$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e846b0e7-0625-3e35-b5f1-c4f1a33f1d46.roa File: e846b0e7-0625-3e35-b5f1-c4f1a33f1d46.roa (raw, json) Hash identifier: 3VoFd6Uo09hic7qJNmiSS0zDGOBjAywaArAU4m8y9Sc= Subject key identifier: 41:2E:29:BF:55:C8:BE:60:CE:FD:C2:11:00:F7:12:B5:EB:06:A6:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD70572C5E705E4C176CA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e846b0e7-0625-3e35-b5f1-c4f1a33f1d46.roa Signing time: Thu 19 Jun 2025 09:18:19 +0000 ROA not before: Thu 19 Jun 2025 09:18:19 +0000 ROA not after: Wed 17 Sep 2025 09:18:19 +0000 asID: 22773 IP address blocks: 68.231.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:05:72:c5:e7:05:e4:c1:76:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:19 2025 GMT Not After : Sep 17 09:18:19 2025 GMT Subject: CN=507f2553-0daa-4a52-998f-9fbf5325b561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:95:80:e6:6c:0a:ce:5c:42:4f:8d:73:70: 08:13:c1:30:73:b0:5c:b0:3a:cf:bd:0f:f9:91:2c: 71:35:8b:14:78:7a:90:be:82:06:3c:67:5b:8b:d8: ab:1c:e0:1d:37:bc:f9:c0:27:7d:ec:89:ab:64:de: 49:85:72:ad:bc:af:c1:4e:44:bd:e3:74:7d:b3:16: 43:c3:56:5f:ae:37:9c:66:e5:bc:56:f7:55:d6:df: d1:c8:52:ee:44:1b:1a:50:99:d6:8f:45:5e:f7:61: 23:90:9b:ba:34:09:35:fc:30:d2:0b:9c:3a:a3:7b: f3:c1:c7:67:ca:3f:e1:a9:e2:1b:71:08:21:c7:cf: 19:e2:e4:2e:98:3e:8f:63:fd:f7:08:2b:25:dc:5a: fa:c7:5d:de:88:07:e3:f2:39:53:87:f1:2b:d2:3a: 22:18:cc:89:d9:01:43:c3:5d:6d:10:9c:55:dc:0a: 26:c8:44:8f:8c:34:19:e8:10:07:54:ea:c8:a0:e6: a6:54:2e:a9:6c:df:08:5f:44:bd:24:ae:33:83:c4: d9:64:c6:35:85:53:72:17:a0:c8:6a:de:69:0c:ad: 60:6a:d8:3c:d3:32:b5:2f:af:9d:23:56:4b:68:01: eb:85:9a:17:76:6c:9d:44:e4:77:2b:60:9f:0f:38: 32:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:29:BF:55:C8:BE:60:CE:FD:C2:11:00:F7:12:B5:EB:06:A6:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e846b0e7-0625-3e35-b5f1-c4f1a33f1d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:00:3a:34:48:87:cc:3f:8b:76:bf:90:d6:bd:f3:d9:83:66: e5:26:2c:e1:f2:30:59:38:df:c0:62:66:ce:26:8a:0e:12:04: 92:fe:8a:25:ba:8c:35:5f:eb:8f:73:86:64:f6:cc:f8:80:54: e6:0a:2d:73:5e:93:d1:e3:2e:43:a1:74:ce:b0:ce:f8:b8:1f: 1b:21:15:18:f3:08:00:e5:d8:fd:93:78:5f:da:16:e0:97:96: a1:45:fa:24:5f:0a:13:76:af:e5:6d:54:fe:c4:1a:08:fb:b3: aa:4e:7a:89:8e:83:9f:ad:85:23:8e:e7:3f:74:1a:5d:a7:27: 7e:fd:82:39:dd:82:55:40:79:4e:af:31:ed:25:04:00:17:69: a8:ab:58:fa:ef:b8:58:46:3c:a9:d0:2d:a5:35:36:8b:fd:9c: 0f:74:ba:fe:69:5b:12:ac:80:2d:c6:11:48:f5:51:3c:83:00: 62:86:a9:a5:79:f2:0b:37:78:d5:01:1d:0d:ed:ed:53:43:2b: fe:b2:ca:b2:13:a9:da:27:42:5d:00:c8:32:e7:cd:b8:d8:ad: a7:f5:48:9c:db:c3:16:b5:1f:90:35:f3:fe:9c:0e:77:a4:a5: 72:d1:67:fc:26:f1:bd:b3:da:9d:94:8a:ee:67:61:2d:6f:33: 58:ba:16:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91wVyxecF5MF2ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgxOVoXDTI1MDkxNzA5MTgxOVowLzEtMCsGA1UEAxMk NTA3ZjI1NTMtMGRhYS00YTUyLTk5OGYtOWZiZjUzMjViNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRGVgOZsCs5cQk+Nc3AIE8Ewc7BcsDrPvQ/5 kSxxNYsUeHqQvoIGPGdbi9irHOAdN7z5wCd97ImrZN5JhXKtvK/BTkS943R9sxZD w1ZfrjecZuW8VvdV1t/RyFLuRBsaUJnWj0Ve92EjkJu6NAk1/DDSC5w6o3vzwcdn yj/hqeIbcQghx88Z4uQumD6PY/33CCsl3Fr6x13eiAfj8jlTh/Er0joiGMyJ2QFD w11tEJxV3AomyESPjDQZ6BAHVOrIoOamVC6pbN8IX0S9JK4zg8TZZMY1hVNyF6DI at5pDK1gatg80zK1L6+dI1ZLaAHrhZoXdmydROR3K2CfDzgyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEuKb9VyL5gzv3CEQD3ErXrBqboMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTg0NmIwZTctMDYyNS0z ZTM1LWI1ZjEtYzRmMWEzM2YxZDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROdxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUAOjRIh8w/i3a/kNa989mDZuUmLOHyMFk438BiZs4mig4SBJL+iiW6 jDVf649zhmT2zPiAVOYKLXNek9HjLkOhdM6wzvi4HxshFRjzCADl2P2TeF/aFuCX lqFF+iRfChN2r+VtVP7EGgj7s6pOeomOg5+thSOO5z90Gl2nJ379gjndglVAeU6v Me0lBAAXaairWPrvuFhGPKnQLaU1Nov9nA90uv5pWxKsgC3GEUj1UTyDAGKGqaV5 8gs3eNUBHQ3t7VNDK/6yyrITqdonQl0AyDLnzbjYraf1SJzbwxa1H5A18/6cDnek pXLRZ/wm8b2z2p2Uiu5nYS1vM1i6FqI= -----END CERTIFICATE-----Generated at Tue Jul 1 09:11:32 2025 by rpki-client