$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa File: 1089f3bf-c876-3291-aa63-7a948e2855ae.roa (raw, json) Hash identifier: uiDBWJO7HxEyhsRoQgtfYEHkLWG8mzVfIUD4sAFEe+Y= Subject key identifier: 33:C6:F9:F7:55:D5:D5:8A:06:E4:27:72:15:1F:9F:D0:B6:DE:A5:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6ED9C56349DDDFA40E740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa Signing time: Fri 20 Jun 2025 09:28:50 +0000 ROA not before: Fri 20 Jun 2025 09:28:50 +0000 ROA not after: Thu 18 Sep 2025 09:28:50 +0000 asID: 22773 IP address blocks: 68.96.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:ed:9c:56:34:9d:dd:fa:40:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:50 2025 GMT Not After : Sep 18 09:28:50 2025 GMT Subject: CN=89d8b8a4-a7f4-47e2-8a56-8759982f6200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:c3:17:11:64:73:51:7e:5f:2b:a3:41:cf: 8f:f0:5e:e5:05:9b:8e:a6:e7:fd:a5:7f:ba:51:76: 4e:d2:62:cc:ca:05:8a:60:cf:48:36:fb:05:c1:48: 80:c4:0e:40:57:f2:6d:54:7f:f9:7c:9e:a7:dd:fe: 00:11:ba:7c:27:0a:c7:35:6c:f1:5a:7d:e5:0e:94: de:15:73:f9:66:b4:e0:d3:17:84:fc:a9:e9:f0:d3: be:b3:c5:1c:c7:94:a8:02:3e:0b:2d:3e:d3:53:98: 6b:17:06:6a:90:cb:92:a0:81:c3:9f:2f:5e:3d:dc: 36:65:2d:b9:cd:36:b9:bb:f4:e9:77:4a:eb:03:15: f7:f5:45:49:6c:38:b0:5a:8e:e5:d0:c6:73:5c:9d: 95:f8:e5:ed:5d:40:10:3c:a4:55:3f:dd:27:77:5b: 82:3d:39:20:67:88:13:cb:0c:f9:78:cc:83:3e:ce: 9d:21:67:9d:5b:df:3e:ef:0b:9a:1c:39:2c:53:70: 68:f7:0d:ce:9a:eb:e8:04:d8:95:e3:bd:05:ad:9b: 4a:64:b6:e8:a8:2e:87:0e:42:ac:3f:0b:96:52:82: 47:8d:b5:f7:95:c5:97:0f:f0:6a:db:54:17:3f:1e: 64:84:2c:21:40:5a:87:4c:08:77:b9:30:89:da:ad: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C6:F9:F7:55:D5:D5:8A:06:E4:27:72:15:1F:9F:D0:B6:DE:A5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1089f3bf-c876-3291-aa63-7a948e2855ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:eb:11:44:0f:eb:bb:b8:0e:6b:d6:de:67:01:d4:62:24:6a: 02:26:3b:8f:f1:47:8e:43:53:1a:31:55:36:8d:25:56:20:1a: 6d:0b:86:c0:bf:ad:8e:c3:ef:46:2e:5c:e8:76:63:8c:5a:f8: f2:66:32:d0:3d:df:89:a2:ff:5d:4c:4c:ff:17:ad:29:59:96: 7a:cd:ba:f1:c5:da:88:81:bd:3b:90:8d:b3:0a:c4:2f:97:80: a3:a3:eb:d5:22:a8:08:34:c8:96:dc:d9:a8:95:16:f7:3c:6e: fb:7e:41:8c:45:6e:5b:b3:48:31:a1:7a:62:54:1c:d9:b4:9b: fc:f1:f9:5e:40:6e:b6:bc:40:84:bc:7e:b1:21:a3:36:fc:0e: 03:74:8a:96:75:b3:28:b2:90:21:fc:37:09:09:97:b9:80:b7: 41:e7:cd:8a:27:77:14:23:28:e6:dc:58:a9:cb:57:a9:ce:ef: c7:4f:b2:a4:f7:c3:82:6d:e7:6a:b1:d2:5b:01:ac:d1:3b:11: 30:cc:7f:f4:13:b1:88:20:89:28:53:85:8e:04:e2:28:7f:c3: 5a:38:64:22:55:d8:b2:e3:00:f9:7a:55:20:40:73:32:1e:88: d7:ce:e2:af:c5:b1:8a:8f:87:d4:31:be:30:b7:12:26:31:aa: 5a:80:41:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApu2cVjSd3fpA50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg1MFoXDTI1MDkxODA5Mjg1MFowLzEtMCsGA1UEAxMk ODlkOGI4YTQtYTdmNC00N2UyLThhNTYtODc1OTk4MmY2MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhzDFxFkc1F+XyujQc+P8F7lBZuOpuf9pX+6 UXZO0mLMygWKYM9INvsFwUiAxA5AV/JtVH/5fJ6n3f4AEbp8JwrHNWzxWn3lDpTe FXP5ZrTg0xeE/Knp8NO+s8Ucx5SoAj4LLT7TU5hrFwZqkMuSoIHDny9ePdw2ZS25 zTa5u/Tpd0rrAxX39UVJbDiwWo7l0MZzXJ2V+OXtXUAQPKRVP90nd1uCPTkgZ4gT ywz5eMyDPs6dIWedW98+7wuaHDksU3Bo9w3OmuvoBNiV470FrZtKZLboqC6HDkKs PwuWUoJHjbX3lcWXD/Bq21QXPx5khCwhQFqHTAh3uTCJ2q3q5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPG+fdV1dWKBuQnchUfn9C23qV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTA4OWYzYmYtYzg3Ni0z MjkxLWFhNjMtN2E5NDhlMjg1NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3rEUQP67u4DmvW3mcB1GIkagImO4/xR45DUxoxVTaNJVYgGm0LhsC/ rY7D70YuXOh2Y4xa+PJmMtA934mi/11MTP8XrSlZlnrNuvHF2oiBvTuQjbMKxC+X gKOj69UiqAg0yJbc2aiVFvc8bvt+QYxFbluzSDGhemJUHNm0m/zx+V5Abra8QIS8 frEhozb8DgN0ipZ1syiykCH8NwkJl7mAt0HnzYondxQjKObcWKnLV6nO78dPsqT3 w4Jt52qx0lsBrNE7ETDMf/QTsYggiShThY4E4ih/w1o4ZCJV2LLjAPl6VSBAczIe iNfO4q/FsYqPh9QxvjC3EiYxqlqAQTY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:13:07 2025 by rpki-client