$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8759743-238d-3f3a-9a3e-44a87dc15816.roa File: c8759743-238d-3f3a-9a3e-44a87dc15816.roa (raw, json) Hash identifier: dETNEKZvY089FB93JZ6QHX54Pwj9G8+Gt1FvMWe7PHM= Subject key identifier: 39:39:70:EB:B5:DC:D5:9D:7F:6A:A1:A1:04:F0:BF:C8:28:94:D2:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7481CADC439B0B01BEE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8759743-238d-3f3a-9a3e-44a87dc15816.roa Signing time: Fri 20 Jun 2025 09:29:33 +0000 ROA not before: Fri 20 Jun 2025 09:29:33 +0000 ROA not after: Thu 18 Sep 2025 09:29:33 +0000 asID: 22773 IP address blocks: 68.108.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:48:1c:ad:c4:39:b0:b0:1b:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:33 2025 GMT Not After : Sep 18 09:29:33 2025 GMT Subject: CN=0db092ee-599b-4e3c-8c71-598cdacf62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:e3:e8:e5:a3:92:ae:b1:e2:8a:4d:75:80: 58:c0:12:c2:d8:29:b7:09:e4:bd:14:f5:0b:96:90: ee:f2:92:b4:97:7a:2b:71:18:63:50:0b:02:5d:38: 20:9a:37:64:11:64:56:a0:3d:2d:e9:29:d7:13:ce: 65:6b:c2:9e:46:99:f4:b0:5a:35:dc:e4:f1:34:36: bf:3c:29:b8:d0:41:49:c5:b0:b4:ad:0a:f9:f4:8d: ef:c2:e3:f5:f2:3c:76:a5:0d:b3:c4:c6:ae:37:04: 0a:76:7e:17:b5:ee:e1:a1:0c:81:15:10:65:47:d5: cf:e7:f1:74:49:db:5a:03:03:00:17:ba:1f:39:e5: 57:80:ee:9b:ce:ea:21:30:d0:cc:82:82:b0:4d:a1: 50:1a:5d:b6:c5:06:7f:1b:e0:32:e0:41:c1:22:9b: f2:97:39:0b:06:93:0a:cd:d5:13:ef:43:e5:9d:a7: 2b:6c:e8:20:c7:78:f2:6d:26:4c:db:8f:c9:81:eb: c4:1b:79:84:d0:88:40:53:aa:07:bb:4f:e9:aa:27: 39:e6:aa:8a:51:09:2e:6b:44:07:e0:5d:53:47:89: a4:10:8e:15:f7:9f:ae:92:ee:b6:8d:89:7f:74:0f: be:3c:8d:d9:7b:12:5a:96:8a:43:ae:eb:a1:35:ad: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:39:70:EB:B5:DC:D5:9D:7F:6A:A1:A1:04:F0:BF:C8:28:94:D2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8759743-238d-3f3a-9a3e-44a87dc15816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:55:00:5d:59:9c:69:ca:9e:26:b9:b6:93:6e:df:f2:e0:66: 36:05:fd:48:c4:91:6f:2f:7d:25:03:97:89:e4:23:6b:f6:ea: 34:a9:fb:b2:11:fe:61:33:f3:be:fd:5e:ad:de:64:bf:46:3d: ed:4d:40:5c:c3:93:c8:83:bb:77:bd:dc:6d:98:35:c7:58:94: d6:cb:e6:15:1c:bb:48:f5:8d:8b:05:0e:b5:49:62:41:73:71: 78:cc:3e:a4:7d:c4:5b:77:6e:13:91:d0:d0:dd:a2:a1:78:45: ba:67:04:77:df:91:9d:59:30:3a:5c:69:e2:7e:87:72:c1:59: 64:ce:0f:95:b2:5b:92:04:28:31:c6:1f:f9:ce:59:ec:ff:4b: 13:be:96:4e:b5:f9:f8:2c:d5:f1:51:69:4d:35:b5:35:82:f8: 6f:94:84:a5:b2:73:c0:06:4f:f6:ad:81:dd:e7:7d:bd:27:37: 0c:3f:26:c6:20:17:a2:7b:42:9f:8f:a0:29:87:db:e9:4d:d9: 5c:79:84:ef:a1:d5:fb:ba:b4:6d:cb:b0:b2:0e:70:2f:a3:43: e9:d3:31:0f:b6:2e:7a:af:4c:28:89:22:14:23:c2:1b:69:35: ba:41:c0:44:04:49:c9:09:3b:6e:86:cc:3e:8c:c7:3c:ea:25: 19:a7:db:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp0gcrcQ5sLAb7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkzM1oXDTI1MDkxODA5MjkzM1owLzEtMCsGA1UEAxMk MGRiMDkyZWUtNTk5Yi00ZTNjLThjNzEtNTk4Y2RhY2Y2MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHj6OWjkq6x4opNdYBYwBLC2Cm3CeS9FPUL lpDu8pK0l3orcRhjUAsCXTggmjdkEWRWoD0t6SnXE85la8KeRpn0sFo13OTxNDa/ PCm40EFJxbC0rQr59I3vwuP18jx2pQ2zxMauNwQKdn4Xte7hoQyBFRBlR9XP5/F0 SdtaAwMAF7ofOeVXgO6bzuohMNDMgoKwTaFQGl22xQZ/G+Ay4EHBIpvylzkLBpMK zdUT70PlnacrbOggx3jybSZM24/JgevEG3mE0IhAU6oHu0/pqic55qqKUQkua0QH 4F1TR4mkEI4V95+uku62jYl/dA++PI3ZexJalopDruuhNa24iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk5cOu13NWdf2qhoQTwv8golNLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzg3NTk3NDMtMjM4ZC0z ZjNhLTlhM2UtNDRhODdkYzE1ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5VAF1ZnGnKnia5tpNu3/LgZjYF/UjEkW8vfSUDl4nkI2v26jSp+7IR /mEz8779Xq3eZL9GPe1NQFzDk8iDu3e93G2YNcdYlNbL5hUcu0j1jYsFDrVJYkFz cXjMPqR9xFt3bhOR0NDdoqF4RbpnBHffkZ1ZMDpcaeJ+h3LBWWTOD5WyW5IEKDHG H/nOWez/SxO+lk61+fgs1fFRaU01tTWC+G+UhKWyc8AGT/atgd3nfb0nNww/JsYg F6J7Qp+PoCmH2+lN2Vx5hO+h1fu6tG3LsLIOcC+jQ+nTMQ+2LnqvTCiJIhQjwhtp NbpBwEQESckJO26GzD6MxzzqJRmn25k= -----END CERTIFICATE-----Generated at Wed Jul 2 14:36:02 2025 by rpki-client