$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6cee4d1-da0e-37be-9c0f-221715001984.roa File: f6cee4d1-da0e-37be-9c0f-221715001984.roa (raw, json) Hash identifier: kYRkLuI6uvnoRLubFRbY4gJ9eySngZ03u3L1sEC2js8= Subject key identifier: 42:70:A6:89:A3:30:7E:B7:CE:00:15:41:7A:CB:3A:7A:69:46:E7:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A79B43E5B8C4F926681300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6cee4d1-da0e-37be-9c0f-221715001984.roa Signing time: Fri 20 Jun 2025 09:30:12 +0000 ROA not before: Fri 20 Jun 2025 09:30:12 +0000 ROA not after: Thu 18 Sep 2025 09:30:12 +0000 asID: 22773 IP address blocks: 68.224.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:9b:43:e5:b8:c4:f9:26:68:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:12 2025 GMT Not After : Sep 18 09:30:12 2025 GMT Subject: CN=f097d53f-616f-4483-a9bf-4040a6f21b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:4d:f3:8c:49:a2:2e:4b:78:e3:36:91:f2: 74:e0:85:fe:8c:d1:a4:37:7b:7d:bf:fb:ca:d5:b0: f5:33:f1:57:f0:a8:3f:17:16:20:c8:30:f5:33:5d: 9f:97:f2:db:0f:fd:5d:06:0f:bd:8f:15:37:4a:9c: 24:d1:5c:58:a1:86:c1:68:4f:e0:46:37:bc:30:42: 1e:16:3c:b0:f9:31:41:e4:b6:0b:65:69:ca:38:29: 75:98:ed:8a:88:8a:8e:87:b4:7e:e3:de:d4:9b:a3: 9b:8e:11:4d:0f:9b:69:94:06:b7:48:23:b6:ea:c0: 01:70:32:0c:ac:53:58:99:42:e3:05:e3:78:e5:d6: c5:24:fe:3b:f4:09:c1:ba:27:ad:6b:80:19:30:23: fe:f1:f3:1b:4b:0d:b2:39:1a:91:99:77:a6:f9:a2: 46:eb:54:f9:cc:7e:07:e9:59:07:c9:93:ab:01:8f: 13:ff:9a:5b:44:8d:88:be:3c:f9:5b:08:32:d8:03: 3f:d1:e5:25:b2:fd:57:ea:db:20:84:8b:98:cf:f8: c6:15:05:7c:a5:ac:0e:c6:ee:98:2f:4c:1c:a0:5f: 5d:57:c4:48:cc:b7:9b:22:9d:ec:45:f7:e0:ab:ef: c8:ce:69:dd:bf:de:73:70:ff:06:34:41:ee:d8:cc: 34:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:70:A6:89:A3:30:7E:B7:CE:00:15:41:7A:CB:3A:7A:69:46:E7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6cee4d1-da0e-37be-9c0f-221715001984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:55:e4:82:d7:75:f9:63:e9:ae:a0:6d:46:54:e8:a0:c6:78: f7:e2:63:25:f2:10:43:06:bb:40:b4:df:bd:38:ca:0f:b2:7c: 49:bb:b2:80:18:49:05:6b:41:04:88:ef:7a:be:d3:c9:1f:f6: c2:a3:5b:72:b6:36:d5:b5:fa:12:e1:43:d7:3c:a0:5c:cb:b2: 5c:53:04:d1:f7:49:ac:bd:02:86:e6:ab:23:26:f4:de:4d:ee: 9b:ad:6d:9c:8d:e9:14:00:6d:b0:25:0f:86:c2:48:2e:e5:49: 49:0b:e9:85:22:3c:0f:2a:9e:f5:e9:25:dd:a5:8b:28:79:e6: 8f:e2:74:9f:a5:41:80:44:65:ee:2f:08:ce:48:c4:bb:c4:b3: f1:1a:a3:99:3c:21:f1:b5:82:e2:82:c7:d5:96:27:a7:91:f5: 59:a6:59:e3:53:f6:c5:39:ea:9c:04:2b:f8:75:24:f8:45:02: 1b:b6:b7:a9:47:66:10:51:04:4a:b2:81:c6:3e:62:65:4a:f9: bf:9b:a7:97:37:43:95:85:9c:3c:e1:77:e2:c0:9a:8a:c1:ab: 3f:1e:51:b8:85:9d:86:77:5a:84:13:5b:4a:b7:b2:bb:39:ef: 78:03:cb:68:75:87:e2:c9:40:23:69:39:b1:16:f1:ef:c8:df: b4:f3:ec:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp5tD5bjE+SZoEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAxMloXDTI1MDkxODA5MzAxMlowLzEtMCsGA1UEAxMk ZjA5N2Q1M2YtNjE2Zi00NDgzLWE5YmYtNDA0MGE2ZjIxYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj21N84xJoi5LeOM2kfJ04IX+jNGkN3t9v/vK 1bD1M/FX8Kg/FxYgyDD1M12fl/LbD/1dBg+9jxU3Spwk0VxYoYbBaE/gRje8MEIe Fjyw+TFB5LYLZWnKOCl1mO2KiIqOh7R+497Um6ObjhFND5tplAa3SCO26sABcDIM rFNYmULjBeN45dbFJP479AnBuieta4AZMCP+8fMbSw2yORqRmXem+aJG61T5zH4H 6VkHyZOrAY8T/5pbRI2Ivjz5Wwgy2AM/0eUlsv1X6tsghIuYz/jGFQV8pawOxu6Y L0wcoF9dV8RIzLebIp3sRffgq+/Izmndv95zcP8GNEHu2Mw06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJwpomjMH63zgAVQXrLOnppRue1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjZjZWU0ZDEtZGEwZS0z N2JlLTljMGYtMjIxNzE1MDAxOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlV5ILXdflj6a6gbUZU6KDGePfiYyXyEEMGu0C03704yg+yfEm7soAY SQVrQQSI73q+08kf9sKjW3K2NtW1+hLhQ9c8oFzLslxTBNH3Say9AobmqyMm9N5N 7putbZyN6RQAbbAlD4bCSC7lSUkL6YUiPA8qnvXpJd2liyh55o/idJ+lQYBEZe4v CM5IxLvEs/Eao5k8IfG1guKCx9WWJ6eR9VmmWeNT9sU56pwEK/h1JPhFAhu2t6lH ZhBRBEqygcY+YmVK+b+bp5c3Q5WFnDzhd+LAmorBqz8eUbiFnYZ3WoQTW0q3srs5 73gDy2h1h+LJQCNpObEW8e/I37Tz7O8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:11:18 2025 by rpki-client