$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa File: 5578cce7-0617-3135-8d8e-805deb414c54.roa (raw, json) Hash identifier: XvETYg0nJaIvWcgv2ko+DPlHx/nW0LLcBa6acIGK6gY= Subject key identifier: 41:BA:46:D5:3F:A0:15:BD:D1:9A:A4:9A:7D:58:66:93:AA:70:87:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A761D50A2A28627CC48500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa Signing time: Fri 20 Jun 2025 09:29:45 +0000 ROA not before: Fri 20 Jun 2025 09:29:45 +0000 ROA not after: Thu 18 Sep 2025 09:29:45 +0000 asID: 22773 IP address blocks: 68.108.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:61:d5:0a:2a:28:62:7c:c4:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:45 2025 GMT Not After : Sep 18 09:29:45 2025 GMT Subject: CN=9f8dfeee-e3b4-4c6a-a102-ff9d07a8fbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:a7:7d:3b:e2:07:12:1f:a4:87:c1:70:57: 3c:4e:d1:1e:53:03:1a:a3:13:e6:30:96:c1:48:29: a7:c3:3d:bb:2f:4d:0b:8b:fe:a6:3e:60:16:c7:b6: 95:5d:52:7b:39:b0:f9:07:23:8f:ef:e4:2c:72:e8: ff:51:7a:1a:a8:c1:ee:a1:9f:26:d9:aa:ad:f6:5e: 5f:0b:a6:56:c5:d7:ba:67:6d:fb:bc:f9:70:2b:93: e2:4a:31:5b:98:2c:19:b4:68:f7:d9:9b:99:3f:f9: f4:28:a4:83:33:75:5c:69:c2:f1:ab:e1:a6:1e:d8: 8c:df:75:e4:09:52:80:9c:8b:5c:b3:99:3f:1d:5c: bc:0e:ad:bb:f7:a3:c0:87:ee:cd:eb:84:2b:da:80: 67:04:0b:06:5f:31:eb:9f:e4:11:94:85:38:9c:53: 8d:df:30:ed:62:8c:76:b7:ad:5b:8f:c5:4f:86:ab: 45:fa:ad:a5:9e:f8:b3:c4:52:e5:cb:4c:cd:5a:ae: db:53:b6:fc:c5:1e:7a:2b:38:e3:82:22:01:b8:0f: 92:2d:1c:b3:b9:c6:c9:cb:ab:8d:01:97:51:37:c5: 3f:46:39:4b:9a:4b:44:f3:52:bf:b9:8f:87:bf:ef: 31:96:02:7a:f0:43:c7:2d:b4:f9:0d:66:02:28:ae: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:46:D5:3F:A0:15:BD:D1:9A:A4:9A:7D:58:66:93:AA:70:87:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5578cce7-0617-3135-8d8e-805deb414c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0e:da:67:b7:24:f7:62:c6:73:df:b4:f9:33:2d:db:42:18: 99:39:35:53:e2:f2:4b:15:7e:3c:79:03:97:74:70:c5:ea:76: 40:fc:c1:ab:54:56:a2:33:89:ba:10:24:fc:05:43:3e:57:c3: 7f:5e:06:9b:44:02:5e:e2:5f:93:4b:7c:d0:40:09:ed:1c:3c: ec:85:f5:51:cf:a4:75:e7:cd:3c:2d:f2:49:08:6d:4a:c2:ce: 76:ef:46:ff:20:3a:a6:2f:1f:3c:9c:3c:e9:e3:4b:fe:93:bd: ae:3d:6d:9f:f6:6b:3e:1b:72:a7:08:4f:66:06:99:15:d9:5e: 56:ab:25:94:ce:2a:f2:6b:5c:2c:52:72:50:5c:07:3b:54:5d: 9c:2d:bb:61:ee:46:bb:ad:d7:8c:18:7f:2e:06:32:ed:c0:b9: e3:6f:59:89:bf:04:cd:84:b1:9c:64:f7:65:b7:f6:fb:f1:75: a2:4f:b8:7c:8e:d2:f3:c3:22:2e:83:bd:69:5c:74:4b:18:3f: f8:d3:6f:ce:a6:95:79:36:40:ea:e2:6e:03:19:63:34:f1:7d: 6a:0a:88:f9:fa:87:b2:1c:f8:7c:4f:11:c8:28:a5:1b:95:d3: 02:d9:1f:15:c0:c1:d5:7a:5d:87:24:28:6a:54:b6:96:4b:2f: a0:87:fd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp2HVCiooYnzEhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0NVoXDTI1MDkxODA5Mjk0NVowLzEtMCsGA1UEAxMk OWY4ZGZlZWUtZTNiNC00YzZhLWExMDItZmY5ZDA3YThmYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWunfTviBxIfpIfBcFc8TtEeUwMaoxPmMJbB SCmnwz27L00Li/6mPmAWx7aVXVJ7ObD5ByOP7+Qscuj/UXoaqMHuoZ8m2aqt9l5f C6ZWxde6Z237vPlwK5PiSjFbmCwZtGj32ZuZP/n0KKSDM3VcacLxq+GmHtiM33Xk CVKAnItcs5k/HVy8Dq2796PAh+7N64Qr2oBnBAsGXzHrn+QRlIU4nFON3zDtYox2 t61bj8VPhqtF+q2lnvizxFLly0zNWq7bU7b8xR56KzjjgiIBuA+SLRyzucbJy6uN AZdRN8U/RjlLmktE81K/uY+Hv+8xlgJ68EPHLbT5DWYCKK6GJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG6RtU/oBW90Zqkmn1YZpOqcIfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTU3OGNjZTctMDYxNy0z MTM1LThkOGUtODA1ZGViNDE0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgO2me3JPdixnPftPkzLdtCGJk5NVPi8ksVfjx5A5d0cMXqdkD8watU VqIziboQJPwFQz5Xw39eBptEAl7iX5NLfNBACe0cPOyF9VHPpHXnzTwt8kkIbUrC znbvRv8gOqYvHzycPOnjS/6Tva49bZ/2az4bcqcIT2YGmRXZXlarJZTOKvJrXCxS clBcBztUXZwtu2HuRrut14wYfy4GMu3AueNvWYm/BM2EsZxk92W39vvxdaJPuHyO 0vPDIi6DvWlcdEsYP/jTb86mlXk2QOribgMZYzTxfWoKiPn6h7Ic+HxPEcgopRuV 0wLZHxXAwdV6XYckKGpUtpZLL6CH/aI= -----END CERTIFICATE-----Generated at Wed Jul 2 14:58:11 2025 by rpki-client