$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1f51858-ad75-3057-93af-426aefe379ba.roa File: c1f51858-ad75-3057-93af-426aefe379ba.roa (raw, json) Hash identifier: g/sYlHxrVcWdOpfdKcSYshvEruAWuGVg5iAdYTllTZQ= Subject key identifier: F6:5F:21:DA:7A:B4:8A:3A:2B:60:37:2A:13:44:A7:EF:F6:1A:87:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A75D3A7B7F17CA6E397800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1f51858-ad75-3057-93af-426aefe379ba.roa Signing time: Fri 20 Jun 2025 09:29:43 +0000 ROA not before: Fri 20 Jun 2025 09:29:43 +0000 ROA not after: Thu 18 Sep 2025 09:29:43 +0000 asID: 22773 IP address blocks: 68.108.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:5d:3a:7b:7f:17:ca:6e:39:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:43 2025 GMT Not After : Sep 18 09:29:43 2025 GMT Subject: CN=da612ad8-efa2-4d4e-9380-505a57990445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:16:b9:68:c1:2f:54:77:a8:65:b3:d6:6b: 7c:cf:ea:cf:06:05:f2:27:b9:1b:c1:55:ea:73:14: 0d:55:d8:d1:a2:0d:3a:83:68:01:cc:0c:9e:21:ab: 82:e7:1e:89:3f:61:93:a4:46:c6:4f:35:74:1b:1c: 25:93:e8:05:d6:b8:43:71:88:87:d6:11:cb:df:43: fc:25:77:47:ac:e3:91:be:29:2e:73:00:db:97:9e: 96:d2:57:1f:fd:51:52:c0:e1:38:9d:ef:30:e2:44: 59:16:c2:a1:be:59:00:7e:b2:db:06:40:43:ce:09: cb:5b:98:40:9c:c7:ec:59:f7:61:eb:4e:62:c8:26: 37:e6:b4:64:14:a3:b8:e0:49:20:12:23:f1:b9:d1: 8f:9a:b6:2e:d2:0a:1b:d4:93:77:83:e2:1e:f8:a4: 95:a1:0e:e8:14:b9:33:da:48:72:17:e1:c3:b8:61: fc:f3:83:7e:f9:57:1c:3d:a1:1e:7a:d7:e7:5c:91: 01:cd:85:19:f8:66:b4:c7:dd:c6:3b:11:39:c0:cf: cf:58:bd:46:86:0b:8f:8a:a7:ca:e1:67:aa:89:af: 17:d3:67:7e:76:10:ce:89:e5:da:49:df:1a:84:a7: 01:65:c6:12:6e:40:e3:17:99:ca:fa:a7:dd:89:19: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5F:21:DA:7A:B4:8A:3A:2B:60:37:2A:13:44:A7:EF:F6:1A:87:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1f51858-ad75-3057-93af-426aefe379ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8b:36:e1:56:81:a2:e6:26:ed:6c:83:1c:47:ff:f9:8e:7e: 07:52:75:52:eb:d5:0e:cd:55:5a:c1:0c:30:ef:ed:85:80:10: 17:75:ae:4a:b3:1a:10:e3:2a:b7:d5:d3:45:af:86:02:42:de: b5:f9:4c:16:d8:d9:46:17:5e:7a:8f:58:78:c7:8d:98:c1:f3: 2a:fe:e9:ac:5b:0f:b4:22:74:62:fd:e4:81:42:c4:c4:6f:d6: f4:b5:6e:29:00:bf:41:f2:b3:be:d2:1a:7b:72:8d:c8:a1:a9: 0d:61:20:0f:54:25:7b:19:06:be:d6:e7:ee:56:a8:5e:b6:01: 46:db:ab:46:41:69:5c:7e:95:e6:26:03:1b:7e:c1:0a:1c:45: 33:83:06:07:8b:12:2f:d7:c2:f1:ba:e2:22:c5:ff:36:ef:70: 28:b0:a9:c2:d4:f4:8b:4a:c1:0c:2c:23:52:6d:4e:24:fd:36: 88:2e:6a:90:c6:6c:f0:b0:84:a5:7f:a0:65:96:98:c7:49:3f: 15:10:f6:40:f1:c7:9b:58:eb:50:14:e0:e0:76:7d:8d:7e:e5: 48:fa:35:24:53:75:e2:42:67:6d:db:df:24:3f:c5:72:61:49: c0:77:ca:f8:c0:1f:54:97:2b:a3:c7:3f:e2:35:67:b4:25:36: a0:dd:3b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp106e38Xym45eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0M1oXDTI1MDkxODA5Mjk0M1owLzEtMCsGA1UEAxMk ZGE2MTJhZDgtZWZhMi00ZDRlLTkzODAtNTA1YTU3OTkwNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZsWuWjBL1R3qGWz1mt8z+rPBgXyJ7kbwVXq cxQNVdjRog06g2gBzAyeIauC5x6JP2GTpEbGTzV0Gxwlk+gF1rhDcYiH1hHL30P8 JXdHrOORvikucwDbl56W0lcf/VFSwOE4ne8w4kRZFsKhvlkAfrLbBkBDzgnLW5hA nMfsWfdh605iyCY35rRkFKO44EkgEiPxudGPmrYu0gob1JN3g+Ie+KSVoQ7oFLkz 2khyF+HDuGH884N++VccPaEeetfnXJEBzYUZ+Ga0x93GOxE5wM/PWL1GhguPiqfK 4Weqia8X02d+dhDOieXaSd8ahKcBZcYSbkDjF5nK+qfdiRlKUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZfIdp6tIo6K2A3KhNEp+/2Goc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFmNTE4NTgtYWQ3NS0z MDU3LTkzYWYtNDI2YWVmZTM3OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaLNuFWgaLmJu1sgxxH//mOfgdSdVLr1Q7NVVrBDDDv7YWAEBd1rkqz GhDjKrfV00WvhgJC3rX5TBbY2UYXXnqPWHjHjZjB8yr+6axbD7QidGL95IFCxMRv 1vS1bikAv0Hys77SGntyjcihqQ1hIA9UJXsZBr7W5+5WqF62AUbbq0ZBaVx+leYm Axt+wQocRTODBgeLEi/XwvG64iLF/zbvcCiwqcLU9ItKwQwsI1JtTiT9NoguapDG bPCwhKV/oGWWmMdJPxUQ9kDxx5tY61AU4OB2fY1+5Uj6NSRTdeJCZ23b3yQ/xXJh ScB3yvjAH1SXK6PHP+I1Z7QlNqDdO6s= -----END CERTIFICATE-----Generated at Wed Jul 2 10:23:57 2025 by rpki-client