$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee452d5b-0548-3f30-b946-f043fd379cde.roa File: ee452d5b-0548-3f30-b946-f043fd379cde.roa (raw, json) Hash identifier: gKTTWZ9AvFCmpcGtIv0Lh2dARcVT+gCuvOS6kaTbc9M= Subject key identifier: D4:8E:83:79:1A:34:30:8C:8C:7F:39:39:3F:EF:4E:E2:81:5D:78:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A701AEE887D4DCA9FC7FA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee452d5b-0548-3f30-b946-f043fd379cde.roa Signing time: Fri 20 Jun 2025 09:29:00 +0000 ROA not before: Fri 20 Jun 2025 09:29:00 +0000 ROA not after: Thu 18 Sep 2025 09:29:00 +0000 asID: 22773 IP address blocks: 68.104.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:01:ae:e8:87:d4:dc:a9:fc:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:00 2025 GMT Not After : Sep 18 09:29:00 2025 GMT Subject: CN=3f4d070e-01f2-4f42-b2b9-4959f7a2565f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:f0:cc:16:c8:51:d4:b4:35:e3:ab:d6:3f: 8a:ea:c8:c2:a4:b3:ee:4f:af:28:60:cf:0d:67:ba: a8:7c:43:23:88:df:2c:cf:dc:80:c2:04:85:33:3e: 3b:3f:a5:34:a5:3d:16:a0:7e:5c:1d:fa:14:49:87: 4e:51:48:af:d4:0b:ff:47:17:b9:93:e5:22:38:26: 58:97:c6:2d:25:df:8c:e6:4b:f4:d1:b1:8f:b1:aa: 2b:c1:2a:32:34:49:9c:1a:cb:27:f5:14:08:50:98: b4:be:f7:2f:68:a5:05:8a:60:e0:c3:16:b1:5e:12: 8d:c7:2c:a7:fb:86:8c:d9:fe:2a:35:17:2e:4a:39: d9:53:45:7b:15:78:0b:2e:34:e8:6e:2b:59:e0:07: a2:56:01:d0:71:fd:45:58:e6:06:42:6f:43:47:a8: 71:6a:ed:2d:b2:52:8b:35:2f:24:e2:fd:97:a3:3c: 5e:49:f4:80:68:83:e6:b3:7d:c8:2c:9e:c0:70:0f: e5:6f:dc:08:91:56:dc:22:32:af:76:cc:fe:ba:55: 5a:56:2b:df:78:da:f9:09:e6:5b:4e:ea:21:5a:ee: c9:52:3e:10:7a:8a:8f:63:12:b8:3a:88:ec:da:40: 67:fa:30:ed:ed:60:8d:ab:77:9f:1b:e0:79:5c:87: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8E:83:79:1A:34:30:8C:8C:7F:39:39:3F:EF:4E:E2:81:5D:78:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ee452d5b-0548-3f30-b946-f043fd379cde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c8:51:50:9f:04:15:d4:fa:94:0d:6e:e3:9c:7a:8b:6f:e8: 1b:16:04:e0:29:8f:3d:77:36:af:f3:a6:f4:3e:91:7c:3b:ce: 7b:04:b2:50:d0:b9:ed:71:1d:99:e6:a4:f3:86:4d:89:6c:d9: 14:6a:e9:f8:1e:85:4e:fe:4d:d4:51:a5:f7:08:51:0d:4a:30: 69:ec:ed:d8:d6:2f:ba:80:c5:01:4e:d7:63:b3:cd:2c:fb:82: 1c:2a:be:0b:4d:a5:44:5f:97:db:77:2f:e0:b5:c7:58:70:01: 8c:16:ad:59:35:ec:c0:cd:18:66:97:e1:25:98:4e:5e:29:d8: e2:e6:1d:d1:cf:c9:3d:17:0a:90:92:9d:20:ab:d8:fb:d7:c5: d6:22:59:71:ad:78:ce:40:ec:4c:21:2f:50:f1:bd:37:b9:8b: f5:59:29:fd:3a:82:d4:0f:16:8a:3f:ec:62:85:c3:d9:6e:b3: fc:54:5c:72:e6:bb:21:79:cc:fd:fc:71:a0:7a:23:d6:a4:a2: 25:be:4e:7a:09:21:3a:6d:36:68:6e:8f:7e:10:a6:41:10:17: cc:02:a4:de:26:c6:8a:c2:d9:f4:38:02:6b:64:0f:c2:56:70: 21:10:8b:19:1c:d2:f8:35:23:e7:a9:44:e0:17:c3:02:10:59: 0f:86:ea:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApwGu6IfU3Kn8f6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkwMFoXDTI1MDkxODA5MjkwMFowLzEtMCsGA1UEAxMk M2Y0ZDA3MGUtMDFmMi00ZjQyLWIyYjktNDk1OWY3YTI1NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfHwzBbIUdS0NeOr1j+K6sjCpLPuT68oYM8N Z7qofEMjiN8sz9yAwgSFMz47P6U0pT0WoH5cHfoUSYdOUUiv1Av/Rxe5k+UiOCZY l8YtJd+M5kv00bGPsaorwSoyNEmcGssn9RQIUJi0vvcvaKUFimDgwxaxXhKNxyyn +4aM2f4qNRcuSjnZU0V7FXgLLjTobitZ4AeiVgHQcf1FWOYGQm9DR6hxau0tslKL NS8k4v2XozxeSfSAaIPms33ILJ7AcA/lb9wIkVbcIjKvdsz+ulVaVivfeNr5CeZb TuohWu7JUj4QeoqPYxK4Oojs2kBn+jDt7WCNq3efG+B5XIfo9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSOg3kaNDCMjH85OT/vTuKBXXiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWU0NTJkNWItMDU0OC0z ZjMwLWI5NDYtZjA0M2ZkMzc5Y2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDIUVCfBBXU+pQNbuOceotv6BsWBOApjz13Nq/zpvQ+kXw7znsEslDQ ue1xHZnmpPOGTYls2RRq6fgehU7+TdRRpfcIUQ1KMGns7djWL7qAxQFO12OzzSz7 ghwqvgtNpURfl9t3L+C1x1hwAYwWrVk17MDNGGaX4SWYTl4p2OLmHdHPyT0XCpCS nSCr2PvXxdYiWXGteM5A7EwhL1DxvTe5i/VZKf06gtQPFoo/7GKFw9lus/xUXHLm uyF5zP38caB6I9akoiW+TnoJITptNmhuj34QpkEQF8wCpN4mxorC2fQ4AmtkD8JW cCEQixkc0vg1I+epROAXwwIQWQ+G6nc= -----END CERTIFICATE-----Generated at Wed Jul 2 16:29:10 2025 by rpki-client