$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b48c8a31-8172-3b6d-b765-71d303473ae5.roa File: b48c8a31-8172-3b6d-b765-71d303473ae5.roa (raw, json) Hash identifier: jHrr+/rihYrGtz6EXoRNatgwgnfzB7dvk/Bd3EYQpOo= Subject key identifier: C0:1B:33:6D:37:31:CC:4D:C0:C9:76:B8:91:6D:03:C3:6B:EA:CE:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7B657BD628CE04DD04200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b48c8a31-8172-3b6d-b765-71d303473ae5.roa Signing time: Fri 20 Jun 2025 09:30:25 +0000 ROA not before: Fri 20 Jun 2025 09:30:25 +0000 ROA not after: Thu 18 Sep 2025 09:30:25 +0000 asID: 22773 IP address blocks: 68.224.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:b6:57:bd:62:8c:e0:4d:d0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:25 2025 GMT Not After : Sep 18 09:30:25 2025 GMT Subject: CN=51ddde79-e99d-4fbb-aec4-3133d8291bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:39:0d:57:74:a5:17:56:1c:18:7c:0c:1c:96: ba:ce:05:8e:34:14:df:34:ba:10:13:ed:93:43:a3: 55:ab:84:9c:cf:41:18:fd:0e:ec:fd:69:06:cb:60: cf:1e:e6:69:b2:dd:34:d0:b7:2e:4c:a6:6a:68:df: 79:a3:70:cb:c7:a1:7d:e8:5b:ab:a3:20:a9:31:e3: 08:f1:4a:50:d4:32:39:a1:63:3d:a9:80:ce:d5:8f: 6b:77:bb:88:a8:b0:2e:75:ae:89:ae:70:a6:41:12: e5:68:61:cd:cd:b8:63:da:40:0e:4b:0f:69:d0:02: 0e:7d:20:6c:4d:7b:53:f5:5c:75:6f:02:45:ab:54: 26:2d:d8:99:a4:7e:ea:83:12:6d:47:7c:d0:5a:f8: 60:eb:0a:42:da:68:db:12:cb:c9:1f:d5:24:70:63: 7a:c6:b1:10:0e:fc:5c:f1:cd:c6:71:ca:47:1a:c3: 48:d6:07:ed:98:96:bd:84:d8:d6:6c:f0:91:1d:29: 4a:d4:24:92:37:7f:a2:18:54:cf:c9:84:aa:c8:75: 1b:bc:2b:1e:e3:aa:b4:3b:f6:0b:0c:62:e9:4c:ff: e4:29:22:77:dd:e0:26:01:55:60:ae:86:89:4e:9a: 6e:2e:30:2f:76:d5:7a:cf:bf:2a:ce:ca:cb:07:01: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1B:33:6D:37:31:CC:4D:C0:C9:76:B8:91:6D:03:C3:6B:EA:CE:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b48c8a31-8172-3b6d-b765-71d303473ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6b:92:46:af:9a:d1:f8:f6:24:53:cf:e5:10:52:00:e9:38: a7:a1:d0:80:e4:64:dc:c8:bf:52:38:45:45:83:38:2d:a8:0d: b7:bc:51:99:4c:d9:28:19:d3:6a:95:eb:75:d6:d9:39:dd:83: b0:d5:33:14:74:3c:94:53:c3:98:68:44:25:62:df:89:10:ed: 6f:0a:f4:75:0d:c6:49:a9:06:bf:4f:1c:1e:78:df:e9:9c:8b: 40:6a:26:88:81:3a:9d:42:ac:e8:1b:80:9d:1e:cc:e1:ae:34: a0:b4:6e:64:5b:33:16:c0:ef:f1:b3:00:9b:e3:5c:27:e3:5d: 9b:4d:55:c8:7c:56:61:08:85:36:e2:21:42:63:1e:45:42:90: e8:4d:67:1f:98:fc:f2:ee:14:59:95:21:2f:ae:98:ee:35:42: 6b:25:d8:61:3b:90:e7:ed:1d:b8:95:a9:11:b7:1d:3a:f0:9b: 85:51:73:f1:ad:87:f2:bf:2d:d1:1e:fe:03:51:25:ae:c6:6c: df:57:1c:68:8b:f9:38:41:77:ab:e6:c5:4b:73:85:75:ff:ce: 8d:c0:18:88:ff:a1:d2:df:d1:ca:ac:b2:80:5d:58:86:66:32: fc:2d:77:c4:77:e8:bb:c8:fe:70:12:85:aa:80:f5:17:57:0f: a1:4c:b1:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp7ZXvWKM4E3QQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAyNVoXDTI1MDkxODA5MzAyNVowLzEtMCsGA1UEAxMk NTFkZGRlNzktZTk5ZC00ZmJiLWFlYzQtMzEzM2Q4MjkxYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DkNV3SlF1YcGHwMHJa6zgWONBTfNLoQE+2T Q6NVq4Scz0EY/Q7s/WkGy2DPHuZpst000LcuTKZqaN95o3DLx6F96FuroyCpMeMI 8UpQ1DI5oWM9qYDO1Y9rd7uIqLAuda6JrnCmQRLlaGHNzbhj2kAOSw9p0AIOfSBs TXtT9Vx1bwJFq1QmLdiZpH7qgxJtR3zQWvhg6wpC2mjbEsvJH9UkcGN6xrEQDvxc 8c3GccpHGsNI1gftmJa9hNjWbPCRHSlK1CSSN3+iGFTPyYSqyHUbvCse46q0O/YL DGLpTP/kKSJ33eAmAVVgroaJTppuLjAvdtV6z78qzsrLBwFzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAbM203McxNwMl2uJFtA8Nr6s6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQ4YzhhMzEtODE3Mi0z YjZkLWI3NjUtNzFkMzAzNDczYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlrkkavmtH49iRTz+UQUgDpOKeh0IDkZNzIv1I4RUWDOC2oDbe8UZlM 2SgZ02qV63XW2Tndg7DVMxR0PJRTw5hoRCVi34kQ7W8K9HUNxkmpBr9PHB543+mc i0BqJoiBOp1CrOgbgJ0ezOGuNKC0bmRbMxbA7/GzAJvjXCfjXZtNVch8VmEIhTbi IUJjHkVCkOhNZx+Y/PLuFFmVIS+umO41Qmsl2GE7kOftHbiVqRG3HTrwm4VRc/Gt h/K/LdEe/gNRJa7GbN9XHGiL+ThBd6vmxUtzhXX/zo3AGIj/odLf0cqssoBdWIZm Mvwtd8R36LvI/nAShaqA9RdXD6FMsac= -----END CERTIFICATE-----Generated at Wed Jul 2 12:56:46 2025 by rpki-client