$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa File: 0957c138-5bc7-3c17-84d3-447836d2928a.roa (raw, json) Hash identifier: m8FYf1xOHsE0KyMGz5jysasazbD6HuPkL9jIy5vTtuw= Subject key identifier: D1:F4:8B:F1:53:A1:B0:31:19:B3:12:AE:BA:79:68:AD:03:78:68:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6F7B7CC8C6AF48896CF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa Signing time: Fri 20 Jun 2025 09:28:55 +0000 ROA not before: Fri 20 Jun 2025 09:28:55 +0000 ROA not after: Thu 18 Sep 2025 09:28:55 +0000 asID: 22773 IP address blocks: 68.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:f7:b7:cc:8c:6a:f4:88:96:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:55 2025 GMT Not After : Sep 18 09:28:55 2025 GMT Subject: CN=4f82e6f3-8c72-42d2-ba37-e8ab78ac2f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:0a:94:11:10:8a:5d:35:f9:71:6d:b5:c8: 6b:a3:10:e4:f4:e5:c7:ac:87:3f:f2:c5:34:a3:53: ad:73:f7:1d:bb:81:f3:8b:2a:77:8c:0d:27:96:76: ce:94:a6:73:ab:3f:65:de:91:0d:26:8f:62:df:03: ba:3d:0d:43:0d:c9:2f:bf:cb:16:a2:84:7f:b7:c3: 90:da:0e:7e:c4:3c:ca:2a:ac:48:91:e2:d6:44:4c: b8:0c:e3:b2:a0:d1:a5:02:4c:04:17:51:20:72:fb: 69:f3:1a:7d:82:f2:74:26:04:f5:34:ea:23:d1:5b: f2:4b:4a:69:5f:bb:c4:62:84:b5:9b:24:a4:f1:ec: 42:ff:1b:e9:d4:d9:52:c9:93:51:d1:a8:00:c4:27: 9b:ce:d2:a9:ad:c9:03:39:f8:e4:22:b3:dc:c7:e3: f4:1d:1d:25:df:e7:73:6a:ac:dc:f8:6e:3c:5d:5f: 7e:be:f7:6f:93:d2:af:35:4f:81:84:19:26:48:f8: b4:37:3b:a1:e0:39:31:a4:d8:10:5b:ef:34:a5:f0: 78:1f:3d:a8:7d:91:23:92:76:65:22:29:7c:4d:23: 04:42:89:e0:3f:d9:71:45:f9:3e:35:52:fd:56:08: 86:fa:97:d5:87:f8:f0:4e:f8:46:c8:d8:44:c9:12: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F4:8B:F1:53:A1:B0:31:19:B3:12:AE:BA:79:68:AD:03:78:68:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a6:00:bf:95:a9:dc:d5:d6:cc:bf:3f:3d:eb:c3:01:93:8d: 45:73:73:e5:60:d8:f6:25:e4:0e:0c:ea:19:ca:8e:19:e1:a4: d6:2a:ac:30:a9:e4:08:36:ae:b4:55:e9:f8:93:2f:0e:e8:8a: 69:e3:d1:f6:58:f3:66:d7:59:aa:97:36:4c:dd:2b:97:4b:ec: 5c:17:29:5b:00:19:36:82:e4:02:58:d2:bb:76:d0:97:b5:46: 92:d3:62:af:94:09:7b:d2:47:b9:39:13:dc:65:00:34:08:a9: 2c:43:0c:e0:d7:59:c7:50:bd:d4:5f:a0:b6:e9:5f:6d:90:24: 86:5f:a0:54:70:3a:5a:9c:95:59:50:62:34:9c:50:c2:46:5c: 4d:31:67:1d:29:5f:4b:f5:34:ca:29:98:fd:ab:10:86:39:75: 80:73:69:db:1c:30:42:b6:30:b8:f5:5e:d1:46:5a:6a:21:a3: c4:0c:03:e1:19:51:30:74:25:01:be:89:08:eb:fa:24:5a:76: fd:e7:e3:9c:d4:66:11:4c:6e:6f:79:da:f9:4c:90:5a:9e:57: 9c:05:32:d2:c6:13:a7:b9:23:63:5b:ee:d6:c8:d8:9c:cc:85: 5e:9e:1e:97:17:a0:b3:97:d6:e4:40:fc:90:63:a1:53:21:59: 29:a6:f5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApve3zIxq9IiWzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg1NVoXDTI1MDkxODA5Mjg1NVowLzEtMCsGA1UEAxMk NGY4MmU2ZjMtOGM3Mi00MmQyLWJhMzctZThhYjc4YWMyZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjkKlBEQil01+XFttchroxDk9OXHrIc/8sU0 o1Otc/cdu4Hziyp3jA0nlnbOlKZzqz9l3pENJo9i3wO6PQ1DDckvv8sWooR/t8OQ 2g5+xDzKKqxIkeLWREy4DOOyoNGlAkwEF1Egcvtp8xp9gvJ0JgT1NOoj0VvyS0pp X7vEYoS1mySk8exC/xvp1NlSyZNR0agAxCebztKprckDOfjkIrPcx+P0HR0l3+dz aqzc+G48XV9+vvdvk9KvNU+BhBkmSPi0Nzuh4DkxpNgQW+80pfB4Hz2ofZEjknZl Iil8TSMEQongP9lxRfk+NVL9VgiG+pfVh/jwTvhGyNhEyRLJAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH0i/FTobAxGbMSrrp5aK0DeGh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1N2MxMzgtNWJjNy0z YzE3LTg0ZDMtNDQ3ODM2ZDI5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6mAL+VqdzV1sy/Pz3rwwGTjUVzc+Vg2PYl5A4M6hnKjhnhpNYqrDCp 5Ag2rrRV6fiTLw7oimnj0fZY82bXWaqXNkzdK5dL7FwXKVsAGTaC5AJY0rt20Je1 RpLTYq+UCXvSR7k5E9xlADQIqSxDDODXWcdQvdRfoLbpX22QJIZfoFRwOlqclVlQ YjScUMJGXE0xZx0pX0v1NMopmP2rEIY5dYBzadscMEK2MLj1XtFGWmoho8QMA+EZ UTB0JQG+iQjr+iRadv3n45zUZhFMbm952vlMkFqeV5wFMtLGE6e5I2Nb7tbI2JzM hV6eHpcXoLOX1uRA/JBjoVMhWSmm9cc= -----END CERTIFICATE-----Generated at Wed Jul 2 07:11:11 2025 by rpki-client