$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b1314f1-3343-3b0f-9f71-6dd81f927241.roa File: 3b1314f1-3343-3b0f-9f71-6dd81f927241.roa (raw, json) Hash identifier: Jzalb4sCltyPehj5fZhZwe7dHQYBppte3IeTOAi9e6c= Subject key identifier: 76:52:F1:22:CA:BD:77:83:23:AD:8F:CE:D8:0A:24:06:A7:D6:1F:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3990A827416A11E43AAE8BC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b1314f1-3343-3b0f-9f71-6dd81f927241.roa Signing time: Tue 17 Jun 2025 20:33:18 +0000 ROA not before: Tue 17 Jun 2025 20:33:18 +0000 ROA not after: Mon 15 Sep 2025 20:33:18 +0000 asID: 22773 IP address blocks: 68.2.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:a8:27:41:6a:11:e4:3a:ae:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:33:18 2025 GMT Not After : Sep 15 20:33:18 2025 GMT Subject: CN=b7589870-5409-46cb-8a98-6384e37fa4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:b4:b7:fb:47:0c:52:42:ef:52:a1:27:b8: 04:0b:ab:c6:29:70:97:45:c7:1a:a6:2c:19:bb:23: ae:f7:e2:8d:0e:8b:05:2c:8e:db:d7:d8:47:33:9f: c5:07:c4:aa:a1:9f:20:c5:77:8e:f9:3e:0f:b1:39: a2:6c:ba:a9:43:cf:bb:4c:47:b4:55:6b:70:2a:33: 05:0a:db:f3:f2:a7:1a:63:5f:fd:5f:7e:33:76:03: 47:c1:f0:e4:28:83:94:c2:e6:74:43:03:9e:19:6a: 2c:1d:f7:88:bc:97:b2:06:18:e6:ab:27:17:27:cd: 58:97:3c:c7:ce:78:1f:55:73:dc:ef:b5:0d:22:28: a3:f0:f8:5c:bc:b5:e3:ca:d7:62:a1:d9:11:6a:9f: 57:f5:34:89:ee:9b:6b:0f:f9:9c:5c:34:2d:67:4f: ea:ff:73:34:d0:78:17:6c:32:06:d8:ac:ad:c8:78: ab:67:fa:8c:74:be:75:6c:5c:96:8c:be:e3:80:36: 1f:a1:d4:2e:d2:7b:1d:4a:08:22:60:b4:1e:1c:19: 6b:62:96:4f:8d:f1:fb:71:13:af:64:d4:68:60:0d: a3:26:d5:ef:57:22:af:90:15:9b:44:e5:22:c3:7b: cf:f1:3c:77:99:f0:a8:95:87:4c:07:da:f0:cb:c0: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:52:F1:22:CA:BD:77:83:23:AD:8F:CE:D8:0A:24:06:A7:D6:1F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b1314f1-3343-3b0f-9f71-6dd81f927241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ec:3a:82:28:fd:7f:6a:c1:64:71:90:ba:f9:a1:45:ed:81: cb:4d:72:54:c2:c8:d0:58:98:5f:b8:46:ec:91:04:0b:03:75: 21:1d:18:86:d9:b0:03:d5:ba:68:66:dc:c0:2e:b8:dd:b9:5d: 84:a0:15:da:32:5e:c6:9c:9c:9c:0d:8f:64:57:24:cd:11:88: 32:6b:92:d6:11:6f:df:14:5a:5a:87:16:5f:86:ec:7c:d1:9f: 06:b3:cc:8d:83:28:07:df:50:22:9d:7d:6d:7a:06:52:d5:50: 9d:67:37:9d:a5:1e:3e:eb:b3:6f:43:a6:c4:e0:fd:9c:95:52: ba:0d:55:30:67:ea:7d:d3:1b:bd:bd:75:1d:3f:fc:3f:25:ec: 07:24:80:14:78:1f:cb:44:1a:2b:49:4b:80:ce:bf:ed:6b:64: 8d:e2:78:89:f4:5f:0c:cb:3e:bb:d7:25:81:a7:b7:fb:4a:3f: fe:a5:b8:5c:a1:41:b5:0b:26:f5:04:72:3d:72:82:63:ab:33: 9f:2c:f1:5f:c5:4f:b1:e7:42:b4:81:78:c9:04:9a:b6:16:f6: 4d:58:be:52:b7:2f:75:0a:62:de:9e:9d:c9:ef:b5:0d:40:67: 95:72:6d:ac:27:c6:9e:a4:cb:20:ca:0b:ed:30:40:c1:e2:b2: 29:a8:ab:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kKgnQWoR5Dqui8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzMxOFoXDTI1MDkxNTIwMzMxOFowLzEtMCsGA1UEAxMk Yjc1ODk4NzAtNTQwOS00NmNiLThhOTgtNjM4NGUzN2ZhNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2e0t/tHDFJC71KhJ7gEC6vGKXCXRccapiwZ uyOu9+KNDosFLI7b19hHM5/FB8SqoZ8gxXeO+T4PsTmibLqpQ8+7TEe0VWtwKjMF Ctvz8qcaY1/9X34zdgNHwfDkKIOUwuZ0QwOeGWosHfeIvJeyBhjmqycXJ81YlzzH zngfVXPc77UNIiij8PhcvLXjytdiodkRap9X9TSJ7ptrD/mcXDQtZ0/q/3M00HgX bDIG2KytyHirZ/qMdL51bFyWjL7jgDYfodQu0nsdSggiYLQeHBlrYpZPjfH7cROv ZNRoYA2jJtXvVyKvkBWbROUiw3vP8Tx3mfColYdMB9rwy8AxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZS8SLKvXeDI62PztgKJAan1h/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2IxMzE0ZjEtMzM0My0z YjBmLTlmNzEtNmRkODFmOTI3MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPsOoIo/X9qwWRxkLr5oUXtgctNclTCyNBYmF+4RuyRBAsDdSEdGIbZ sAPVumhm3MAuuN25XYSgFdoyXsacnJwNj2RXJM0RiDJrktYRb98UWlqHFl+G7HzR nwazzI2DKAffUCKdfW16BlLVUJ1nN52lHj7rs29DpsTg/ZyVUroNVTBn6n3TG729 dR0//D8l7AckgBR4H8tEGitJS4DOv+1rZI3ieIn0XwzLPrvXJYGnt/tKP/6luFyh QbULJvUEcj1ygmOrM58s8V/FT7HnQrSBeMkEmrYW9k1YvlK3L3UKYt6encnvtQ1A Z5Vybawnxp6kyyDKC+0wQMHisimoq8o= -----END CERTIFICATE-----Generated at Wed Jul 2 14:53:53 2025 by rpki-client