$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa File: 4aec2976-85e0-33d2-9a41-e42ec50a6309.roa (raw, json) Hash identifier: 5BVmzvjAsngYwF2HCSDb315szcQVZECYDtvk0e31d6o= Subject key identifier: 2E:31:2D:FC:69:6A:1B:63:DB:A4:A4:E5:0E:5A:EC:C4:20:AD:87:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A73C46D6819DB2DADF23E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa Signing time: Fri 20 Jun 2025 09:29:27 +0000 ROA not before: Fri 20 Jun 2025 09:29:27 +0000 ROA not after: Thu 18 Sep 2025 09:29:27 +0000 asID: 22773 IP address blocks: 68.108.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:3c:46:d6:81:9d:b2:da:df:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:27 2025 GMT Not After : Sep 18 09:29:27 2025 GMT Subject: CN=80e58a82-ca2c-4e08-9a46-95bb4a619d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:e2:3e:8b:bc:75:02:86:75:e5:44:05:55: ea:9d:fc:e3:16:12:ed:c6:8f:6f:89:26:65:cf:9c: bb:47:95:96:7a:a4:81:4a:18:f2:df:19:68:2e:74: 0c:b0:5f:23:fe:69:ff:ed:66:d0:05:d8:35:06:e0: 17:ad:98:17:51:cc:2b:25:ec:2e:86:b7:14:bc:88: d8:f4:02:11:b1:f2:74:f0:5c:81:4f:a3:e2:85:6a: 4e:75:bc:be:71:6b:82:23:46:71:63:64:1b:1b:c0: da:e7:b4:21:2a:8a:20:dc:1b:51:4d:31:43:80:d1: 27:24:b5:27:3a:57:d7:46:66:d9:f9:7c:22:1d:d3: 39:30:6f:d8:82:6a:39:21:db:92:ad:9a:d5:1c:25: 0f:e8:26:e9:91:b1:86:d4:6e:83:7e:e3:5b:84:20: 38:65:11:e5:d0:d8:d7:92:4e:b4:01:cd:a0:dc:7c: 47:94:e9:38:e9:e8:52:9b:42:40:d2:23:b4:5d:e8: 45:b0:99:db:58:9e:61:cd:93:e7:8f:44:d9:6d:a0: 2f:a4:8f:6b:8b:16:04:87:be:ec:70:cc:52:72:6c: b1:16:f9:b7:8a:0d:e1:8d:db:2e:a8:27:4b:c6:81: c7:02:98:83:c3:3b:56:9c:ce:ae:d8:0d:a1:c2:8b: 28:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:2D:FC:69:6A:1B:63:DB:A4:A4:E5:0E:5A:EC:C4:20:AD:87:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aec2976-85e0-33d2-9a41-e42ec50a6309.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6b:df:61:a4:fb:3f:45:12:25:c2:e0:a0:02:1d:49:dd:58: 2e:a2:e1:79:6b:03:fc:d7:36:00:f7:25:6d:7d:42:ab:68:bb: a1:54:38:d4:68:d0:be:3e:97:ac:17:c7:4d:71:21:5b:34:56: fb:35:8c:43:0f:21:13:9c:57:c1:24:a2:16:4e:da:49:4b:c3: ed:0e:7a:00:1f:d2:3b:4a:ac:37:c7:1e:72:d0:d4:c7:2b:81: d5:84:7c:64:a3:5a:0d:04:11:19:cc:c1:1c:eb:c5:b2:fe:93: 1b:5f:8b:1c:ef:32:de:e3:b1:03:cb:ab:3d:26:c3:ec:90:8f: 7b:e9:fe:0f:1f:51:18:ec:94:08:7d:23:9f:e2:e4:63:df:39: a7:bc:45:f4:ef:a1:fe:f7:81:04:d8:03:2a:77:02:eb:93:88: f3:7b:29:06:46:b0:00:c1:8d:07:04:93:46:87:c7:5c:36:12: c4:1d:ff:39:f0:b5:0f:fe:50:8d:52:0d:bd:72:40:c4:80:fd: ab:32:9f:78:27:ab:ef:d6:c1:f5:82:1a:82:43:19:b9:8f:8c: fc:35:f4:01:36:6e:94:36:a0:32:10:8d:e1:9a:d4:59:8e:f1: 55:45:d7:a7:79:7e:c1:85:8e:d6:79:cb:1c:bd:72:4e:b9:19: 5b:20:77:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApzxG1oGdstrfI+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkyN1oXDTI1MDkxODA5MjkyN1owLzEtMCsGA1UEAxMk ODBlNThhODItY2EyYy00ZTA4LTlhNDYtOTViYjRhNjE5ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfbiPou8dQKGdeVEBVXqnfzjFhLtxo9viSZl z5y7R5WWeqSBShjy3xloLnQMsF8j/mn/7WbQBdg1BuAXrZgXUcwrJewuhrcUvIjY 9AIRsfJ08FyBT6PihWpOdby+cWuCI0ZxY2QbG8Da57QhKoog3BtRTTFDgNEnJLUn OlfXRmbZ+XwiHdM5MG/Ygmo5IduSrZrVHCUP6CbpkbGG1G6DfuNbhCA4ZRHl0NjX kk60Ac2g3HxHlOk46ehSm0JA0iO0XehFsJnbWJ5hzZPnj0TZbaAvpI9rixYEh77s cMxScmyxFvm3ig3hjdsuqCdLxoHHApiDwztWnM6u2A2hwosoSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4xLfxpahtj26Sk5Q5a7MQgrYd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFlYzI5NzYtODVlMC0z M2QyLTlhNDEtZTQyZWM1MGE2MzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtr32Gk+z9FEiXC4KACHUndWC6i4XlrA/zXNgD3JW19Qqtou6FUONRo 0L4+l6wXx01xIVs0Vvs1jEMPIROcV8EkohZO2klLw+0OegAf0jtKrDfHHnLQ1Mcr gdWEfGSjWg0EERnMwRzrxbL+kxtfixzvMt7jsQPLqz0mw+yQj3vp/g8fURjslAh9 I5/i5GPfOae8RfTvof73gQTYAyp3AuuTiPN7KQZGsADBjQcEk0aHx1w2EsQd/znw tQ/+UI1SDb1yQMSA/asyn3gnq+/WwfWCGoJDGbmPjPw19AE2bpQ2oDIQjeGa1FmO 8VVF16d5fsGFjtZ5yxy9ck65GVsgd/s= -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:56 2025 by rpki-client