$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05f53226-4740-3e63-bb09-59be858fca9a.roa File: 05f53226-4740-3e63-bb09-59be858fca9a.roa (raw, json) Hash identifier: p+meiYd4IBvdF+TEN0J6U7nHIlj/36b8bDVrKihg7rk= Subject key identifier: FA:1B:1C:CF:B8:8A:71:6E:0F:98:0B:A2:3E:B3:4A:B8:96:DA:F4:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A76D5045BD6BBA5E8E58F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05f53226-4740-3e63-bb09-59be858fca9a.roa Signing time: Fri 20 Jun 2025 09:29:50 +0000 ROA not before: Fri 20 Jun 2025 09:29:50 +0000 ROA not after: Thu 18 Sep 2025 09:29:50 +0000 asID: 22773 IP address blocks: 68.108.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:6d:50:45:bd:6b:ba:5e:8e:58:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:50 2025 GMT Not After : Sep 18 09:29:50 2025 GMT Subject: CN=97b9e5a5-b646-4b6d-8539-a2ed46098a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:37:c4:03:b6:99:6f:14:82:7c:b0:cf:83:a4: 23:65:f3:6d:e7:74:a9:68:ca:14:4e:c4:f7:30:23: 6f:4d:99:91:34:b6:02:eb:f7:53:99:c2:24:d0:95: 5d:9b:d6:04:3f:50:28:09:d0:92:00:c8:62:8d:1c: 12:0d:b4:a4:b1:c2:c8:63:b5:50:b4:bc:6c:b0:b7: ad:c2:3a:90:3a:41:9c:a1:a1:d1:dd:f2:b1:59:d9: 87:76:6b:9f:19:bc:3a:fc:a6:54:72:63:57:94:fc: b2:5e:5c:44:95:2a:db:af:05:b1:33:00:2a:3a:90: 88:33:71:33:d8:c9:5b:ce:d1:cc:91:4a:29:02:a4: d2:49:9a:ab:85:05:a1:74:2e:da:07:bf:f9:d3:a8: 98:d5:af:ce:90:94:d1:cc:fd:b7:2f:5a:c4:49:06: 20:9b:f9:99:e0:38:7b:cf:43:8e:1d:ae:96:4b:ee: c6:8d:18:69:29:cb:3d:62:ae:19:0f:cf:b9:12:26: 1a:12:32:2c:bb:a8:41:b2:dd:b9:02:a1:0e:32:21: 8c:24:07:c7:7a:22:37:dc:3a:6e:a6:39:e0:87:db: 44:a8:ac:65:0f:98:dc:0c:f9:36:a2:47:57:42:5c: 7e:6f:a6:ec:c9:b1:1a:8a:02:75:62:f0:11:f3:e9: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1B:1C:CF:B8:8A:71:6E:0F:98:0B:A2:3E:B3:4A:B8:96:DA:F4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05f53226-4740-3e63-bb09-59be858fca9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:17:77:89:4d:dc:3a:d1:76:1c:68:a8:b3:99:1d:44:3a:8e: 9f:d8:94:84:86:03:90:63:da:d7:27:ea:db:4b:9f:f8:db:9d: f2:3e:d4:64:9d:f5:a3:a2:16:c3:e7:8a:ee:bc:96:b5:c1:39: 71:df:b5:ed:aa:aa:50:4b:cb:9e:d6:5f:71:8c:50:cc:e5:67: ab:68:ba:b2:1e:f7:25:64:c0:75:ea:e7:13:af:c4:78:9e:90: 2d:4c:88:ee:93:b4:5b:b8:08:15:29:7a:66:ca:56:e2:ee:4b: 30:6c:a3:c8:02:bd:96:f4:e3:72:3e:8c:8c:ea:d5:ee:ef:ee: e5:f2:77:8b:ed:c0:26:f9:61:64:46:ab:24:a9:64:ee:f3:56: 94:cf:67:c3:c4:a1:da:bf:b6:11:a1:5d:1f:43:99:40:d2:b8: db:00:1a:ff:ad:cf:7b:fa:a0:d2:09:bc:1a:b9:cd:22:21:b9: db:1b:7d:c3:4e:df:e4:dd:b4:31:b1:cb:2d:38:51:92:bf:9d: 25:66:59:e1:83:02:38:d7:20:d5:47:f9:e4:44:b4:3a:5d:b7: d9:b1:b6:c3:2f:bc:a9:1d:dd:d9:31:33:c1:32:31:06:8e:3a: d0:32:99:e6:2a:47:a4:38:45:96:ce:31:6e:fa:ee:63:8f:21: 2b:28:b2:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp21QRb1rul6OWPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk1MFoXDTI1MDkxODA5Mjk1MFowLzEtMCsGA1UEAxMk OTdiOWU1YTUtYjY0Ni00YjZkLTg1MzktYTJlZDQ2MDk4YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTfEA7aZbxSCfLDPg6QjZfNt53SpaMoUTsT3 MCNvTZmRNLYC6/dTmcIk0JVdm9YEP1AoCdCSAMhijRwSDbSkscLIY7VQtLxssLet wjqQOkGcoaHR3fKxWdmHdmufGbw6/KZUcmNXlPyyXlxElSrbrwWxMwAqOpCIM3Ez 2MlbztHMkUopAqTSSZqrhQWhdC7aB7/506iY1a/OkJTRzP23L1rESQYgm/mZ4Dh7 z0OOHa6WS+7GjRhpKcs9Yq4ZD8+5EiYaEjIsu6hBst25AqEOMiGMJAfHeiI33Dpu pjngh9tEqKxlD5jcDPk2okdXQlx+b6bsybEaigJ1YvAR8+m5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPobHM+4inFuD5gLoj6zSriW2vTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDVmNTMyMjYtNDc0MC0z ZTYzLWJiMDktNTliZTg1OGZjYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUXd4lN3DrRdhxoqLOZHUQ6jp/YlISGA5Bj2tcn6ttLn/jbnfI+1GSd 9aOiFsPniu68lrXBOXHfte2qqlBLy57WX3GMUMzlZ6tourIe9yVkwHXq5xOvxHie kC1MiO6TtFu4CBUpembKVuLuSzBso8gCvZb043I+jIzq1e7v7uXyd4vtwCb5YWRG qySpZO7zVpTPZ8PEodq/thGhXR9DmUDSuNsAGv+tz3v6oNIJvBq5zSIhudsbfcNO 3+TdtDGxyy04UZK/nSVmWeGDAjjXINVH+eREtDpdt9mxtsMvvKkd3dkxM8EyMQaO OtAymeYqR6Q4RZbOMW767mOPISsosro= -----END CERTIFICATE-----Generated at Wed Jul 2 15:11:34 2025 by rpki-client