$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa File: 890657e2-2f37-3642-bba7-2b0835ec2741.roa (raw, json) Hash identifier: TwgZx+PG3ZA9Wx53yq2rWybgp6+ul6wh1NOk2YsieXk= Subject key identifier: 52:D4:AC:96:AF:88:13:60:5E:75:8B:92:26:84:DB:72:F9:1F:AD:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849F1800F276824443EF5F40280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 68.227.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0f:27:68:24:44:3e:f5:f4:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=ffdea605-e7b7-4baa-9ca5-b13b501ba682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:21:d7:aa:c6:7b:d9:66:e0:7c:48:63:05: 0a:b4:7a:df:1e:ff:a9:61:0e:f5:f7:d3:57:22:23: 40:b4:d4:28:4e:b3:57:b7:e5:42:16:8c:b5:a1:97: 29:44:64:0e:04:86:2e:1c:9e:91:c8:db:15:03:29: 7a:c7:00:8e:bd:5f:be:67:6e:a8:53:c0:25:66:27: a5:1a:18:18:ba:3b:f0:bd:96:bf:4d:b0:0d:d4:2a: 78:91:60:9d:d8:0d:38:5a:cc:af:f2:60:10:07:0b: fc:32:77:27:47:bd:ef:21:10:90:5b:32:01:d9:c9: 67:3b:16:00:8a:0b:88:6f:f3:0d:3e:f4:7c:fe:50: 0d:7e:e2:cf:68:ac:c1:17:d8:7a:30:47:65:81:10: 02:0f:b6:e2:47:cb:77:a9:79:39:02:f6:3c:fb:32: e5:92:ea:02:b4:ad:59:7a:57:60:32:63:50:02:c2: e0:0d:b0:9c:c1:2f:a6:6b:1b:5b:6a:dd:70:f3:3c: e0:60:c0:1e:6b:cb:f8:88:38:77:12:12:af:8d:51: c8:53:61:bd:de:2b:63:61:f1:65:05:64:ee:1f:e9: 01:9d:89:7a:ee:6b:1e:26:5e:6b:a8:0c:d9:77:0f: 18:69:de:c7:47:a6:91:66:a2:35:a4:f8:71:8b:5e: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D4:AC:96:AF:88:13:60:5E:75:8B:92:26:84:DB:72:F9:1F:AD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:49:10:e2:71:fd:66:9d:ad:12:ba:54:96:d9:09:2d:f2:af: 53:57:a1:c7:84:d8:03:3e:4c:d2:1a:d8:b1:4e:9b:49:2a:f9: d8:21:66:bc:7a:d1:81:8c:6d:f5:03:65:fc:3c:4e:79:ca:7f: 02:46:5f:c6:56:5f:d6:f6:ba:e9:d0:30:41:61:4c:ae:a3:ed: 49:28:0d:33:b6:92:67:df:fa:33:84:00:7e:56:f6:53:5d:c1: c8:89:92:70:d2:92:be:3a:ff:9b:ce:a4:5d:01:1e:d1:8e:bc: 46:e9:3a:53:a9:28:56:c2:3c:3f:9c:da:6e:ff:a1:d8:4e:dc: 27:fa:b2:83:1c:03:68:a9:3d:35:d7:b7:f0:eb:1e:e3:3c:e9: 10:cd:57:6e:8d:6b:d0:d3:63:bf:fd:5f:62:06:f9:05:c4:29: 62:b7:ce:e7:0a:07:aa:56:8e:b1:60:96:45:7d:e6:a3:d6:30: 11:41:0a:ae:43:f2:c3:2b:8f:9a:a2:60:9f:50:5d:0b:82:f3: 43:0e:15:43:c0:e8:71:cc:4f:37:c5:51:78:58:da:f6:3e:09: 0d:fb:eb:8e:ce:76:e2:28:34:f9:ab:d2:62:50:fe:ac:c9:a2: 10:2b:84:b8:17:86:64:3f:eb:12:f8:1a:a7:2d:e4:38:d0:50: 3f:11:3d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgA8naCREPvX0AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmZkZWE2MDUtZTdiNy00YmFhLTljYTUtYjEzYjUwMWJhNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Eh16rGe9lm4HxIYwUKtHrfHv+pYQ7199NX IiNAtNQoTrNXt+VCFoy1oZcpRGQOBIYuHJ6RyNsVAyl6xwCOvV++Z26oU8AlZiel GhgYujvwvZa/TbAN1Cp4kWCd2A04Wsyv8mAQBwv8MncnR73vIRCQWzIB2clnOxYA iguIb/MNPvR8/lANfuLPaKzBF9h6MEdlgRACD7biR8t3qXk5AvY8+zLlkuoCtK1Z eldgMmNQAsLgDbCcwS+maxtbat1w8zzgYMAea8v4iDh3EhKvjVHIU2G93itjYfFl BWTuH+kBnYl67mseJl5rqAzZdw8Yad7HR6aRZqI1pPhxi15Q7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLUrJaviBNgXnWLkiaE23L5H61iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkwNjU3ZTItMmYzNy0z NjQyLWJiYTctMmIwODM1ZWMyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROMGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpJEOJx/WadrRK6VJbZCS3yr1NXoceE2AM+TNIa2LFOm0kq+dghZrx6 0YGMbfUDZfw8TnnKfwJGX8ZWX9b2uunQMEFhTK6j7UkoDTO2kmff+jOEAH5W9lNd wciJknDSkr46/5vOpF0BHtGOvEbpOlOpKFbCPD+c2m7/odhO3Cf6soMcA2ipPTXX t/DrHuM86RDNV26Na9DTY7/9X2IG+QXEKWK3zucKB6pWjrFglkV95qPWMBFBCq5D 8sMrj5qiYJ9QXQuC80MOFUPA6HHMTzfFUXhY2vY+CQ37647OduIoNPmr0mJQ/qzJ ohArhLgXhmQ/6xL4Gqct5DjQUD8RPU0= -----END CERTIFICATE-----Generated at Tue Jul 1 19:12:26 2025 by rpki-client