$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/474a7cef-27ff-36ba-862d-c3a2e501b1a0.roa File: 474a7cef-27ff-36ba-862d-c3a2e501b1a0.roa (raw, json) Hash identifier: wj7RCsjV6orUEBhZNVLyqd9NuHcY5IErudJ4zzzYRLE= Subject key identifier: 4E:72:DE:3C:C2:F3:76:AD:65:F4:31:35:0A:1D:97:9A:FF:84:DC:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD613A4CDBF36522F42EF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/474a7cef-27ff-36ba-862d-c3a2e501b1a0.roa Signing time: Thu 19 Jun 2025 09:16:25 +0000 ROA not before: Thu 19 Jun 2025 09:16:25 +0000 ROA not after: Wed 17 Sep 2025 09:16:25 +0000 asID: 22773 IP address blocks: 68.109.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:13:a4:cd:bf:36:52:2f:42:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:25 2025 GMT Not After : Sep 17 09:16:25 2025 GMT Subject: CN=1ee9dc2c-f507-449d-bd74-151d39dfec5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:ec:3e:f5:5d:10:34:b3:2d:dd:10:3d:3f: c8:97:10:9b:b6:f7:f7:9a:0e:05:fe:30:3f:ef:ec: fc:1f:0b:da:28:5e:7c:85:b1:57:51:71:88:55:87: 85:4f:8f:e3:a9:c1:92:8d:e2:23:76:58:88:01:46: 4a:7b:e1:d9:50:4d:8c:06:15:e9:39:f0:a1:a6:32: 87:de:06:34:f8:12:8e:e3:1f:f3:e4:eb:82:a1:36: 79:9e:ba:d2:be:ae:1f:be:05:c3:3f:1c:32:09:c3: 61:27:72:e6:fe:52:ee:07:3c:7a:b7:cf:86:08:84: c3:10:de:02:4f:d5:8e:2e:d2:4b:e3:aa:75:df:ef: 19:83:30:d3:9d:08:ca:3c:7e:55:cb:99:97:25:c7: f9:11:c2:a1:0e:c7:cf:93:75:b2:f0:22:bf:5c:f3: 57:ff:ca:8f:1e:83:59:58:92:8b:63:97:95:1c:62: 71:8d:d5:92:72:f5:18:ac:da:40:0b:1a:f9:55:1e: 85:a2:a4:17:e1:b5:cc:25:e8:81:9c:f1:35:ad:77: 26:00:90:61:27:3a:b1:5a:83:6d:5c:a4:9d:c2:92: 08:9e:b3:d3:c4:3f:68:14:47:45:eb:bc:ca:bf:b4: e2:0d:72:d6:9b:e5:9e:86:43:27:13:cb:15:99:9e: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:DE:3C:C2:F3:76:AD:65:F4:31:35:0A:1D:97:9A:FF:84:DC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/474a7cef-27ff-36ba-862d-c3a2e501b1a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:18:47:b0:7b:6a:47:80:fd:96:a2:43:1a:55:d2:83:46:fe: 21:f2:0b:0d:0b:bf:32:e7:9d:0c:73:a5:e6:e4:cf:df:df:9c: 0c:f0:87:44:3b:2c:18:75:ef:38:84:a3:d9:28:b1:09:01:18: 30:8e:b3:d3:e3:86:9a:3f:2a:3b:f9:60:59:00:4d:03:51:be: 00:07:7f:a5:0d:ec:7e:54:8c:d4:35:a8:b4:ed:bb:c3:24:dd: c9:18:86:98:3b:c5:5e:7a:76:d8:84:a0:98:70:fc:ad:d7:24: 86:8d:10:b5:b8:3c:f6:08:09:c9:be:32:bb:03:b8:a9:df:20: 19:a5:ce:9e:bf:1d:af:80:90:e8:6a:e4:96:15:5a:05:ff:46: fc:9a:bb:7b:88:e7:0c:67:5d:7b:3d:44:de:77:08:3d:e1:7a: df:3b:fe:b6:05:2d:d6:16:1c:7f:d5:af:77:85:11:a0:e6:db: b9:3e:28:2f:0f:3a:b9:5b:6c:88:47:ea:54:92:c0:52:bd:85: 41:a9:59:18:ca:59:c3:aa:b2:b1:32:d4:d4:f3:cd:16:35:e0: 8c:55:ca:de:3e:44:c5:3c:05:34:43:f7:e0:1b:d4:94:26:96: 40:47:66:5b:f9:47:60:e4:02:92:4c:14:4f:aa:c1:b0:ad:5b: 06:ea:3f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91hOkzb82Ui9C74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYyNVoXDTI1MDkxNzA5MTYyNVowLzEtMCsGA1UEAxMk MWVlOWRjMmMtZjUwNy00NDlkLWJkNzQtMTUxZDM5ZGZlYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/sPvVdEDSzLd0QPT/IlxCbtvf3mg4F/jA/ 7+z8HwvaKF58hbFXUXGIVYeFT4/jqcGSjeIjdliIAUZKe+HZUE2MBhXpOfChpjKH 3gY0+BKO4x/z5OuCoTZ5nrrSvq4fvgXDPxwyCcNhJ3Lm/lLuBzx6t8+GCITDEN4C T9WOLtJL46p13+8ZgzDTnQjKPH5Vy5mXJcf5EcKhDsfPk3Wy8CK/XPNX/8qPHoNZ WJKLY5eVHGJxjdWScvUYrNpACxr5VR6FoqQX4bXMJeiBnPE1rXcmAJBhJzqxWoNt XKSdwpIInrPTxD9oFEdF67zKv7TiDXLWm+WehkMnE8sVmZ7wAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5y3jzC83atZfQxNQodl5r/hNy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc0YTdjZWYtMjdmZi0z NmJhLTg2MmQtYzNhMmU1MDFiMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG20MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMYR7B7akeA/ZaiQxpV0oNG/iHyCw0LvzLnnQxzpebkz9/fnAzwh0Q7 LBh17ziEo9kosQkBGDCOs9Pjhpo/Kjv5YFkATQNRvgAHf6UN7H5UjNQ1qLTtu8Mk 3ckYhpg7xV56dtiEoJhw/K3XJIaNELW4PPYICcm+MrsDuKnfIBmlzp6/Ha+AkOhq 5JYVWgX/Rvyau3uI5wxnXXs9RN53CD3het87/rYFLdYWHH/Vr3eFEaDm27k+KC8P OrlbbIhH6lSSwFK9hUGpWRjKWcOqsrEy1NTzzRY14IxVyt4+RMU8BTRD9+Ab1JQm lkBHZlv5R2DkApJMFE+qwbCtWwbqP7E= -----END CERTIFICATE-----Generated at Wed Jul 2 06:28:16 2025 by rpki-client