$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa File: 36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa (raw, json) Hash identifier: NAWJY8Yb03YVS7vfD8dasUIqN9/ldR0jTn/DNQM4ilY= Subject key identifier: 37:84:B0:F7:99:FB:FE:38:75:EB:1F:33:9C:26:82:75:85:CF:0E:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10C92FCC97AD02A1892E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa Signing time: Wed 18 Jun 2025 18:03:05 +0000 ROA not before: Wed 18 Jun 2025 18:03:05 +0000 ROA not after: Tue 16 Sep 2025 18:03:05 +0000 asID: 22773 IP address blocks: 68.99.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:c9:2f:cc:97:ad:02:a1:89:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:03:05 2025 GMT Not After : Sep 16 18:03:05 2025 GMT Subject: CN=5f143d66-20ca-4656-bd50-e37b28131401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:84:21:32:f2:28:ec:17:f3:52:87:cf:2e: 35:cf:14:0c:41:58:26:9f:60:27:ae:4d:23:74:b4: 99:14:80:76:71:74:a3:54:4c:ff:a1:fb:23:6b:69: ec:6f:2d:ed:38:57:b6:c0:44:df:4c:ae:ac:84:49: 5d:f9:5a:af:6b:72:ae:87:fa:f0:16:d8:79:b1:72: fe:e5:2b:db:71:47:70:83:cc:1b:f1:d8:99:7a:3d: 44:95:7c:a8:03:f8:b0:91:2f:5b:03:45:bf:48:d5: 11:f6:27:fc:6e:97:f2:c7:09:90:a1:19:2e:4f:89: 10:72:0c:3e:2f:11:bb:eb:8f:b2:ca:a4:2d:02:92: 6a:7b:56:18:60:30:41:ca:04:ea:20:b5:ff:bd:00: a4:1f:b2:51:76:91:5e:5f:59:b1:24:87:d8:ae:1e: fb:50:f2:96:72:59:2e:ee:f8:29:25:9b:47:8f:e4: 84:75:2d:36:e4:37:99:f7:d9:6c:ed:bc:e5:a9:7e: 57:ec:14:cb:e2:7b:ba:09:93:aa:70:9c:5c:96:73: b5:88:10:61:dd:6c:c4:f5:21:db:8e:43:e3:dd:8d: 29:c3:ff:f3:a8:e7:ee:d6:46:a3:78:df:5e:77:11: 78:6e:eb:09:5c:06:ce:2e:5c:30:3d:1b:e4:a8:56: 27:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:84:B0:F7:99:FB:FE:38:75:EB:1F:33:9C:26:82:75:85:CF:0E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36f3efdf-33fd-3176-b410-fefcc7fe5d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:66:e1:e9:cf:32:63:a8:ea:6c:b9:5c:9f:91:ad:cb:f7:30: 7b:ac:d2:44:d0:b3:6e:10:97:2e:66:56:d0:7c:64:0a:ad:8d: e3:e5:a7:35:85:33:e2:b2:81:a3:b7:48:f8:e5:92:d6:89:b4: 2a:3d:f6:aa:fd:52:af:b4:db:0a:7f:e9:4f:66:32:fc:af:95: 7a:cd:8c:0f:d5:24:75:5e:9d:c9:2b:5a:2e:0b:72:95:bd:69: 20:67:0b:a1:9f:7c:69:23:f3:fa:ab:df:48:51:4f:b4:64:d9: fd:f6:d5:54:8c:1c:32:77:c0:b5:61:d2:3f:a1:3b:bc:97:cd: cc:8e:7e:b6:2a:c7:02:d0:81:90:18:24:9b:50:2e:24:f1:d5: 58:e6:de:54:2f:fa:c9:85:8c:34:8e:22:a6:2e:f8:f0:19:43: 06:75:42:76:58:cf:cd:16:05:18:9e:0c:03:ea:c3:d5:15:ce: 3e:37:ce:e6:9f:5d:98:66:0b:79:98:85:b2:81:3f:d1:b4:16: 28:6c:8f:19:f1:b6:d7:32:60:8d:a1:d4:e5:c1:8e:35:96:ad: 4d:75:ad:1f:37:b0:58:cf:1a:85:2d:7c:d9:0c:c1:c8:fe:c7: d6:2a:a4:bc:32:aa:00:69:31:fd:18:10:8b:30:10:1d:2e:b5: 74:6b:fe:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EMkvzJetAqGJLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDMwNVoXDTI1MDkxNjE4MDMwNVowLzEtMCsGA1UEAxMk NWYxNDNkNjYtMjBjYS00NjU2LWJkNTAtZTM3YjI4MTMxNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna6EITLyKOwX81KHzy41zxQMQVgmn2Anrk0j dLSZFIB2cXSjVEz/ofsja2nsby3tOFe2wETfTK6shEld+Vqva3Kuh/rwFth5sXL+ 5SvbcUdwg8wb8diZej1ElXyoA/iwkS9bA0W/SNUR9if8bpfyxwmQoRkuT4kQcgw+ LxG764+yyqQtApJqe1YYYDBBygTqILX/vQCkH7JRdpFeX1mxJIfYrh77UPKWclku 7vgpJZtHj+SEdS025DeZ99ls7bzlqX5X7BTL4nu6CZOqcJxclnO1iBBh3WzE9SHb jkPj3Y0pw//zqOfu1kajeN9edxF4busJXAbOLlwwPRvkqFYnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeEsPeZ+/44desfM5wmgnWFzw7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZmM2VmZGYtMzNmZC0z MTc2LWI0MTAtZmVmY2M3ZmU1ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtm4enPMmOo6my5XJ+Rrcv3MHus0kTQs24Qly5mVtB8ZAqtjePlpzWF M+KygaO3SPjlktaJtCo99qr9Uq+02wp/6U9mMvyvlXrNjA/VJHVenckrWi4LcpW9 aSBnC6GffGkj8/qr30hRT7Rk2f321VSMHDJ3wLVh0j+hO7yXzcyOfrYqxwLQgZAY JJtQLiTx1Vjm3lQv+smFjDSOIqYu+PAZQwZ1QnZYz80WBRieDAPqw9UVzj43zuaf XZhmC3mYhbKBP9G0FihsjxnxttcyYI2h1OXBjjWWrU11rR83sFjPGoUtfNkMwcj+ x9YqpLwyqgBpMf0YEIswEB0utXRr/gk= -----END CERTIFICATE-----Generated at Wed Jul 2 07:09:50 2025 by rpki-client