$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa File: 768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa (raw, json) Hash identifier: 7dazxWVZrWVzKMJ3luWJgg/yZnrEDT11dsb1U9T23lU= Subject key identifier: 3C:35:07:C8:1D:36:F1:0D:41:CA:ED:BA:EA:FB:BA:92:6A:47:CB:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39907A7C4887900FE453D120 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa Signing time: Tue 17 Jun 2025 20:32:57 +0000 ROA not before: Tue 17 Jun 2025 20:32:57 +0000 ROA not after: Mon 15 Sep 2025 20:32:57 +0000 asID: 22773 IP address blocks: 68.2.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:7a:7c:48:87:90:0f:e4:53:d1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:57 2025 GMT Not After : Sep 15 20:32:57 2025 GMT Subject: CN=2294e6ad-e56b-47dc-8399-b0c65b5943f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:30:c4:f6:30:da:a5:7c:2c:b0:93:8d:2b: 48:f2:fd:cb:f6:a9:ca:35:36:d3:9f:23:60:4b:b9: a8:0e:5e:45:a8:21:a6:55:2d:1e:40:4a:a7:26:a4: ed:04:9f:df:32:9c:19:1e:13:bc:42:b0:03:30:5a: 97:4f:0c:23:be:ee:c0:36:63:09:6d:0c:92:3a:8d: 00:5f:a6:99:c2:56:af:eb:7f:80:52:65:5d:5a:ad: 0d:91:36:48:33:75:d5:30:8b:b9:3a:ae:8b:2d:9d: 05:a1:40:83:34:f8:ef:df:98:75:43:f6:c3:63:ed: 54:e8:a6:19:f7:9d:15:a0:64:70:9d:01:dc:1d:19: f2:c1:8b:fc:38:70:e4:4f:2a:2d:02:47:16:ea:1e: d0:12:85:c2:5d:29:bb:1e:11:56:15:73:1c:10:f4: 67:1d:71:47:55:e5:fa:75:aa:48:4d:c4:01:04:72: ae:0a:f2:33:aa:6c:8b:73:04:d2:d2:59:ea:86:a0: 25:f4:a5:5e:6e:4d:e5:c9:ec:34:02:6b:a4:e2:27: bc:8e:af:48:01:87:24:0f:0a:3a:3e:60:24:f3:34: 41:d0:85:ca:de:5b:48:06:eb:95:74:3e:e5:c3:3b: d0:e1:c1:a9:02:23:22:f8:7e:c1:e0:ba:33:88:fa: ac:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:35:07:C8:1D:36:F1:0D:41:CA:ED:BA:EA:FB:BA:92:6A:47:CB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/768c1a65-27cf-3227-b4d3-8f6bd4dd00c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:94:31:34:7c:18:38:ba:31:b9:a9:cc:8e:d7:66:1e:45:60: bd:9a:d1:28:18:f5:59:79:07:01:2f:1e:c1:7a:94:6f:15:95: 66:d6:d6:67:fe:c8:52:d9:09:40:28:ea:4e:57:09:2b:ef:12: 51:e5:bc:4e:a6:55:62:35:8c:60:62:96:07:91:a0:78:27:23: 22:2a:de:cc:07:93:37:fc:c1:38:82:da:9f:e8:09:df:f9:b7: a0:f7:28:3f:e8:00:ed:cd:24:6d:c1:80:1a:66:d6:13:1b:84: 28:81:89:6f:6b:64:aa:e4:de:df:55:9c:57:94:0d:7a:6f:3f: 88:cd:df:7c:97:be:52:ae:5b:91:6e:5d:16:e1:27:94:17:2e: e2:dd:18:de:49:a3:97:78:65:01:6b:84:ee:a1:22:fa:49:f3: cb:a7:18:b8:db:28:37:fa:cb:bd:fd:a9:da:c0:9e:fe:5b:1f: f5:f0:2a:80:72:ce:a4:ee:f9:f3:a5:3d:15:83:04:66:c9:e3: bc:a6:41:44:85:42:b0:27:46:09:da:88:e2:8a:d3:35:ec:e0: 83:85:0f:06:5e:01:1c:d5:85:a4:f6:a8:34:e4:2d:52:a8:72: 2b:b0:5f:a2:cf:f8:4e:df:44:1c:46:bf:2b:1b:9a:6b:21:02: bb:ec:ef:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kHp8SIeQD+RT0SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI1N1oXDTI1MDkxNTIwMzI1N1owLzEtMCsGA1UEAxMk MjI5NGU2YWQtZTU2Yi00N2RjLTgzOTktYjBjNjViNTk0M2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRwwxPYw2qV8LLCTjStI8v3L9qnKNTbTnyNg S7moDl5FqCGmVS0eQEqnJqTtBJ/fMpwZHhO8QrADMFqXTwwjvu7ANmMJbQySOo0A X6aZwlav63+AUmVdWq0NkTZIM3XVMIu5Oq6LLZ0FoUCDNPjv35h1Q/bDY+1U6KYZ 950VoGRwnQHcHRnywYv8OHDkTyotAkcW6h7QEoXCXSm7HhFWFXMcEPRnHXFHVeX6 dapITcQBBHKuCvIzqmyLcwTS0lnqhqAl9KVebk3lyew0Amuk4ie8jq9IAYckDwo6 PmAk8zRB0IXK3ltIBuuVdD7lwzvQ4cGpAiMi+H7B4LoziPqspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDw1B8gdNvENQcrtuur7upJqR8swMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzY4YzFhNjUtMjdjZi0z MjI3LWI0ZDMtOGY2YmQ0ZGQwMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOUMTR8GDi6MbmpzI7XZh5FYL2a0SgY9Vl5BwEvHsF6lG8VlWbW1mf+ yFLZCUAo6k5XCSvvElHlvE6mVWI1jGBilgeRoHgnIyIq3swHkzf8wTiC2p/oCd/5 t6D3KD/oAO3NJG3BgBpm1hMbhCiBiW9rZKrk3t9VnFeUDXpvP4jN33yXvlKuW5Fu XRbhJ5QXLuLdGN5Jo5d4ZQFrhO6hIvpJ88unGLjbKDf6y739qdrAnv5bH/XwKoBy zqTu+fOlPRWDBGbJ47ymQUSFQrAnRgnaiOKK0zXs4IOFDwZeARzVhaT2qDTkLVKo ciuwX6LP+E7fRBxGvysbmmshArvs74Y= -----END CERTIFICATE-----Generated at Wed Jul 2 15:12:21 2025 by rpki-client