$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa File: db3f4236-658c-369a-8951-e6253effe417.roa (raw, json) Hash identifier: Q/CNTnFvQwWO046mS26FS4+P1wKjG15jBc32nKlx0Ws= Subject key identifier: 0E:9D:BC:EC:0C:2F:D0:21:71:62:1E:59:22:2F:78:6D:FB:76:54:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A75709EC1A8E757686CE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa Signing time: Fri 20 Jun 2025 09:29:40 +0000 ROA not before: Fri 20 Jun 2025 09:29:40 +0000 ROA not after: Thu 18 Sep 2025 09:29:40 +0000 asID: 22773 IP address blocks: 68.108.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:57:09:ec:1a:8e:75:76:86:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:40 2025 GMT Not After : Sep 18 09:29:40 2025 GMT Subject: CN=5f182589-85b1-4991-8782-4aa525893a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:b1:70:23:78:6b:c5:17:e5:82:20:1c:d7: d8:46:db:3a:28:d6:aa:35:56:f9:34:d6:99:7f:a4: 62:9f:d7:e6:a6:36:e4:b4:8c:ac:76:78:8d:32:72: 61:04:78:46:6e:59:b0:cd:80:d0:33:51:ab:db:1c: 1a:80:1a:ad:44:8e:fa:d8:90:2b:95:62:a0:86:44: 28:0f:4c:56:11:0f:49:01:0d:4c:80:43:69:2d:bf: c5:86:49:39:7f:1a:3e:24:a0:f8:12:cf:01:69:26: 3b:07:4b:f9:30:2d:5d:8f:4b:9f:2f:ad:0d:dd:bd: 4a:fc:b7:3b:76:c3:f8:b1:a7:6a:48:b4:47:98:14: 4c:03:a2:54:50:43:23:ce:b6:eb:45:6c:17:dc:94: 8f:ed:31:43:f0:98:00:02:45:ef:6a:a4:70:7c:ee: c3:e1:a1:b7:76:47:fb:7f:d0:f7:ec:78:bf:63:59: 7a:b3:54:34:62:7f:45:fd:55:13:3e:2b:a0:de:a7: 15:bf:6d:10:94:d4:84:6d:3c:84:17:82:cf:64:42: 50:e9:cf:c8:87:8a:49:13:eb:30:21:c5:21:44:fc: 6d:9f:15:65:16:5d:ff:15:e6:aa:a8:a7:42:42:ba: 5a:d4:d9:17:51:32:14:00:e6:25:8f:10:80:0d:81: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9D:BC:EC:0C:2F:D0:21:71:62:1E:59:22:2F:78:6D:FB:76:54:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a3:bf:28:ee:38:fd:4c:c6:35:00:1d:8f:5e:61:31:e4:7e: c7:ca:87:e0:63:0b:cb:f6:b5:56:1d:e3:98:0c:e4:2a:6e:98: 45:9b:f0:9f:3c:55:e8:e5:73:fe:c2:e3:55:d7:0b:10:1d:2a: b6:bf:dd:13:46:d2:4f:82:a5:59:12:bc:41:ed:e2:15:c7:78: 39:4e:af:30:6d:c4:53:fd:7e:41:cc:59:64:8e:92:3e:a5:23: 73:f1:6d:b1:62:c0:74:14:79:03:5a:93:40:1b:0c:14:e4:16: 32:e2:19:cf:d3:77:c2:c6:8d:3d:a4:7d:e6:cd:63:fc:2e:dd: 0d:1c:b8:dc:4f:97:16:f3:97:9c:9e:73:b9:e8:c3:cc:4d:3b: 7d:8c:fd:e3:a9:9f:9f:88:6f:80:43:20:3b:ef:8f:84:3d:59: fd:f3:74:75:fc:8f:55:d7:ef:9c:ec:bc:25:b7:2f:07:c4:56: 5b:2b:31:3d:0e:f2:86:50:46:21:7e:08:ed:6c:5c:37:ba:f4: a1:fe:73:70:44:4b:b0:5c:66:ad:51:d7:c2:6c:bc:2e:e9:5d: 3a:c6:7e:27:99:e2:2e:13:c8:01:1e:9b:a6:de:c7:17:40:7b: c4:64:15:31:a5:02:aa:59:bb:17:c8:f5:d1:0c:24:97:33:81: 4a:d8:bf:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp1cJ7BqOdXaGzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk0MFoXDTI1MDkxODA5Mjk0MFowLzEtMCsGA1UEAxMk NWYxODI1ODktODViMS00OTkxLTg3ODItNGFhNTI1ODkzYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuaxcCN4a8UX5YIgHNfYRts6KNaqNVb5NNaZ f6Rin9fmpjbktIysdniNMnJhBHhGblmwzYDQM1Gr2xwagBqtRI762JArlWKghkQo D0xWEQ9JAQ1MgENpLb/Fhkk5fxo+JKD4Es8BaSY7B0v5MC1dj0ufL60N3b1K/Lc7 dsP4sadqSLRHmBRMA6JUUEMjzrbrRWwX3JSP7TFD8JgAAkXvaqRwfO7D4aG3dkf7 f9D37Hi/Y1l6s1Q0Yn9F/VUTPiug3qcVv20QlNSEbTyEF4LPZEJQ6c/Ih4pJE+sw IcUhRPxtnxVlFl3/FeaqqKdCQrpa1NkXUTIUAOYljxCADYHBxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6dvOwML9AhcWIeWSIveG37dlS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGIzZjQyMzYtNjU4Yy0z NjlhLTg5NTEtZTYyNTNlZmZlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqjvyjuOP1MxjUAHY9eYTHkfsfKh+BjC8v2tVYd45gM5CpumEWb8J88 Vejlc/7C41XXCxAdKra/3RNG0k+CpVkSvEHt4hXHeDlOrzBtxFP9fkHMWWSOkj6l I3PxbbFiwHQUeQNak0AbDBTkFjLiGc/Td8LGjT2kfebNY/wu3Q0cuNxPlxbzl5ye c7now8xNO32M/eOpn5+Ib4BDIDvvj4Q9Wf3zdHX8j1XX75zsvCW3LwfEVlsrMT0O 8oZQRiF+CO1sXDe69KH+c3BES7BcZq1R18JsvC7pXTrGfieZ4i4TyAEem6bexxdA e8RkFTGlAqpZuxfI9dEMJJczgUrYv5I= -----END CERTIFICATE-----Generated at Wed Jul 2 15:14:09 2025 by rpki-client