$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa File: 7df12012-1386-3a47-89db-6c4f1b6aa143.roa (raw, json) Hash identifier: P53Awx5d4TsEDaB1NNpFRa+/e+wPGvo7kFW2rYMWkFE= Subject key identifier: 62:BA:35:C7:A7:08:97:19:3F:41:F4:F3:1B:E0:72:56:59:61:D3:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849BB0F77254BD74FF541A1A120 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 22773 IP address blocks: 68.228.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:77:25:4b:d7:4f:f5:41:a1:a1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=819ab35f-c0e8-4001-b289-478ddd7e6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:9f:64:be:e4:fe:90:fb:49:5b:6b:55:e3: d5:05:20:1a:cd:97:ef:d6:07:18:a9:44:4f:98:f3: c2:45:cc:34:ca:62:12:c2:cf:2a:ec:cf:1b:53:87: e9:55:a5:17:ae:21:19:ee:71:31:35:5b:b2:35:e4: 1c:0b:27:9a:4c:c9:68:79:8d:ab:63:a0:65:3d:05: 26:f5:8b:3e:96:bf:8b:d2:7d:7a:73:d9:ed:b4:74: 7d:ba:05:bc:15:d2:1b:97:28:44:d1:fb:ac:68:a3: e9:f5:88:f7:92:36:a4:fc:5a:bb:ed:05:1a:7b:6f: 57:f4:3f:e1:a8:5e:ae:cf:7f:b4:4e:fa:fc:77:81: e5:94:21:7c:c3:47:ef:c6:8a:21:77:4c:51:b4:95: e4:61:0b:0b:0c:3c:61:5f:13:a3:41:a8:b2:6c:bc: 1b:df:53:f6:f9:4a:c2:aa:24:ec:d4:ae:8d:73:05: e9:f9:bc:6c:9b:f4:f5:61:f5:41:d7:61:96:1b:0e: 68:2d:6b:ff:de:b0:f3:36:7c:bd:92:b5:3b:80:53: 48:63:41:12:a0:28:4b:a6:96:bf:99:05:aa:a4:5d: 55:5c:86:d2:34:c8:e7:78:04:0c:30:27:4c:4a:d5: b4:c2:cd:35:d9:31:62:b0:2e:2f:00:77:d2:ab:e4: 5f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:35:C7:A7:08:97:19:3F:41:F4:F3:1B:E0:72:56:59:61:D3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df12012-1386-3a47-89db-6c4f1b6aa143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0b:f9:b4:4c:aa:e2:b8:83:50:b2:76:d7:79:f3:09:84:4d: 9c:3b:ea:75:a5:f1:50:6a:e1:21:82:3e:28:16:81:1f:96:c0: c6:05:77:6e:00:de:e0:94:5c:d1:39:b1:e8:c1:2e:6a:78:03: 2e:69:f4:b6:9f:9f:86:f4:f3:14:d9:01:76:0a:7c:69:75:b6: 6a:e7:ee:60:02:f5:fd:c5:92:42:6e:bb:2a:72:6a:d7:a8:2d: 90:3a:61:8c:66:21:64:2c:96:87:f5:56:60:4d:96:34:da:7e: 45:2c:d2:81:20:ec:88:0a:d1:ca:73:f7:1a:01:cd:9a:97:8a: ac:6c:c1:78:24:03:b3:69:d5:95:aa:af:88:c8:cd:fd:78:25: 29:01:88:b0:00:9c:50:df:89:fc:d6:9f:55:f7:58:2a:f3:c2: 3f:b5:7f:b0:de:53:21:69:50:2a:3b:c2:64:6a:b6:74:ab:ff: f3:78:04:f7:25:6f:89:d1:6c:5f:24:4e:12:e2:cd:a9:d4:00: 3d:7b:bd:fc:00:47:3f:02:0d:22:16:cc:4a:01:b1:e5:08:c1: 7c:06:2b:ce:26:7b:70:ca:15:55:88:4f:36:f2:de:aa:c4:33: 05:23:c3:a8:eb:2d:c1:0f:a1:7f:f5:a4:8e:2d:2e:fa:9a:df: fc:3a:87:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3clS9dP9UGhoSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk ODE5YWIzNWYtYzBlOC00MDAxLWIyODktNDc4ZGRkN2U2ZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKafZL7k/pD7SVtrVePVBSAazZfv1gcYqURP mPPCRcw0ymISws8q7M8bU4fpVaUXriEZ7nExNVuyNeQcCyeaTMloeY2rY6BlPQUm 9Ys+lr+L0n16c9nttHR9ugW8FdIblyhE0fusaKPp9Yj3kjak/Fq77QUae29X9D/h qF6uz3+0Tvr8d4HllCF8w0fvxoohd0xRtJXkYQsLDDxhXxOjQaiybLwb31P2+UrC qiTs1K6NcwXp+bxsm/T1YfVB12GWGw5oLWv/3rDzNny9krU7gFNIY0ESoChLppa/ mQWqpF1VXIbSNMjneAQMMCdMStW0ws012TFisC4vAHfSq+RfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK6NcenCJcZP0H08xvgclZZYdMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RmMTIwMTItMTM4Ni0z YTQ3LTg5ZGItNmM0ZjFiNmFhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARORvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQL+bRMquK4g1Cydtd58wmETZw76nWl8VBq4SGCPigWgR+WwMYFd24A 3uCUXNE5sejBLmp4Ay5p9Lafn4b08xTZAXYKfGl1tmrn7mAC9f3FkkJuuypyateo LZA6YYxmIWQslof1VmBNljTafkUs0oEg7IgK0cpz9xoBzZqXiqxswXgkA7Np1ZWq r4jIzf14JSkBiLAAnFDfifzWn1X3WCrzwj+1f7DeUyFpUCo7wmRqtnSr//N4BPcl b4nRbF8kThLizanUAD17vfwARz8CDSIWzEoBseUIwXwGK84me3DKFVWITzby3qrE MwUjw6jrLcEPoX/1pI4tLvqa3/w6h58= -----END CERTIFICATE-----Generated at Mon Jun 16 14:42:01 2025 by rpki-client