$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79e9b34f-078a-330a-8be8-9debfab36db6.roa File: 79e9b34f-078a-330a-8be8-9debfab36db6.roa (raw, json) Hash identifier: bq4hHO1EgVx1Z/SNezrl2SLKbBBVXCfZJ1Dj527KbFk= Subject key identifier: 6C:EA:C3:52:85:53:89:8E:59:C6:0E:20:5D:F9:8B:68:40:3A:86:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD60C85BC064A397A441D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79e9b34f-078a-330a-8be8-9debfab36db6.roa Signing time: Thu 19 Jun 2025 09:16:21 +0000 ROA not before: Thu 19 Jun 2025 09:16:21 +0000 ROA not after: Wed 17 Sep 2025 09:16:21 +0000 asID: 22773 IP address blocks: 68.109.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:0c:85:bc:06:4a:39:7a:44:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:21 2025 GMT Not After : Sep 17 09:16:21 2025 GMT Subject: CN=cde6bd57-8230-4a38-8185-4ae3c57b29c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:db:67:0b:60:e5:7f:32:75:e2:c6:3e:6e: 15:e4:20:c9:4d:af:5b:26:85:58:98:7f:36:e0:cb: 3e:14:00:e1:d1:cc:e7:c6:90:91:8a:1d:a2:8b:6d: 58:14:d1:4a:f5:d2:cd:9c:34:d9:7e:94:bc:85:e9: cd:1b:9d:0e:d6:62:3f:24:b0:b4:2b:ee:f6:15:f8: 44:a8:9f:32:05:f7:ee:6a:6f:3b:c8:72:d5:d1:e5: fc:2d:e9:77:80:49:23:03:4c:65:d1:bb:86:84:99: 2e:cf:44:ce:b7:46:35:fd:7a:d7:66:a9:e3:7e:09: 19:5a:39:80:f7:0b:5e:6d:ad:92:fd:64:de:57:f1: 32:99:c1:c2:04:d8:1e:7d:50:07:06:8f:cb:12:59: 2f:2d:ef:58:21:dc:60:d3:e4:4f:51:42:22:2c:1d: aa:2d:40:f0:72:25:0e:17:76:54:f5:0b:09:36:22: f1:ad:10:65:0a:fd:a3:fa:b8:b2:56:c8:54:35:57: 45:18:09:0e:4e:ac:1e:03:be:01:85:57:87:91:3b: 3e:8b:93:e6:2c:a7:00:34:73:0a:62:d4:7e:05:94: a1:7b:24:7b:dd:fe:fd:d3:8a:ba:d6:2c:a6:f1:a2: 05:15:53:be:09:55:c5:c4:32:ca:19:a7:99:e9:55: 67:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EA:C3:52:85:53:89:8E:59:C6:0E:20:5D:F9:8B:68:40:3A:86:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79e9b34f-078a-330a-8be8-9debfab36db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2d:a4:d4:cf:3d:cd:34:58:20:dc:55:96:54:e6:64:a9:ac: 57:67:d1:24:94:f9:9a:13:2c:70:73:3d:14:bd:ad:a6:54:98: 85:c2:19:f9:64:12:f6:3d:2c:a7:99:93:04:90:0d:41:b9:71: 3b:9e:9d:e6:cb:d7:e6:8d:ef:fe:a8:a5:01:1c:65:6b:41:9b: 7d:8d:3e:0d:69:75:87:1b:b9:3e:1e:18:53:65:60:d9:48:cd: 7b:66:9b:eb:7c:08:be:a7:72:76:68:a3:91:29:d4:30:21:12: 08:e9:8e:44:5d:d5:2c:2f:28:8e:b1:0b:10:9e:17:2b:2d:f5: bf:00:da:1d:f2:17:8e:b3:c5:f4:67:7e:b9:6e:67:17:6c:5b: e6:b6:e2:be:15:d6:c5:6d:34:f0:65:7a:02:ba:4c:81:c1:50: 00:e2:29:c1:b5:5d:9c:e1:21:5a:e6:0d:0b:ab:4f:45:b7:ad: 3c:d9:48:58:3f:17:89:15:4c:c4:b7:f9:f9:a0:25:34:45:4f: 14:36:45:d3:62:e5:43:0b:6b:17:bf:13:7e:c6:9a:0f:89:84: 63:07:52:13:79:c5:29:34:da:2d:59:8a:be:d1:b4:82:14:3a: 41:f9:c0:49:2e:60:e1:40:52:89:f1:3c:43:1c:83:be:96:40: a8:d5:ec:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91gyFvAZKOXpEHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYyMVoXDTI1MDkxNzA5MTYyMVowLzEtMCsGA1UEAxMk Y2RlNmJkNTctODIzMC00YTM4LTgxODUtNGFlM2M1N2IyOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9rbZwtg5X8ydeLGPm4V5CDJTa9bJoVYmH82 4Ms+FADh0cznxpCRih2ii21YFNFK9dLNnDTZfpS8henNG50O1mI/JLC0K+72FfhE qJ8yBffuam87yHLV0eX8Lel3gEkjA0xl0buGhJkuz0TOt0Y1/XrXZqnjfgkZWjmA 9wteba2S/WTeV/EymcHCBNgefVAHBo/LElkvLe9YIdxg0+RPUUIiLB2qLUDwciUO F3ZU9QsJNiLxrRBlCv2j+riyVshUNVdFGAkOTqweA74BhVeHkTs+i5PmLKcANHMK YtR+BZSheyR73f7904q61iym8aIFFVO+CVXFxDLKGaeZ6VVnDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzqw1KFU4mOWcYOIF35i2hAOoYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzllOWIzNGYtMDc4YS0z MzBhLThiZTgtOWRlYmZhYjM2ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAtpNTPPc00WCDcVZZU5mSprFdn0SSU+ZoTLHBzPRS9raZUmIXCGflk EvY9LKeZkwSQDUG5cTuenebL1+aN7/6opQEcZWtBm32NPg1pdYcbuT4eGFNlYNlI zXtmm+t8CL6ncnZoo5Ep1DAhEgjpjkRd1SwvKI6xCxCeFyst9b8A2h3yF46zxfRn frluZxdsW+a24r4V1sVtNPBlegK6TIHBUADiKcG1XZzhIVrmDQurT0W3rTzZSFg/ F4kVTMS3+fmgJTRFTxQ2RdNi5UMLaxe/E37Gmg+JhGMHUhN5xSk02i1Zir7RtIIU OkH5wEkuYOFAUonxPEMcg76WQKjV7B8= -----END CERTIFICATE-----Generated at Wed Jul 2 14:45:15 2025 by rpki-client