$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73187606-f6f5-3593-8fbb-5b30d214da2a.roa File: 73187606-f6f5-3593-8fbb-5b30d214da2a.roa (raw, json) Hash identifier: zI+x8+OxuNcxqOoA7Vr7lu8SH/u5RHm/aCo3bY0Jb4Q= Subject key identifier: A4:8B:42:BE:65:69:B6:C3:ED:B0:A1:6E:A2:FF:44:51:49:CC:59:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10099AD2FEA048120CEF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73187606-f6f5-3593-8fbb-5b30d214da2a.roa Signing time: Wed 18 Jun 2025 18:01:35 +0000 ROA not before: Wed 18 Jun 2025 18:01:35 +0000 ROA not after: Tue 16 Sep 2025 18:01:35 +0000 asID: 22773 IP address blocks: 68.3.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:09:9a:d2:fe:a0:48:12:0c:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:35 2025 GMT Not After : Sep 16 18:01:35 2025 GMT Subject: CN=dcb24c2d-30f2-4cf2-aceb-01820a05ef2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:28:8d:cd:eb:c6:98:08:b5:39:bf:b5:ca: f2:00:18:c4:c7:6d:47:b1:4f:be:18:6b:8d:28:9d: 59:a8:6a:a2:53:85:d4:8d:cf:c4:66:ea:9d:13:7b: 06:85:62:7c:54:b8:2d:33:b1:7c:61:80:90:c6:e2: e7:c3:47:8c:c7:c6:09:31:78:4e:a9:3d:2e:73:40: a8:4f:89:9b:95:ba:64:b7:05:2c:ba:1a:0e:37:76: 11:d2:82:b6:2e:f3:ed:12:03:a3:c2:4b:2f:b1:9a: 3b:e3:bc:dc:6c:39:ec:34:f2:3b:43:64:6a:34:e4: cb:55:98:9a:63:16:26:96:90:ac:0e:ec:65:d1:fe: c4:5a:4e:3f:0e:67:40:d6:af:1b:50:2b:e1:c2:f7: 8d:bf:0e:d7:60:30:03:3f:b4:3e:a9:1d:7c:32:f4: b1:bb:51:7a:f5:6a:19:63:70:f3:5e:81:91:2f:55: 81:31:e0:2e:26:41:4e:0d:b5:63:2c:03:b4:4d:96: ca:ce:3d:6b:5b:eb:a6:01:4f:b1:13:87:2e:6e:0e: e0:b5:09:54:d4:0f:72:ff:db:b0:fb:3e:cd:4d:49: 53:3a:0d:d0:e2:89:ea:f3:ed:11:7d:ff:5e:63:8c: 99:39:d1:5f:78:4a:31:38:03:8c:7b:c7:f3:1c:9d: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8B:42:BE:65:69:B6:C3:ED:B0:A1:6E:A2:FF:44:51:49:CC:59:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73187606-f6f5-3593-8fbb-5b30d214da2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6e:bc:56:13:8e:fc:22:89:3a:14:e5:7b:b9:dc:0b:9f:2c: 81:a9:25:8a:4a:cc:f8:ce:43:be:2a:fc:14:85:ae:5e:f4:d0: 87:d2:d5:bf:ae:dd:49:e0:bf:5b:4d:aa:3e:0b:7c:d5:68:72: e6:c4:ee:7f:c4:fa:89:b0:0b:ce:ce:cf:72:bd:5b:1d:96:10: 12:cb:70:51:c0:65:f8:2f:06:eb:ce:bf:74:ee:48:62:fd:9c: 2d:1b:b4:87:1d:28:18:3f:00:1a:28:2b:29:c7:3e:52:9b:f5: a1:31:5c:a6:d8:1f:32:39:ab:f1:7c:99:e5:77:6b:0c:e6:7f: b8:73:13:a1:2b:f0:4a:61:a4:04:9b:ae:40:1c:c9:0c:84:32: c4:30:08:3b:57:75:3a:d9:31:b0:da:b8:3d:48:b7:09:9a:55: 91:b6:76:7e:3d:83:d0:0b:26:d6:60:08:ce:29:47:0d:c4:3f: 72:e5:c3:e3:26:10:c3:0f:f5:df:3c:c0:26:ed:41:56:72:e4: c0:c3:d6:cf:be:79:89:1d:81:4c:b1:6d:c4:57:4e:44:0a:00: 1d:f4:ca:15:13:83:6e:8e:bf:b8:19:95:f1:a6:a2:06:bc:77: af:23:a4:59:6b:dc:94:c9:42:60:73:26:a5:ff:98:c5:c5:73: fc:fb:92:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EAma0v6gSBIM74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDEzNVoXDTI1MDkxNjE4MDEzNVowLzEtMCsGA1UEAxMk ZGNiMjRjMmQtMzBmMi00Y2YyLWFjZWItMDE4MjBhMDVlZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKoojc3rxpgItTm/tcryABjEx21HsU++GGuN KJ1ZqGqiU4XUjc/EZuqdE3sGhWJ8VLgtM7F8YYCQxuLnw0eMx8YJMXhOqT0uc0Co T4mblbpktwUsuhoON3YR0oK2LvPtEgOjwksvsZo747zcbDnsNPI7Q2RqNOTLVZia YxYmlpCsDuxl0f7EWk4/DmdA1q8bUCvhwveNvw7XYDADP7Q+qR18MvSxu1F69WoZ Y3DzXoGRL1WBMeAuJkFODbVjLAO0TZbKzj1rW+umAU+xE4cubg7gtQlU1A9y/9uw +z7NTUlTOg3Q4onq8+0Rff9eY4yZOdFfeEoxOAOMe8fzHJ2JeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSLQr5labbD7bChbqL/RFFJzFlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzMxODc2MDYtZjZmNS0z NTkzLThmYmItNWIzMGQyMTRkYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhuvFYTjvwiiToU5Xu53AufLIGpJYpKzPjOQ74q/BSFrl700IfS1b+u 3Ungv1tNqj4LfNVocubE7n/E+omwC87Oz3K9Wx2WEBLLcFHAZfgvBuvOv3TuSGL9 nC0btIcdKBg/ABooKynHPlKb9aExXKbYHzI5q/F8meV3awzmf7hzE6Er8EphpASb rkAcyQyEMsQwCDtXdTrZMbDauD1ItwmaVZG2dn49g9ALJtZgCM4pRw3EP3Llw+Mm EMMP9d88wCbtQVZy5MDD1s++eYkdgUyxbcRXTkQKAB30yhUTg26Ov7gZlfGmoga8 d68jpFlr3JTJQmBzJqX/mMXFc/z7kp8= -----END CERTIFICATE-----Generated at Wed Jul 2 10:19:31 2025 by rpki-client