$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e50f537-3e51-376a-8eed-0b296c51b569.roa File: 4e50f537-3e51-376a-8eed-0b296c51b569.roa (raw, json) Hash identifier: sORWS6YSkSqObOJp/bxCG1hrTZrCdG2/O68xlHkdtt0= Subject key identifier: 4C:29:0E:B8:F6:F5:18:EF:6A:C5:B9:F8:EC:3D:DE:3A:B3:CC:B5:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A43DB0D016BD7BE17B4ACEBC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e50f537-3e51-376a-8eed-0b296c51b569.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 68.227.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0d:01:6b:d7:be:17:b4:ac:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=df5bcafd-bba2-4af3-899b-6bef510440cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ff:9f:74:08:1d:4f:ae:0f:c5:cc:fe:25:5f: d0:47:0c:02:9e:cf:8a:43:ca:5b:dd:e6:e4:40:27: 76:2d:8c:6e:2e:07:29:1e:43:ad:c4:4a:a3:f1:7c: ec:d7:4e:f1:4a:39:f4:dc:bd:2d:20:94:d9:fb:7a: 2c:64:dc:9a:3d:3c:9b:f1:df:70:99:60:ae:c4:40: 0c:67:40:44:1f:fc:87:2d:f5:4f:4f:d6:c5:5c:88: c0:b5:70:82:4c:f0:3c:a7:50:ad:91:69:39:2c:d8: d7:7b:46:1f:b9:b2:71:45:f4:87:1d:ea:03:c3:43: a1:a8:83:00:3f:98:67:56:ec:82:20:2e:9b:0f:b6: 44:1d:54:e0:34:55:49:37:c2:5b:3f:86:8d:57:68: 60:89:19:7d:42:39:e1:42:ad:fb:70:31:46:03:b4: 6d:22:0d:81:47:52:ad:15:16:d7:b4:28:43:2e:b3: f8:44:e3:65:7f:6a:c5:a4:23:3c:e3:ce:f7:20:a1: b6:9a:9e:0a:99:6a:5e:03:27:59:d1:78:46:99:6a: 90:3c:e2:3b:4f:45:7e:61:34:80:a5:ab:3b:e3:51: 09:c7:6c:6a:5c:6b:50:50:16:1d:93:bb:9e:02:43: 52:73:c6:e0:0d:c6:7f:72:f2:ae:be:a5:48:6d:1a: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:0E:B8:F6:F5:18:EF:6A:C5:B9:F8:EC:3D:DE:3A:B3:CC:B5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4e50f537-3e51-376a-8eed-0b296c51b569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a9:52:7c:c9:27:c8:df:8f:4b:aa:c1:a9:6d:73:4d:87:0e: df:c5:fd:87:71:d7:ba:c8:8e:70:2b:51:df:0b:01:51:bd:50: 12:a4:a6:87:00:b3:57:e1:1c:a1:26:65:3c:28:f8:fd:0f:9f: d3:0c:12:c0:7a:51:eb:49:e8:30:02:f1:b3:84:c5:71:12:24: c5:77:06:3b:3a:80:d2:6a:0f:d7:02:3b:80:ec:31:a2:59:7b: d4:2c:5c:24:46:20:c5:ee:a7:c7:82:a2:79:4e:1d:17:d6:63: 5b:f3:c5:81:b2:dc:1f:31:8b:64:03:8c:53:6a:46:72:95:2e: 30:52:14:b4:3e:9d:5a:ca:32:95:67:78:8f:4b:49:4b:f4:28: 6c:cc:82:f1:ac:ff:49:4e:7f:60:e8:87:71:26:56:cd:f4:31: 07:71:dd:6a:d4:52:2b:b6:76:fc:aa:ff:5d:56:7c:2d:b7:f6: ec:f2:4c:58:82:5d:3d:98:4e:51:6e:ba:4d:d7:bf:17:55:3d: 41:96:a5:5c:23:fa:12:b8:70:11:0e:41:fd:d2:50:d7:2d:6c: bc:ae:a6:16:3f:94:b9:5d:46:4e:f0:66:a0:d3:e4:4d:03:f7: e0:fa:43:e0:4a:3f:e4:2d:24:5f:4e:b1:2f:b2:1b:7f:b0:db: e8:17:30:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2w0Ba9e+F7Ss68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk ZGY1YmNhZmQtYmJhMi00YWYzLTg5OWItNmJlZjUxMDQ0MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP+fdAgdT64Pxcz+JV/QRwwCns+KQ8pb3ebk QCd2LYxuLgcpHkOtxEqj8Xzs107xSjn03L0tIJTZ+3osZNyaPTyb8d9wmWCuxEAM Z0BEH/yHLfVPT9bFXIjAtXCCTPA8p1CtkWk5LNjXe0YfubJxRfSHHeoDw0OhqIMA P5hnVuyCIC6bD7ZEHVTgNFVJN8JbP4aNV2hgiRl9QjnhQq37cDFGA7RtIg2BR1Kt FRbXtChDLrP4RONlf2rFpCM84873IKG2mp4KmWpeAydZ0XhGmWqQPOI7T0V+YTSA pas741EJx2xqXGtQUBYdk7ueAkNSc8bgDcZ/cvKuvqVIbRrhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwpDrj29RjvasW5+Ow93jqzzLW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGU1MGY1MzctM2U1MS0z NzZhLThlZWQtMGIyOTZjNTFiNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHipUnzJJ8jfj0uqwaltc02HDt/F/Ydx17rIjnArUd8LAVG9UBKkpocA s1fhHKEmZTwo+P0Pn9MMEsB6UetJ6DAC8bOExXESJMV3Bjs6gNJqD9cCO4DsMaJZ e9QsXCRGIMXup8eConlOHRfWY1vzxYGy3B8xi2QDjFNqRnKVLjBSFLQ+nVrKMpVn eI9LSUv0KGzMgvGs/0lOf2Doh3EmVs30MQdx3WrUUiu2dvyq/11WfC239uzyTFiC XT2YTlFuuk3XvxdVPUGWpVwj+hK4cBEOQf3SUNctbLyuphY/lLldRk7wZqDT5E0D 9+D6Q+BKP+QtJF9OsS+yG3+w2+gXMOk= -----END CERTIFICATE-----Generated at Tue Jul 1 19:07:28 2025 by rpki-client