$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df2b7cdf-1407-3cb9-9e93-24638b398083.roa File: df2b7cdf-1407-3cb9-9e93-24638b398083.roa (raw, json) Hash identifier: 6/ezgCIm9IeXwikxIp8Fv9UYeF+BegwRqKozQ2SXEfA= Subject key identifier: C5:35:3E:B9:3E:A1:82:35:82:E8:AD:78:C7:6C:E0:66:D1:B4:5F:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD66BCBEB2D7B0C527EBB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df2b7cdf-1407-3cb9-9e93-24638b398083.roa Signing time: Thu 19 Jun 2025 09:17:06 +0000 ROA not before: Thu 19 Jun 2025 09:17:06 +0000 ROA not after: Wed 17 Sep 2025 09:17:06 +0000 asID: 22773 IP address blocks: 68.227.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:6b:cb:eb:2d:7b:0c:52:7e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:06 2025 GMT Not After : Sep 17 09:17:06 2025 GMT Subject: CN=d404bc14-4c9d-4d49-a56b-9290cc234631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:1c:2f:29:32:50:34:b3:55:ce:b1:53:10: 29:9c:d7:4e:25:3e:a7:6e:e1:76:56:52:d6:b4:e6: df:1a:51:03:9c:99:5a:5a:6c:d5:cb:bf:c3:6f:c9: 22:9a:d1:c5:bf:98:1c:80:9e:64:8f:3f:9a:8f:82: 25:8c:e7:1d:f2:88:16:ec:d0:bb:64:be:9f:91:6b: 39:83:0a:af:f8:8d:63:71:e8:77:15:f2:63:cd:12: 73:fb:5f:03:f2:02:b8:b0:11:fc:6b:f4:dc:59:49: fb:72:e2:02:1d:6d:b4:b9:73:6f:24:d0:03:47:97: 57:48:d0:98:75:54:ba:6d:2d:9e:94:aa:12:49:18: 98:f9:b7:6b:de:a1:b7:3f:e0:da:21:86:8f:4f:3b: 47:59:6c:60:a7:33:fe:78:be:20:33:93:44:f1:bf: e7:da:78:31:19:64:6b:54:bb:97:a6:59:ee:04:48: 0e:17:8a:6d:77:25:2a:8a:1d:8e:af:9b:0a:d1:2c: 2a:ed:e8:41:8a:ff:65:df:d5:cf:b6:7b:f2:23:46: 4d:52:91:dd:af:77:cd:28:ae:1f:49:b3:6d:6a:fb: 86:07:80:88:b7:a0:21:ca:d3:8b:59:4d:b8:b5:71: 52:21:81:86:3b:7b:00:0d:01:ad:cd:0e:ee:92:04: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:35:3E:B9:3E:A1:82:35:82:E8:AD:78:C7:6C:E0:66:D1:B4:5F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df2b7cdf-1407-3cb9-9e93-24638b398083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:53:1f:f5:4f:bc:5c:52:44:e8:55:00:cc:58:e7:b7:62:48: b8:10:1c:32:84:64:4b:b1:c7:00:62:33:cc:36:cc:ad:8e:61: d7:1d:68:02:a7:2c:10:66:5b:96:6d:42:ca:0a:3e:22:23:96: bc:dd:c1:09:bf:f8:c1:79:11:b8:28:2c:66:6a:2a:17:a8:d0: 99:ef:87:44:76:ce:4d:c9:70:c3:7a:42:c1:29:42:e3:35:4e: 46:26:f3:04:6a:bb:d9:a5:0a:15:14:8e:6b:d2:13:58:a6:3d: e8:14:8b:0b:fc:71:b1:ff:4a:94:9b:50:96:f1:c3:00:cc:0c: 2c:3d:e7:77:3c:f7:c5:cb:d7:17:d2:66:f4:16:ca:2a:13:7e: e7:32:26:0b:e7:2b:d6:35:83:2d:34:dc:45:c1:eb:07:d8:81: cb:cc:ff:7e:66:9d:6f:85:0c:58:02:35:8f:86:04:02:0d:b9: 35:2f:8f:7a:81:9d:7e:c9:92:c9:53:71:1e:1e:32:23:02:6d: ce:40:89:98:94:5f:5f:53:25:07:ff:57:1a:82:03:88:3a:6e: b0:89:6f:ba:93:7f:7d:a1:9b:92:90:ed:a6:ff:2c:27:4a:63: 5f:d4:36:33:eb:a3:25:17:2c:45:52:b4:45:07:fc:ca:51:17: 3d:dc:42:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91mvL6y17DFJ+u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcwNloXDTI1MDkxNzA5MTcwNlowLzEtMCsGA1UEAxMk ZDQwNGJjMTQtNGM5ZC00ZDQ5LWE1NmItOTI5MGNjMjM0NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouIcLykyUDSzVc6xUxApnNdOJT6nbuF2VlLW tObfGlEDnJlaWmzVy7/Db8kimtHFv5gcgJ5kjz+aj4IljOcd8ogW7NC7ZL6fkWs5 gwqv+I1jceh3FfJjzRJz+18D8gK4sBH8a/TcWUn7cuICHW20uXNvJNADR5dXSNCY dVS6bS2elKoSSRiY+bdr3qG3P+DaIYaPTztHWWxgpzP+eL4gM5NE8b/n2ngxGWRr VLuXplnuBEgOF4ptdyUqih2Or5sK0Swq7ehBiv9l39XPtnvyI0ZNUpHdr3fNKK4f SbNtavuGB4CIt6AhytOLWU24tXFSIYGGO3sADQGtzQ7ukgRbdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU1Prk+oYI1guiteMds4GbRtF86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGYyYjdjZGYtMTQwNy0z Y2I5LTllOTMtMjQ2MzhiMzk4MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFTH/VPvFxSROhVAMxY57diSLgQHDKEZEuxxwBiM8w2zK2OYdcdaAKn LBBmW5ZtQsoKPiIjlrzdwQm/+MF5EbgoLGZqKheo0Jnvh0R2zk3JcMN6QsEpQuM1 TkYm8wRqu9mlChUUjmvSE1imPegUiwv8cbH/SpSbUJbxwwDMDCw953c898XL1xfS ZvQWyioTfucyJgvnK9Y1gy003EXB6wfYgcvM/35mnW+FDFgCNY+GBAINuTUvj3qB nX7JkslTcR4eMiMCbc5AiZiUX19TJQf/VxqCA4g6brCJb7qTf32hm5KQ7ab/LCdK Y1/UNjProyUXLEVStEUH/MpRFz3cQik= -----END CERTIFICATE-----Generated at Wed Jul 2 21:43:10 2025 by rpki-client