$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa File: fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa (raw, json) Hash identifier: ykW8yXKS2nAHRrXn5zoDNcGI1mNwNlCzwuhuRu1OQMk= Subject key identifier: 65:0F:88:47:95:94:33:B7:C4:5F:32:3F:A1:DE:6F:73:44:1F:EA:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10C0B535823F35ED34B2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa Signing time: Wed 18 Jun 2025 18:03:01 +0000 ROA not before: Wed 18 Jun 2025 18:03:01 +0000 ROA not after: Tue 16 Sep 2025 18:03:01 +0000 asID: 22773 IP address blocks: 68.99.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:c0:b5:35:82:3f:35:ed:34:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:03:01 2025 GMT Not After : Sep 16 18:03:01 2025 GMT Subject: CN=fa5458b7-52ff-4435-b238-a8faadc1b07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:1f:06:e6:e7:e6:91:be:ad:67:a1:2a:6e: 3f:fc:4a:87:dc:43:c9:73:c0:13:f3:79:00:fe:69: b4:8d:06:a6:2b:a6:14:02:92:ef:9e:e7:30:b1:88: d4:91:7e:69:3d:96:6f:16:15:78:ca:b0:41:7d:c3: 78:6b:0f:9e:76:5a:ec:a8:ee:59:c8:2c:20:e1:f2: a2:4b:84:f7:1a:ea:b6:f0:83:33:6f:b2:91:1b:cc: 80:ac:27:de:8d:57:40:56:84:85:2a:67:69:a5:61: b2:ed:09:48:9b:4d:a6:ef:a9:2b:13:33:a5:f0:8b: 16:67:b9:b6:7b:d1:4f:d2:ee:54:b6:af:9a:ca:b1: 8a:49:0b:07:03:98:3f:61:26:f7:06:25:d7:34:ec: 7d:58:57:ca:1a:21:ab:d2:c1:5d:98:ea:79:f8:4c: b7:12:45:bb:a9:64:e1:ea:8e:4a:92:7b:b1:75:90: 0a:b7:e7:e1:19:68:dd:01:e6:9d:66:80:b5:04:61: 85:bb:ff:f6:16:76:0e:f4:74:f7:ee:64:3a:99:a4: c4:2b:6c:96:b6:3e:2a:a1:f7:96:d6:70:4c:4f:60: 9d:e3:a9:6e:47:7c:83:f8:d9:c1:7a:e3:86:b0:38: cb:74:01:84:70:57:4c:a1:4f:4e:d2:39:4e:c9:c1: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:88:47:95:94:33:B7:C4:5F:32:3F:A1:DE:6F:73:44:1F:EA:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa17906f-ca80-3c5d-ab51-ffe7fa4830c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:32:c3:fd:d0:df:c0:fd:8e:5d:57:22:55:a8:a3:23:f0:6e: b6:c9:21:28:a0:d1:7f:a5:5f:f1:29:64:88:0a:e1:1b:f6:f8: e7:7f:58:77:51:62:45:0c:70:ac:ae:9c:e8:1a:fe:75:b7:b3: 1b:e7:c4:ae:63:6d:29:f9:3a:37:6d:0c:ae:e4:7f:95:95:4b: 09:ad:28:28:6d:19:ec:3a:2c:bb:00:7c:29:0d:b9:4e:e4:b7: 54:87:c0:99:5e:67:12:50:bb:9e:22:ed:58:64:36:ec:24:94: 9a:2b:f4:80:2a:f6:b4:19:d4:3e:f7:12:e0:a3:42:12:78:1f: c5:d4:a3:1c:1e:d7:87:a8:48:48:08:c9:f3:1e:db:63:8f:36: 95:51:24:a8:b3:c5:52:56:e9:8e:7f:a6:a8:8f:00:19:c3:54: 4c:fe:50:02:e1:f4:b1:e9:be:9f:f0:40:06:02:02:2b:56:d1: 0f:26:db:ef:ac:cb:75:a7:90:60:53:6c:93:5a:31:4b:3c:c3: 2e:1a:01:16:7a:c9:ac:49:ea:45:f0:31:92:95:15:7b:59:cb: e2:59:db:f1:61:cf:0e:91:7f:6d:cb:82:86:82:0a:74:a0:51: 63:e1:30:2b:76:fd:40:07:d1:51:23:dc:c7:b7:29:5c:cf:9a: d7:7d:0c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EMC1NYI/Ne00ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDMwMVoXDTI1MDkxNjE4MDMwMVowLzEtMCsGA1UEAxMk ZmE1NDU4YjctNTJmZi00NDM1LWIyMzgtYThmYWFkYzFiMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS4fBubn5pG+rWehKm4//EqH3EPJc8AT83kA /mm0jQamK6YUApLvnucwsYjUkX5pPZZvFhV4yrBBfcN4aw+edlrsqO5ZyCwg4fKi S4T3Guq28IMzb7KRG8yArCfejVdAVoSFKmdppWGy7QlIm02m76krEzOl8IsWZ7m2 e9FP0u5Utq+ayrGKSQsHA5g/YSb3BiXXNOx9WFfKGiGr0sFdmOp5+Ey3EkW7qWTh 6o5KknuxdZAKt+fhGWjdAeadZoC1BGGFu//2FnYO9HT37mQ6maTEK2yWtj4qofeW 1nBMT2Cd46luR3yD+NnBeuOGsDjLdAGEcFdMoU9O0jlOycHwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUPiEeVlDO3xF8yP6Heb3NEH+pgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmExNzkwNmYtY2E4MC0z YzVkLWFiNTEtZmZlN2ZhNDgzMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4yw/3Q38D9jl1XIlWooyPwbrbJISig0X+lX/EpZIgK4Rv2+Od/WHdR YkUMcKyunOga/nW3sxvnxK5jbSn5OjdtDK7kf5WVSwmtKChtGew6LLsAfCkNuU7k t1SHwJleZxJQu54i7VhkNuwklJor9IAq9rQZ1D73EuCjQhJ4H8XUoxwe14eoSEgI yfMe22OPNpVRJKizxVJW6Y5/pqiPABnDVEz+UALh9LHpvp/wQAYCAitW0Q8m2++s y3WnkGBTbJNaMUs8wy4aARZ6yaxJ6kXwMZKVFXtZy+JZ2/Fhzw6Rf23LgoaCCnSg UWPhMCt2/UAH0VEj3Me3KVzPmtd9DP8= -----END CERTIFICATE-----Generated at Wed Jul 2 06:56:38 2025 by rpki-client