$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5de715-0538-324f-ad05-e28e61e6ec0f.roa File: ba5de715-0538-324f-ad05-e28e61e6ec0f.roa (raw, json) Hash identifier: VnVkhTs7/F56KTikc7OkW2kfo06/1IXRW3UKI63rAU4= Subject key identifier: CA:75:C9:26:4F:83:34:31:62:66:F0:3A:71:65:AE:C2:C7:F2:8F:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7C0884F8029EA8404CAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5de715-0538-324f-ad05-e28e61e6ec0f.roa Signing time: Fri 20 Jun 2025 09:30:30 +0000 ROA not before: Fri 20 Jun 2025 09:30:30 +0000 ROA not after: Thu 18 Sep 2025 09:30:30 +0000 asID: 22773 IP address blocks: 68.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:c0:88:4f:80:29:ea:84:04:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:30 2025 GMT Not After : Sep 18 09:30:30 2025 GMT Subject: CN=ca2623d3-07a3-4c0e-a859-4ef215811256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:df:dc:74:f8:82:1c:9b:46:3c:61:bd:9f: 6c:79:36:b8:a0:aa:37:d2:68:32:a4:7c:58:47:9d: b0:a2:d0:e2:18:d7:55:fd:25:b3:ad:0b:78:20:c4: 9d:d5:3c:e1:a9:34:1f:ac:2e:6f:e3:8b:f2:72:68: b4:30:a4:b7:8d:fb:f8:6d:f7:f6:19:1a:80:84:2e: be:9e:40:48:8a:d7:43:22:aa:6e:a7:28:6e:9e:a1: 52:79:0b:ff:9a:fe:9e:d0:44:1e:bb:77:30:22:cd: 0c:79:57:15:f6:c3:50:26:d8:b8:02:29:35:7b:47: f5:ff:c9:64:cb:6c:2e:1f:76:dc:43:1d:36:d1:51: 14:b4:3b:d1:24:a1:60:ca:51:bb:02:d1:d6:bc:16: 4c:7c:bb:33:b1:27:d3:7d:40:9c:81:f8:39:bc:7e: 25:e7:38:87:6b:96:c2:9d:92:8a:8c:67:7e:e4:73: 8e:e8:77:47:9e:69:5a:25:12:33:3c:d7:90:56:c0: 73:5c:1a:b9:9f:ea:8f:cd:21:f6:a2:ce:6f:f8:15: e6:53:b9:a1:b4:43:2c:2d:42:ba:d0:ca:99:6f:39: 2a:7c:cf:b6:c2:6b:ed:fd:17:27:6b:d0:88:ad:04: ac:c8:3d:40:30:23:2e:3c:c5:12:11:2e:da:e7:d3: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:75:C9:26:4F:83:34:31:62:66:F0:3A:71:65:AE:C2:C7:F2:8F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba5de715-0538-324f-ad05-e28e61e6ec0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:de:a8:ab:47:ec:ab:f7:95:89:ef:92:c9:e1:34:d7:c4:5e: 79:f7:6f:dd:eb:39:aa:1d:9e:8e:a2:9a:d2:05:4c:dc:97:b4: 0e:56:c3:f2:72:2b:3b:21:52:20:0b:ad:27:87:96:15:40:b8: ea:8e:84:0a:35:be:b0:30:f6:2f:35:72:6b:33:2b:83:cd:59: c1:e4:56:f4:58:fd:38:d1:2c:0e:5b:34:0a:ce:ad:f2:d9:67: 17:4d:8b:3f:5a:08:da:4b:38:ad:e5:e7:6f:15:45:ff:6d:a8: d6:f0:ce:db:fc:ac:0c:e7:d6:61:2c:72:24:a2:53:f2:7a:89: 34:56:8a:18:7a:d5:4e:1f:ad:06:bd:3f:56:98:fc:4c:94:23: 81:c1:bc:a3:cd:48:45:99:42:24:d7:15:d0:f5:4b:86:1b:04: 5f:1e:b0:db:ab:0c:2d:6b:23:9c:9a:0a:61:64:7c:32:e3:b1: 64:58:96:2b:c0:a2:ca:ab:b0:a4:14:ec:15:dd:28:e2:72:db: 37:b6:c8:e2:72:33:d5:9b:50:e2:ff:22:78:c1:c9:a7:3c:19: 05:ae:6e:27:1c:9f:cc:f4:a9:2e:08:05:d1:8a:b0:ea:0c:70: 3f:b0:bb:e9:2f:0d:e2:a3:33:72:ff:4e:fa:dc:60:84:c0:3f: a5:43:0b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp8CIT4Ap6oQEysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAzMFoXDTI1MDkxODA5MzAzMFowLzEtMCsGA1UEAxMk Y2EyNjIzZDMtMDdhMy00YzBlLWE4NTktNGVmMjE1ODExMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8/f3HT4ghybRjxhvZ9seTa4oKo30mgypHxY R52wotDiGNdV/SWzrQt4IMSd1TzhqTQfrC5v44vycmi0MKS3jfv4bff2GRqAhC6+ nkBIitdDIqpupyhunqFSeQv/mv6e0EQeu3cwIs0MeVcV9sNQJti4Aik1e0f1/8lk y2wuH3bcQx020VEUtDvRJKFgylG7AtHWvBZMfLszsSfTfUCcgfg5vH4l5ziHa5bC nZKKjGd+5HOO6HdHnmlaJRIzPNeQVsBzXBq5n+qPzSH2os5v+BXmU7mhtEMsLUK6 0MqZbzkqfM+2wmvt/Rcna9CIrQSsyD1AMCMuPMUSES7a59MZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp1ySZPgzQxYmbwOnFlrsLH8o8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE1ZGU3MTUtMDUzOC0z MjRmLWFkMDUtZTI4ZTYxZTZlYzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLeqKtH7Kv3lYnvksnhNNfEXnn3b93rOaodno6imtIFTNyXtA5Ww/Jy KzshUiALrSeHlhVAuOqOhAo1vrAw9i81cmszK4PNWcHkVvRY/TjRLA5bNArOrfLZ ZxdNiz9aCNpLOK3l528VRf9tqNbwztv8rAzn1mEsciSiU/J6iTRWihh61U4frQa9 P1aY/EyUI4HBvKPNSEWZQiTXFdD1S4YbBF8esNurDC1rI5yaCmFkfDLjsWRYlivA osqrsKQU7BXdKOJy2ze2yOJyM9WbUOL/InjByac8GQWubiccn8z0qS4IBdGKsOoM cD+wu+kvDeKjM3L/TvrcYITAP6VDC4o= -----END CERTIFICATE-----Generated at Wed Jul 2 06:07:25 2025 by rpki-client