$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e504d438-deb2-3c1c-837a-6918d13f7280.roa File: e504d438-deb2-3c1c-837a-6918d13f7280.roa (raw, json) Hash identifier: PpuhlDgozIUdLSxF6DE4pcDZkSWg24Bo7Mu6Ox+egGs= Subject key identifier: DC:E8:ED:85:F1:0D:EC:7D:4B:9C:4F:C9:CD:32:AB:DC:ED:C9:46:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6F3008CBB03286EB34200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e504d438-deb2-3c1c-837a-6918d13f7280.roa Signing time: Thu 19 Jun 2025 09:18:10 +0000 ROA not before: Thu 19 Jun 2025 09:18:10 +0000 ROA not after: Wed 17 Sep 2025 09:18:10 +0000 asID: 22773 IP address blocks: 68.231.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:f3:00:8c:bb:03:28:6e:b3:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:10 2025 GMT Not After : Sep 17 09:18:10 2025 GMT Subject: CN=c4c9a3ba-f92c-4457-b65b-bfb8b68c0ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:c2:28:25:3f:04:7c:51:d8:d2:df:1a:b4: a1:4f:9c:00:d3:11:77:1b:62:2f:fc:e2:5b:cb:c7: a1:80:6e:3d:2a:64:72:c3:fb:f0:9d:93:f4:ed:91: 29:ab:8a:15:bb:f2:f2:66:7b:0a:03:9e:94:46:15: b5:86:b3:dc:20:16:99:15:f2:97:54:a3:e4:a5:86: 17:b0:22:07:64:db:c8:49:26:60:71:50:f3:67:01: 3b:e9:68:e3:74:bf:64:50:cd:58:a8:d1:5c:3b:d5: bd:a5:8d:3b:2b:e5:3f:15:41:af:ae:40:58:2d:99: cc:8d:93:f3:9b:5e:50:78:46:50:60:b0:b7:43:83: 9e:30:25:3a:8e:a4:cf:47:db:7d:67:d8:75:64:6c: 2d:14:29:14:73:d9:b9:f0:a5:73:6f:8a:76:ec:21: 91:37:b0:37:ea:17:20:a8:18:8e:92:08:5a:4a:ad: 05:c0:85:57:1f:69:be:58:43:8e:2a:a3:e9:7c:fb: 22:0f:6b:65:2c:18:49:00:f5:73:0b:02:9d:c5:54: 94:af:d4:74:d0:dd:06:51:31:f6:ff:7c:49:a8:a5: ef:43:89:22:6c:87:c5:e1:77:34:5c:b3:87:ef:9f: 5c:ab:59:c8:68:6b:1c:fc:8e:ee:1c:f7:40:29:4f: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:ED:85:F1:0D:EC:7D:4B:9C:4F:C9:CD:32:AB:DC:ED:C9:46:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e504d438-deb2-3c1c-837a-6918d13f7280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c8:8d:f1:82:dd:40:6d:4b:fd:81:21:bf:81:0a:ed:a6:01: bd:2c:b5:5b:95:3b:ba:a6:80:90:84:c3:1e:1d:ac:4b:89:99: dd:b5:6d:1f:c2:b8:fc:a0:17:d4:dd:0c:34:1e:ba:57:03:82: 22:7e:7f:9e:ff:62:6f:22:29:54:87:54:d9:3c:bc:09:f6:38: cb:19:b1:71:86:1d:7d:89:6e:dc:08:f7:f4:89:cc:4f:1b:0f: 5b:ac:12:ca:1a:88:42:77:71:74:2a:99:29:e6:35:72:36:f3: 88:a6:08:ee:33:40:c9:6b:8c:60:67:c2:8f:8f:65:e7:26:ef: 29:41:42:9c:a9:d0:27:9b:af:06:5e:52:8a:f5:0a:e9:1e:b7: 6a:3c:8a:ad:0e:6a:46:67:b8:d8:30:02:77:28:b4:f3:9d:0a: 9e:42:49:55:7a:fa:4c:c3:9d:b2:7c:02:9e:93:32:8c:dd:b2: 05:44:94:ef:71:74:2c:09:1d:3c:c1:cf:a8:25:10:b7:f2:ea: aa:2c:28:2c:e0:11:b1:46:75:af:cc:19:24:54:01:76:f6:8b: 2e:51:69:5d:c0:7e:45:33:88:90:00:db:3e:a1:17:1c:fe:4b: 10:5b:1a:d5:18:9a:c3:3b:57:40:7d:7a:f4:9a:0e:74:4d:41: e5:ac:99:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91vMAjLsDKG6zQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgxMFoXDTI1MDkxNzA5MTgxMFowLzEtMCsGA1UEAxMk YzRjOWEzYmEtZjkyYy00NDU3LWI2NWItYmZiOGI2OGMwZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQPCKCU/BHxR2NLfGrShT5wA0xF3G2Iv/OJb y8ehgG49KmRyw/vwnZP07ZEpq4oVu/LyZnsKA56URhW1hrPcIBaZFfKXVKPkpYYX sCIHZNvISSZgcVDzZwE76WjjdL9kUM1YqNFcO9W9pY07K+U/FUGvrkBYLZnMjZPz m15QeEZQYLC3Q4OeMCU6jqTPR9t9Z9h1ZGwtFCkUc9m58KVzb4p27CGRN7A36hcg qBiOkghaSq0FwIVXH2m+WEOOKqPpfPsiD2tlLBhJAPVzCwKdxVSUr9R00N0GUTH2 /3xJqKXvQ4kibIfF4Xc0XLOH759cq1nIaGsc/I7uHPdAKU/uNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzo7YXxDex9S5xPyc0yq9ztyUaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTUwNGQ0MzgtZGViMi0z YzFjLTgzN2EtNjkxOGQxM2Y3MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROdKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfIjfGC3UBtS/2BIb+BCu2mAb0stVuVO7qmgJCEwx4drEuJmd21bR/C uPygF9TdDDQeulcDgiJ+f57/Ym8iKVSHVNk8vAn2OMsZsXGGHX2JbtwI9/SJzE8b D1usEsoaiEJ3cXQqmSnmNXI284imCO4zQMlrjGBnwo+PZecm7ylBQpyp0CebrwZe Uor1Cuket2o8iq0OakZnuNgwAncotPOdCp5CSVV6+kzDnbJ8Ap6TMozdsgVElO9x dCwJHTzBz6glELfy6qosKCzgEbFGda/MGSRUAXb2iy5RaV3AfkUziJAA2z6hFxz+ SxBbGtUYmsM7V0B9evSaDnRNQeWsmeg= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:28 2025 by rpki-client