$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b2a1e9-1d4e-3fff-9670-4a1c5745e1e9.roa File: f2b2a1e9-1d4e-3fff-9670-4a1c5745e1e9.roa (raw, json) Hash identifier: Q9ZlQibDuzUCUAJp06k50oan1KplB1PK/oSMNPIpWAU= Subject key identifier: 34:CB:47:34:C0:F1:42:92:CC:C8:2C:27:21:D1:35:07:49:96:09:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6C0BD3750C3EB35D2FDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b2a1e9-1d4e-3fff-9670-4a1c5745e1e9.roa Signing time: Thu 19 Jun 2025 09:17:46 +0000 ROA not before: Thu 19 Jun 2025 09:17:46 +0000 ROA not after: Wed 17 Sep 2025 09:17:46 +0000 asID: 22773 IP address blocks: 68.230.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:c0:bd:37:50:c3:eb:35:d2:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:46 2025 GMT Not After : Sep 17 09:17:46 2025 GMT Subject: CN=45967e2a-8364-4a5f-8d32-f06788e4923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:fb:1c:91:00:d9:3c:75:86:86:6f:ca:38: 1d:23:3c:c1:3b:eb:d1:0f:83:ff:2c:16:ae:bf:2e: 0f:77:ec:ee:b9:ad:39:99:14:21:4e:4c:dd:27:82: 19:22:ba:93:15:ac:82:c0:56:0e:08:61:de:26:e5: 23:31:cd:62:65:67:74:50:72:3a:b5:60:ab:3a:3b: 6c:34:ee:8a:e0:c9:1b:d9:71:7f:57:2b:5b:a6:5f: b4:14:6a:fe:de:47:c7:46:9e:57:58:43:4b:0c:d1: d8:96:e8:10:31:40:76:ef:b9:05:89:b3:f6:f4:3a: e2:64:68:e5:5f:5d:31:45:66:cd:e0:14:ac:5b:ad: 18:76:42:d7:19:58:01:3d:de:8a:65:e5:53:b8:dc: 6e:78:c2:cd:8e:32:2b:6a:1e:20:41:6e:66:89:f4: 9f:e9:59:74:5a:76:91:85:db:35:62:8b:f8:d0:68: e5:98:09:c2:92:bb:c3:ea:8c:6a:bc:1d:74:50:4b: 7a:b6:b8:b0:c5:c0:00:2b:37:fc:37:96:42:81:4a: 8c:34:cd:ea:f2:61:c1:04:3d:b3:c9:02:1e:07:65: da:e1:36:b1:e1:f1:1b:27:31:56:64:ef:d1:e7:00: 79:ab:24:1f:48:6c:ef:d5:dd:19:63:eb:1d:6a:f6: 3c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:47:34:C0:F1:42:92:CC:C8:2C:27:21:D1:35:07:49:96:09:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b2a1e9-1d4e-3fff-9670-4a1c5745e1e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:83:1f:98:b5:33:fd:e6:d4:dc:08:8c:5c:fd:5a:99:76:7e: a3:de:8e:71:07:79:1a:c2:3a:6c:bc:fc:48:c0:80:d5:5c:ee: 52:90:e8:ad:e4:84:55:13:04:a1:54:ac:92:8d:9b:75:93:b6: 16:29:c5:a2:d2:c6:f1:15:94:1a:7a:dd:2a:0f:1f:5a:46:df: e6:31:f9:23:6d:79:07:43:55:17:79:32:a7:6e:58:9b:d7:fd: 1c:f8:58:7b:a6:71:b6:ab:a8:4d:b2:00:00:81:41:17:10:ee: 34:f2:50:4f:74:08:23:db:f4:16:69:f5:6e:2d:54:4c:fd:eb: bb:2f:c6:66:ac:22:ab:8e:62:b7:a9:3d:02:c3:c1:fd:81:55: 8b:5c:69:db:61:ba:6b:eb:7a:cd:09:89:8e:8b:2e:63:55:13: 2b:4c:de:3b:df:78:49:89:b9:18:1d:1a:06:15:58:cc:7e:4a: 9c:88:94:22:34:a3:49:14:dd:c1:5a:d8:01:c9:67:8c:7b:39: 74:72:e4:a7:f2:05:f2:cf:94:96:0d:55:e9:ec:0d:c1:04:c8: 57:69:6d:58:49:e6:ef:87:f1:61:d3:64:5a:51:78:5a:85:be: 34:5e:43:9a:b9:e4:7e:e0:fb:52:a9:ea:57:05:3d:c8:cb:a7: 7c:8f:89:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91sC9N1DD6zXS/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTc0NloXDTI1MDkxNzA5MTc0NlowLzEtMCsGA1UEAxMk NDU5NjdlMmEtODM2NC00YTVmLThkMzItZjA2Nzg4ZTQ5MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+b7HJEA2Tx1hoZvyjgdIzzBO+vRD4P/LBau vy4Pd+zuua05mRQhTkzdJ4IZIrqTFayCwFYOCGHeJuUjMc1iZWd0UHI6tWCrOjts NO6K4Mkb2XF/Vytbpl+0FGr+3kfHRp5XWENLDNHYlugQMUB277kFibP29DriZGjl X10xRWbN4BSsW60YdkLXGVgBPd6KZeVTuNxueMLNjjIrah4gQW5mifSf6Vl0WnaR hds1Yov40GjlmAnCkrvD6oxqvB10UEt6triwxcAAKzf8N5ZCgUqMNM3q8mHBBD2z yQIeB2Xa4Tax4fEbJzFWZO/R5wB5qyQfSGzv1d0ZY+sdavY8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTLRzTA8UKSzMgsJyHRNQdJlgloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJiMmExZTktMWQ0ZS0z ZmZmLTk2NzAtNGExYzU3NDVlMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROZPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCDH5i1M/3m1NwIjFz9Wpl2fqPejnEHeRrCOmy8/EjAgNVc7lKQ6K3k hFUTBKFUrJKNm3WTthYpxaLSxvEVlBp63SoPH1pG3+Yx+SNteQdDVRd5MqduWJvX /Rz4WHumcbarqE2yAACBQRcQ7jTyUE90CCPb9BZp9W4tVEz967svxmasIquOYrep PQLDwf2BVYtcadthumvres0JiY6LLmNVEytM3jvfeEmJuRgdGgYVWMx+SpyIlCI0 o0kU3cFa2AHJZ4x7OXRy5KfyBfLPlJYNVensDcEEyFdpbVhJ5u+H8WHTZFpReFqF vjReQ5q55H7g+1Kp6lcFPcjLp3yPicw= -----END CERTIFICATE-----Generated at Tue Jul 1 05:45:07 2025 by rpki-client