$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def90b92-0313-3d8e-a7a3-5d53f8aba863.roa File: def90b92-0313-3d8e-a7a3-5d53f8aba863.roa (raw, json) Hash identifier: s4xoIvDsX5gphh+DdtxalraIwekUJ9jTEVwxbRlYka0= Subject key identifier: 1F:E6:35:AB:92:58:D1:D4:EC:CB:0F:52:8D:FF:4A:43:43:16:28:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6E5B53345E3C14DBD12B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def90b92-0313-3d8e-a7a3-5d53f8aba863.roa Signing time: Fri 20 Jun 2025 09:28:46 +0000 ROA not before: Fri 20 Jun 2025 09:28:46 +0000 ROA not after: Thu 18 Sep 2025 09:28:46 +0000 asID: 22773 IP address blocks: 68.96.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:e5:b5:33:45:e3:c1:4d:bd:12:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:46 2025 GMT Not After : Sep 18 09:28:46 2025 GMT Subject: CN=25077bb8-66f8-40b2-83f4-347b3b079d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:de:a1:d1:82:9c:67:cb:89:a9:47:dc:dd:31: 31:44:99:3d:c7:a3:87:af:af:0e:e4:60:36:25:1f: 52:52:e4:22:75:32:22:fe:7f:1d:fe:52:d7:0e:fa: cc:2e:e4:7a:c5:d6:f5:54:c8:d1:47:95:43:c4:d5: 93:65:8f:71:1c:6a:ae:a4:52:da:86:79:f3:19:48: 1f:83:ba:d6:97:74:c0:f1:a5:5f:6b:68:a1:71:55: 17:00:ba:38:0e:b7:71:c6:0d:5d:29:dc:69:90:d0: 15:58:8b:32:d3:6e:d0:fd:04:ab:33:ed:d5:f8:b2: 1b:45:05:84:72:77:3c:63:9d:e5:ef:15:c5:a1:c5: 70:e9:b4:ff:44:49:d2:0a:8a:0c:c0:0d:12:9b:9e: 03:98:24:dc:ae:61:2e:5b:66:4b:f6:e2:e3:02:ed: d3:21:10:f3:e0:fa:25:6c:df:ad:c4:07:88:cb:15: 8e:4f:6f:c7:c5:99:7a:6e:3f:b1:9d:85:41:6a:18: 0e:60:63:b1:8a:b5:ed:8b:a7:f8:d5:3a:ed:a0:10: e7:bb:6d:14:23:5d:f6:ff:4b:62:e2:4b:cb:9b:9d: 8b:46:d2:1a:18:68:fb:41:56:6f:3b:bc:70:b1:2f: 0c:08:97:8c:3c:28:fd:3d:a3:81:f5:68:70:2c:d9: 34:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E6:35:AB:92:58:D1:D4:EC:CB:0F:52:8D:FF:4A:43:43:16:28:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/def90b92-0313-3d8e-a7a3-5d53f8aba863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ca:09:b0:38:90:f6:8c:9d:89:bb:9d:8a:d7:df:7c:1f:fb: c7:a3:c3:a7:c3:da:6d:0f:44:44:36:ce:84:bd:79:a8:6e:a1: e9:33:a5:54:f9:85:4c:ba:f2:ec:60:c2:98:46:c7:76:78:e9: 9e:43:4c:e9:b4:db:14:c8:94:7a:d6:1c:f4:03:63:30:f2:fd: 84:b5:6e:47:42:9a:8e:08:6a:dc:03:7d:7b:10:ef:f7:93:4b: 49:eb:85:08:b7:f8:df:68:d7:00:a5:e4:94:ae:f2:18:29:72: df:68:88:bd:d4:0a:e9:82:6b:16:44:c4:e5:3c:74:68:9f:2c: 4b:bd:a1:29:ed:d0:f0:b3:11:cf:91:89:eb:6d:03:1a:01:64: 5f:8e:5d:b3:f6:4d:41:9c:d5:72:a8:55:3e:cd:97:f2:dc:24: f7:a3:3d:63:d8:56:e0:3d:06:f4:3f:57:77:b5:58:94:10:be: 55:49:7d:43:84:b6:b2:71:29:41:87:05:92:47:b1:59:52:2f: 83:ec:dc:0b:75:a7:15:2e:14:4a:04:18:c1:19:ce:30:c0:a5: d0:47:d0:44:43:f7:26:37:9a:66:3a:0b:cd:92:0c:f2:6f:5d: 0c:c1:64:80:ab:dc:97:ba:c3:0f:cd:c5:08:3c:95:15:97:f1: 8a:96:34:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApuW1M0XjwU29ErgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg0NloXDTI1MDkxODA5Mjg0NlowLzEtMCsGA1UEAxMk MjUwNzdiYjgtNjZmOC00MGIyLTgzZjQtMzQ3YjNiMDc5ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg96h0YKcZ8uJqUfc3TExRJk9x6OHr68O5GA2 JR9SUuQidTIi/n8d/lLXDvrMLuR6xdb1VMjRR5VDxNWTZY9xHGqupFLahnnzGUgf g7rWl3TA8aVfa2ihcVUXALo4Drdxxg1dKdxpkNAVWIsy027Q/QSrM+3V+LIbRQWE cnc8Y53l7xXFocVw6bT/REnSCooMwA0Sm54DmCTcrmEuW2ZL9uLjAu3TIRDz4Pol bN+txAeIyxWOT2/HxZl6bj+xnYVBahgOYGOxirXti6f41TrtoBDnu20UI132/0ti 4kvLm52LRtIaGGj7QVZvO7xwsS8MCJeMPCj9PaOB9WhwLNk00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/mNauSWNHU7MsPUo3/SkNDFijYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGVmOTBiOTItMDMxMy0z ZDhlLWE3YTMtNWQ1M2Y4YWJhODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATKCbA4kPaMnYm7nYrX33wf+8ejw6fD2m0PREQ2zoS9eahuoekzpVT5 hUy68uxgwphGx3Z46Z5DTOm02xTIlHrWHPQDYzDy/YS1bkdCmo4IatwDfXsQ7/eT S0nrhQi3+N9o1wCl5JSu8hgpct9oiL3UCumCaxZExOU8dGifLEu9oSnt0PCzEc+R iettAxoBZF+OXbP2TUGc1XKoVT7Nl/LcJPejPWPYVuA9BvQ/V3e1WJQQvlVJfUOE trJxKUGHBZJHsVlSL4Ps3At1pxUuFEoEGMEZzjDApdBH0ERD9yY3mmY6C82SDPJv XQzBZICr3Je6ww/NxQg8lRWX8YqWNEQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:04:34 2025 by rpki-client