$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3413abc0-2802-30bd-9c06-f3f8b5974916.roa File: 3413abc0-2802-30bd-9c06-f3f8b5974916.roa (raw, json) Hash identifier: Ak4iiLo3rjQYYzRaTDaxgeYfTR+ovTX5/fHP+Mc+fa4= Subject key identifier: 25:CC:31:65:4C:82:DC:D3:CF:74:54:BC:97:D0:E8:40:70:B0:68:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7DDC26AE1EDC2ECD92E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3413abc0-2802-30bd-9c06-f3f8b5974916.roa Signing time: Fri 20 Jun 2025 09:30:44 +0000 ROA not before: Fri 20 Jun 2025 09:30:44 +0000 ROA not after: Thu 18 Sep 2025 09:30:44 +0000 asID: 22773 IP address blocks: 68.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:dd:c2:6a:e1:ed:c2:ec:d9:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:44 2025 GMT Not After : Sep 18 09:30:44 2025 GMT Subject: CN=c569ade9-d1ab-48ef-9f10-6f615bf2285f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:cd:f2:df:61:5d:c2:2a:9b:13:cb:83:9e: 34:a0:ba:fc:3d:4c:b7:f3:85:d2:07:cb:7c:4e:92: 1f:ed:87:f3:48:63:1e:87:ad:5f:b1:b3:cc:c1:29: 8f:12:1f:41:19:b7:1a:3a:c6:f0:d6:f0:a2:0a:d8: 13:92:4a:05:03:43:5b:bb:df:1a:01:7b:d0:aa:3b: 5d:cc:f6:15:54:45:33:0a:60:00:11:a9:66:95:58: f7:8d:6a:d3:77:e3:f7:62:31:a2:1c:72:9f:8b:38: 8f:ef:06:67:b3:94:a1:9e:d4:93:fe:b8:95:e6:d5: e7:14:b9:82:a6:53:49:8b:bf:d4:ba:c5:a5:85:33: 4c:2f:4e:76:84:d6:67:f4:09:ca:d8:99:04:14:9c: 3d:df:40:c2:c1:13:78:09:13:24:2a:cd:d1:f1:79: 3b:f1:8c:41:5e:de:e2:d0:9d:aa:89:ff:7c:5c:87: 57:31:67:8c:41:91:26:25:4b:92:85:f9:7e:e5:8c: 12:3c:5b:e1:42:4f:65:32:d5:80:b4:74:7a:72:f4: 78:e5:68:04:5c:6d:28:90:6d:f1:96:f4:13:73:13: ba:0c:6f:25:07:c6:4e:5e:dd:e7:b6:22:15:2d:da: 58:9f:97:d5:e4:9b:21:f9:e9:a5:d2:bd:99:a6:5b: e6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CC:31:65:4C:82:DC:D3:CF:74:54:BC:97:D0:E8:40:70:B0:68:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3413abc0-2802-30bd-9c06-f3f8b5974916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9a:32:a4:51:ee:76:f8:dc:04:39:0f:9c:93:80:ad:4f:6b: 7b:e1:52:ab:c2:bf:b9:1c:99:8b:2b:48:32:ad:40:96:24:35: 82:57:2e:aa:00:6b:80:4e:4b:59:a7:a8:6c:e1:f9:c1:6c:a8: 7f:63:b7:78:69:64:8f:8e:d2:99:a5:f6:1a:99:74:a4:ca:69: 84:2e:1e:36:c4:e6:74:fb:dc:fe:cb:d9:38:80:58:fa:8e:10: e6:21:c1:1c:d3:1c:68:77:03:8b:70:ab:24:39:80:ca:05:e4: 39:d4:ef:27:84:c8:de:d2:85:97:eb:46:d9:77:f4:d2:04:f3: 0d:5b:54:d1:c2:83:ae:66:9e:c1:e5:65:de:53:5f:89:da:5e: e8:d9:6e:0c:83:b9:05:4f:1a:8f:6e:e4:9e:28:81:d0:66:74: e0:34:4a:08:6c:c1:3f:d3:5b:92:a4:4d:a0:64:71:da:96:75: 4c:c0:5a:4e:33:12:17:f7:a4:37:2d:26:80:62:5a:62:ea:a5: b6:54:b5:54:a0:76:54:d5:da:15:85:18:7b:92:fa:49:2e:79: 3d:ba:d1:5d:c5:e9:e6:87:d2:e4:dc:6e:d2:54:f5:b2:89:2e: 08:95:6d:eb:c0:9d:9e:30:0b:40:0a:0b:66:9a:94:31:03:0f: a0:5c:0f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp93CauHtwuzZLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA0NFoXDTI1MDkxODA5MzA0NFowLzEtMCsGA1UEAxMk YzU2OWFkZTktZDFhYi00OGVmLTlmMTAtNmY2MTViZjIyODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLN8t9hXcIqmxPLg540oLr8PUy384XSB8t8 TpIf7YfzSGMeh61fsbPMwSmPEh9BGbcaOsbw1vCiCtgTkkoFA0Nbu98aAXvQqjtd zPYVVEUzCmAAEalmlVj3jWrTd+P3YjGiHHKfiziP7wZns5ShntST/riV5tXnFLmC plNJi7/UusWlhTNML052hNZn9AnK2JkEFJw930DCwRN4CRMkKs3R8Xk78YxBXt7i 0J2qif98XIdXMWeMQZEmJUuShfl+5YwSPFvhQk9lMtWAtHR6cvR45WgEXG0okG3x lvQTcxO6DG8lB8ZOXt3ntiIVLdpYn5fV5Jsh+eml0r2ZplvmhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXMMWVMgtzTz3RUvJfQ6EBwsGj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQxM2FiYzAtMjgwMi0z MGJkLTljMDYtZjNmOGI1OTc0OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROD/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKaMqRR7nb43AQ5D5yTgK1Pa3vhUqvCv7kcmYsrSDKtQJYkNYJXLqoA a4BOS1mnqGzh+cFsqH9jt3hpZI+O0pml9hqZdKTKaYQuHjbE5nT73P7L2TiAWPqO EOYhwRzTHGh3A4twqyQ5gMoF5DnU7yeEyN7ShZfrRtl39NIE8w1bVNHCg65mnsHl Zd5TX4naXujZbgyDuQVPGo9u5J4ogdBmdOA0SghswT/TW5KkTaBkcdqWdUzAWk4z Ehf3pDctJoBiWmLqpbZUtVSgdlTV2hWFGHuS+kkueT260V3F6eaH0uTcbtJU9bKJ LgiVbevAnZ4wC0AKC2aalDEDD6BcD3U= -----END CERTIFICATE-----Generated at Wed Jul 2 14:56:38 2025 by rpki-client