$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95160398-8d55-3dd0-9977-3311e6a5b25c.roa File: 95160398-8d55-3dd0-9977-3311e6a5b25c.roa (raw, json) Hash identifier: kLEwcbJQvG1UvLkw6X4e3+EPuD1fa1SqOM+k8gh2R3I= Subject key identifier: 55:75:F1:2E:5B:B9:32:0E:14:37:62:41:8B:91:58:C5:B0:10:80:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD69137EBC0899F8558CA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95160398-8d55-3dd0-9977-3311e6a5b25c.roa Signing time: Thu 19 Jun 2025 09:17:24 +0000 ROA not before: Thu 19 Jun 2025 09:17:24 +0000 ROA not after: Wed 17 Sep 2025 09:17:24 +0000 asID: 22773 IP address blocks: 68.228.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:91:37:eb:c0:89:9f:85:58:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:24 2025 GMT Not After : Sep 17 09:17:24 2025 GMT Subject: CN=50591e7f-eafe-4f94-95e2-41402c5aa497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:8d:c2:1a:2b:51:82:c8:c6:60:1c:51:77: 1a:56:86:d1:40:59:32:1b:44:3e:c4:58:13:89:cb: 2c:d1:a7:68:3e:b9:5d:5b:0b:dc:23:16:d8:d2:3d: 4d:ac:d2:e2:5b:b1:3c:1e:ef:aa:e0:2e:34:dc:42: 9e:25:f2:4d:69:49:4c:f5:ee:0b:78:40:8e:4f:b0: fd:60:57:3c:99:07:2a:aa:6b:0e:76:c3:6b:4e:1f: b8:26:24:53:0d:ae:ce:97:d6:99:de:1e:9c:c2:3a: bd:42:99:ee:6e:d1:3e:e0:bd:39:d3:ea:f9:7f:e3: 7d:a0:76:95:14:0e:c6:23:72:51:e7:57:1d:85:b0: 6d:33:82:5b:38:0d:58:be:94:3c:fe:76:f1:53:bd: c0:5a:62:1d:49:8d:17:9c:60:4b:07:de:0b:48:b1: 0d:10:52:45:d8:6e:31:0e:4c:9e:41:37:59:86:02: cf:83:30:ad:6a:01:51:62:ae:71:e1:2e:43:5f:36: cd:0a:d8:0e:b7:1c:46:f2:e2:cb:63:e7:97:a3:70: 8d:f5:ce:32:19:5c:c5:e7:95:cc:bc:05:1a:60:a2: eb:69:72:79:45:bc:9a:e1:af:cc:d3:de:93:46:fe: c2:30:50:92:1b:97:67:75:7d:75:d4:d0:3a:f6:80: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:75:F1:2E:5B:B9:32:0E:14:37:62:41:8B:91:58:C5:B0:10:80:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95160398-8d55-3dd0-9977-3311e6a5b25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:98:de:73:a4:b4:62:a3:23:e0:c8:95:f4:c7:24:63:a9:9c: 6f:e6:dc:4c:14:b2:d4:3c:25:fb:a6:a7:45:2c:70:7a:87:08: 75:08:49:79:65:89:c3:d4:9e:08:cc:0b:ff:cf:bb:a0:35:94: ac:53:3f:80:b5:38:ae:77:93:d7:96:eb:aa:c0:9a:ed:ab:cb: ab:cf:45:06:61:1c:fe:31:4f:66:41:4a:df:03:2b:11:fa:d2: 45:30:24:cf:1a:d9:a7:ee:1f:52:b9:28:f9:6c:5b:58:03:40: 4e:1c:7d:aa:a4:4f:11:c9:3e:5d:c3:24:ba:75:de:e5:0d:d4: 0f:16:2c:83:f6:f7:39:40:f1:3b:a6:5e:0e:29:06:0f:5c:f8: 20:85:a6:13:14:22:5d:9c:08:a2:98:2f:de:15:89:3e:cb:fd: f6:16:bb:91:79:90:d8:8e:bc:9b:49:ec:7c:72:07:eb:fe:bb: 31:0c:23:90:ae:a5:f6:63:71:61:0b:02:1a:37:99:c3:54:cf: 79:b1:67:c3:8c:16:44:0f:73:8f:2f:24:6b:3c:b5:1a:e4:67: 70:be:b8:83:01:c1:08:78:31:7c:e7:fe:e0:46:2b:d5:c1:9c: f8:47:dc:1c:a8:c5:37:18:9a:e6:67:f7:b3:12:6b:70:38:f4: 94:b0:41:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91pE368CJn4VYykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcyNFoXDTI1MDkxNzA5MTcyNFowLzEtMCsGA1UEAxMk NTA1OTFlN2YtZWFmZS00Zjk0LTk1ZTItNDE0MDJjNWFhNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8iNwhorUYLIxmAcUXcaVobRQFkyG0Q+xFgT icss0adoPrldWwvcIxbY0j1NrNLiW7E8Hu+q4C403EKeJfJNaUlM9e4LeECOT7D9 YFc8mQcqqmsOdsNrTh+4JiRTDa7Ol9aZ3h6cwjq9QpnubtE+4L050+r5f+N9oHaV FA7GI3JR51cdhbBtM4JbOA1YvpQ8/nbxU73AWmIdSY0XnGBLB94LSLENEFJF2G4x DkyeQTdZhgLPgzCtagFRYq5x4S5DXzbNCtgOtxxG8uLLY+eXo3CN9c4yGVzF55XM vAUaYKLraXJ5Rbya4a/M096TRv7CMFCSG5dndX111NA69oByBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV18S5buTIOFDdiQYuRWMWwEIALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUxNjAzOTgtOGQ1NS0z ZGQwLTk5NzctMzMxMWU2YTViMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROTqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Y3nOktGKjI+DIlfTHJGOpnG/m3EwUstQ8Jfump0UscHqHCHUISXll icPUngjMC//Pu6A1lKxTP4C1OK53k9eW66rAmu2ry6vPRQZhHP4xT2ZBSt8DKxH6 0kUwJM8a2afuH1K5KPlsW1gDQE4cfaqkTxHJPl3DJLp13uUN1A8WLIP29zlA8Tum Xg4pBg9c+CCFphMUIl2cCKKYL94ViT7L/fYWu5F5kNiOvJtJ7HxyB+v+uzEMI5Cu pfZjcWELAho3mcNUz3mxZ8OMFkQPc48vJGs8tRrkZ3C+uIMBwQh4MXzn/uBGK9XB nPhH3ByoxTcYmuZn97MSa3A49JSwQcc= -----END CERTIFICATE-----Generated at Wed Jul 2 07:43:46 2025 by rpki-client