$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def654e6-51b1-39b4-8269-c52f1b819872.roa File: def654e6-51b1-39b4-8269-c52f1b819872.roa (raw, json) Hash identifier: pAqOYPRS22aSd8usf7GM7kTS9QEdGXgG/JB5fyxLnHE= Subject key identifier: B8:8A:F7:AA:70:C5:E6:A4:A5:52:66:06:03:55:0D:24:B1:1C:56:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD62A0BB2A3893592FE8000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def654e6-51b1-39b4-8269-c52f1b819872.roa Signing time: Thu 19 Jun 2025 09:16:35 +0000 ROA not before: Thu 19 Jun 2025 09:16:35 +0000 ROA not after: Wed 17 Sep 2025 09:16:35 +0000 asID: 22773 IP address blocks: 68.110.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:2a:0b:b2:a3:89:35:92:fe:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:35 2025 GMT Not After : Sep 17 09:16:35 2025 GMT Subject: CN=2f20cab6-94a3-41e0-91c3-108157f060d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:e7:f2:c3:e3:2c:0e:8a:e7:35:df:c0:c9: 7e:57:55:3d:8d:28:50:b2:a4:dc:5d:59:e3:d6:b1: 39:a9:4a:34:93:20:2a:6b:2b:20:ef:eb:f8:4b:1d: 83:b3:9d:9e:34:41:ad:5a:e6:c6:7a:23:16:69:2e: df:93:af:85:bd:ac:f3:70:4b:df:30:7c:f0:6f:59: 67:86:c3:39:79:22:6f:06:07:79:d4:75:1e:b3:b2: c9:e7:ba:fe:db:11:70:a5:2c:e9:01:dc:01:43:c5: 48:a0:d6:ca:d3:89:08:9d:da:64:33:8e:d7:eb:9d: 48:c8:8a:58:c1:87:d7:88:07:d5:26:87:d5:e9:0c: be:98:4f:1b:19:c4:8f:08:9f:3d:76:2d:77:d2:56: 2f:cc:5e:f1:08:a7:0b:57:f4:d2:75:3f:dc:d2:6b: 37:2b:88:d7:1f:d0:29:be:23:c6:2f:a7:05:b4:b3: cd:16:ce:e0:b9:de:aa:87:42:ee:69:1d:6c:e8:0f: 4c:48:96:2c:e9:2e:5c:be:66:7a:da:79:33:6a:39: e9:12:01:cf:1c:66:ed:65:0f:99:ff:f7:1b:98:e6: d7:98:12:50:18:55:9c:a0:22:60:6b:b7:4e:12:71: 0e:0e:e1:25:68:48:fc:00:41:4a:52:f3:ea:b5:7a: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8A:F7:AA:70:C5:E6:A4:A5:52:66:06:03:55:0D:24:B1:1C:56:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def654e6-51b1-39b4-8269-c52f1b819872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.110.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:25:f2:f9:0c:f8:bf:71:36:95:5b:ac:1f:82:31:1e:bb:f5: 5e:9d:12:9e:23:13:23:11:7b:6d:84:b6:5e:e4:4f:03:69:10: 02:3c:1e:3c:65:24:03:4b:2e:a5:8c:2f:7d:19:95:f3:03:fa: c6:56:60:3d:e5:1b:82:4f:95:f1:35:8e:3f:36:09:a2:22:35: 17:63:b9:53:d0:9a:cc:67:84:a6:06:ce:c1:47:2b:dc:31:03: 19:ea:d3:08:71:3e:d4:cf:4c:2e:4d:58:bf:c9:ff:68:1e:4c: 4f:78:a6:dc:74:c2:f8:fd:8a:ee:bf:a8:f5:db:15:18:89:68: ab:4f:4e:f5:af:e8:b2:96:a3:57:87:51:7e:3f:8f:11:86:69: 35:53:96:69:a7:dc:7b:7c:5b:2d:05:2a:c6:cb:98:fa:4d:3f: 62:ec:85:90:e7:d2:09:a3:b5:4f:14:cd:ba:16:13:77:ef:a6: d8:aa:cf:09:f7:b9:fb:1f:13:bf:bc:ce:24:c8:f1:9b:f3:2a: 98:10:db:00:d6:0b:99:71:80:7b:be:70:ae:6c:bf:b1:4e:f4: 0a:a1:a1:87:8a:b7:59:c7:c4:05:30:5a:67:2c:d4:e6:f5:a3: ac:1e:b4:fa:24:14:26:94:25:9e:df:60:c8:03:29:02:e0:87: 5d:52:bc:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91ioLsqOJNZL+gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYzNVoXDTI1MDkxNzA5MTYzNVowLzEtMCsGA1UEAxMk MmYyMGNhYjYtOTRhMy00MWUwLTkxYzMtMTA4MTU3ZjA2MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipXn8sPjLA6K5zXfwMl+V1U9jShQsqTcXVnj 1rE5qUo0kyAqaysg7+v4Sx2Ds52eNEGtWubGeiMWaS7fk6+FvazzcEvfMHzwb1ln hsM5eSJvBgd51HUes7LJ57r+2xFwpSzpAdwBQ8VIoNbK04kIndpkM47X651IyIpY wYfXiAfVJofV6Qy+mE8bGcSPCJ89di130lYvzF7xCKcLV/TSdT/c0ms3K4jXH9Ap viPGL6cFtLPNFs7gud6qh0LuaR1s6A9MSJYs6S5cvmZ62nkzajnpEgHPHGbtZQ+Z //cbmObXmBJQGFWcoCJga7dOEnEODuElaEj8AEFKUvPqtXrRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiK96pwxeakpVJmBgNVDSSxHFZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGVmNjU0ZTYtNTFiMS0z OWI0LTgyNjktYzUyZjFiODE5ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQl8vkM+L9xNpVbrB+CMR679V6dEp4jEyMRe22Etl7kTwNpEAI8Hjxl JANLLqWML30ZlfMD+sZWYD3lG4JPlfE1jj82CaIiNRdjuVPQmsxnhKYGzsFHK9wx Axnq0whxPtTPTC5NWL/J/2geTE94ptx0wvj9iu6/qPXbFRiJaKtPTvWv6LKWo1eH UX4/jxGGaTVTlmmn3Ht8Wy0FKsbLmPpNP2LshZDn0gmjtU8UzboWE3fvptiqzwn3 ufsfE7+8ziTI8ZvzKpgQ2wDWC5lxgHu+cK5sv7FO9AqhoYeKt1nHxAUwWmcs1Ob1 o6wetPokFCaUJZ7fYMgDKQLgh11SvAo= -----END CERTIFICATE-----Generated at Tue Jul 1 15:02:07 2025 by rpki-client