$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24970531-b009-3057-a2f5-3e09e260f2cf.roa File: 24970531-b009-3057-a2f5-3e09e260f2cf.roa (raw, json) Hash identifier: kPrTb+xe9lZwjc1uZnjxvKzbHMPweh78KNCJovOU4+M= Subject key identifier: C8:28:6F:DA:3C:4B:60:03:F2:06:A8:0D:2A:84:3A:3B:A1:A9:DC:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A4C80455704D949D4D797BE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24970531-b009-3057-a2f5-3e09e260f2cf.roa Signing time: Tue 24 Jun 2025 15:20:39 +0000 ROA not before: Tue 24 Jun 2025 15:20:39 +0000 ROA not after: Mon 22 Sep 2025 15:20:39 +0000 asID: 22773 IP address blocks: 68.110.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:80:45:57:04:d9:49:d4:d7:97:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 24 15:20:39 2025 GMT Not After : Sep 22 15:20:39 2025 GMT Subject: CN=c6500b70-9086-46dc-83ec-84ff04b2396b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:6a:13:95:1b:41:76:fd:bd:d6:cb:32:92: 22:11:fb:a6:9d:2b:81:4c:91:e5:5c:97:57:93:18: 6f:c6:fe:0f:1a:12:05:e3:74:6d:29:84:f2:5f:a4: 26:f1:98:3c:f3:cd:ce:9b:3d:06:f3:76:e7:db:fd: eb:d4:52:08:de:2e:7b:a7:fd:a1:57:4c:27:5a:5d: 6c:06:ca:f0:37:ed:39:24:bd:f1:cb:cc:80:7e:53: b2:dc:60:f7:a6:f4:18:8b:05:4e:0d:7d:79:fd:30: 45:9e:75:44:51:53:43:b9:4e:0c:d6:3d:77:56:7f: da:3c:b4:31:ae:75:b8:da:81:0c:b3:8e:64:ff:d8: dd:f1:ae:ea:ae:61:36:83:60:5c:89:15:80:ce:9a: 0a:97:ed:90:c9:d8:ac:aa:a4:0c:3a:9a:f5:53:fa: 0c:70:f2:80:18:0a:8b:1b:a3:db:ff:85:1e:f0:ab: f4:79:09:7a:62:d5:24:a0:3b:fe:19:78:c7:87:87: 5e:e9:6e:91:68:4e:ed:54:2f:00:88:38:92:60:25: 80:d1:6c:29:71:b5:61:20:20:18:4f:e4:0b:29:8b: 8e:81:8a:ef:64:de:93:23:ad:2e:cd:ad:4e:66:eb: 28:95:b8:9e:fa:52:fe:a9:1a:9b:f2:80:0e:96:24: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:6F:DA:3C:4B:60:03:F2:06:A8:0D:2A:84:3A:3B:A1:A9:DC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24970531-b009-3057-a2f5-3e09e260f2cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.110.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:35:c8:33:20:ff:65:11:73:c6:5c:58:d6:f5:97:41:60:04: d2:df:f1:be:c8:60:c3:95:e4:df:e5:38:7b:9a:43:27:53:14: 54:36:f0:cd:73:11:9b:98:67:43:5a:e3:5d:dd:4c:dd:a1:a5: f7:ed:ca:3b:e8:ce:c8:aa:3b:6b:83:a2:0f:38:a8:4c:84:4d: 24:77:c1:f3:23:ba:39:79:fc:3b:0b:51:ca:c8:62:bd:25:73: 28:fa:c0:68:80:81:85:3a:ce:df:2d:1a:b2:b8:ec:75:34:a6: ef:90:ae:f5:68:95:4e:12:a1:1d:67:bb:2b:55:59:26:3a:07: 15:5c:17:c6:69:e1:78:f8:0b:65:eb:6d:01:94:11:9d:2c:0b: a4:ff:ef:a1:5a:22:66:e0:2e:cf:fa:e5:fd:0f:66:da:13:d6: 5a:28:b7:4e:73:83:ea:bb:c7:de:8c:db:48:01:cb:c6:61:64: 96:21:a2:3a:45:a7:fb:27:7e:34:a6:a8:7b:07:02:c6:0e:e2: 4d:f5:b0:9a:7b:28:27:d7:19:e9:93:71:98:f8:a8:05:5f:98: 7b:ff:86:19:96:b8:4e:dd:d5:88:f2:24:af:fc:a1:dd:6c:62: d4:77:db:e9:c2:b8:8c:f4:32:58:07:64:e7:aa:36:21:e6:71: bc:01:f7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMgEVXBNlJ1NeXvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyNDE1MjAzOVoXDTI1MDkyMjE1MjAzOVowLzEtMCsGA1UEAxMk YzY1MDBiNzAtOTA4Ni00NmRjLTgzZWMtODRmZjA0YjIzOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKlqE5UbQXb9vdbLMpIiEfumnSuBTJHlXJdX kxhvxv4PGhIF43RtKYTyX6Qm8Zg8883Omz0G83bn2/3r1FII3i57p/2hV0wnWl1s BsrwN+05JL3xy8yAflOy3GD3pvQYiwVODX15/TBFnnVEUVNDuU4M1j13Vn/aPLQx rnW42oEMs45k/9jd8a7qrmE2g2BciRWAzpoKl+2QydisqqQMOpr1U/oMcPKAGAqL G6Pb/4Ue8Kv0eQl6YtUkoDv+GXjHh4de6W6RaE7tVC8AiDiSYCWA0WwpcbVhICAY T+QLKYuOgYrvZN6TI60uza1OZusolbie+lL+qRqb8oAOliRrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgob9o8S2AD8gaoDSqEOjuhqdz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ5NzA1MzEtYjAwOS0z MDU3LWEyZjUtM2UwOWUyNjBmMmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg1yDMg/2URc8ZcWNb1l0FgBNLf8b7IYMOV5N/lOHuaQydTFFQ28M1z EZuYZ0Na413dTN2hpfftyjvozsiqO2uDog84qEyETSR3wfMjujl5/DsLUcrIYr0l cyj6wGiAgYU6zt8tGrK47HU0pu+QrvVolU4SoR1nuytVWSY6BxVcF8Zp4Xj4C2Xr bQGUEZ0sC6T/76FaImbgLs/65f0PZtoT1loot05zg+q7x96M20gBy8ZhZJYhojpF p/snfjSmqHsHAsYO4k31sJp7KCfXGemTcZj4qAVfmHv/hhmWuE7d1YjyJK/8od1s YtR32+nCuIz0MlgHZOeqNiHmcbwB99o= -----END CERTIFICATE-----Generated at Wed Jul 2 07:09:05 2025 by rpki-client