$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1e7141-630a-3681-89c2-f30e0635bf6a.roa File: 3e1e7141-630a-3681-89c2-f30e0635bf6a.roa (raw, json) Hash identifier: 0mJMh1Hop8lvynX9UZJ/A32YdTPZwU1NJrh94MEIhbI= Subject key identifier: 80:11:67:1C:8F:58:FA:B0:C2:50:A3:33:45:E0:73:08:73:6C:9D:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A781588F793853F6D6A2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1e7141-630a-3681-89c2-f30e0635bf6a.roa Signing time: Fri 20 Jun 2025 09:30:00 +0000 ROA not before: Fri 20 Jun 2025 09:30:00 +0000 ROA not after: Thu 18 Sep 2025 09:30:00 +0000 asID: 22773 IP address blocks: 68.108.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:81:58:8f:79:38:53:f6:d6:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:00 2025 GMT Not After : Sep 18 09:30:00 2025 GMT Subject: CN=cad91bd5-2fd3-4444-8d71-041c331d420b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:3b:6c:b3:33:8c:b6:6b:8b:86:f3:9a:02: 44:68:23:4d:3a:ec:7b:8d:c8:63:89:f2:cb:b5:cc: da:c4:a8:00:ee:07:e7:98:dd:f0:d7:fd:52:90:65: 59:f2:e7:a9:75:a4:cd:3e:b4:fb:7e:37:bc:6e:95: c0:46:f7:1c:b2:09:bc:19:7d:b9:cb:39:93:90:63: 10:8e:f2:d4:b5:c8:f1:7d:9e:51:61:f7:0a:7e:e8: 4f:9b:8d:01:92:8d:3d:b9:91:97:22:85:79:b8:69: 50:84:b8:82:4c:cc:13:54:66:2b:c3:46:52:28:f3: 50:39:00:76:33:c4:c5:04:e7:ab:1f:f0:18:ef:15: 97:ea:d8:36:49:7a:a1:e7:b4:34:cf:da:74:b7:d3: 2c:c7:6f:16:4a:27:df:d2:1e:38:e4:ca:81:5d:18: 9e:08:9c:78:e5:ab:e6:1d:44:43:1d:66:fc:09:29: 99:ae:36:7c:52:82:b3:b5:73:a9:c5:03:d2:ea:7e: d4:c0:91:2c:8e:a7:31:69:b8:31:ec:6d:62:48:80: 59:bc:a8:d9:48:3c:9e:20:ca:f7:81:b8:dc:ce:45: ad:a0:cb:0f:36:5f:55:aa:5e:12:44:6c:ab:b4:e6: fd:7b:3a:ce:60:dc:c7:5e:cf:45:68:e0:c3:e7:97: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:11:67:1C:8F:58:FA:B0:C2:50:A3:33:45:E0:73:08:73:6C:9D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e1e7141-630a-3681-89c2-f30e0635bf6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ba:01:25:81:94:7d:f5:65:22:31:fd:ab:20:f1:d2:2e:58: dd:41:90:19:21:1f:b6:b5:f9:08:53:4c:c0:e2:31:78:ac:ff: 95:41:f7:b1:8c:85:39:dd:ef:ef:20:38:05:85:a9:74:35:1e: 40:d2:6f:fe:c7:31:2f:63:de:f0:41:64:5b:ee:62:8c:60:55: 0c:cf:0a:51:24:ca:1e:fd:10:f4:dc:37:d1:ed:eb:e1:64:9b: 25:63:93:11:58:a9:fc:6f:8c:01:c1:01:6c:38:d2:f6:49:04: 84:d7:ca:ec:51:9f:f1:e2:d2:92:55:60:96:7a:7c:72:c3:c0: 32:fe:51:35:12:8c:42:bc:2d:eb:97:ef:61:ce:12:2d:c5:2e: 34:48:0c:1d:50:ba:1b:79:6e:06:10:85:29:f9:e0:d9:2e:ce: 23:20:66:98:ad:4b:19:76:43:6b:29:38:d3:92:53:74:9e:6e: 48:3b:1a:35:f3:56:39:d1:5d:eb:30:f2:cd:cf:ad:75:07:3e: e2:8a:8c:d2:ec:da:09:d8:7d:db:7c:0e:9a:0d:7b:09:37:bc: a4:8a:0f:d5:b8:1f:9d:13:bf:e8:9b:f2:f7:0e:5e:fc:b5:2b: 4a:0c:4b:94:ce:be:5e:d6:18:46:93:ce:2b:a5:1f:08:ed:b1: 7e:e0:88:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp4FYj3k4U/bWosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAwMFoXDTI1MDkxODA5MzAwMFowLzEtMCsGA1UEAxMk Y2FkOTFiZDUtMmZkMy00NDQ0LThkNzEtMDQxYzMzMWQ0MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiU7bLMzjLZri4bzmgJEaCNNOux7jchjifLL tczaxKgA7gfnmN3w1/1SkGVZ8uepdaTNPrT7fje8bpXARvccsgm8GX25yzmTkGMQ jvLUtcjxfZ5RYfcKfuhPm40Bko09uZGXIoV5uGlQhLiCTMwTVGYrw0ZSKPNQOQB2 M8TFBOerH/AY7xWX6tg2SXqh57Q0z9p0t9Msx28WSiff0h445MqBXRieCJx45avm HURDHWb8CSmZrjZ8UoKztXOpxQPS6n7UwJEsjqcxabgx7G1iSIBZvKjZSDyeIMr3 gbjczkWtoMsPNl9Vql4SRGyrtOb9ezrOYNzHXs9FaODD55f1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIARZxyPWPqwwlCjM0XgcwhzbJ10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2UxZTcxNDEtNjMwYS0z NjgxLTg5YzItZjMwZTA2MzViZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO6ASWBlH31ZSIx/asg8dIuWN1BkBkhH7a1+QhTTMDiMXis/5VB97GM hTnd7+8gOAWFqXQ1HkDSb/7HMS9j3vBBZFvuYoxgVQzPClEkyh79EPTcN9Ht6+Fk myVjkxFYqfxvjAHBAWw40vZJBITXyuxRn/Hi0pJVYJZ6fHLDwDL+UTUSjEK8LeuX 72HOEi3FLjRIDB1Quht5bgYQhSn54NkuziMgZpitSxl2Q2spONOSU3Sebkg7GjXz VjnRXesw8s3PrXUHPuKKjNLs2gnYfdt8DpoNewk3vKSKD9W4H50Tv+ib8vcOXvy1 K0oMS5TOvl7WGEaTziulHwjtsX7giJg= -----END CERTIFICATE-----Generated at Wed Jul 2 06:52:12 2025 by rpki-client