$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4753f33-e8b7-3678-940f-bef75a5a52fd.roa File: e4753f33-e8b7-3678-940f-bef75a5a52fd.roa (raw, json) Hash identifier: tiBe0uk8WoHz7cGO9+PoohwV8km/auX8ps8ZN185lsw= Subject key identifier: 2B:C4:E4:8A:11:76:2D:36:C1:98:ED:9A:ED:B1:5D:4F:E3:93:F4:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA246982B57D686E420540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4753f33-e8b7-3678-940f-bef75a5a52fd.roa Signing time: Fri 20 Jun 2025 09:35:19 +0000 ROA not before: Fri 20 Jun 2025 09:35:19 +0000 ROA not after: Thu 18 Sep 2025 09:35:19 +0000 asID: 22773 IP address blocks: 174.68.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:24:69:82:b5:7d:68:6e:42:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:19 2025 GMT Not After : Sep 18 09:35:19 2025 GMT Subject: CN=45927f69-ebdd-47e9-af36-e25fc8bc8be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:de:5e:eb:90:72:aa:6c:71:5f:2b:43:2c: 33:12:26:ea:cb:5a:09:4a:1a:0b:74:44:6f:3a:8c: 12:27:71:c2:16:86:a5:05:c4:08:db:d5:38:ca:4e: 9d:24:79:72:cb:e6:61:71:d0:a3:96:f9:d5:98:43: 5d:d0:b0:30:c3:de:67:b3:72:99:1a:6d:20:a0:13: 15:ec:4e:0c:4b:f6:78:74:ab:7b:d0:41:cd:fa:c7: 3b:c1:df:f9:b7:17:b0:75:78:18:fc:13:8d:37:05: 97:42:17:f2:6d:40:6c:98:a1:fb:78:03:76:89:3a: 6a:21:d9:5c:62:a6:7a:c9:03:ed:39:60:ee:9c:70: 0d:a5:1e:2c:a4:bf:58:2b:fa:e2:8d:df:08:cf:06: 20:f3:03:0e:ac:56:f8:25:ae:68:d1:63:0f:17:15: 34:be:a5:4f:3b:e6:c2:dd:27:78:08:24:3d:42:2d: 7b:34:9f:4b:60:8c:51:b5:a2:66:aa:64:1a:87:97: 61:91:da:27:37:20:cb:ca:8d:13:dd:89:02:30:7e: 09:56:be:39:47:77:8c:93:71:4a:9e:a1:c8:a1:95: a9:fa:06:a9:b0:fc:80:46:47:12:9a:25:86:0a:92: 6e:36:e8:33:23:1c:ca:54:5a:a1:d0:7d:ea:f6:ac: 1f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:E4:8A:11:76:2D:36:C1:98:ED:9A:ED:B1:5D:4F:E3:93:F4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e4753f33-e8b7-3678-940f-bef75a5a52fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:eb:98:f0:df:8f:ce:95:49:08:52:6c:b0:0a:eb:ee:99:cf: 5a:cf:68:96:a5:07:02:f8:40:78:48:77:be:cd:e5:aa:7b:ff: 22:b6:fa:24:e2:39:2c:61:3e:91:85:df:f2:49:42:7b:38:e5: 54:8e:04:b6:0d:f7:8a:44:55:89:13:6c:e1:fe:f7:fb:d7:29: da:35:7f:be:1e:b1:d1:1d:1c:14:e2:8d:9e:0a:26:3b:ca:f8: 89:2f:be:aa:48:e2:e9:00:52:67:4a:ae:5c:a7:7d:f2:75:64: 1b:51:24:e9:40:b0:74:8e:2c:45:21:38:1d:f6:1f:f2:2e:22: 76:8d:49:75:e1:cb:70:18:b1:ac:94:36:70:72:5a:56:f9:81: 68:45:e2:86:44:60:cf:f7:f1:47:5e:38:ea:a4:40:1d:97:1c: c9:26:4b:be:df:62:1d:3a:48:e2:0d:e9:e2:a7:32:ca:85:12: b4:a9:c3:c3:f7:de:df:1d:84:69:ba:41:bd:dc:34:16:d9:25: d1:ba:f4:a9:9a:67:c3:43:e0:fe:ef:bf:91:be:d1:f8:98:54: 9a:bf:11:92:2b:56:b1:da:cb:68:e3:6e:b5:81:d7:66:4a:20: dd:8f:b4:c2:22:ae:b1:58:3f:b2:37:8d:7c:94:f9:53:cd:65: 71:8e:75:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiRpgrV9aG5CBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxOVoXDTI1MDkxODA5MzUxOVowLzEtMCsGA1UEAxMk NDU5MjdmNjktZWJkZC00N2U5LWFmMzYtZTI1ZmM4YmM4YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD7eXuuQcqpscV8rQywzEibqy1oJShoLdERv OowSJ3HCFoalBcQI29U4yk6dJHlyy+ZhcdCjlvnVmENd0LAww95ns3KZGm0goBMV 7E4MS/Z4dKt70EHN+sc7wd/5txewdXgY/BONNwWXQhfybUBsmKH7eAN2iTpqIdlc YqZ6yQPtOWDunHANpR4spL9YK/rijd8IzwYg8wMOrFb4Ja5o0WMPFxU0vqVPO+bC 3Sd4CCQ9Qi17NJ9LYIxRtaJmqmQah5dhkdonNyDLyo0T3YkCMH4JVr45R3eMk3FK nqHIoZWp+gapsPyARkcSmiWGCpJuNugzIxzKVFqh0H3q9qwfWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvE5IoRdi02wZjtmu2xXU/jk/QJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTQ3NTNmMzMtZThiNy0z Njc4LTk0MGYtYmVmNzVhNWE1MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPrmPDfj86VSQhSbLAK6+6Zz1rPaJalBwL4QHhId77N5ap7/yK2+iTi OSxhPpGF3/JJQns45VSOBLYN94pEVYkTbOH+9/vXKdo1f74esdEdHBTijZ4KJjvK +IkvvqpI4ukAUmdKrlynffJ1ZBtRJOlAsHSOLEUhOB32H/IuInaNSXXhy3AYsayU NnByWlb5gWhF4oZEYM/38UdeOOqkQB2XHMkmS77fYh06SOIN6eKnMsqFErSpw8P3 3t8dhGm6Qb3cNBbZJdG69KmaZ8ND4P7vv5G+0fiYVJq/EZIrVrHay2jjbrWB12ZK IN2PtMIirrFYP7I3jXyU+VPNZXGOdW8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:26:51 2025 by rpki-client