$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa File: fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa (raw, json) Hash identifier: Xqn5PiPv3+72RUfZCupMCX7iN4ojPMYqN3nWQfJhE8Y= Subject key identifier: B5:47:C4:21:FA:C8:C9:C1:01:78:03:82:41:0B:01:AF:34:94:87:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7A13C9C0412CDBEA46D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa Signing time: Fri 20 Jun 2025 09:30:15 +0000 ROA not before: Fri 20 Jun 2025 09:30:15 +0000 ROA not after: Thu 18 Sep 2025 09:30:15 +0000 asID: 22773 IP address blocks: 68.224.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:a1:3c:9c:04:12:cd:be:a4:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:15 2025 GMT Not After : Sep 18 09:30:15 2025 GMT Subject: CN=c614e7e7-2397-49bf-99de-447a42242ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:2a:fd:ea:5c:f0:2c:e4:94:2b:f3:8f:ab: 73:54:f8:25:78:65:d3:91:96:f8:59:2a:d6:6e:29: a3:cc:0a:58:30:9d:0a:44:4d:b7:72:31:dc:e7:ad: 21:c1:24:67:b4:26:0a:eb:ca:ae:a6:76:1f:ca:70: ea:ac:ed:06:cb:ec:b6:ae:34:21:34:3b:2a:14:c0: b0:23:80:a9:fc:83:77:dd:91:b9:75:78:af:c5:d1: 2c:52:af:6e:67:82:d2:21:c7:99:9f:f3:9b:5a:bf: 52:08:45:b0:c5:97:fe:b5:bb:b9:6a:d8:58:c1:af: 3f:ed:c8:82:15:c5:bb:c4:f5:05:9f:d7:57:7f:ac: 21:cd:09:58:c8:a1:8c:d7:b0:4d:5d:b4:cc:9c:f0: 64:f1:d2:3a:44:45:3d:be:c9:b2:d4:3b:f6:3b:36: 92:e9:72:b0:f2:b3:a9:1d:a1:47:2f:be:ad:f8:85: 17:89:41:33:b7:df:ad:a7:10:7c:d5:fd:56:4d:1a: a9:25:c8:f2:bd:31:9b:0c:9e:7b:7e:de:b0:65:b9: 79:5d:b8:1d:f2:9f:9d:66:b6:2e:75:f6:ff:05:74: e6:4d:b0:7e:69:11:aa:4e:9a:a8:50:3f:bc:b7:51: 2b:78:78:bd:15:90:c6:5e:dd:a8:2c:4a:55:70:23: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:47:C4:21:FA:C8:C9:C1:01:78:03:82:41:0B:01:AF:34:94:87:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f8:52:89:df:ce:3b:6c:2a:1c:b7:85:89:65:80:72:1e:bb: 55:65:d5:a9:8a:1e:8d:9e:84:6a:e8:d5:48:a7:ca:88:d9:47: 88:da:ff:99:92:eb:5e:37:1a:65:f0:7f:fa:f1:c3:1c:c0:7f: 5f:47:a7:fe:44:71:ec:95:35:54:61:f5:eb:ec:bf:a3:fe:84: 04:d3:a8:14:d9:22:f8:1d:fc:8b:9b:a0:3c:c5:0b:df:bc:18: 30:f9:bc:c4:6e:3b:0e:05:24:cd:ea:09:d9:38:86:6f:f8:c2: 2b:19:09:e3:59:f2:8b:bb:85:f6:c8:9e:1f:c4:43:70:19:58: 2e:4a:61:79:40:f3:44:db:2f:dc:9b:9e:b1:b6:66:a6:0e:a7: bf:fd:35:cd:05:93:d1:3b:ea:e3:df:b4:cb:d7:91:1e:74:98: 2f:9c:a2:e0:66:49:0e:9a:f5:92:48:8f:5f:9c:c2:53:09:84: fd:f9:1e:0c:a8:9f:f5:ce:26:ed:ac:45:71:02:fe:11:01:62: ef:9a:d2:f2:5e:df:db:24:a2:9f:4f:f8:de:83:1e:1c:43:e1: 30:35:ba:1d:e6:b9:27:70:83:7e:f2:a5:fd:a4:06:3e:78:76: ce:15:f6:6c:f3:66:dc:74:be:2e:b6:95:f9:67:a9:9e:9e:0a: 99:96:9c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp6E8nAQSzb6kbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAxNVoXDTI1MDkxODA5MzAxNVowLzEtMCsGA1UEAxMk YzYxNGU3ZTctMjM5Ny00OWJmLTk5ZGUtNDQ3YTQyMjQyY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubIq/epc8CzklCvzj6tzVPgleGXTkZb4WSrW bimjzApYMJ0KRE23cjHc560hwSRntCYK68qupnYfynDqrO0Gy+y2rjQhNDsqFMCw I4Cp/IN33ZG5dXivxdEsUq9uZ4LSIceZn/ObWr9SCEWwxZf+tbu5athYwa8/7ciC FcW7xPUFn9dXf6whzQlYyKGM17BNXbTMnPBk8dI6REU9vsmy1Dv2OzaS6XKw8rOp HaFHL76t+IUXiUEzt9+tpxB81f1WTRqpJcjyvTGbDJ57ft6wZbl5Xbgd8p+dZrYu dfb/BXTmTbB+aRGqTpqoUD+8t1EreHi9FZDGXt2oLEpVcCNYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVHxCH6yMnBAXgDgkELAa80lIc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmFlOGRmMDQtMmYzYi0z NDFjLWFjMjYtYmM2YTNhMmNkZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE34UonfzjtsKhy3hYllgHIeu1Vl1amKHo2ehGro1UinyojZR4ja/5mS 6143GmXwf/rxwxzAf19Hp/5EceyVNVRh9evsv6P+hATTqBTZIvgd/IuboDzFC9+8 GDD5vMRuOw4FJM3qCdk4hm/4wisZCeNZ8ou7hfbInh/EQ3AZWC5KYXlA80TbL9yb nrG2ZqYOp7/9Nc0Fk9E76uPftMvXkR50mC+couBmSQ6a9ZJIj1+cwlMJhP35Hgyo n/XOJu2sRXEC/hEBYu+a0vJe39skop9P+N6DHhxD4TA1uh3muSdwg37ypf2kBj54 ds4V9mzzZtx0vi62lflnqZ6eCpmWnCY= -----END CERTIFICATE-----Generated at Mon Jun 30 02:25:14 2025 by rpki-client