$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa File: 1754c8a4-3056-3c15-bee9-df954c01c919.roa (raw, json) Hash identifier: 6jyCFBwz4MW6Gid4yNhyDPjsFCW2jeGkm80OZYQL2Rw= Subject key identifier: 04:38:BF:1A:AA:75:7E:04:07:F2:D1:00:8E:A9:A8:5C:3D:E0:AA:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A399071F53CF0593C5C77ED88 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa Signing time: Tue 17 Jun 2025 20:32:53 +0000 ROA not before: Tue 17 Jun 2025 20:32:53 +0000 ROA not after: Mon 15 Sep 2025 20:32:53 +0000 asID: 22773 IP address blocks: 68.2.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:71:f5:3c:f0:59:3c:5c:77:ed:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:53 2025 GMT Not After : Sep 15 20:32:53 2025 GMT Subject: CN=8cfe84b4-79dc-4fe9-b709-b1a788e2693f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:bf:0d:c6:69:97:6c:1f:de:eb:38:31:3c: 51:94:9a:4b:67:43:9f:21:7e:ef:6d:5c:1c:9e:0d: 69:b0:4a:ee:20:d6:bb:f8:f1:3f:80:a2:d7:f8:4b: 9c:0f:35:f8:79:a2:02:2d:58:18:e6:ac:74:86:cd: 54:7e:73:b0:99:d2:bc:92:a4:6a:5e:45:4e:83:62: 72:51:3d:bc:93:12:ec:0d:15:3a:1e:b9:39:a0:78: 37:de:70:40:88:a4:30:69:1b:c4:27:43:6a:c2:7e: 5c:a1:4a:4e:6d:f3:28:37:81:2e:41:d8:87:23:c5: 1c:49:b7:57:1e:69:be:47:f3:cc:a1:14:38:36:0f: b5:10:ec:ba:de:5c:3b:74:b1:d9:71:75:f2:93:7b: f3:87:da:3f:e3:27:d8:8a:67:91:ee:62:c5:36:8c: 11:25:b1:8f:4f:a2:d9:1c:5c:07:e8:57:24:1f:af: 08:6e:60:c9:87:e1:f5:29:72:18:c5:c3:8b:5e:6a: e0:a5:da:58:75:85:73:e0:01:16:5e:e8:ee:93:f0: 23:84:a4:77:52:53:c6:90:27:b4:8f:8c:c1:f4:df: d0:bd:02:ec:49:4a:ff:71:a1:d2:0f:df:e6:d4:35: 7c:93:a4:cd:2b:e4:6c:06:53:f9:23:49:7e:c3:5f: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:38:BF:1A:AA:75:7E:04:07:F2:D1:00:8E:A9:A8:5C:3D:E0:AA:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1754c8a4-3056-3c15-bee9-df954c01c919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:50:de:40:cb:b3:c1:9e:38:86:e2:ef:48:4f:ba:73:6f:f1: 6e:ac:8b:c8:f9:c2:01:68:d0:f5:10:44:4f:ad:bf:09:91:24: 0c:22:c4:6a:de:c9:3a:31:3f:ea:e8:b6:15:8e:d4:04:42:ba: 65:00:88:b4:93:33:40:47:24:dc:b8:cd:50:1d:73:7b:33:73: b9:f5:80:f5:81:a5:cd:6d:f7:79:e8:4d:b5:ea:28:09:d9:bb: 7a:a0:f1:6d:35:6d:40:33:55:59:aa:04:70:cd:20:fd:e1:85: 3f:b7:0a:0b:d2:dc:34:30:1b:7d:49:a5:3c:9b:30:f4:b7:00: 42:9e:2a:b1:de:8a:4b:60:66:7e:f5:91:b6:78:6f:98:69:f1: e2:1e:e5:da:f8:fb:6e:c4:31:50:3f:53:32:8d:2c:ea:0a:5f: 88:47:ab:13:0e:c8:93:70:07:a8:c9:8c:a2:52:24:c8:a7:04: ba:d4:83:a7:f3:3f:85:b2:e1:7f:80:6e:c6:da:fb:5b:01:20: 9b:21:6d:9c:9a:54:ca:5e:ea:4d:b8:5c:8d:e4:82:fe:24:b5: 93:4e:8e:6c:06:ed:1b:61:2e:13:a9:5a:83:7b:97:11:f7:4e: 1c:4f:43:be:2c:56:79:9b:0d:68:45:f2:2c:93:31:04:1e:a1: ed:12:a3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kHH1PPBZPFx37YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI1M1oXDTI1MDkxNTIwMzI1M1owLzEtMCsGA1UEAxMk OGNmZTg0YjQtNzlkYy00ZmU5LWI3MDktYjFhNzg4ZTI2OTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s2/DcZpl2wf3us4MTxRlJpLZ0OfIX7vbVwc ng1psEruINa7+PE/gKLX+EucDzX4eaICLVgY5qx0hs1UfnOwmdK8kqRqXkVOg2Jy UT28kxLsDRU6Hrk5oHg33nBAiKQwaRvEJ0Nqwn5coUpObfMoN4EuQdiHI8UcSbdX Hmm+R/PMoRQ4Ng+1EOy63lw7dLHZcXXyk3vzh9o/4yfYimeR7mLFNowRJbGPT6LZ HFwH6FckH68IbmDJh+H1KXIYxcOLXmrgpdpYdYVz4AEWXujuk/AjhKR3UlPGkCe0 j4zB9N/QvQLsSUr/caHSD9/m1DV8k6TNK+RsBlP5I0l+w1+IUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ4vxqqdX4EB/LRAI6pqFw94KrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTc1NGM4YTQtMzA1Ni0z YzE1LWJlZTktZGY5NTRjMDFjOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxQ3kDLs8GeOIbi70hPunNv8W6si8j5wgFo0PUQRE+tvwmRJAwixGre yToxP+rothWO1ARCumUAiLSTM0BHJNy4zVAdc3szc7n1gPWBpc1t93noTbXqKAnZ u3qg8W01bUAzVVmqBHDNIP3hhT+3CgvS3DQwG31JpTybMPS3AEKeKrHeiktgZn71 kbZ4b5hp8eIe5dr4+27EMVA/UzKNLOoKX4hHqxMOyJNwB6jJjKJSJMinBLrUg6fz P4Wy4X+Absba+1sBIJshbZyaVMpe6k24XI3kgv4ktZNOjmwG7RthLhOpWoN7lxH3 ThxPQ74sVnmbDWhF8iyTMQQeoe0So50= -----END CERTIFICATE-----Generated at Wed Jul 2 07:07:36 2025 by rpki-client