$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa File: b1533062-74f4-384b-88a9-501d82220b3b.roa (raw, json) Hash identifier: 4DcIvYc+sjS2KBo1E9cJ+DhrdZgJi2YSvGGKTwQz9yI= Subject key identifier: 05:2E:B6:9D:F0:04:2B:83:85:6A:68:C4:6F:D4:62:81:24:EA:60:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6E4E5944A6EA0279B24C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa Signing time: Fri 20 Jun 2025 09:28:46 +0000 ROA not before: Fri 20 Jun 2025 09:28:46 +0000 ROA not after: Thu 18 Sep 2025 09:28:46 +0000 asID: 22773 IP address blocks: 68.96.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:e4:e5:94:4a:6e:a0:27:9b:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:46 2025 GMT Not After : Sep 18 09:28:46 2025 GMT Subject: CN=2cb22b82-5131-4ee0-81f1-a9a78a267c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:9b:ea:5c:65:4f:00:ba:5f:dc:de:1f:b0: be:60:73:da:55:f2:17:38:32:16:60:f9:85:3b:4d: ec:dc:a9:21:e0:3c:f0:de:a9:ea:82:3f:d7:62:7b: 61:32:41:58:4d:c3:32:cf:fc:56:21:dc:4a:f1:4c: 04:5c:bd:6d:8e:bb:1a:56:03:25:6c:aa:e0:94:80: 2a:d1:8b:75:67:8e:20:8a:27:81:39:8e:98:14:7d: 25:d2:d3:03:22:ef:e6:7f:c3:cb:ad:7a:2a:0e:d8: 5e:7c:6c:20:2c:71:e4:ea:19:25:ba:63:8d:6b:f0: 26:a0:69:f8:b5:24:09:16:68:ac:c2:75:c6:04:cf: 82:e6:3d:e0:d1:4f:88:19:0c:95:d7:3e:68:c1:72: 99:41:bb:7d:d9:65:3b:a8:47:bb:23:51:bb:07:a8: d6:0e:cc:f1:49:7f:6b:2a:74:3f:48:ad:27:20:32: 2d:fb:f9:af:ce:84:31:0d:92:30:56:6c:da:eb:40: e1:0d:3c:a2:52:8b:19:cb:5d:57:f8:5b:08:99:c9: 2a:18:e0:e6:1e:8e:c9:00:1f:3b:e9:39:d8:1e:f5: 13:76:03:1f:85:e7:95:fc:69:91:42:86:0d:54:31: 2a:c5:95:a4:f7:c2:72:48:6a:9e:7b:d8:13:82:78: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2E:B6:9D:F0:04:2B:83:85:6A:68:C4:6F:D4:62:81:24:EA:60:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:b8:96:6f:07:e1:80:af:66:2f:98:b6:7f:65:e9:25:08: fc:a7:4a:7b:56:28:fd:03:36:9c:b9:de:37:65:b2:63:7b:b8: 08:62:ab:c7:a5:fb:09:cd:98:34:8f:5d:26:68:17:4a:9f:95: c8:72:19:d3:f3:09:38:f6:8c:06:02:1a:42:cd:64:9c:46:1f: 8a:ad:da:1d:c7:ac:e1:37:4d:88:5b:32:38:e9:64:92:2f:55: 57:42:2f:7b:dc:d6:b8:f9:62:8d:df:91:c1:9b:d7:d1:13:85: b9:72:ef:76:a6:2b:13:33:0c:c6:89:fb:34:0c:7b:07:78:01: 19:c2:d9:38:b0:ff:76:d4:da:be:bc:1f:4e:26:c9:28:3e:04: 86:6f:3b:02:ba:b7:d6:7c:47:0c:23:07:d2:80:31:65:a6:ca: 6f:a0:7f:b7:de:9b:30:1a:b7:1f:10:61:01:b1:82:48:94:39: 33:27:9d:61:c6:ab:dd:7f:ed:d9:6f:9a:74:42:b3:7e:dd:6a: 30:57:6d:a1:11:6b:4d:66:7a:50:29:e3:24:ee:92:5c:2a:c0: c7:40:f8:69:b6:40:e2:5e:aa:95:a0:03:ba:81:d1:e3:fb:f7: 0b:75:33:86:e1:3d:d5:be:ed:52:22:9f:ea:a3:27:9f:2b:49: 93:4d:c1:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApuTllEpuoCebJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg0NloXDTI1MDkxODA5Mjg0NlowLzEtMCsGA1UEAxMk MmNiMjJiODItNTEzMS00ZWUwLTgxZjEtYTlhNzhhMjY3YzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuKb6lxlTwC6X9zeH7C+YHPaVfIXODIWYPmF O03s3Kkh4Dzw3qnqgj/XYnthMkFYTcMyz/xWIdxK8UwEXL1tjrsaVgMlbKrglIAq 0Yt1Z44giieBOY6YFH0l0tMDIu/mf8PLrXoqDthefGwgLHHk6hklumONa/AmoGn4 tSQJFmiswnXGBM+C5j3g0U+IGQyV1z5owXKZQbt92WU7qEe7I1G7B6jWDszxSX9r KnQ/SK0nIDIt+/mvzoQxDZIwVmza60DhDTyiUosZy11X+FsImckqGODmHo7JAB87 6TnYHvUTdgMfheeV/GmRQoYNVDEqxZWk98JySGqee9gTgngs7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUutp3wBCuDhWpoxG/UYoEk6mB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjE1MzMwNjItNzRmNC0z ODRiLTg4YTktNTAxZDgyMjIwYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8suJZvB+GAr2YvmLZ/ZeklCPynSntWKP0DNpy53jdlsmN7uAhiq8el +wnNmDSPXSZoF0qflchyGdPzCTj2jAYCGkLNZJxGH4qt2h3HrOE3TYhbMjjpZJIv VVdCL3vc1rj5Yo3fkcGb19EThbly73amKxMzDMaJ+zQMewd4ARnC2Tiw/3bU2r68 H04mySg+BIZvOwK6t9Z8RwwjB9KAMWWmym+gf7femzAatx8QYQGxgkiUOTMnnWHG q91/7dlvmnRCs37dajBXbaERa01melAp4yTuklwqwMdA+Gm2QOJeqpWgA7qB0eP7 9wt1M4bhPdW+7VIin+qjJ58rSZNNwfw= -----END CERTIFICATE-----Generated at Wed Jul 2 07:07:07 2025 by rpki-client