$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa030aea-41df-3988-8ed8-2b308de23776.roa File: aa030aea-41df-3988-8ed8-2b308de23776.roa (raw, json) Hash identifier: fU57NkFIUgFIzYoYPqTAmq8xI8FYIt6aMERLb2eMeXY= Subject key identifier: E4:6D:AB:3C:04:95:44:FC:F1:50:8B:EA:F7:2D:C4:CF:F3:F4:92:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA253A354522532B354160 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa030aea-41df-3988-8ed8-2b308de23776.roa Signing time: Fri 20 Jun 2025 09:35:19 +0000 ROA not before: Fri 20 Jun 2025 09:35:19 +0000 ROA not after: Thu 18 Sep 2025 09:35:19 +0000 asID: 22773 IP address blocks: 174.68.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:25:3a:35:45:22:53:2b:35:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:19 2025 GMT Not After : Sep 18 09:35:19 2025 GMT Subject: CN=40eab96f-172b-4f6e-b8a8-5bf653edc446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:70:f7:db:04:d7:df:5f:63:b5:2e:37:13: 73:32:e9:a0:7a:e3:09:b2:b9:08:05:fa:20:4a:dd: ec:03:08:75:93:30:7d:e3:88:e7:32:ed:b4:43:9c: 83:43:36:39:b7:1b:7a:58:27:7b:6c:98:5c:9f:bd: 84:71:49:9f:f0:3e:3a:1f:a9:76:9b:b5:da:ad:ca: 42:01:5b:52:ce:bf:7f:79:2c:af:23:1a:11:89:b4: 8e:3c:9b:87:44:37:0c:22:f0:ba:01:69:93:5b:5e: 3d:1b:ce:94:7c:b9:0f:85:7a:ab:61:60:e9:65:78: 3c:62:8a:18:1e:bb:08:d3:5d:9b:c7:44:5f:4f:e5: a6:73:b7:a4:6f:a5:f6:7a:82:4c:08:82:a4:9f:8d: 44:f1:75:da:54:c9:c4:62:fe:72:56:f9:2c:f7:e4: 45:d7:f6:ff:ce:99:7d:be:67:67:56:7e:d7:f8:75: cd:52:91:da:dd:1b:7e:8a:ba:c3:5a:6f:76:06:4c: 4e:b1:d1:21:f6:c1:f5:7b:c8:df:18:d7:64:31:94: bb:39:08:e2:5e:5e:7b:da:a6:f3:2a:70:fd:8f:c4: 57:87:74:1d:56:25:63:fc:71:98:08:5f:df:2f:d6: 99:da:59:00:a5:ef:49:3f:31:a3:c1:34:89:43:81: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:AB:3C:04:95:44:FC:F1:50:8B:EA:F7:2D:C4:CF:F3:F4:92:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa030aea-41df-3988-8ed8-2b308de23776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ba:8e:fa:78:e9:2b:8f:f1:33:78:a5:3c:95:31:dc:d8:dd: dc:48:d0:82:44:31:e0:82:1c:df:07:8c:a2:a1:3f:bd:7b:da: f4:e8:36:e4:f4:c2:76:b4:f6:73:b2:79:3f:b2:3c:ab:bb:fb: 5e:8c:b2:29:20:9c:f9:81:81:78:f8:ec:f2:05:08:39:dc:87: c0:55:9b:08:b8:ed:45:f5:87:a5:24:d8:e4:86:1f:38:48:99: 65:21:15:4b:59:6d:32:c4:48:22:8b:25:8e:cb:28:72:56:e7: 87:0c:59:34:47:07:82:c8:74:49:3d:39:f7:4b:e5:bc:05:e1: b9:7c:f4:bc:ce:0a:c2:3e:d4:8a:da:e1:8d:86:22:e6:e5:56: 7d:dd:a8:fb:d2:e4:c6:25:99:3c:a6:97:68:8b:32:cd:f6:c8: b6:c5:58:3c:2f:b9:45:2d:31:d7:ef:22:0b:67:3f:82:e1:dd: c8:17:74:b8:34:34:e2:88:37:ed:bb:4a:f7:10:64:fa:0a:b7: 53:5d:26:8d:bc:f8:bf:f9:80:1d:39:a4:bf:04:39:f2:c9:09: 9f:2d:da:cb:49:9c:fc:d4:e8:dc:77:3f:b2:a5:7a:a3:a3:5f: 92:7d:82:3a:4a:63:5a:ea:19:4d:87:74:77:d9:c3:32:e8:66: ad:00:d1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiU6NUUiUys1QWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxOVoXDTI1MDkxODA5MzUxOVowLzEtMCsGA1UEAxMk NDBlYWI5NmYtMTcyYi00ZjZlLWI4YTgtNWJmNjUzZWRjNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNpw99sE199fY7UuNxNzMumgeuMJsrkIBfog St3sAwh1kzB944jnMu20Q5yDQzY5txt6WCd7bJhcn72EcUmf8D46H6l2m7XarcpC AVtSzr9/eSyvIxoRibSOPJuHRDcMIvC6AWmTW149G86UfLkPhXqrYWDpZXg8YooY HrsI012bx0RfT+Wmc7ekb6X2eoJMCIKkn41E8XXaVMnEYv5yVvks9+RF1/b/zpl9 vmdnVn7X+HXNUpHa3Rt+irrDWm92BkxOsdEh9sH1e8jfGNdkMZS7OQjiXl572qbz KnD9j8RXh3QdViVj/HGYCF/fL9aZ2lkApe9JPzGjwTSJQ4F0mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORtqzwElUT88VCL6vctxM/z9JKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWEwMzBhZWEtNDFkZi0z OTg4LThlZDgtMmIzMDhkZTIzNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW6jvp46SuP8TN4pTyVMdzY3dxI0IJEMeCCHN8HjKKhP7172vToNuT0 wna09nOyeT+yPKu7+16MsikgnPmBgXj47PIFCDnch8BVmwi47UX1h6Uk2OSGHzhI mWUhFUtZbTLESCKLJY7LKHJW54cMWTRHB4LIdEk9OfdL5bwF4bl89LzOCsI+1Ira 4Y2GIublVn3dqPvS5MYlmTyml2iLMs32yLbFWDwvuUUtMdfvIgtnP4Lh3cgXdLg0 NOKIN+27SvcQZPoKt1NdJo28+L/5gB05pL8EOfLJCZ8t2stJnPzU6Nx3P7KleqOj X5J9gjpKY1rqGU2HdHfZwzLoZq0A0Vo= -----END CERTIFICATE-----Generated at Wed Jul 2 15:13:26 2025 by rpki-client