$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3b95324-dd21-3392-9c88-98d6276f5cd8.roa File: c3b95324-dd21-3392-9c88-98d6276f5cd8.roa (raw, json) Hash identifier: gqSrhHsZdk41tGae0hgdo3KVC8UK1FskFjAYilgMaKE= Subject key identifier: 33:4A:25:50:62:2B:C5:94:EB:48:40:C2:EC:96:58:36:24:1E:D8:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6688F0DCE08E52C727200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3b95324-dd21-3392-9c88-98d6276f5cd8.roa Signing time: Thu 19 Jun 2025 09:17:05 +0000 ROA not before: Thu 19 Jun 2025 09:17:05 +0000 ROA not after: Wed 17 Sep 2025 09:17:05 +0000 asID: 22773 IP address blocks: 68.227.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:68:8f:0d:ce:08:e5:2c:72:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:05 2025 GMT Not After : Sep 17 09:17:05 2025 GMT Subject: CN=df8e7f9a-ebdb-492e-8b89-3f31851a77a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:1e:bb:2d:47:42:f9:e0:5c:66:36:43:3a: 53:ea:c0:ee:6e:60:8f:a0:7d:36:59:36:02:f9:d5: 91:4d:36:9f:16:c5:99:31:26:04:85:cc:af:2b:7b: ba:c3:a6:71:a2:23:7d:dd:99:de:d3:9a:37:9f:85: 2a:97:76:f5:a2:27:9e:7d:ad:30:a8:80:59:46:41: a5:b9:88:a0:9f:1d:88:56:6d:31:f4:aa:d3:27:ff: 3d:94:a8:f5:23:08:e2:21:d9:f7:47:a8:c4:6d:5a: 78:71:a2:2e:15:e1:8f:fe:e9:d2:07:81:01:d5:a8: 76:cd:80:f9:50:cd:e9:3c:2e:8b:8a:7e:52:33:3c: 3c:e0:47:3a:a1:bb:a0:79:62:d4:53:73:24:f4:df: e8:39:ee:bf:38:15:db:36:58:e6:22:18:fd:61:4f: fa:ce:62:42:79:df:b1:99:7e:ca:f2:ea:c7:9b:24: 67:42:70:0a:7c:37:6b:83:a5:e3:01:a3:5c:42:4b: be:a1:9c:a1:0c:0d:9b:c1:34:3a:a5:6c:e6:2b:0d: 8e:2e:35:65:7e:f7:3c:9a:ea:5a:44:27:ed:76:fa: 34:6a:81:b5:ea:23:63:8f:40:ff:5c:c4:55:8f:0c: f9:0d:45:e6:56:2d:2f:04:c3:62:f4:7c:dd:5e:7b: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4A:25:50:62:2B:C5:94:EB:48:40:C2:EC:96:58:36:24:1E:D8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3b95324-dd21-3392-9c88-98d6276f5cd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:18:38:f1:3d:34:a2:fe:0c:93:53:a5:a9:59:1f:db:ef:12: 3b:f9:f8:95:a1:3f:e6:32:e6:a4:b8:e2:65:84:4f:5b:d6:e8: 81:fe:a5:b4:e3:05:6c:84:46:73:ae:4a:4a:7f:fe:77:91:46: b2:af:78:3b:73:70:63:2b:04:9b:c1:0c:d6:61:8f:a4:79:dd: f3:7e:1b:41:ac:c8:99:8b:55:6b:f3:85:be:26:2c:4b:1c:16: b8:ae:f6:81:19:00:53:d4:01:80:69:bc:29:6b:28:6b:22:6a: 9d:58:28:36:6e:03:2f:30:5e:b8:39:08:37:f9:1e:e4:a8:de: ab:7c:69:7a:07:50:d9:8d:ef:51:d8:bf:76:44:be:2b:6b:b5: 62:9f:67:e0:83:0c:38:8c:26:72:73:5e:fb:39:fb:b1:07:16: f8:11:5b:9a:d0:76:f3:0e:45:40:15:65:fa:3c:03:2e:90:bb: f9:07:d8:19:14:30:c3:d7:e7:a1:14:d0:26:5b:a3:30:6f:04: 83:b9:ab:e9:53:29:58:f5:3d:d2:2e:50:19:22:ed:8f:08:02: 4d:f3:60:c8:f2:64:40:1e:b3:6b:b0:88:15:ea:0d:fa:b3:f4: dc:4a:f4:46:d2:aa:1b:27:53:3a:67:68:f0:26:32:25:df:64: 0a:db:5d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91miPDc4I5SxycgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcwNVoXDTI1MDkxNzA5MTcwNVowLzEtMCsGA1UEAxMk ZGY4ZTdmOWEtZWJkYi00OTJlLThiODktM2YzMTg1MWE3N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE8euy1HQvngXGY2QzpT6sDubmCPoH02WTYC +dWRTTafFsWZMSYEhcyvK3u6w6ZxoiN93Zne05o3n4Uql3b1oieefa0wqIBZRkGl uYignx2IVm0x9KrTJ/89lKj1IwjiIdn3R6jEbVp4caIuFeGP/unSB4EB1ah2zYD5 UM3pPC6Lin5SMzw84Ec6obugeWLUU3Mk9N/oOe6/OBXbNljmIhj9YU/6zmJCed+x mX7K8urHmyRnQnAKfDdrg6XjAaNcQku+oZyhDA2bwTQ6pWzmKw2OLjVlfvc8mupa RCftdvo0aoG16iNjj0D/XMRVjwz5DUXmVi0vBMNi9HzdXnsywQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNKJVBiK8WU60hAwuyWWDYkHtgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzNiOTUzMjQtZGQyMS0z MzkyLTljODgtOThkNjI3NmY1Y2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQYOPE9NKL+DJNTpalZH9vvEjv5+JWhP+Yy5qS44mWET1vW6IH+pbTj BWyERnOuSkp//neRRrKveDtzcGMrBJvBDNZhj6R53fN+G0GsyJmLVWvzhb4mLEsc Friu9oEZAFPUAYBpvClrKGsiap1YKDZuAy8wXrg5CDf5HuSo3qt8aXoHUNmN71HY v3ZEvitrtWKfZ+CDDDiMJnJzXvs5+7EHFvgRW5rQdvMORUAVZfo8Ay6Qu/kH2BkU MMPX56EU0CZbozBvBIO5q+lTKVj1PdIuUBki7Y8IAk3zYMjyZEAes2uwiBXqDfqz 9NxK9EbSqhsnUzpnaPAmMiXfZArbXTo= -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:55 2025 by rpki-client