$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa File: 214cbfa4-dda2-3cf0-bd78-377280372513.roa (raw, json) Hash identifier: lhWplBYXClq8QW4zNI9EMC1rDPjPIOx1wMdvSGsdBoM= Subject key identifier: BA:B3:59:80:2E:A7:5D:75:1E:8F:75:FF:6D:D7:9D:E8:4E:5F:58:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39909F28EDC47B219ADDD760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa Signing time: Tue 17 Jun 2025 20:33:14 +0000 ROA not before: Tue 17 Jun 2025 20:33:14 +0000 ROA not after: Mon 15 Sep 2025 20:33:14 +0000 asID: 22773 IP address blocks: 68.2.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:9f:28:ed:c4:7b:21:9a:dd:d7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:33:14 2025 GMT Not After : Sep 15 20:33:14 2025 GMT Subject: CN=376c1a2d-4087-4ffd-b79e-37f117ffff5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:a7:eb:2e:bb:b4:fc:ab:93:43:1e:93:0e: 52:93:f8:ed:9b:66:ca:11:43:a8:eb:2e:0d:3b:81: 05:07:35:b2:b0:6d:1e:d3:64:02:64:6b:c4:a6:03: 62:bd:aa:8f:95:d1:65:84:84:b9:b4:e4:52:60:7e: 4d:58:60:ff:d4:55:ac:58:a5:c7:c6:a4:04:f8:4d: c1:62:d5:db:78:ab:0f:7d:52:1c:70:ef:27:16:90: 75:fa:79:8d:c2:20:ef:a0:ba:ca:14:b8:da:94:59: 58:3a:39:17:44:4e:34:aa:d4:14:41:c5:04:39:31: e6:0f:70:6c:95:48:8e:98:7d:20:dd:46:c7:72:62: 39:c0:5d:b3:c5:46:68:9d:53:bc:ea:dd:b7:22:06: f3:78:12:55:03:b0:e8:59:6d:22:2a:e5:05:ab:5c: 6c:35:03:ef:c9:10:13:3b:eb:12:ee:ad:35:90:51: 50:35:14:8e:36:99:3b:ee:56:b1:bf:86:a2:73:ac: 07:72:3b:15:04:45:5f:fa:40:b1:4e:fb:af:a2:00: 2a:e3:fc:73:a8:33:76:31:0d:71:2d:ee:4a:3e:b2: 89:e1:a2:91:a7:07:ea:f8:ae:6e:d0:ef:9b:d2:54: 2e:3e:45:fd:74:0f:21:ad:d0:f7:d7:95:30:1a:a2: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B3:59:80:2E:A7:5D:75:1E:8F:75:FF:6D:D7:9D:E8:4E:5F:58:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/214cbfa4-dda2-3cf0-bd78-377280372513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:20:b5:1d:8c:a7:fd:3e:01:67:78:26:03:bc:58:e5:20:e9: 6a:17:82:b9:30:dc:8d:19:65:98:fe:96:1d:30:22:41:d7:6e: 95:8e:55:9e:8b:be:83:ec:3c:06:49:9d:e1:6a:af:c7:4f:3d: 7f:c5:92:0a:1b:89:41:8e:87:61:64:e3:02:91:be:bb:8b:e6: 8c:74:b5:23:bb:2e:80:5a:68:8f:c7:31:f0:a7:81:53:58:de: 1c:6e:af:33:f9:ff:f0:9e:e0:39:c4:2f:39:4c:79:1d:be:62: df:1b:10:ec:9b:de:4d:81:81:29:58:32:d8:19:a1:e5:85:c7: d2:24:ec:88:f5:3d:2d:4b:ca:9a:a8:76:76:59:87:e9:97:be: cd:62:ba:17:bc:6a:0e:cf:d8:46:5e:40:83:bf:01:5c:fc:2c: e1:fe:10:c6:50:f4:50:d6:b7:a5:58:c7:81:3f:12:98:49:14: b9:92:9e:a8:6d:92:a7:81:26:ca:ec:78:79:62:aa:6b:b6:98: 12:a7:99:6e:60:9b:ae:b8:93:f1:57:1c:60:33:33:c0:30:31: 7f:03:87:7d:d2:48:39:c2:7e:0c:94:55:d1:64:29:ff:9e:3f: 8e:cc:7b:4c:23:08:74:48:1e:f0:ca:92:b8:e0:89:4e:e8:42: d9:e3:07:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kJ8o7cR7IZrd12AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzMxNFoXDTI1MDkxNTIwMzMxNFowLzEtMCsGA1UEAxMk Mzc2YzFhMmQtNDA4Ny00ZmZkLWI3OWUtMzdmMTE3ZmZmZjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfen6y67tPyrk0Mekw5Sk/jtm2bKEUOo6y4N O4EFBzWysG0e02QCZGvEpgNivaqPldFlhIS5tORSYH5NWGD/1FWsWKXHxqQE+E3B YtXbeKsPfVIccO8nFpB1+nmNwiDvoLrKFLjalFlYOjkXRE40qtQUQcUEOTHmD3Bs lUiOmH0g3UbHcmI5wF2zxUZonVO86t23IgbzeBJVA7DoWW0iKuUFq1xsNQPvyRAT O+sS7q01kFFQNRSONpk77laxv4aic6wHcjsVBEVf+kCxTvuvogAq4/xzqDN2MQ1x Le5KPrKJ4aKRpwfq+K5u0O+b0lQuPkX9dA8hrdD315UwGqL/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqzWYAup111Ho91/23XnehOX1giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE0Y2JmYTQtZGRhMi0z Y2YwLWJkNzgtMzc3MjgwMzcyNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8gtR2Mp/0+AWd4JgO8WOUg6WoXgrkw3I0ZZZj+lh0wIkHXbpWOVZ6L voPsPAZJneFqr8dPPX/FkgobiUGOh2Fk4wKRvruL5ox0tSO7LoBaaI/HMfCngVNY 3hxurzP5//Ce4DnELzlMeR2+Yt8bEOyb3k2BgSlYMtgZoeWFx9Ik7Ij1PS1Lypqo dnZZh+mXvs1iuhe8ag7P2EZeQIO/AVz8LOH+EMZQ9FDWt6VYx4E/EphJFLmSnqht kqeBJsrseHliqmu2mBKnmW5gm664k/FXHGAzM8AwMX8Dh33SSDnCfgyUVdFkKf+e P47Me0wjCHRIHvDKkrjgiU7oQtnjBx0= -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:46 2025 by rpki-client