$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa File: e50ae0c4-1f15-33a8-8263-6db070abede6.roa (raw, json) Hash identifier: +sPZBcKmgVOTgLb5L0isnk39ZGsD45ZAi3nW0FU62bw= Subject key identifier: 9D:CC:17:E8:F4:74:A4:46:1B:18:1F:C0:6D:91:69:74:F1:E2:42:7B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39905A1D30130978E6744A60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa Signing time: Tue 17 Jun 2025 20:32:41 +0000 ROA not before: Tue 17 Jun 2025 20:32:41 +0000 ROA not after: Mon 15 Sep 2025 20:32:41 +0000 asID: 22773 IP address blocks: 68.2.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:5a:1d:30:13:09:78:e6:74:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:41 2025 GMT Not After : Sep 15 20:32:41 2025 GMT Subject: CN=bacf0c7e-876e-404f-a21b-03f369bface5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:97:a9:06:19:bf:68:45:a3:ad:40:0f:99: 0d:6b:f6:d1:13:e2:3d:5f:cf:c8:1b:3d:6a:3a:e9: 77:43:7d:c1:16:47:b7:bc:de:00:1e:cf:b1:60:95: 39:27:60:b4:e7:d5:82:63:4d:b8:08:ee:e0:c7:7c: 59:71:b4:dd:24:c1:d4:b1:77:b1:e3:75:19:20:85: e6:69:52:d2:bb:db:79:3f:a3:57:b7:86:2b:f0:2e: d7:8c:fc:82:bd:48:4b:4c:e3:ab:ce:b0:d8:55:e9: 53:87:3e:07:03:7f:2f:6c:60:84:de:df:38:cb:f4: 7d:0a:95:df:15:c6:ad:1e:3c:8e:51:47:de:c0:e1: 23:f6:fd:56:75:43:87:c7:8e:53:71:19:70:45:cf: fd:ac:a8:6d:cf:d6:e3:97:93:40:61:0b:6c:a1:44: b2:9c:f7:3a:b8:be:ea:02:5c:c3:5e:d2:bb:99:c4: 8d:ae:6f:4b:97:50:19:d6:92:15:cd:51:9b:b3:34: 9e:f6:c7:fb:26:cb:86:5f:92:e3:ca:e9:e6:2b:45: dd:ec:48:7b:08:ee:50:b1:4b:0d:10:39:aa:f7:6a: 2a:32:ac:8f:68:45:48:fa:8c:31:b1:2b:87:42:8d: 14:49:4b:a2:4c:25:c3:19:e7:76:4c:4a:d6:94:85: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:17:E8:F4:74:A4:46:1B:18:1F:C0:6D:91:69:74:F1:E2:42:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e50ae0c4-1f15-33a8-8263-6db070abede6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d1:e5:7c:c2:3c:8a:95:b4:50:c6:01:c1:2d:0e:17:68:44: 34:70:44:97:1d:c4:f6:6f:d3:48:53:53:2f:b3:37:46:6a:10: d9:5f:7c:7b:c6:82:86:ac:d0:2c:cd:5f:fd:4a:50:9c:80:f5: 8a:0b:6e:2b:1a:90:94:d2:ca:b2:30:eb:1c:e9:ee:fd:40:01: a8:d5:94:a6:43:29:a4:8e:7e:f5:08:0b:a5:ee:31:f1:a1:70: 02:90:12:e6:70:c3:8b:d8:98:99:a9:dc:05:74:89:bd:92:98: 22:b5:b2:2b:ef:7b:88:86:51:24:b3:ab:0a:7d:c7:b9:fc:a1: 90:c6:b4:74:02:b8:66:a0:25:74:52:d6:14:da:46:17:dd:e4: 40:bc:09:60:3c:66:c4:8d:54:33:b5:13:fa:b1:2e:86:6f:b5: e2:45:09:70:ab:e4:0d:dc:02:a4:0c:19:f7:09:50:b0:4f:51: d8:f1:c5:e4:b9:5f:58:d2:1e:44:2b:4a:4a:2c:0a:a4:48:ed: 10:f7:2f:55:fc:88:d5:88:64:8c:8a:16:3e:a0:a6:01:f0:e3: 90:82:57:bb:9c:79:d8:d6:cb:9a:e0:b1:2f:7a:97:f9:e5:2d: 71:87:e8:9c:89:71:eb:20:32:6c:34:1c:6c:61:a1:f9:bb:e5: 14:04:23:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kFodMBMJeOZ0SmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI0MVoXDTI1MDkxNTIwMzI0MVowLzEtMCsGA1UEAxMk YmFjZjBjN2UtODc2ZS00MDRmLWEyMWItMDNmMzY5YmZhY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyiXqQYZv2hFo61AD5kNa/bRE+I9X8/IGz1q Oul3Q33BFke3vN4AHs+xYJU5J2C059WCY024CO7gx3xZcbTdJMHUsXex43UZIIXm aVLSu9t5P6NXt4Yr8C7XjPyCvUhLTOOrzrDYVelThz4HA38vbGCE3t84y/R9CpXf FcatHjyOUUfewOEj9v1WdUOHx45TcRlwRc/9rKhtz9bjl5NAYQtsoUSynPc6uL7q AlzDXtK7mcSNrm9Ll1AZ1pIVzVGbszSe9sf7JsuGX5LjyunmK0Xd7Eh7CO5QsUsN EDmq92oqMqyPaEVI+owxsSuHQo0USUuiTCXDGed2TErWlIXMJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3MF+j0dKRGGxgfwG2RaXTx4kJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTUwYWUwYzQtMWYxNS0z M2E4LTgyNjMtNmRiMDcwYWJlZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7R5XzCPIqVtFDGAcEtDhdoRDRwRJcdxPZv00hTUy+zN0ZqENlffHvG goas0CzNX/1KUJyA9YoLbisakJTSyrIw6xzp7v1AAajVlKZDKaSOfvUIC6XuMfGh cAKQEuZww4vYmJmp3AV0ib2SmCK1sivve4iGUSSzqwp9x7n8oZDGtHQCuGagJXRS 1hTaRhfd5EC8CWA8ZsSNVDO1E/qxLoZvteJFCXCr5A3cAqQMGfcJULBPUdjxxeS5 X1jSHkQrSkosCqRI7RD3L1X8iNWIZIyKFj6gpgHw45CCV7ucedjWy5rgsS96l/nl LXGH6JyJcesgMmw0HGxhofm75RQEI5A= -----END CERTIFICATE-----Generated at Tue Jul 1 17:59:04 2025 by rpki-client