$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c97264c-588a-37d3-b71c-985e25ebcb80.roa File: 2c97264c-588a-37d3-b71c-985e25ebcb80.roa (raw, json) Hash identifier: gKKSaXGPBuHLO3zjLhqiyq8qg4PlNbBRF95xVFH0pt4= Subject key identifier: 23:2D:D1:81:53:3F:43:A0:09:02:5D:5B:7E:47:49:D3:DF:DD:B1:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD678198D88A8F8EAA57E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c97264c-588a-37d3-b71c-985e25ebcb80.roa Signing time: Thu 19 Jun 2025 09:17:12 +0000 ROA not before: Thu 19 Jun 2025 09:17:12 +0000 ROA not after: Wed 17 Sep 2025 09:17:12 +0000 asID: 22773 IP address blocks: 68.228.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:78:19:8d:88:a8:f8:ea:a5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:12 2025 GMT Not After : Sep 17 09:17:12 2025 GMT Subject: CN=65ef090f-bfc6-4b3d-bbe4-1f00cd1dcfe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:c3:30:33:5a:f5:85:b2:be:82:db:ce:ab: 09:00:e9:12:51:ef:2d:40:33:92:6f:7c:9c:49:8d: 0c:6e:c0:a7:7f:db:22:79:ce:ff:ed:4d:84:48:be: e0:ed:bb:d5:36:b7:71:02:23:69:59:dc:e5:d3:f8: 1a:cb:41:b5:ec:c6:40:05:4d:34:6a:ae:f4:ab:69: 7f:4b:5b:b0:30:a2:c8:76:7f:70:b5:74:54:ce:2b: c3:3e:cd:f0:d1:0e:b4:0c:b3:71:bb:fd:b3:fb:3d: 3a:23:02:d6:a1:e2:74:b3:68:07:b5:c2:d7:39:0e: ca:2b:bb:91:83:86:b8:a1:25:2d:fb:0f:73:a5:ca: ac:34:6c:b9:6e:2c:cb:e3:63:89:9b:e1:a9:7b:bb: 95:29:c9:06:52:7b:b9:40:29:c0:9a:f3:59:ce:64: 98:ea:c3:81:24:99:5b:b2:47:f3:7e:a0:87:a9:68: 33:38:fa:b0:8e:c3:80:bf:f6:83:ed:05:71:be:b5: c7:aa:3d:36:6f:94:1a:3c:f0:37:68:21:b4:03:1d: 59:3d:df:2d:c9:ad:80:da:fc:8f:b6:f2:d7:e8:32: be:5b:a6:f4:b5:5e:f9:f8:85:a7:0b:85:df:3c:32: 51:62:17:a8:8a:76:59:e5:be:50:4a:b6:14:96:19: 33:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:D1:81:53:3F:43:A0:09:02:5D:5B:7E:47:49:D3:DF:DD:B1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c97264c-588a-37d3-b71c-985e25ebcb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:aa:be:52:65:05:f3:b0:f3:de:b0:14:ef:86:98:97:dd:ec: 8c:c6:58:88:50:e5:63:05:3c:3b:fe:c7:0a:9e:54:bc:61:63: 5c:c3:8c:96:d8:0a:fa:99:10:65:b2:e0:3c:90:f1:04:3a:14: d5:81:53:d8:8d:3d:b7:46:dd:0e:19:2f:38:c6:e8:5d:4c:58: 90:28:d6:17:d6:db:7e:b0:5f:1d:a5:d6:87:e0:49:9b:39:18: fb:34:72:cd:e1:0c:f3:50:ab:1a:72:43:bf:83:d2:49:a3:7b: b6:e7:e3:17:53:dc:f9:59:43:7e:5c:8e:52:21:a5:15:ad:1c: 65:f4:9d:ac:8c:29:b6:6b:95:81:23:50:72:13:d8:78:bb:56: 82:7e:70:a8:43:cf:37:fc:f3:0d:45:d5:c5:3c:e7:14:78:41: 16:68:82:94:fe:f1:94:e5:1c:86:d9:1a:dd:b9:02:e3:5c:f2: 65:ca:79:75:f7:f6:78:7b:73:07:96:6f:4c:c2:e0:04:d2:a2: 6d:d0:44:e7:03:4d:49:de:a4:29:3d:e6:16:17:6c:19:13:b7: 0b:12:be:c0:26:e8:17:69:c1:4f:95:d1:ec:ad:72:01:a2:46: e5:bb:47:45:22:2d:5b:95:b4:b3:2d:f6:f1:b6:73:b9:00:c6: 30:a7:06:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91ngZjYio+OqlfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcxMloXDTI1MDkxNzA5MTcxMlowLzEtMCsGA1UEAxMk NjVlZjA5MGYtYmZjNi00YjNkLWJiZTQtMWYwMGNkMWRjZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsDDMDNa9YWyvoLbzqsJAOkSUe8tQDOSb3yc SY0MbsCnf9siec7/7U2ESL7g7bvVNrdxAiNpWdzl0/gay0G17MZABU00aq70q2l/ S1uwMKLIdn9wtXRUzivDPs3w0Q60DLNxu/2z+z06IwLWoeJ0s2gHtcLXOQ7KK7uR g4a4oSUt+w9zpcqsNGy5bizL42OJm+Gpe7uVKckGUnu5QCnAmvNZzmSY6sOBJJlb skfzfqCHqWgzOPqwjsOAv/aD7QVxvrXHqj02b5QaPPA3aCG0Ax1ZPd8tya2A2vyP tvLX6DK+W6b0tV75+IWnC4XfPDJRYheoinZZ5b5QSrYUlhkzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMt0YFTP0OgCQJdW35HSdPf3bGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmM5NzI2NGMtNTg4YS0z N2QzLWI3MWMtOTg1ZTI1ZWJjYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROQyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyqvlJlBfOw896wFO+GmJfd7IzGWIhQ5WMFPDv+xwqeVLxhY1zDjJbY CvqZEGWy4DyQ8QQ6FNWBU9iNPbdG3Q4ZLzjG6F1MWJAo1hfW236wXx2l1ofgSZs5 GPs0cs3hDPNQqxpyQ7+D0kmje7bn4xdT3PlZQ35cjlIhpRWtHGX0nayMKbZrlYEj UHIT2Hi7VoJ+cKhDzzf88w1F1cU85xR4QRZogpT+8ZTlHIbZGt25AuNc8mXKeXX3 9nh7cweWb0zC4ATSom3QROcDTUnepCk95hYXbBkTtwsSvsAm6BdpwU+V0eytcgGi RuW7R0UiLVuVtLMt9vG2c7kAxjCnBpw= -----END CERTIFICATE-----Generated at Wed Jul 2 06:15:47 2025 by rpki-client