$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837dd936-20f2-371b-9476-1bac162d07d3.roa File: 837dd936-20f2-371b-9476-1bac162d07d3.roa (raw, json) Hash identifier: ysZq6BVwF15ig8SutNbaPmpHgG8OeoPwsk74ScoPTJI= Subject key identifier: A9:85:BA:D3:C8:5B:F8:57:AC:F9:27:07:4A:1C:CF:4F:FF:32:39:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A749A7DA4B70FE2DEB2DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837dd936-20f2-371b-9476-1bac162d07d3.roa Signing time: Fri 20 Jun 2025 09:29:34 +0000 ROA not before: Fri 20 Jun 2025 09:29:34 +0000 ROA not after: Thu 18 Sep 2025 09:29:34 +0000 asID: 22773 IP address blocks: 68.108.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:49:a7:da:4b:70:fe:2d:eb:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:34 2025 GMT Not After : Sep 18 09:29:34 2025 GMT Subject: CN=c3ff5376-e132-4782-8409-bebcace94075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:bc:92:e9:75:a7:0f:2c:ff:14:02:dc:4a: c1:a7:90:b6:7d:0d:09:d7:57:19:ab:fa:4a:d6:96: d8:e8:54:68:a8:bb:b8:74:ad:ce:6f:df:b7:f8:b4: 5d:c2:f4:ed:be:56:96:62:37:b9:f8:2b:a0:cb:2b: 72:db:cc:92:13:2e:f2:ff:02:85:92:b1:a4:26:c6: c2:b8:4c:a0:99:c5:a9:6d:39:01:f9:ce:bd:f2:79: 2b:10:40:7e:2a:42:51:99:1f:35:f2:14:8c:5c:42: df:45:5c:a1:bc:77:96:1b:e8:e0:41:c7:3d:cc:56: a9:16:1b:40:75:68:61:c7:65:c1:07:c0:f4:2c:3d: 56:71:60:f4:8e:c9:d3:41:8c:e4:f2:ad:e9:fc:56: 75:e6:34:50:81:e0:ab:46:94:18:c2:52:50:08:4c: 6e:c1:6d:c5:13:7a:20:29:ca:0d:86:5b:8b:41:7d: 4e:8b:d0:24:fb:3f:5a:5d:a3:26:70:98:da:2b:8e: 4a:4e:3f:65:a7:d0:54:bd:53:27:96:56:eb:69:19: a7:46:59:b8:c9:45:e2:b3:4e:70:2f:d9:9e:39:f5: 79:67:ad:cc:95:58:08:07:af:89:d5:c7:17:da:43: d7:75:c3:4c:b6:0f:ba:a8:4b:34:57:68:da:39:75: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:85:BA:D3:C8:5B:F8:57:AC:F9:27:07:4A:1C:CF:4F:FF:32:39:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837dd936-20f2-371b-9476-1bac162d07d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:eb:bc:98:f1:6e:da:8d:3c:53:fe:a9:98:5d:e8:47:47:34: c8:d3:20:57:87:64:ae:d7:1b:33:75:3a:59:16:62:4a:4f:27: 9e:ba:6e:3e:6e:eb:4c:48:6b:a1:c3:8f:5c:15:95:0d:62:c0: 4d:89:c7:77:fb:97:a1:f2:80:fa:b4:c6:42:a3:05:89:87:9a: a1:9b:40:ba:62:10:9a:bd:dc:90:90:80:29:43:78:16:0c:f4: a2:c3:db:9e:50:99:c4:5b:df:f9:cf:c1:b5:bf:6c:a2:98:3d: 31:02:05:a3:16:87:8a:39:ed:6c:32:23:34:25:ba:bf:6d:20: 0a:34:08:37:01:34:11:fe:21:e4:a9:9f:a7:c1:2a:05:07:e9: 95:fe:43:74:23:84:9a:61:9f:6c:c2:42:0c:cf:17:da:fb:61: 56:47:83:03:33:ee:4b:0a:7c:69:65:ab:28:20:fb:e3:7a:4a: d0:c2:bb:15:8d:94:c9:b6:1b:98:07:e7:fc:71:34:23:77:56: ad:52:2c:59:62:1a:de:a7:0a:08:e7:fa:8c:b7:4e:1f:a2:85: aa:15:41:6f:f2:12:9e:38:8e:34:21:d5:9c:07:84:28:34:22: d2:99:16:58:b9:f3:7c:39:44:fb:35:da:48:e5:fb:85:fb:fc: 3a:dd:aa:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp0mn2ktw/i3rLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkzNFoXDTI1MDkxODA5MjkzNFowLzEtMCsGA1UEAxMk YzNmZjUzNzYtZTEzMi00NzgyLTg0MDktYmViY2FjZTk0MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC68kul1pw8s/xQC3ErBp5C2fQ0J11cZq/pK 1pbY6FRoqLu4dK3Ob9+3+LRdwvTtvlaWYje5+Cugyyty28ySEy7y/wKFkrGkJsbC uEygmcWpbTkB+c698nkrEEB+KkJRmR818hSMXELfRVyhvHeWG+jgQcc9zFapFhtA dWhhx2XBB8D0LD1WcWD0jsnTQYzk8q3p/FZ15jRQgeCrRpQYwlJQCExuwW3FE3og KcoNhluLQX1Oi9Ak+z9aXaMmcJjaK45KTj9lp9BUvVMnllbraRmnRlm4yUXis05w L9meOfV5Z63MlVgIB6+J1ccX2kPXdcNMtg+6qEs0V2jaOXVPbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmFutPIW/hXrPknB0ocz0//MjlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODM3ZGQ5MzYtMjBmMi0z NzFiLTk0NzYtMWJhYzE2MmQwN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjrvJjxbtqNPFP+qZhd6EdHNMjTIFeHZK7XGzN1OlkWYkpPJ566bj5u 60xIa6HDj1wVlQ1iwE2Jx3f7l6HygPq0xkKjBYmHmqGbQLpiEJq93JCQgClDeBYM 9KLD255QmcRb3/nPwbW/bKKYPTECBaMWh4o57WwyIzQlur9tIAo0CDcBNBH+IeSp n6fBKgUH6ZX+Q3QjhJphn2zCQgzPF9r7YVZHgwMz7ksKfGllqygg++N6StDCuxWN lMm2G5gH5/xxNCN3Vq1SLFliGt6nCgjn+oy3Th+ihaoVQW/yEp44jjQh1ZwHhCg0 ItKZFli583w5RPs12kjl+4X7/Drdqsg= -----END CERTIFICATE-----Generated at Wed Jul 2 15:13:07 2025 by rpki-client