$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797efdf-ac43-3081-a754-24cbffb60b47.roa File: 9797efdf-ac43-3081-a754-24cbffb60b47.roa (raw, json) Hash identifier: GunxuMbcInpUf1eNKYAubno3Y35SgTCb/y7xdfQim88= Subject key identifier: 98:9B:21:D1:8E:D0:46:19:D8:AF:43:66:B7:8D:F6:E4:88:A2:EE:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6A10B0C09F49C270EB6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797efdf-ac43-3081-a754-24cbffb60b47.roa Signing time: Thu 19 Jun 2025 09:17:31 +0000 ROA not before: Thu 19 Jun 2025 09:17:31 +0000 ROA not after: Wed 17 Sep 2025 09:17:31 +0000 asID: 22773 IP address blocks: 68.230.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:a1:0b:0c:09:f4:9c:27:0e:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:31 2025 GMT Not After : Sep 17 09:17:31 2025 GMT Subject: CN=1c68fe8a-ce00-425d-8a4f-d256cec89254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d1:79:ad:66:59:29:b2:cb:8d:f5:1f:c7:ca: c5:00:e2:e8:f9:67:55:97:b9:a7:8e:d8:74:42:4e: c5:51:c4:a1:2f:2c:3f:c2:78:12:39:96:c9:87:81: 2f:2a:93:c6:87:f6:60:8a:19:3a:26:46:26:bd:6c: a1:b0:d7:6a:64:11:d0:a4:24:8b:91:95:4f:32:36: 32:fc:ee:6a:de:e1:f9:c1:59:df:dc:fa:4d:91:15: bb:f1:f8:eb:59:0b:fe:01:fe:44:e6:6d:ec:93:5f: 72:91:bf:be:8b:2d:06:53:6e:5c:d5:db:f2:bd:5e: 46:12:43:36:ab:70:91:43:7c:a6:0b:eb:a6:0d:14: 9d:bc:b7:27:29:04:3f:42:aa:a5:a9:b8:5e:b2:64: cb:7d:ac:98:78:e0:de:b5:f8:a0:1d:a3:51:06:7c: 4d:60:4f:1c:9f:41:c4:3d:4a:f6:45:36:8c:4e:6e: 5c:a7:88:71:12:15:8b:53:ef:37:0f:a0:83:bf:c7: e3:c1:77:29:14:ab:12:3b:cd:b0:98:e2:80:ec:98: 50:9d:a3:fa:6a:1e:7c:57:0f:52:ee:b3:22:15:ec: 0c:21:e5:c3:ca:7b:08:51:d1:35:5e:56:e4:43:4e: f2:26:50:3f:29:f9:12:d9:9d:d7:7b:92:54:90:d9: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:21:D1:8E:D0:46:19:D8:AF:43:66:B7:8D:F6:E4:88:A2:EE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9797efdf-ac43-3081-a754-24cbffb60b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8d:95:b1:56:60:91:6c:33:10:c4:38:89:4b:71:e9:7d:cf: cf:72:5a:f2:5e:95:8c:4d:22:b0:f4:02:2f:4f:92:ae:1c:a9: 85:fc:1a:45:e3:fa:5f:5c:3e:f9:6b:66:1e:a6:82:48:b4:74: 84:5f:eb:32:65:78:e9:c2:57:b5:99:4e:dd:e1:3d:be:c4:1b: 75:8a:95:06:8e:10:7d:25:6f:79:c6:b6:df:4c:58:cf:86:c9: a2:80:a3:e6:d3:37:7e:55:77:8a:44:1b:4b:65:58:2c:54:6b: c2:40:48:a1:83:bd:37:fc:61:f0:70:c7:54:df:3a:2e:0b:a8: 7a:5d:c4:b2:b4:14:51:f3:f1:bc:ea:8b:8c:cc:47:19:f7:90: 7b:c1:70:9f:95:f5:e0:45:3c:9c:46:88:63:28:48:30:ae:74: 85:b9:38:41:c8:ab:6f:c7:1c:df:8f:33:0a:f0:c1:8b:b3:c2: e6:15:d5:4b:29:b0:f1:72:ae:87:f5:b1:3d:85:e5:f7:e8:66: a3:1f:a8:d1:e8:bb:b1:8a:79:19:e3:93:a9:73:2e:ed:30:65: 53:4f:e7:87:34:fe:a5:97:55:10:e2:5e:82:73:1a:d3:80:f0: 8e:b3:22:d9:d1:93:d6:0c:91:f1:7c:96:9b:de:8e:c3:11:75: 59:a6:af:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91qELDAn0nCcOtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTczMVoXDTI1MDkxNzA5MTczMVowLzEtMCsGA1UEAxMk MWM2OGZlOGEtY2UwMC00MjVkLThhNGYtZDI1NmNlYzg5MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9F5rWZZKbLLjfUfx8rFAOLo+WdVl7mnjth0 Qk7FUcShLyw/wngSOZbJh4EvKpPGh/Zgihk6JkYmvWyhsNdqZBHQpCSLkZVPMjYy /O5q3uH5wVnf3PpNkRW78fjrWQv+Af5E5m3sk19ykb++iy0GU25c1dvyvV5GEkM2 q3CRQ3ymC+umDRSdvLcnKQQ/QqqlqbhesmTLfayYeODetfigHaNRBnxNYE8cn0HE PUr2RTaMTm5cp4hxEhWLU+83D6CDv8fjwXcpFKsSO82wmOKA7JhQnaP6ah58Vw9S 7rMiFewMIeXDynsIUdE1XlbkQ07yJlA/KfkS2Z3Xe5JUkNm8nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJibIdGO0EYZ2K9DZreN9uSIou5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTc5N2VmZGYtYWM0My0z MDgxLWE3NTQtMjRjYmZmYjYwYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2NlbFWYJFsMxDEOIlLcel9z89yWvJelYxNIrD0Ai9Pkq4cqYX8GkXj +l9cPvlrZh6mgki0dIRf6zJleOnCV7WZTt3hPb7EG3WKlQaOEH0lb3nGtt9MWM+G yaKAo+bTN35Vd4pEG0tlWCxUa8JASKGDvTf8YfBwx1TfOi4LqHpdxLK0FFHz8bzq i4zMRxn3kHvBcJ+V9eBFPJxGiGMoSDCudIW5OEHIq2/HHN+PMwrwwYuzwuYV1Usp sPFyrof1sT2F5ffoZqMfqNHou7GKeRnjk6lzLu0wZVNP54c0/qWXVRDiXoJzGtOA 8I6zItnRk9YMkfF8lpvejsMRdVmmr+4= -----END CERTIFICATE-----Generated at Wed Jul 2 07:09:56 2025 by rpki-client