$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2419f550-396b-3f38-842e-ee72b9c5dd4b.roa File: 2419f550-396b-3f38-842e-ee72b9c5dd4b.roa (raw, json) Hash identifier: aHO3l8xSGO5xRqRQkGukRn0oM3qrW9MMSZ7HZOB/MtE= Subject key identifier: AD:76:DE:64:DF:C4:D7:B5:52:30:AB:4F:AA:9F:CB:9A:82:C5:47:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A76A406CEE268BBF3A1800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2419f550-396b-3f38-842e-ee72b9c5dd4b.roa Signing time: Fri 20 Jun 2025 09:29:49 +0000 ROA not before: Fri 20 Jun 2025 09:29:49 +0000 ROA not after: Thu 18 Sep 2025 09:29:49 +0000 asID: 22773 IP address blocks: 68.108.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:6a:40:6c:ee:26:8b:bf:3a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:49 2025 GMT Not After : Sep 18 09:29:49 2025 GMT Subject: CN=9c0706b9-ba21-4210-ba7a-7d89a7aeafac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:dd:3b:4a:ad:06:1d:2c:25:6f:ad:a5:82: 8d:00:97:6c:b2:e8:43:34:50:5b:05:cf:0d:d7:e6: 90:3d:26:cb:7b:86:76:d5:14:f4:dc:aa:35:a4:1c: 03:12:0a:b1:2b:da:61:f0:37:e5:5c:34:ed:5e:b4: f2:64:28:9f:4e:7b:fd:7c:af:65:cd:e6:19:a7:7f: 8d:4a:ba:64:2f:a5:55:d6:6d:37:22:55:c0:59:fd: fb:38:9a:a2:84:e5:ae:19:be:9a:06:13:41:5f:1d: 1c:c1:f5:b0:54:f8:53:d4:4a:d5:45:81:fb:de:38: fc:a8:45:3b:4f:38:90:db:1c:79:06:4b:6e:b9:b7: ef:f5:b7:f9:a1:06:c7:f1:fa:9b:8f:72:ec:67:51: a8:e7:39:4a:09:6b:98:2a:98:92:17:89:d3:a7:61: c6:7f:31:2e:4e:b2:e2:de:f9:99:40:c0:16:12:0b: 59:4f:3b:e0:a6:7b:f1:d9:be:5d:f6:7e:56:5d:4a: 1c:dd:1d:fa:63:1a:89:ee:f9:a8:07:e8:16:59:c9: c5:45:57:07:1d:e7:2e:b5:0e:f8:b5:71:b1:19:0a: a6:f4:76:51:68:ca:d1:19:04:4d:10:96:18:1d:10: 40:10:77:13:97:0e:16:3f:08:ac:67:04:20:73:2a: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:76:DE:64:DF:C4:D7:B5:52:30:AB:4F:AA:9F:CB:9A:82:C5:47:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2419f550-396b-3f38-842e-ee72b9c5dd4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f0:3e:89:51:7d:5e:75:ad:74:14:a4:8f:69:cc:98:de:20: ca:ae:46:0e:c6:d9:dd:93:95:94:16:50:c1:46:dd:88:5f:44: 96:14:fb:d3:61:5b:74:d7:d6:7f:95:88:b6:43:b0:3b:fd:c4: 12:d9:f3:d8:ef:10:78:ba:9a:0d:10:aa:85:2b:12:64:9c:49: 28:ec:45:07:8a:81:7a:d7:69:de:54:e6:f3:ce:01:87:61:9d: 94:e5:58:7f:79:ba:13:76:fc:1b:28:4b:7b:ad:f5:01:5f:cd: 06:83:31:95:2b:b0:4c:ae:16:9a:d6:02:e9:d6:6b:62:2e:16: e5:31:22:05:93:cf:04:5f:7d:04:c4:92:20:39:24:92:f6:95: 00:c0:69:8e:18:97:bf:d9:c3:01:b3:85:0f:c4:df:93:f4:d1: 39:d7:40:c8:03:10:1b:93:a6:81:9b:19:d8:bf:b4:c3:51:89: c0:21:ec:6e:3b:7d:2d:a9:07:b2:31:c0:f2:51:8b:0f:66:af: ad:db:a9:59:7f:97:55:b9:15:64:70:e3:f4:ef:39:f8:f8:0b: 6c:3a:3e:a1:b6:48:0c:23:ec:7d:fb:4d:b5:cd:1f:71:00:e0: 39:eb:1e:de:2b:1c:5a:b4:3d:1b:21:3b:91:fc:6e:28:32:9f: 5b:44:9d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp2pAbO4mi786GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0OVoXDTI1MDkxODA5Mjk0OVowLzEtMCsGA1UEAxMk OWMwNzA2YjktYmEyMS00MjEwLWJhN2EtN2Q4OWE3YWVhZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAbdO0qtBh0sJW+tpYKNAJdssuhDNFBbBc8N 1+aQPSbLe4Z21RT03Ko1pBwDEgqxK9ph8DflXDTtXrTyZCifTnv9fK9lzeYZp3+N SrpkL6VV1m03IlXAWf37OJqihOWuGb6aBhNBXx0cwfWwVPhT1ErVRYH73jj8qEU7 TziQ2xx5Bktuubfv9bf5oQbH8fqbj3LsZ1Go5zlKCWuYKpiSF4nTp2HGfzEuTrLi 3vmZQMAWEgtZTzvgpnvx2b5d9n5WXUoc3R36YxqJ7vmoB+gWWcnFRVcHHecutQ74 tXGxGQqm9HZRaMrRGQRNEJYYHRBAEHcTlw4WPwisZwQgcyo3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK123mTfxNe1UjCrT6qfy5qCxUfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQxOWY1NTAtMzk2Yi0z ZjM4LTg0MmUtZWU3MmI5YzVkZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPwPolRfV51rXQUpI9pzJjeIMquRg7G2d2TlZQWUMFG3YhfRJYU+9Nh W3TX1n+ViLZDsDv9xBLZ89jvEHi6mg0QqoUrEmScSSjsRQeKgXrXad5U5vPOAYdh nZTlWH95uhN2/BsoS3ut9QFfzQaDMZUrsEyuFprWAunWa2IuFuUxIgWTzwRffQTE kiA5JJL2lQDAaY4Yl7/ZwwGzhQ/E35P00TnXQMgDEBuTpoGbGdi/tMNRicAh7G47 fS2pB7IxwPJRiw9mr63bqVl/l1W5FWRw4/TvOfj4C2w6PqG2SAwj7H37TbXNH3EA 4DnrHt4rHFq0PRshO5H8bigyn1tEnew= -----END CERTIFICATE-----Generated at Wed Jul 2 06:48:47 2025 by rpki-client