$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b405d611-15a2-3edd-b8dc-67cb04ff4541.roa File: b405d611-15a2-3edd-b8dc-67cb04ff4541.roa (raw, json) Hash identifier: Mmzmhc/+KLBM3/wIWRUz8eYLxQxBP7DmdefIKWGLHO8= Subject key identifier: 21:95:20:DE:7C:17:06:16:A3:66:61:CA:28:CB:C2:66:D6:82:4E:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6F98DCE8504E3A799DA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b405d611-15a2-3edd-b8dc-67cb04ff4541.roa Signing time: Thu 19 Jun 2025 09:18:13 +0000 ROA not before: Thu 19 Jun 2025 09:18:13 +0000 ROA not after: Wed 17 Sep 2025 09:18:13 +0000 asID: 22773 IP address blocks: 68.231.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:f9:8d:ce:85:04:e3:a7:99:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:13 2025 GMT Not After : Sep 17 09:18:13 2025 GMT Subject: CN=fa9b48a8-3ba0-4011-8f6f-c238811ba4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:39:c8:fe:88:41:ed:1d:59:e0:b4:38:10:a3: ca:c7:1a:f7:c3:68:71:c4:00:8b:53:aa:7d:24:e4: ac:cf:01:b5:a2:fb:62:5c:f4:42:af:8f:97:f6:fe: 8a:1c:bb:df:4b:4f:5f:89:c9:c4:90:0c:86:f3:0c: 4d:01:32:f8:98:9b:56:37:71:8f:17:56:a1:b9:51: c9:88:3c:82:a2:27:e4:dc:03:f6:40:0a:7a:ac:9a: 6d:cd:1f:57:46:b5:4d:c9:b9:aa:32:9e:eb:9f:74: 65:65:a5:c4:d4:c8:ce:b7:aa:13:6b:5c:ff:d6:17: c7:cf:cd:27:aa:f7:e3:27:41:0d:46:10:21:f6:91: 2d:fc:39:32:3a:95:06:6b:41:44:f1:d5:ed:54:6a: fb:66:b3:b3:18:32:41:a7:8d:54:83:dd:06:50:a4: 72:7a:d1:c9:fa:c1:d7:0a:77:88:6f:14:bc:fd:cb: ed:b0:14:48:b6:6b:92:e5:2e:d3:6b:34:bd:7f:be: 24:8b:87:9e:ac:b7:a6:96:e0:cf:a4:56:fe:31:6e: a4:e5:97:04:f3:9b:ed:23:18:3e:28:7d:c8:7e:31: f7:bd:96:26:b2:ca:b3:74:e2:f7:39:24:b5:03:51: 97:a9:fc:65:ae:89:b3:a0:65:70:3b:57:4c:6b:71: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:20:DE:7C:17:06:16:A3:66:61:CA:28:CB:C2:66:D6:82:4E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b405d611-15a2-3edd-b8dc-67cb04ff4541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8c:4c:2e:ed:79:95:dc:d5:bb:00:a0:60:00:4a:20:73:8e: 28:43:b3:45:ee:d9:b8:da:12:00:4d:73:4d:5a:4b:8b:a3:72: 96:7e:e8:bf:30:b5:75:fa:43:c4:b3:c9:6c:79:7c:77:ff:7e: 10:28:93:61:17:d8:8a:b4:83:b1:8b:7c:49:de:8c:02:cf:57: 69:ae:6a:42:23:de:3d:b1:e6:b9:6a:33:dc:63:14:09:30:c0: f5:74:bc:e9:13:5b:e5:49:45:a6:17:8c:ce:f8:63:31:b2:14: fa:f9:a2:72:e9:81:16:36:e8:e5:25:b0:42:ba:5d:fb:e4:84: c5:f2:f8:67:2c:75:9c:a3:a2:be:eb:02:b2:be:e1:94:c2:3d: 68:10:34:e2:a9:8e:d9:80:f1:14:3d:f2:46:a5:cd:c6:cb:23: 4b:ae:c8:22:2e:cb:b2:70:4e:5b:78:d0:fe:9f:26:ef:70:68: 75:c6:52:d0:1d:8c:b8:cb:2c:64:2f:8f:65:2f:83:c2:bf:70: 52:63:bb:e2:59:e5:c9:aa:3e:22:73:f4:cf:7c:c0:89:a0:88: 1d:43:42:4b:78:88:a6:b1:08:51:e3:55:f1:3b:0d:ad:fd:ec: c1:66:c7:0d:00:5e:ac:9d:3f:fa:7f:4f:1a:ab:d7:ed:60:c4: 02:d5:81:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91vmNzoUE46eZ2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgxM1oXDTI1MDkxNzA5MTgxM1owLzEtMCsGA1UEAxMk ZmE5YjQ4YTgtM2JhMC00MDExLThmNmYtYzIzODgxMWJhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9znI/ohB7R1Z4LQ4EKPKxxr3w2hxxACLU6p9 JOSszwG1ovtiXPRCr4+X9v6KHLvfS09ficnEkAyG8wxNATL4mJtWN3GPF1ahuVHJ iDyCoifk3AP2QAp6rJptzR9XRrVNybmqMp7rn3RlZaXE1MjOt6oTa1z/1hfHz80n qvfjJ0ENRhAh9pEt/DkyOpUGa0FE8dXtVGr7ZrOzGDJBp41Ug90GUKRyetHJ+sHX CneIbxS8/cvtsBRItmuS5S7TazS9f74ki4eerLemluDPpFb+MW6k5ZcE85vtIxg+ KH3IfjH3vZYmssqzdOL3OSS1A1GXqfxlromzoGVwO1dMa3GEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGVIN58FwYWo2ZhyijLwmbWgk7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQwNWQ2MTEtMTVhMi0z ZWRkLWI4ZGMtNjdjYjA0ZmY0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKMTC7teZXc1bsAoGAASiBzjihDs0Xu2bjaEgBNc01aS4ujcpZ+6L8w tXX6Q8SzyWx5fHf/fhAok2EX2Iq0g7GLfEnejALPV2muakIj3j2x5rlqM9xjFAkw wPV0vOkTW+VJRaYXjM74YzGyFPr5onLpgRY26OUlsEK6XfvkhMXy+GcsdZyjor7r ArK+4ZTCPWgQNOKpjtmA8RQ98kalzcbLI0uuyCIuy7JwTlt40P6fJu9waHXGUtAd jLjLLGQvj2Uvg8K/cFJju+JZ5cmqPiJz9M98wImgiB1DQkt4iKaxCFHjVfE7Da39 7MFmxw0AXqydP/p/Txqr1+1gxALVgfk= -----END CERTIFICATE-----Generated at Wed Jul 2 07:19:52 2025 by rpki-client