$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6d7207d-a8e7-3d26-8af7-68e4d757c1f2.roa File: d6d7207d-a8e7-3d26-8af7-68e4d757c1f2.roa (raw, json) Hash identifier: 3PxQ2kW0j8awgxLQImZUeTZ0kzD7hHRNNnbfwLWO74A= Subject key identifier: DB:63:D6:F1:9F:41:A4:1A:FB:11:68:B7:33:CF:89:B5:9C:3E:9A:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7629D9964B9FCEAD5E580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6d7207d-a8e7-3d26-8af7-68e4d757c1f2.roa Signing time: Fri 20 Jun 2025 09:29:45 +0000 ROA not before: Fri 20 Jun 2025 09:29:45 +0000 ROA not after: Thu 18 Sep 2025 09:29:45 +0000 asID: 22773 IP address blocks: 68.108.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:62:9d:99:64:b9:fc:ea:d5:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:45 2025 GMT Not After : Sep 18 09:29:45 2025 GMT Subject: CN=d5bff934-3194-468e-b80e-5302e5fce436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:b1:3e:f7:92:c3:3c:79:6f:ed:34:3a:0e: 2d:db:8b:77:cc:33:5d:42:aa:c5:5c:fd:91:7f:42: 8f:29:34:f7:6b:29:ec:1d:d9:24:d1:ad:2d:eb:45: 1a:00:4f:32:95:d5:9d:e3:20:12:bb:03:cb:e3:b6: 00:f6:f0:02:91:1e:8d:f2:4f:8c:d9:62:e0:09:a9: e6:c3:dd:ec:f4:50:82:87:d6:80:c0:76:b1:91:f4: 12:77:a4:d6:10:83:31:63:15:6c:05:fa:04:0b:e7: a9:e6:0d:f9:1c:76:9c:52:78:76:c8:e5:ef:0f:4e: 54:db:38:0a:bc:eb:f9:1d:38:75:f9:f6:5f:dd:c7: 57:9d:69:04:86:43:d0:28:13:0f:63:30:d4:5b:51: e1:b7:17:66:6a:9f:25:f2:f1:10:80:bc:8a:87:07: d4:d4:73:ad:f3:92:60:8c:f9:d7:aa:bc:e1:e8:1d: 89:a3:66:92:35:d5:6b:04:fa:d1:cc:00:d1:08:a8: ef:d8:cf:ba:5a:d4:99:fe:71:b4:e4:cd:61:07:ac: d9:3e:82:e1:80:fc:75:90:aa:7c:fd:01:18:8d:6b: 41:bd:da:7e:c7:6b:52:03:34:09:47:42:0c:8b:a7: ae:fd:c0:cd:c5:5c:fd:77:ab:ea:92:2e:08:3b:b0: 83:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:63:D6:F1:9F:41:A4:1A:FB:11:68:B7:33:CF:89:B5:9C:3E:9A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6d7207d-a8e7-3d26-8af7-68e4d757c1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:86:92:5e:4d:4a:51:a1:eb:a8:ec:79:e5:cd:10:f1:a2:6b: a6:8a:f8:e4:48:92:7d:32:b9:ba:0d:ed:70:89:e4:e9:06:59: c8:25:aa:f3:e1:2b:5d:2d:ca:3e:ba:20:a2:52:88:d1:57:e8: 73:e8:95:92:db:dd:22:ef:fe:e7:0c:82:95:36:15:62:ac:ca: b5:ad:d1:eb:44:71:c9:6d:68:59:35:8e:d0:2f:37:89:ff:1d: d5:e5:05:f6:5f:cf:f0:dd:5e:c9:62:64:a6:6a:1a:15:53:e9: ab:a3:bc:15:5f:97:57:b8:e5:99:da:98:65:f2:d6:75:a2:19: d6:3d:8b:2b:8b:1b:49:5d:b5:b4:b3:b0:70:97:15:6a:1d:65: 9b:46:c9:68:9c:16:20:a5:df:2c:a6:93:38:d7:71:ad:44:94: a3:83:b0:df:18:e7:20:10:00:7b:37:e3:13:d5:18:33:7b:53: af:eb:97:f4:1e:7d:f7:6a:67:71:f0:d6:12:59:40:d9:b2:04: a5:4e:3d:2c:5c:37:85:cc:5d:f5:d3:10:ad:32:88:0e:96:b2: 78:42:da:d6:80:02:6f:60:fe:ec:01:77:69:53:01:c5:70:59: 2f:ce:43:af:0c:0b:1d:2b:7c:2c:26:11:8a:94:5c:69:85:d0: d8:2b:05:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp2KdmWS5/OrV5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0NVoXDTI1MDkxODA5Mjk0NVowLzEtMCsGA1UEAxMk ZDViZmY5MzQtMzE5NC00NjhlLWI4MGUtNTMwMmU1ZmNlNDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGxPveSwzx5b+00Og4t24t3zDNdQqrFXP2R f0KPKTT3aynsHdkk0a0t60UaAE8yldWd4yASuwPL47YA9vACkR6N8k+M2WLgCanm w93s9FCCh9aAwHaxkfQSd6TWEIMxYxVsBfoEC+ep5g35HHacUnh2yOXvD05U2zgK vOv5HTh1+fZf3cdXnWkEhkPQKBMPYzDUW1Hhtxdmap8l8vEQgLyKhwfU1HOt85Jg jPnXqrzh6B2Jo2aSNdVrBPrRzADRCKjv2M+6WtSZ/nG05M1hB6zZPoLhgPx1kKp8 /QEYjWtBvdp+x2tSAzQJR0IMi6eu/cDNxVz9d6vqki4IO7CDTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtj1vGfQaQa+xFotzPPibWcPppoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZkNzIwN2QtYThlNy0z ZDI2LThhZjctNjhlNGQ3NTdjMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKGkl5NSlGh66jseeXNEPGia6aK+ORIkn0yuboN7XCJ5OkGWcglqvPh K10tyj66IKJSiNFX6HPolZLb3SLv/ucMgpU2FWKsyrWt0etEccltaFk1jtAvN4n/ HdXlBfZfz/DdXsliZKZqGhVT6aujvBVfl1e45ZnamGXy1nWiGdY9iyuLG0ldtbSz sHCXFWodZZtGyWicFiCl3yymkzjXca1ElKODsN8Y5yAQAHs34xPVGDN7U6/rl/Qe ffdqZ3Hw1hJZQNmyBKVOPSxcN4XMXfXTEK0yiA6WsnhC2taAAm9g/uwBd2lTAcVw WS/OQ68MCx0rfCwmEYqUXGmF0NgrBYk= -----END CERTIFICATE-----Generated at Mon Jun 30 11:39:55 2025 by rpki-client