$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54791729-48a8-3988-bce9-bc826e20167d.roa File: 54791729-48a8-3988-bce9-bc826e20167d.roa (raw, json) Hash identifier: 7Xx8jYvOY9Z4PZ8H0+JB+S3TZ+OvJWujowGY1lM5Z8U= Subject key identifier: 3F:29:C1:8B:87:55:36:10:CA:35:A3:07:3E:66:14:F4:71:E6:40:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C105A2FEFE3C883054DC780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54791729-48a8-3988-bce9-bc826e20167d.roa Signing time: Wed 18 Jun 2025 18:02:13 +0000 ROA not before: Wed 18 Jun 2025 18:02:13 +0000 ROA not after: Tue 16 Sep 2025 18:02:13 +0000 asID: 22773 IP address blocks: 68.3.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:5a:2f:ef:e3:c8:83:05:4d:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:13 2025 GMT Not After : Sep 16 18:02:13 2025 GMT Subject: CN=19a7bab0-6432-46d4-b769-3a403a0ba76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:48:ec:44:b7:12:b7:74:77:d2:42:3e:f2: 99:4a:a8:15:66:80:20:8d:e7:58:5c:b0:fb:39:8b: dc:d0:f5:e7:b7:7b:6e:a2:16:9e:b6:7c:a0:0a:f3: 50:00:6a:85:ed:7a:d0:66:6e:6f:5c:07:b0:7e:43: 71:09:c0:63:c6:67:8b:ad:87:e5:ef:ee:67:2e:f0: 37:37:0a:2b:8f:ae:3a:89:df:42:ff:df:39:6f:b6: 47:97:5a:64:9e:9d:72:28:73:a1:42:98:5a:b2:ef: e3:a6:0a:9b:52:5d:dc:68:4e:d5:ea:6b:ef:0d:1f: aa:b0:74:7c:f4:a5:e8:86:ad:2a:fa:d8:0e:1f:fd: 5c:b5:8f:12:42:c7:f8:7b:51:e8:eb:a8:79:80:e1: 39:74:e6:06:7a:f4:d2:71:32:ec:d3:22:b3:98:79: dd:0c:98:fc:c5:24:73:83:9b:19:d4:d9:8e:77:f1: e4:66:40:88:e0:b9:5c:5e:13:45:81:41:59:fc:b3: 00:01:e4:39:6d:77:93:21:73:cf:cf:42:9d:6b:d5: ea:c4:05:70:35:5e:9c:f9:02:e6:80:89:47:39:fc: d4:d5:a8:3f:1c:10:cb:a3:9e:ea:89:d5:0d:a8:6f: 0d:4a:8d:4b:bf:a2:46:8a:c4:d6:dd:91:b2:6d:b0: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:C1:8B:87:55:36:10:CA:35:A3:07:3E:66:14:F4:71:E6:40:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54791729-48a8-3988-bce9-bc826e20167d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e9:6c:48:d3:86:3c:5e:03:b0:12:29:8b:28:0c:78:37:e1: 0e:04:38:28:32:24:36:22:83:3f:e9:2f:e6:2d:ca:74:f4:aa: f0:8e:9c:cb:68:fd:63:29:25:e7:91:10:e9:0d:d9:e9:1d:7d: bc:25:37:bb:37:bd:dc:ab:e8:1c:6c:ef:90:67:c3:7c:cc:3e: ce:ce:76:52:04:c4:41:b8:f9:97:fb:9c:e8:33:af:f5:cb:df: 03:49:dd:00:e0:e5:d2:99:24:60:81:8c:a1:1a:98:7c:a2:a8: be:f7:6a:04:51:d6:56:19:1d:7b:7f:66:ba:f7:93:f2:98:40: 4c:46:1d:37:76:4c:0d:f7:45:07:00:f3:41:16:40:a6:55:1e: 69:ee:b5:df:8a:2a:9c:46:2a:93:fe:e9:d2:b7:fa:54:41:75: 77:2d:91:01:e4:fc:bf:65:05:94:85:01:69:86:73:cc:2f:9c: c5:d2:24:63:03:4d:1a:62:7e:3e:da:a6:9e:42:13:6b:91:d6: 27:2f:b6:6d:53:99:8b:60:08:24:ae:85:e5:59:80:96:dc:3a: 89:3a:50:ed:0f:f8:36:b1:5b:96:9c:45:c5:6b:bc:17:0c:76: f2:7c:9b:bd:d3:50:21:20:d0:49:36:48:0d:3e:40:e1:a6:d4: bc:ca:42:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EFov7+PIgwVNx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIxM1oXDTI1MDkxNjE4MDIxM1owLzEtMCsGA1UEAxMk MTlhN2JhYjAtNjQzMi00NmQ0LWI3NjktM2E0MDNhMGJhNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lFI7ES3Erd0d9JCPvKZSqgVZoAgjedYXLD7 OYvc0PXnt3tuohaetnygCvNQAGqF7XrQZm5vXAewfkNxCcBjxmeLrYfl7+5nLvA3 Nworj646id9C/985b7ZHl1pknp1yKHOhQphasu/jpgqbUl3caE7V6mvvDR+qsHR8 9KXohq0q+tgOH/1ctY8SQsf4e1Ho66h5gOE5dOYGevTScTLs0yKzmHndDJj8xSRz g5sZ1NmOd/HkZkCI4LlcXhNFgUFZ/LMAAeQ5bXeTIXPPz0Kda9XqxAVwNV6c+QLm gIlHOfzU1ag/HBDLo57qidUNqG8NSo1Lv6JGisTW3ZGybbCMiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8pwYuHVTYQyjWjBz5mFPRx5kDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTQ3OTE3MjktNDhhOC0z OTg4LWJjZTktYmM4MjZlMjAxNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLpbEjThjxeA7ASKYsoDHg34Q4EOCgyJDYigz/pL+YtynT0qvCOnMto /WMpJeeREOkN2ekdfbwlN7s3vdyr6Bxs75Bnw3zMPs7OdlIExEG4+Zf7nOgzr/XL 3wNJ3QDg5dKZJGCBjKEamHyiqL73agRR1lYZHXt/Zrr3k/KYQExGHTd2TA33RQcA 80EWQKZVHmnutd+KKpxGKpP+6dK3+lRBdXctkQHk/L9lBZSFAWmGc8wvnMXSJGMD TRpifj7app5CE2uR1icvtm1TmYtgCCSuheVZgJbcOok6UO0P+DaxW5acRcVrvBcM dvJ8m73TUCEg0Ek2SA0+QOGm1LzKQss= -----END CERTIFICATE-----Generated at Wed Jul 2 14:58:43 2025 by rpki-client