDmcB/yDGMQM /f3UZfSI8lDZjkOtlcexl+Mv5gnRZF9C4skTY9Q0Coi+/i9LHdDB8vv1bDihbs0V BKVSfsazgVF3+tDEq+A+ygg5FKhdN0Urf1wynuKcRUi6uGRIQlLQs88HUcL5DKd4 DXs22qdjkhbeOH9KBnhQlievZ9pjrLdiQHkuarb9bws2R17KNtwJ+4PKWGOHaJcI 3Qj/T1OJZC/oVGuCj+OdkD09+viM8PqhxqMAxa4mNWVCP6qu7CQabSdCA1WFnduf iBUkI4jgLJfBwvqu4NY0WlbIQG6UhfA= -----END CERTIFICATE-----Generated at Mon Jun 30 16:01:56 2025 by rpki-client