$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa File: 2b72a825-99aa-3767-9147-beccdc7570c0.roa (raw, json) Hash identifier: sv9ZJojZgnOycs7uUBjZ5eBY99a+wYaseSn9KdkocL4= Subject key identifier: 14:24:15:86:7A:C8:D1:32:29:9E:4A:74:DE:5F:37:2A:F4:E4:60:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7C5590DAE8AED5FEE8100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa Signing time: Fri 20 Jun 2025 09:30:32 +0000 ROA not before: Fri 20 Jun 2025 09:30:32 +0000 ROA not after: Thu 18 Sep 2025 09:30:32 +0000 asID: 22773 IP address blocks: 68.224.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:c5:59:0d:ae:8a:ed:5f:ee:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:32 2025 GMT Not After : Sep 18 09:30:32 2025 GMT Subject: CN=c219816a-4fa0-48b1-b91b-fb634bf5509d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:f7:eb:77:5f:c0:f3:25:f5:cd:7c:89:cf: 59:46:47:e4:72:c5:92:14:d6:16:76:f6:f8:a1:12: f7:e0:c4:6e:5d:64:f6:3d:f3:d9:fe:04:bd:d5:24: 01:06:66:80:32:f6:85:51:9e:f2:88:47:ca:0b:95: df:0f:50:7c:87:94:51:e6:1d:5a:3a:3f:8b:2e:58: 69:9a:cd:c7:62:fd:e8:4a:5a:a4:e5:a3:ef:3e:db: f7:0d:59:c0:48:85:ed:07:6c:3e:69:af:f6:db:71: 5a:36:39:9d:cd:7f:04:11:d9:1a:61:ec:ec:4d:ce: d6:54:9b:db:15:27:fb:65:dc:05:15:51:c7:42:c7: af:27:8e:1e:f7:3f:6c:b9:e7:d9:8a:f9:e4:ca:94: f3:24:51:c1:9b:35:b7:c5:81:a4:3a:85:da:7d:e7: 74:3a:d3:ab:8c:f8:26:bb:91:69:8f:b5:f9:eb:a4: 37:20:5c:7a:ca:ad:67:be:a5:96:72:b1:b0:47:82: cf:04:44:78:e8:e1:17:ff:44:ba:fe:9b:ab:3f:74: ba:4b:c2:e9:6d:39:84:90:66:fc:1f:94:42:4c:a7: b7:e1:64:78:88:0b:eb:7c:6a:f4:61:a8:e6:c0:4a: 05:7f:ed:a7:b6:ef:12:c8:69:db:1f:63:93:e6:84: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:15:86:7A:C8:D1:32:29:9E:4A:74:DE:5F:37:2A:F4:E4:60:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b72a825-99aa-3767-9147-beccdc7570c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:34:46:e5:ba:f0:d5:2e:6e:45:c6:f6:0a:05:b5:f3:ef:3f: 16:04:82:90:70:9f:48:ea:21:b9:be:af:51:e0:92:3b:32:4e: 7e:c7:0c:2a:d2:63:0b:e2:46:e8:7a:2e:1f:15:13:78:15:32: 9f:e4:4a:de:b0:6c:55:5d:3c:1f:c5:d1:cc:98:6c:ed:80:ed: 10:23:8c:de:cf:18:bc:e1:41:59:5c:f4:04:5e:57:cb:a6:8e: 27:31:24:ad:38:5a:ce:c1:ad:f0:e9:a8:a6:3e:33:3f:fa:38: 7b:98:f6:9e:ee:3f:f5:c7:9a:7b:cd:52:16:da:18:57:69:5f: c6:c0:ac:ad:25:c0:8d:2c:bb:e4:5d:1b:ff:a9:31:12:51:aa: 9a:4a:e1:e6:77:35:b7:56:90:01:d4:c6:e3:6a:38:5c:ca:c8: 5d:c0:fc:0c:ab:5d:4b:50:5b:a7:d8:88:b2:d9:e6:94:4d:34: 30:66:9f:6f:57:9b:4d:93:cd:e4:36:62:32:95:f6:5f:ef:5b: 67:bd:01:6e:1c:6a:0d:b8:f9:b3:db:cc:7f:08:dc:2b:73:01: d8:c5:b3:2f:8e:26:77:f6:86:91:0c:67:f6:3f:57:da:c3:b0: d0:12:8d:d7:69:a0:01:9a:9b:75:d1:16:39:92:30:bf:90:ec: d1:c3:0f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp8VZDa6K7V/ugQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzMloXDTI1MDkxODA5MzAzMlowLzEtMCsGA1UEAxMk YzIxOTgxNmEtNGZhMC00OGIxLWI5MWItZmI2MzRiZjU1MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsL363dfwPMl9c18ic9ZRkfkcsWSFNYWdvb4 oRL34MRuXWT2PfPZ/gS91SQBBmaAMvaFUZ7yiEfKC5XfD1B8h5RR5h1aOj+LLlhp ms3HYv3oSlqk5aPvPtv3DVnASIXtB2w+aa/223FaNjmdzX8EEdkaYezsTc7WVJvb FSf7ZdwFFVHHQsevJ44e9z9suefZivnkypTzJFHBmzW3xYGkOoXafed0OtOrjPgm u5Fpj7X566Q3IFx6yq1nvqWWcrGwR4LPBER46OEX/0S6/purP3S6S8LpbTmEkGb8 H5RCTKe34WR4iAvrfGr0YajmwEoFf+2ntu8SyGnbH2OT5oSsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQkFYZ6yNEyKZ5KdN5fNyr05GAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI3MmE4MjUtOTlhYS0z NzY3LTkxNDctYmVjY2RjNzU3MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc0RuW68NUubkXG9goFtfPvPxYEgpBwn0jqIbm+r1HgkjsyTn7HDCrS YwviRuh6Lh8VE3gVMp/kSt6wbFVdPB/F0cyYbO2A7RAjjN7PGLzhQVlc9AReV8um jicxJK04Ws7BrfDpqKY+Mz/6OHuY9p7uP/XHmnvNUhbaGFdpX8bArK0lwI0su+Rd G/+pMRJRqppK4eZ3NbdWkAHUxuNqOFzKyF3A/AyrXUtQW6fYiLLZ5pRNNDBmn29X m02TzeQ2YjKV9l/vW2e9AW4cag24+bPbzH8I3CtzAdjFsy+OJnf2hpEMZ/Y/V9rD sNASjddpoAGam3XRFjmSML+Q7NHDDx8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:12:20 2025 by rpki-client