$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1400f202-bb54-3aa7-838b-a81939520ccd.roa File: 1400f202-bb54-3aa7-838b-a81939520ccd.roa (raw, json) Hash identifier: LtCjOIfFMYC4IYAs5Fv3lDASQf9O9C6/splKEp0i/V8= Subject key identifier: F1:61:0A:FA:8A:DF:15:39:84:CE:65:F1:87:DE:4A:93:25:0C:8D:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7EDF240472F8642AB7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1400f202-bb54-3aa7-838b-a81939520ccd.roa Signing time: Fri 20 Jun 2025 09:30:51 +0000 ROA not before: Fri 20 Jun 2025 09:30:51 +0000 ROA not after: Thu 18 Sep 2025 09:30:51 +0000 asID: 22773 IP address blocks: 68.229.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:ed:f2:40:47:2f:86:42:ab:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:51 2025 GMT Not After : Sep 18 09:30:51 2025 GMT Subject: CN=300e2b20-38d4-4de2-a468-9d472c10094b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:a9:30:20:7a:ec:d2:f2:0d:e2:e2:76:7d: ff:d7:c2:ca:b5:1d:dd:f3:f0:15:55:79:37:d5:54: 9f:07:28:4c:5b:6d:da:28:d6:b2:dd:ad:05:0a:45: c7:80:c4:4f:8c:1f:67:05:3a:eb:2f:61:01:c1:c9: 7f:97:01:81:45:e1:07:ba:14:7a:65:9b:29:71:b6: 51:6f:68:8e:6f:07:c2:77:7c:e7:db:8c:7d:80:49: 5e:9e:c9:09:dc:b5:44:6a:8a:a8:49:55:34:86:a5: e6:0c:4d:9e:85:a7:3d:2d:b5:5e:a8:1e:d0:1b:8f: d3:f6:4e:12:2e:83:ec:e1:3c:7b:56:c1:6e:97:3d: 1a:80:48:29:2e:d5:3d:28:b0:7c:0d:55:68:eb:fe: ab:3e:e9:a3:04:98:e0:50:0a:38:23:54:cc:ef:9d: 6a:33:25:ff:2d:b7:cb:35:82:50:c5:79:1d:ce:e3: ea:f9:b8:4b:2e:b9:09:52:82:56:b6:8e:50:a1:27: 7d:60:78:88:e1:57:d3:b9:6a:bb:10:a2:71:84:6e: 90:db:60:f9:ec:08:35:a5:3a:2a:39:29:57:ed:23: 10:ff:75:70:39:cb:1d:9c:7f:01:00:72:98:bd:a2: 65:a3:c6:81:7b:01:c2:3a:3e:a9:fc:f8:d7:8b:3c: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:61:0A:FA:8A:DF:15:39:84:CE:65:F1:87:DE:4A:93:25:0C:8D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1400f202-bb54-3aa7-838b-a81939520ccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:63:53:49:2d:2d:a4:64:ae:fe:2f:ef:66:05:4e:70:3e:c6: 9c:21:d2:82:24:d8:e7:c9:2d:fd:2e:64:8e:be:26:21:fc:ea: b1:5f:f8:df:85:c7:eb:5d:28:6c:7a:e8:15:4c:12:44:18:38: a3:81:78:44:e1:ad:72:51:f5:34:38:48:46:09:f3:75:4d:af: 8f:cc:fb:e8:1f:e5:52:41:7b:6d:dd:f9:0f:7d:3c:42:91:8d: fe:d8:9c:f7:db:d7:6a:c2:0f:c7:a4:96:66:5a:d8:6c:3a:88: 8b:98:1e:00:e2:1b:f1:0e:f1:a8:52:74:08:8b:cb:d0:d5:44: 7b:b7:ba:8f:18:77:30:4f:99:77:19:db:11:72:2d:45:f9:85: b5:51:21:22:15:e4:50:46:80:37:75:69:a8:da:39:05:b0:a2: 13:5f:fe:18:9c:24:ba:ca:b7:c5:6c:d2:f1:e8:46:57:2d:7c: 04:8f:a0:9b:b0:de:37:0c:ab:19:c2:63:41:5e:b9:1e:0a:4e: a9:b9:50:f7:52:67:ad:38:8a:29:e5:a0:eb:fb:8d:35:ea:19: 97:f3:6f:15:b4:e8:db:8e:98:e5:8c:b9:cc:bb:1c:8e:97:f4: 24:95:6f:d6:23:5a:b7:6b:fb:f2:f8:67:3b:d2:67:c6:30:c3: dc:c8:0b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp+3yQEcvhkKreYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA1MVoXDTI1MDkxODA5MzA1MVowLzEtMCsGA1UEAxMk MzAwZTJiMjAtMzhkNC00ZGUyLWE0NjgtOWQ0NzJjMTAwOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTKpMCB67NLyDeLidn3/18LKtR3d8/AVVXk3 1VSfByhMW23aKNay3a0FCkXHgMRPjB9nBTrrL2EBwcl/lwGBReEHuhR6ZZspcbZR b2iObwfCd3zn24x9gElenskJ3LVEaoqoSVU0hqXmDE2ehac9LbVeqB7QG4/T9k4S LoPs4Tx7VsFulz0agEgpLtU9KLB8DVVo6/6rPumjBJjgUAo4I1TM751qMyX/LbfL NYJQxXkdzuPq+bhLLrkJUoJWto5QoSd9YHiI4VfTuWq7EKJxhG6Q22D57Ag1pToq OSlX7SMQ/3VwOcsdnH8BAHKYvaJlo8aBewHCOj6p/PjXizzd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFhCvqK3xU5hM5l8YfeSpMlDI3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQwMGYyMDItYmI1NC0z YWE3LTgzOGItYTgxOTM5NTIwY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBjU0ktLaRkrv4v72YFTnA+xpwh0oIk2OfJLf0uZI6+JiH86rFf+N+F x+tdKGx66BVMEkQYOKOBeEThrXJR9TQ4SEYJ83VNr4/M++gf5VJBe23d+Q99PEKR jf7YnPfb12rCD8eklmZa2Gw6iIuYHgDiG/EO8ahSdAiLy9DVRHu3uo8YdzBPmXcZ 2xFyLUX5hbVRISIV5FBGgDd1aajaOQWwohNf/hicJLrKt8Vs0vHoRlctfASPoJuw 3jcMqxnCY0FeuR4KTqm5UPdSZ604iinloOv7jTXqGZfzbxW06NuOmOWMucy7HI6X 9CSVb9YjWrdr+/L4ZzvSZ8Yww9zIC6A= -----END CERTIFICATE-----Generated at Wed Jul 2 07:15:59 2025 by rpki-client