$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847c53cc-1dad-3510-be05-57ac1bd59383.roa File: 847c53cc-1dad-3510-be05-57ac1bd59383.roa (raw, json) Hash identifier: sFYs+jg0x9e98+cUU54bD0mJB25+E9GEHFekHoWiyy0= Subject key identifier: 6B:88:BC:19:75:DA:35:2B:B0:56:7F:5C:7E:96:F7:2D:99:33:B7:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A74022958D77F4BFF1F180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847c53cc-1dad-3510-be05-57ac1bd59383.roa Signing time: Fri 20 Jun 2025 09:29:29 +0000 ROA not before: Fri 20 Jun 2025 09:29:29 +0000 ROA not after: Thu 18 Sep 2025 09:29:29 +0000 asID: 22773 IP address blocks: 68.108.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:40:22:95:8d:77:f4:bf:f1:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:29 2025 GMT Not After : Sep 18 09:29:29 2025 GMT Subject: CN=f5900ae4-30e5-489c-b7db-543794c72b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:7a:40:31:eb:17:3a:d3:fc:cf:f4:ff:a3: 3d:a4:0d:8d:d2:bc:d1:a8:a4:65:5c:87:68:a1:36: 29:ff:4a:b9:be:b0:65:78:b0:9a:5e:58:7b:ba:ed: e7:6d:38:09:70:d3:20:0c:03:94:e2:55:4a:17:f2: 83:7a:5f:20:48:63:96:15:79:85:b0:ee:fb:f6:fb: 19:bf:c5:e8:c0:5e:b0:fd:57:5a:ee:22:94:e6:e3: f1:1c:f1:c8:9f:1d:17:db:c0:aa:4e:c6:d1:33:e7: e7:d0:e2:0c:83:9f:08:28:ca:9e:97:b1:10:1c:4b: 71:a5:3c:32:e4:5a:b9:35:9e:17:27:9b:81:37:67: 87:82:d4:a7:2d:af:92:c9:8f:70:00:6d:de:0b:92: de:30:82:0f:67:fc:9a:cf:e5:22:54:ff:8a:09:74: 04:38:06:04:c7:0d:a1:7a:40:c2:35:91:cd:98:d2: 22:0e:57:e2:84:61:15:fc:28:4d:cc:e5:c1:4f:72: bd:e0:17:f1:75:39:8b:c3:08:ec:2c:81:32:74:db: d4:70:73:9b:77:56:85:7b:d8:18:ae:f3:dd:0b:5d: 27:df:db:4f:30:f2:5f:d9:80:7a:4c:f0:cb:eb:80: 1b:3d:60:d6:b1:1a:41:ef:00:8b:22:ef:b7:e6:44: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:88:BC:19:75:DA:35:2B:B0:56:7F:5C:7E:96:F7:2D:99:33:B7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/847c53cc-1dad-3510-be05-57ac1bd59383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:db:a1:18:b4:a8:59:42:5a:9b:18:53:3f:93:97:dd:e9:58: 2a:51:d7:f1:0b:73:ff:36:f5:3e:69:8d:d0:fc:50:a2:be:8a: 0c:39:37:4d:e6:99:7a:fd:58:aa:ac:ae:8c:f6:2f:3a:57:79: 3b:37:aa:7e:d4:da:89:02:64:1e:62:b0:fe:63:7f:e6:7a:3b: 8e:df:be:9b:07:f1:b5:d9:7d:2e:e0:3b:6d:3d:60:8b:c6:74: 06:52:cd:1c:ea:bb:79:66:c5:48:6d:dc:28:2b:99:90:4c:dc: fe:a6:be:6e:de:e0:c8:6d:0d:56:3d:42:b2:39:92:91:66:7d: 69:95:2c:36:51:4a:2e:8c:57:18:0c:e2:25:f5:f4:69:20:f8: 8a:7f:d2:dd:25:97:79:63:f0:29:1c:b9:49:2b:eb:c8:82:80: 8b:61:01:08:46:37:a5:85:39:1a:76:d6:06:81:45:c8:3b:54: 60:62:3b:9b:0d:0a:fe:ee:2b:c9:1b:60:3c:39:ab:c0:55:c4: e5:af:e6:ee:3b:f6:db:8d:51:14:3d:75:b4:ec:8c:d3:d9:49: 7e:ee:00:59:c1:26:6e:36:ab:05:e2:57:6c:41:87:83:7c:55: 54:18:8e:00:4c:03:19:da:20:23:91:5a:1e:9e:d4:db:da:74: 74:f1:76:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp0AilY139L/x8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkyOVoXDTI1MDkxODA5MjkyOVowLzEtMCsGA1UEAxMk ZjU5MDBhZTQtMzBlNS00ODljLWI3ZGItNTQzNzk0YzcyYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZV6QDHrFzrT/M/0/6M9pA2N0rzRqKRlXIdo oTYp/0q5vrBleLCaXlh7uu3nbTgJcNMgDAOU4lVKF/KDel8gSGOWFXmFsO779vsZ v8XowF6w/Vda7iKU5uPxHPHInx0X28CqTsbRM+fn0OIMg58IKMqel7EQHEtxpTwy 5Fq5NZ4XJ5uBN2eHgtSnLa+SyY9wAG3eC5LeMIIPZ/yaz+UiVP+KCXQEOAYExw2h ekDCNZHNmNIiDlfihGEV/ChNzOXBT3K94BfxdTmLwwjsLIEydNvUcHObd1aFe9gY rvPdC10n39tPMPJf2YB6TPDL64AbPWDWsRpB7wCLIu+35kSNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuIvBl12jUrsFZ/XH6W9y2ZM7cmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQ3YzUzY2MtMWRhZC0z NTEwLWJlMDUtNTdhYzFiZDU5MzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfboRi0qFlCWpsYUz+Tl93pWCpR1/ELc/829T5pjdD8UKK+igw5N03m mXr9WKqsroz2LzpXeTs3qn7U2okCZB5isP5jf+Z6O47fvpsH8bXZfS7gO209YIvG dAZSzRzqu3lmxUht3CgrmZBM3P6mvm7e4MhtDVY9QrI5kpFmfWmVLDZRSi6MVxgM 4iX19Gkg+Ip/0t0ll3lj8CkcuUkr68iCgIthAQhGN6WFORp21gaBRcg7VGBiO5sN Cv7uK8kbYDw5q8BVxOWv5u479tuNURQ9dbTsjNPZSX7uAFnBJm42qwXiV2xBh4N8 VVQYjgBMAxnaICORWh6e1NvadHTxdjY= -----END CERTIFICATE-----Generated at Wed Jul 2 07:08:34 2025 by rpki-client