$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa File: 0ccde668-bac4-3d95-bbef-5e670eb7c452.roa (raw, json) Hash identifier: xUfOD+5eynEzAKI9gl+zn7+uHbGlgZO/0Fadj1xCAtg= Subject key identifier: 3F:91:50:A4:71:1C:0D:87:3B:AA:C3:80:EC:14:50:FC:74:C3:F3:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3990775FEE73CABDB4666004 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa Signing time: Tue 17 Jun 2025 20:32:55 +0000 ROA not before: Tue 17 Jun 2025 20:32:55 +0000 ROA not after: Mon 15 Sep 2025 20:32:55 +0000 asID: 22773 IP address blocks: 68.2.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:77:5f:ee:73:ca:bd:b4:66:60:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:55 2025 GMT Not After : Sep 15 20:32:55 2025 GMT Subject: CN=daf497dd-1f90-4bec-b669-386a7136f056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:8c:1b:b2:a7:d4:c4:e3:9f:a0:e1:83:95: 13:b7:b7:bf:b1:6d:fe:e5:d0:5d:a2:a4:31:24:4f: 93:e3:c1:c6:c1:9f:ae:55:1e:90:ef:3a:79:17:61: cc:17:30:7f:54:f9:ab:f6:44:77:d7:94:2d:6b:4e: eb:07:1b:73:b9:52:ba:b8:94:50:90:c7:13:cc:49: 1b:66:4f:be:26:af:a2:4d:57:26:13:82:b1:86:9d: d3:d4:fd:99:2e:da:30:e1:8a:88:f2:9e:8d:04:47: 74:07:b6:1d:44:37:51:a8:8d:1e:a6:e5:95:42:9a: 8f:69:3c:15:ea:a8:c7:19:b3:7e:87:8a:03:eb:25: 0c:5b:1a:85:8a:e2:c4:2e:75:5a:38:1b:a7:fc:ca: 93:5b:83:dc:5c:c3:0c:39:ec:6c:68:22:a5:e3:d1: 92:39:8d:d8:ad:73:9d:c0:5f:14:8f:3f:61:af:c4: 35:a8:f3:f7:ba:d5:dc:56:2b:41:31:c6:71:bd:7c: 03:c5:13:c1:f9:50:16:b4:fd:13:40:a7:06:62:8f: d3:bc:d6:36:d0:84:2c:00:5a:00:d8:a8:27:06:e2: 72:75:7f:22:a6:98:95:4f:b4:c2:55:f2:25:ba:e9: 4a:01:17:af:67:e8:e9:02:e7:6a:9d:0c:27:90:62: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:91:50:A4:71:1C:0D:87:3B:AA:C3:80:EC:14:50:FC:74:C3:F3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ccde668-bac4-3d95-bbef-5e670eb7c452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:07:c6:91:3d:e6:14:5d:81:ed:85:10:5d:0e:d9:25:21:b1: 12:46:7d:69:bf:18:be:8b:ca:9e:26:eb:b5:5d:0b:68:05:a7: 9b:32:f9:e4:73:c8:da:0e:c7:e7:c5:35:d2:8d:0d:89:3c:02: 5f:ee:d7:31:f2:bb:95:30:7c:11:5a:f5:24:cc:d9:b0:a2:88: 87:46:41:bc:21:9d:19:6e:ae:c8:1f:81:df:90:11:60:97:90: ad:a1:71:c3:53:5f:87:a9:4e:f8:86:24:b3:87:3b:e2:fb:44: 53:41:f5:9a:4c:16:0e:2a:84:40:34:59:93:0b:f2:f0:d1:10: e7:d0:9d:de:84:b6:b1:0c:45:a2:6c:aa:02:db:7a:14:7e:8f: 2f:4b:01:b1:8b:e0:92:71:23:e2:bb:f8:c0:1a:3a:d4:55:3f: be:6f:24:71:77:d4:a4:b7:38:b9:e3:76:ef:b1:c4:32:61:c8: e8:ed:03:88:81:e0:b1:7f:b8:09:af:f7:09:5d:99:4e:50:cc: 8a:8d:9e:c2:94:30:95:2e:f4:7a:2b:57:4b:e9:e2:bd:9f:a1: 0b:cb:16:29:ee:b3:5f:60:64:74:c4:81:d4:5d:34:23:1c:34: f2:28:55:68:10:ed:a5:4a:ee:b9:e0:57:98:00:e8:04:0d:0b: 92:cd:f6:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kHdf7nPKvbRmYAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI1NVoXDTI1MDkxNTIwMzI1NVowLzEtMCsGA1UEAxMk ZGFmNDk3ZGQtMWY5MC00YmVjLWI2NjktMzg2YTcxMzZmMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpWMG7Kn1MTjn6Dhg5UTt7e/sW3+5dBdoqQx JE+T48HGwZ+uVR6Q7zp5F2HMFzB/VPmr9kR315Qta07rBxtzuVK6uJRQkMcTzEkb Zk++Jq+iTVcmE4Kxhp3T1P2ZLtow4YqI8p6NBEd0B7YdRDdRqI0epuWVQpqPaTwV 6qjHGbN+h4oD6yUMWxqFiuLELnVaOBun/MqTW4PcXMMMOexsaCKl49GSOY3YrXOd wF8Ujz9hr8Q1qPP3utXcVitBMcZxvXwDxRPB+VAWtP0TQKcGYo/TvNY20IQsAFoA 2KgnBuJydX8ippiVT7TCVfIluulKARevZ+jpAudqnQwnkGLKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+RUKRxHA2HO6rDgOwUUPx0w/NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNjZGU2NjgtYmFjNC0z ZDk1LWJiZWYtNWU2NzBlYjdjNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEHxpE95hRdge2FEF0O2SUhsRJGfWm/GL6Lyp4m67VdC2gFp5sy+eRz yNoOx+fFNdKNDYk8Al/u1zHyu5UwfBFa9STM2bCiiIdGQbwhnRlursgfgd+QEWCX kK2hccNTX4epTviGJLOHO+L7RFNB9ZpMFg4qhEA0WZML8vDREOfQnd6EtrEMRaJs qgLbehR+jy9LAbGL4JJxI+K7+MAaOtRVP75vJHF31KS3OLnjdu+xxDJhyOjtA4iB 4LF/uAmv9wldmU5QzIqNnsKUMJUu9HorV0vp4r2foQvLFinus19gZHTEgdRdNCMc NPIoVWgQ7aVK7rngV5gA6AQNC5LN9p0= -----END CERTIFICATE-----Generated at Wed Jul 2 07:11:08 2025 by rpki-client