$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e09c03e0-8bd3-3392-b93f-708aa5634572.roa File: e09c03e0-8bd3-3392-b93f-708aa5634572.roa (raw, json) Hash identifier: PGuEbPP1HaGwwvJe85oTslwL/CWa70ztw8SGZ5Nzu5s= Subject key identifier: 61:A4:07:C6:0B:79:37:6E:5F:1D:2B:D2:C2:B6:24:4A:1E:FE:51:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD68DEB55EE7D0C32F995C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e09c03e0-8bd3-3392-b93f-708aa5634572.roa Signing time: Thu 19 Jun 2025 09:17:22 +0000 ROA not before: Thu 19 Jun 2025 09:17:22 +0000 ROA not after: Wed 17 Sep 2025 09:17:22 +0000 asID: 22773 IP address blocks: 68.228.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:8d:eb:55:ee:7d:0c:32:f9:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:22 2025 GMT Not After : Sep 17 09:17:22 2025 GMT Subject: CN=7aaec87e-07c3-4af4-839e-2957867a5f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:5a:d0:e8:45:ad:ea:fe:a0:13:8d:a0:12: 42:c0:fc:d8:df:e4:15:38:cc:99:e5:de:5b:f2:4b: 38:27:c1:e6:42:5c:f3:35:9b:3a:6d:96:f7:b6:0f: 8e:d9:19:68:92:3b:8b:68:dd:4c:28:14:a7:9d:c0: b6:0a:0c:c2:f5:31:ce:a1:da:0f:b1:0b:e9:06:b9: 4e:94:1e:cd:d2:eb:3d:47:d7:f1:a6:e3:cc:85:76: f4:c8:dd:1a:10:f4:1b:09:26:6c:89:06:f1:4b:c4: c5:ae:91:61:c4:d0:9d:ab:2a:40:b9:82:6a:3b:d3: 67:b8:61:f2:46:84:43:76:2c:6c:32:68:be:1a:f1: 8d:f2:2f:29:68:c4:90:08:a8:8c:89:17:c2:d8:6a: 89:06:88:ea:31:ef:12:d4:e2:d4:35:3d:5b:24:07: 11:20:40:0e:48:bc:95:19:7f:3f:6c:e7:c4:76:f3: 02:b8:a7:ef:23:93:67:c5:4e:e7:4f:78:bc:75:e6: 74:78:52:5a:f3:70:e8:e7:ce:49:21:5e:f0:ac:8c: 68:01:3f:81:32:72:db:21:cc:a3:2d:a8:52:4c:59: 54:87:b8:99:be:0b:66:d0:95:83:2f:38:a0:87:40: f7:2a:46:28:21:8e:19:e6:dc:bd:80:cf:97:1e:85: 5e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A4:07:C6:0B:79:37:6E:5F:1D:2B:D2:C2:B6:24:4A:1E:FE:51:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e09c03e0-8bd3-3392-b93f-708aa5634572.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:39:f9:6f:cb:fd:4c:03:90:d9:41:6d:1e:8d:b5:f5:88:25: ad:94:37:ec:48:9a:85:49:14:c5:0f:b2:f3:c8:d8:06:b7:fb: 83:5c:03:01:8c:b9:ee:38:22:2c:ed:03:76:bd:9d:77:ce:c7: 70:01:b4:11:99:ea:9f:da:ce:3a:b8:58:fc:b5:f0:39:24:a2: e8:a5:8c:87:78:08:40:f6:d9:0e:e0:f7:c7:65:80:37:d5:d3: 01:8f:b1:8c:cc:74:e3:92:2f:e6:ab:96:95:c2:8c:d7:d6:b7: 4b:67:58:f8:2a:49:79:ad:c9:02:f5:a9:d6:fd:04:b9:63:39: 31:2e:24:d4:6f:65:05:b3:db:74:76:5b:46:18:7c:09:13:e4: 0f:4a:6d:67:bf:a0:f9:24:97:72:26:13:62:02:14:12:d6:2e: 5a:d7:47:d1:7b:a8:84:bb:aa:ef:0d:67:36:74:b4:48:37:b8: eb:d4:35:25:5e:09:a8:34:7f:12:95:c4:29:3e:b3:39:34:3d: b5:7b:50:45:7e:df:99:5c:6f:03:2a:f9:63:e4:e5:88:80:10: 56:a8:b7:54:24:c4:48:a8:17:53:8e:2b:c9:3c:c1:59:08:9a: 82:20:4d:3a:f3:a0:8c:92:cc:9a:d2:2f:7e:04:be:0c:d8:ea: 7d:62:78:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91o3rVe59DDL5lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcyMloXDTI1MDkxNzA5MTcyMlowLzEtMCsGA1UEAxMk N2FhZWM4N2UtMDdjMy00YWY0LTgzOWUtMjk1Nzg2N2E1ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivta0OhFrer+oBONoBJCwPzY3+QVOMyZ5d5b 8ks4J8HmQlzzNZs6bZb3tg+O2RlokjuLaN1MKBSnncC2CgzC9THOodoPsQvpBrlO lB7N0us9R9fxpuPMhXb0yN0aEPQbCSZsiQbxS8TFrpFhxNCdqypAuYJqO9NnuGHy RoRDdixsMmi+GvGN8i8paMSQCKiMiRfC2GqJBojqMe8S1OLUNT1bJAcRIEAOSLyV GX8/bOfEdvMCuKfvI5NnxU7nT3i8deZ0eFJa83Do585JIV7wrIxoAT+BMnLbIcyj LahSTFlUh7iZvgtm0JWDLzigh0D3KkYoIY4Z5ty9gM+XHoVeGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGkB8YLeTduXx0r0sK2JEoe/lG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTA5YzAzZTAtOGJkMy0z MzkyLWI5M2YtNzA4YWE1NjM0NTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM5+W/L/UwDkNlBbR6NtfWIJa2UN+xImoVJFMUPsvPI2Aa3+4NcAwGM ue44IiztA3a9nXfOx3ABtBGZ6p/azjq4WPy18DkkouiljId4CED22Q7g98dlgDfV 0wGPsYzMdOOSL+arlpXCjNfWt0tnWPgqSXmtyQL1qdb9BLljOTEuJNRvZQWz23R2 W0YYfAkT5A9KbWe/oPkkl3ImE2ICFBLWLlrXR9F7qIS7qu8NZzZ0tEg3uOvUNSVe Cag0fxKVxCk+szk0PbV7UEV+35lcbwMq+WPk5YiAEFaot1QkxEioF1OOK8k8wVkI moIgTTrzoIySzJrSL34EvgzY6n1ieDA= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:00 2025 by rpki-client