$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703c5975-fc61-3e84-aabc-7cb9c3b6299a.roa File: 703c5975-fc61-3e84-aabc-7cb9c3b6299a.roa (raw, json) Hash identifier: fAtQoM1krQf//Qo5ZrdwezxJAObtGJ5Z4rYQzkQduj4= Subject key identifier: 35:20:88:D0:99:FA:03:10:B9:21:30:E9:48:18:4A:4E:A5:AC:C5:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5ADCAD72E0E60F6938380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703c5975-fc61-3e84-aabc-7cb9c3b6299a.roa Signing time: Thu 19 Jun 2025 09:15:36 +0000 ROA not before: Thu 19 Jun 2025 09:15:36 +0000 ROA not after: Wed 17 Sep 2025 09:15:36 +0000 asID: 22773 IP address blocks: 68.104.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:ad:ca:d7:2e:0e:60:f6:93:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:36 2025 GMT Not After : Sep 17 09:15:36 2025 GMT Subject: CN=9ff1621e-b8b0-40ee-9744-239b449bb79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:60:c6:77:7e:2e:bc:87:f1:fb:90:66:71: 06:7f:94:8e:01:c1:24:10:6b:83:bc:7b:48:93:e2: ff:6f:7d:9f:f2:73:84:e1:e5:5f:94:62:43:a0:d2: cc:7d:6a:46:74:38:2b:dd:eb:d6:36:21:4d:ab:69: 50:5e:2c:65:8d:88:4d:36:44:4a:a7:e6:44:75:3f: 6e:7d:75:9b:6a:fa:a8:ca:46:e7:80:fb:ac:a6:a6: 56:7e:7b:06:f1:e7:ab:a2:a7:f9:6f:27:4d:a0:a5: de:e7:fb:4f:95:bf:9d:f4:2d:0d:02:cc:41:3c:37: 1c:2b:57:5f:88:ec:a8:f3:0d:a0:d5:83:33:a8:68: e8:71:2b:f9:58:e5:26:8a:6a:65:dd:13:4f:a1:11: 5b:0e:ea:2b:f9:69:ea:b4:cf:7b:5c:27:d4:70:0e: a6:87:ee:25:b3:42:dd:35:2e:b0:52:55:02:44:e5: 08:89:06:8c:37:41:2d:f9:f8:aa:5a:03:ed:b2:c4: dd:3b:48:df:6e:84:d6:65:4e:2e:6e:44:e8:e4:c0: 4a:f5:3c:ab:b4:42:42:05:61:f3:f2:4d:0b:df:26: 7c:68:00:76:71:d7:bc:90:d8:f1:05:3e:49:72:b5: f0:7d:1e:39:54:0f:f8:0a:bf:fb:50:37:ec:50:d1: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:88:D0:99:FA:03:10:B9:21:30:E9:48:18:4A:4E:A5:AC:C5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/703c5975-fc61-3e84-aabc-7cb9c3b6299a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:74:d7:95:88:52:92:a9:33:22:74:e3:94:73:70:cd:95:2b: 16:7a:ae:8d:89:7e:c7:a2:77:4a:a9:1c:52:88:09:a9:7b:3f: 2a:c4:21:10:48:58:1f:88:de:e1:68:ea:0d:f3:68:ca:f1:55: 8f:83:be:95:46:d6:48:78:5b:f4:f5:25:a8:f3:2a:92:5d:a1: 7c:f8:d3:4e:2f:cb:66:8c:ae:cf:a3:12:98:86:79:48:21:08: 89:e1:26:96:d8:9a:84:9a:14:ef:ec:09:83:6d:7b:69:f8:30: 42:c7:30:6c:f8:8b:b3:73:76:82:50:db:66:0e:d0:a9:a8:7a: da:92:63:36:9c:99:18:5b:57:8e:69:7d:bb:3d:63:19:2f:73: 40:ac:61:70:43:df:6d:c6:30:ef:73:e0:0e:91:08:9a:ec:51: 77:03:4e:ba:68:f9:73:f0:a2:09:9f:ae:3d:3e:e7:b6:27:e9: 48:10:60:4f:48:a6:d5:9e:a9:f4:70:65:97:23:04:69:1b:01: 2e:30:12:37:41:1e:36:b8:70:b1:91:72:9e:e9:d0:ab:26:e7: be:f3:5d:ee:a4:8e:29:12:00:36:22:0e:8a:26:f2:4d:f6:2a: a1:1a:15:d3:d3:fc:45:8f:b4:98:c4:d8:f2:49:56:8f:ee:7c: 3d:78:86:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91a3K1y4OYPaTg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTUzNloXDTI1MDkxNzA5MTUzNlowLzEtMCsGA1UEAxMk OWZmMTYyMWUtYjhiMC00MGVlLTk3NDQtMjM5YjQ0OWJiNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpgxnd+LryH8fuQZnEGf5SOAcEkEGuDvHtI k+L/b32f8nOE4eVflGJDoNLMfWpGdDgr3evWNiFNq2lQXixljYhNNkRKp+ZEdT9u fXWbavqoykbngPuspqZWfnsG8eeroqf5bydNoKXe5/tPlb+d9C0NAsxBPDccK1df iOyo8w2g1YMzqGjocSv5WOUmimpl3RNPoRFbDuor+WnqtM97XCfUcA6mh+4ls0Ld NS6wUlUCROUIiQaMN0Et+fiqWgPtssTdO0jfboTWZU4ubkTo5MBK9TyrtEJCBWHz 8k0L3yZ8aAB2cde8kNjxBT5JcrXwfR45VA/4Cr/7UDfsUNGQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUgiNCZ+gMQuSEw6UgYSk6lrMXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzAzYzU5NzUtZmM2MS0z ZTg0LWFhYmMtN2NiOWMzYjYyOTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt015WIUpKpMyJ045RzcM2VKxZ6ro2Jfseid0qpHFKICal7PyrEIRBI WB+I3uFo6g3zaMrxVY+DvpVG1kh4W/T1JajzKpJdoXz4004vy2aMrs+jEpiGeUgh CInhJpbYmoSaFO/sCYNte2n4MELHMGz4i7NzdoJQ22YO0KmoetqSYzacmRhbV45p fbs9Yxkvc0CsYXBD323GMO9z4A6RCJrsUXcDTrpo+XPwogmfrj0+57Yn6UgQYE9I ptWeqfRwZZcjBGkbAS4wEjdBHja4cLGRcp7p0Ksm577zXe6kjikSADYiDoom8k32 KqEaFdPT/EWPtJjE2PJJVo/ufD14hik= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:00 2025 by rpki-client