$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa File: 29d8870b-b24e-30a4-9946-1070868208ac.roa (raw, json) Hash identifier: e0pE6QkDVxLtKrNPl7wgol6eFs2BBBDnU0uAbA7E1XY= Subject key identifier: 04:35:75:3C:43:F8:DD:C7:7F:3C:33:CC:57:F7:80:9D:68:47:86:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5A5CE0B92BF661EFF1100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa Signing time: Thu 19 Jun 2025 09:15:33 +0000 ROA not before: Thu 19 Jun 2025 09:15:33 +0000 ROA not after: Wed 17 Sep 2025 09:15:33 +0000 asID: 22773 IP address blocks: 68.104.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:a5:ce:0b:92:bf:66:1e:ff:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:33 2025 GMT Not After : Sep 17 09:15:33 2025 GMT Subject: CN=ed2783cc-5456-41d7-9f0b-4a54f47d7618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:44:4f:b0:c4:c3:6d:7c:50:10:34:5c:16: d3:1c:38:51:a6:04:bc:96:61:e2:9e:0e:79:25:92: c8:81:27:b2:88:72:5a:9a:5e:35:0c:0e:74:44:15: 5a:1a:8b:14:8a:34:24:d3:d4:41:e3:41:bb:84:30: fd:86:be:23:2c:91:94:0f:e1:18:19:b1:b9:4d:0f: d5:b2:2a:91:83:73:ee:6b:d1:dd:d2:a4:1f:8c:42: 9a:7d:7d:0d:4c:4e:20:66:5a:77:16:40:5d:fe:af: 9f:92:4b:d3:8f:90:46:b5:81:fd:28:6d:1f:3c:40: 14:ad:2a:cd:48:db:5c:2d:77:78:d9:1a:3c:6c:82: 9e:7e:66:4b:f7:af:0b:65:53:07:ab:60:a7:7a:6b: ac:09:ef:d5:cc:5b:89:3a:61:60:48:34:76:f7:65: b3:8c:45:68:f7:65:d7:3a:75:0e:e6:11:57:95:d4: 03:ac:12:b5:27:4d:06:c4:9d:9d:a2:e8:e2:09:8c: 3c:be:e1:de:81:bd:77:f1:6f:28:d7:87:1c:32:78: 79:e0:88:22:a6:b5:2c:f4:62:cc:29:9c:95:c8:7d: d3:78:05:47:bd:bd:ba:60:4a:38:83:04:a8:ba:ca: df:29:bb:d3:c6:1f:44:e5:e6:7d:48:65:4d:41:cb: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:75:3C:43:F8:DD:C7:7F:3C:33:CC:57:F7:80:9D:68:47:86:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d8870b-b24e-30a4-9946-1070868208ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:38:36:00:da:2c:44:ff:3f:9d:5b:9a:be:87:de:dc:ec:cd: 5f:9e:03:06:2f:36:80:1c:b9:ba:34:76:73:c6:51:ae:ba:de: c3:54:ca:23:8f:bb:4d:67:09:37:b6:f4:43:4a:c6:da:b5:12: df:e7:dd:52:5f:41:5d:95:eb:be:ad:63:28:77:43:87:d8:e2: 40:91:f8:ad:f9:8e:e2:8a:25:d7:1c:08:41:9f:0c:1d:04:a6: 79:dc:53:d5:a7:ce:13:83:e9:5f:bb:0f:a5:16:1f:75:6d:48: 35:ef:44:c6:c4:56:8e:4d:76:a9:6d:9e:6c:f3:23:ee:82:ba: 65:f4:89:6b:4a:df:33:c1:62:5c:df:1e:52:88:8c:fc:17:37: bf:44:6e:43:ef:a9:49:ad:63:73:c4:a7:99:55:5d:89:74:7e: 77:14:d5:aa:e7:3e:a3:6c:82:b4:2d:7e:8b:cb:92:8c:d5:cf: 88:34:64:cb:d5:11:e7:38:f1:3d:b9:18:cc:5d:ef:52:fb:11: da:0f:36:bd:cf:4e:d3:d4:b7:b0:a8:ad:bc:5b:98:6f:16:ab: 18:94:c0:03:41:d9:ab:17:2a:df:22:77:f4:02:d2:98:c3:ad: c4:6d:1e:db:b2:d6:c0:5c:a9:06:03:37:f3:81:11:50:ef:97: a3:f2:73:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91aXOC5K/Zh7/EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTUzM1oXDTI1MDkxNzA5MTUzM1owLzEtMCsGA1UEAxMk ZWQyNzgzY2MtNTQ1Ni00MWQ3LTlmMGItNGE1NGY0N2Q3NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7hET7DEw218UBA0XBbTHDhRpgS8lmHing55 JZLIgSeyiHJaml41DA50RBVaGosUijQk09RB40G7hDD9hr4jLJGUD+EYGbG5TQ/V siqRg3Pua9Hd0qQfjEKafX0NTE4gZlp3FkBd/q+fkkvTj5BGtYH9KG0fPEAUrSrN SNtcLXd42Ro8bIKefmZL968LZVMHq2CnemusCe/VzFuJOmFgSDR292WzjEVo92XX OnUO5hFXldQDrBK1J00GxJ2doujiCYw8vuHegb138W8o14ccMnh54IgiprUs9GLM KZyVyH3TeAVHvb26YEo4gwSousrfKbvTxh9E5eZ9SGVNQcsXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ1dTxD+N3HfzwzzFf3gJ1oR4bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlkODg3MGItYjI0ZS0z MGE0LTk5NDYtMTA3MDg2ODIwOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU4NgDaLET/P51bmr6H3tzszV+eAwYvNoAcubo0dnPGUa663sNUyiOP u01nCTe29ENKxtq1Et/n3VJfQV2V676tYyh3Q4fY4kCR+K35juKKJdccCEGfDB0E pnncU9WnzhOD6V+7D6UWH3VtSDXvRMbEVo5NdqltnmzzI+6CumX0iWtK3zPBYlzf HlKIjPwXN79EbkPvqUmtY3PEp5lVXYl0fncU1arnPqNsgrQtfovLkozVz4g0ZMvV Eec48T25GMxd71L7EdoPNr3PTtPUt7CorbxbmG8WqxiUwANB2asXKt8id/QC0pjD rcRtHtuy1sBcqQYDN/OBEVDvl6Pyc/E= -----END CERTIFICATE-----Generated at Wed Jul 2 14:54:39 2025 by rpki-client