$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0840d78-ea91-3004-b1e4-a257914faa9d.roa File: e0840d78-ea91-3004-b1e4-a257914faa9d.roa (raw, json) Hash identifier: 3vIENWFq6reXpC4KqVyHHiZafr/m4CCLjNls7ofdRrk= Subject key identifier: 37:DE:C6:4C:90:B3:34:32:E4:B7:BD:8E:05:0E:81:3D:9E:08:7B:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A772BD266BB54C2B131200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0840d78-ea91-3004-b1e4-a257914faa9d.roa Signing time: Fri 20 Jun 2025 09:29:53 +0000 ROA not before: Fri 20 Jun 2025 09:29:53 +0000 ROA not after: Thu 18 Sep 2025 09:29:53 +0000 asID: 22773 IP address blocks: 68.108.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:72:bd:26:6b:b5:4c:2b:13:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:53 2025 GMT Not After : Sep 18 09:29:53 2025 GMT Subject: CN=8d530ef2-0645-46d3-84a2-895a7cebd484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:ee:35:0c:f5:36:26:b8:af:65:bf:bf:a1: 4f:51:33:3b:48:d2:47:b0:6f:7b:1b:b6:0f:5d:45: d3:bb:f5:56:c6:64:1b:f0:c8:36:2d:39:7f:b0:90: c8:2b:39:9d:99:7a:30:66:18:4e:8c:1d:7a:37:4d: 92:a6:25:75:0b:ae:58:41:3a:de:bc:b1:2b:78:04: e7:f4:74:aa:1f:d7:cd:7b:41:29:6c:be:e6:99:5e: 1b:76:dd:42:f5:8f:28:cb:72:ac:77:25:22:b3:95: e6:66:79:07:d4:6d:93:0f:51:91:55:e1:78:28:3b: 4d:b1:c1:9d:5b:c7:63:a4:63:0f:23:95:e0:ab:33: 62:da:8a:ab:4d:7e:85:fc:47:01:f7:40:b4:30:81: 97:0c:bb:b2:00:4c:58:d8:f4:64:42:b4:c3:b0:7f: ec:b9:e5:3e:f5:98:0a:6a:af:e9:00:3a:1d:54:1c: 64:32:63:61:1f:1b:e9:11:59:d1:79:3c:70:b8:ca: 39:34:95:05:27:7f:09:80:d2:7c:9d:b2:d7:88:2e: 00:45:05:92:68:91:94:84:ca:5d:2e:cf:d1:ce:c4: 69:69:c0:95:74:85:d2:24:b3:e1:3f:bf:2b:d5:34: 01:de:c8:1e:71:d4:85:e2:d0:13:05:e7:a2:87:3d: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DE:C6:4C:90:B3:34:32:E4:B7:BD:8E:05:0E:81:3D:9E:08:7B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e0840d78-ea91-3004-b1e4-a257914faa9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e9:55:bf:53:1f:ba:fd:07:72:66:40:96:b4:66:ef:10:2c: 8b:be:c3:56:51:5a:7c:f6:df:93:4f:24:d4:26:6e:00:2e:0d: 56:91:11:1a:a4:4f:77:17:20:54:be:a1:b6:b7:37:18:b7:d5: 31:37:6f:82:5f:71:97:52:16:9a:09:60:48:2b:b7:1c:a7:28: 56:c6:a4:37:42:68:d4:8f:71:af:b5:5c:60:f7:86:c5:23:13: ce:54:b1:4e:d2:4d:31:0b:fe:0d:ce:56:03:71:21:ed:d4:71: f8:7c:d1:82:1d:0a:4b:61:4e:1d:0e:1d:69:19:5f:f6:39:e5: 10:90:3a:e7:fa:b1:5a:5e:2d:2b:8f:86:a5:d4:c6:e9:36:be: 23:19:24:71:6f:77:31:4f:cd:54:2d:63:28:cb:4a:9a:9a:9a: c7:c5:05:92:60:50:05:bd:38:c6:84:61:bf:28:44:17:93:78: c0:d5:a2:c4:99:40:1f:94:b8:a2:83:f1:8e:98:d9:46:2c:82: 4b:ac:8d:56:a6:1f:d8:4f:7a:b5:aa:f0:75:3b:34:81:b6:5b: 19:f4:1d:e8:a5:7c:98:ba:b4:09:79:ca:4f:f6:23:e0:bf:59: 6e:1b:7a:cb:5a:01:1d:da:91:d7:98:9b:a4:dc:f2:7e:ef:6f: 61:b1:d7:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp3K9Jmu1TCsTEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk1M1oXDTI1MDkxODA5Mjk1M1owLzEtMCsGA1UEAxMk OGQ1MzBlZjItMDY0NS00NmQzLTg0YTItODk1YTdjZWJkNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUjuNQz1Nia4r2W/v6FPUTM7SNJHsG97G7YP XUXTu/VWxmQb8Mg2LTl/sJDIKzmdmXowZhhOjB16N02SpiV1C65YQTrevLEreATn 9HSqH9fNe0EpbL7mmV4bdt1C9Y8oy3KsdyUis5XmZnkH1G2TD1GRVeF4KDtNscGd W8djpGMPI5XgqzNi2oqrTX6F/EcB90C0MIGXDLuyAExY2PRkQrTDsH/sueU+9ZgK aq/pADodVBxkMmNhHxvpEVnReTxwuMo5NJUFJ38JgNJ8nbLXiC4ARQWSaJGUhMpd Ls/RzsRpacCVdIXSJLPhP78r1TQB3sgecdSF4tATBeeihz10iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfexkyQszQy5Le9jgUOgT2eCHsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTA4NDBkNzgtZWE5MS0z MDA0LWIxZTQtYTI1NzkxNGZhYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfpVb9TH7r9B3JmQJa0Zu8QLIu+w1ZRWnz235NPJNQmbgAuDVaRERqk T3cXIFS+oba3Nxi31TE3b4JfcZdSFpoJYEgrtxynKFbGpDdCaNSPca+1XGD3hsUj E85UsU7STTEL/g3OVgNxIe3Ucfh80YIdCkthTh0OHWkZX/Y55RCQOuf6sVpeLSuP hqXUxuk2viMZJHFvdzFPzVQtYyjLSpqamsfFBZJgUAW9OMaEYb8oRBeTeMDVosSZ QB+UuKKD8Y6Y2UYsgkusjVamH9hPerWq8HU7NIG2Wxn0HeilfJi6tAl5yk/2I+C/ WW4bestaAR3akdeYm6Tc8n7vb2Gx1zc= -----END CERTIFICATE-----Generated at Tue Jul 1 20:49:18 2025 by rpki-client