$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d732057a-5403-3dc9-be9f-79689bf2264d.roa File: d732057a-5403-3dc9-be9f-79689bf2264d.roa (raw, json) Hash identifier: Kur1GBr7p0JLvh6R26vGUv4QvvkqUEi7PDMdDuykZ1A= Subject key identifier: 61:36:4A:1B:09:0D:A1:B5:C5:F6:CE:DF:CB:D8:36:AC:23:FF:10:14 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6ECB2B9DA0A465E42D680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d732057a-5403-3dc9-be9f-79689bf2264d.roa Signing time: Thu 19 Jun 2025 09:18:07 +0000 ROA not before: Thu 19 Jun 2025 09:18:07 +0000 ROA not after: Wed 17 Sep 2025 09:18:07 +0000 asID: 22773 IP address blocks: 68.231.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:ec:b2:b9:da:0a:46:5e:42:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:07 2025 GMT Not After : Sep 17 09:18:07 2025 GMT Subject: CN=50a3b93c-454c-4455-a7b2-1ba68e686259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c7:85:6e:af:e5:08:80:66:36:4f:00:e9:d2: 2d:99:d9:21:32:59:73:5b:fb:51:48:51:d6:1f:da: c9:36:92:17:b8:17:f5:f2:f8:79:4e:19:c3:d1:7b: 5d:d4:52:0f:22:53:9e:90:42:e2:b3:71:14:53:6d: 3b:cc:81:af:c1:44:5c:12:84:81:bc:40:e4:ff:94: 92:37:4e:0d:f7:c4:02:41:ea:62:e5:ef:2d:a6:2a: 28:89:19:13:52:87:e9:67:63:77:0c:15:a9:77:d8: 98:76:0a:6a:f3:27:d7:e8:da:5d:a8:fc:7c:da:ae: 0a:2f:a1:f5:74:5d:69:41:33:de:1b:44:94:62:49: 34:da:f1:42:d7:86:3b:13:24:58:9f:63:0b:72:13: 0f:91:87:f9:b5:d8:fb:23:c9:79:dd:97:3d:3b:81: 4d:af:f2:8a:bc:c5:11:67:eb:3d:de:17:f5:2f:0e: 2e:7e:cd:8b:c7:62:e6:7e:74:61:89:07:38:1e:82: eb:e8:d4:8f:00:49:4e:f9:15:a7:c7:72:f5:59:3b: 14:ea:7d:d3:19:27:f7:ba:a3:3d:ee:d8:f4:cb:0e: d7:f4:53:73:e5:e5:4a:5d:63:e2:f1:b7:19:0e:a5: 49:0b:73:00:61:ec:2e:27:24:3b:48:d0:76:d4:3f: 95:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:4A:1B:09:0D:A1:B5:C5:F6:CE:DF:CB:D8:36:AC:23:FF:10:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d732057a-5403-3dc9-be9f-79689bf2264d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e7:cc:a1:1c:44:63:87:80:52:03:8d:b0:8d:77:9e:29:59: f5:46:1e:05:14:87:9e:2f:72:82:a4:cb:1d:ab:44:29:f7:62: c3:7d:87:ce:81:41:11:29:6f:7f:56:e4:df:da:5f:13:0b:5b: c3:3c:5b:81:8c:63:65:e9:81:a6:96:54:9c:72:db:46:51:b6: 09:82:90:8f:c0:2b:d7:2c:95:39:ab:d8:b5:db:52:84:a8:97: f3:cc:f6:1d:05:d6:2c:63:4a:84:7d:ba:e0:ab:de:22:ee:ff: 3f:e4:0c:71:86:61:d0:50:59:bd:4b:19:bb:ac:c1:ea:ee:b4: 45:38:2c:f7:b0:c7:f9:8c:54:c7:d5:43:09:26:4e:a2:72:bc: e5:5b:80:9e:74:3e:33:32:88:24:f7:5c:92:fd:8e:c7:8c:ad: 0a:f7:6e:a3:6f:6a:81:a8:c5:55:e4:dc:83:ba:88:e7:c4:c1: 8e:40:96:8a:ef:95:1f:63:52:9b:6e:df:9a:95:b2:c3:5d:35: 64:e7:2d:2a:b2:a6:0d:db:3a:ce:ac:a1:51:4c:c5:9d:3c:42: a5:0a:43:f6:aa:e0:25:a0:b8:63:e0:9d:b3:06:ca:1e:27:9f: bf:24:8d:89:c2:b7:03:08:4c:8f:4a:9c:a6:f4:a4:5b:1e:a1: 61:1e:bd:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91uyyudoKRl5C1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgwN1oXDTI1MDkxNzA5MTgwN1owLzEtMCsGA1UEAxMk NTBhM2I5M2MtNDU0Yy00NDU1LWE3YjItMWJhNjhlNjg2MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuseFbq/lCIBmNk8A6dItmdkhMllzW/tRSFHW H9rJNpIXuBf18vh5ThnD0Xtd1FIPIlOekELis3EUU207zIGvwURcEoSBvEDk/5SS N04N98QCQepi5e8tpiooiRkTUofpZ2N3DBWpd9iYdgpq8yfX6NpdqPx82q4KL6H1 dF1pQTPeG0SUYkk02vFC14Y7EyRYn2MLchMPkYf5tdj7I8l53Zc9O4FNr/KKvMUR Z+s93hf1Lw4ufs2Lx2LmfnRhiQc4HoLr6NSPAElO+RWnx3L1WTsU6n3TGSf3uqM9 7tj0yw7X9FNz5eVKXWPi8bcZDqVJC3MAYewuJyQ7SNB21D+VvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE2ShsJDaG1xfbO38vYNqwj/xAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDczMjA1N2EtNTQwMy0z ZGM5LWJlOWYtNzk2ODliZjIyNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnnzKEcRGOHgFIDjbCNd54pWfVGHgUUh54vcoKkyx2rRCn3YsN9h86B QREpb39W5N/aXxMLW8M8W4GMY2XpgaaWVJxy20ZRtgmCkI/AK9cslTmr2LXbUoSo l/PM9h0F1ixjSoR9uuCr3iLu/z/kDHGGYdBQWb1LGbuswerutEU4LPewx/mMVMfV QwkmTqJyvOVbgJ50PjMyiCT3XJL9jseMrQr3bqNvaoGoxVXk3IO6iOfEwY5Alorv lR9jUptu35qVssNdNWTnLSqypg3bOs6soVFMxZ08QqUKQ/aq4CWguGPgnbMGyh4n n78kjYnCtwMITI9KnKb0pFseoWEeveM= -----END CERTIFICATE-----Generated at Tue Jul 1 07:50:18 2025 by rpki-client