$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b370f712-f1fa-3936-99c0-6dcda6d87cc6.roa File: b370f712-f1fa-3936-99c0-6dcda6d87cc6.roa (raw, json) Hash identifier: O0Jp7810knUI6PTeBS4OU2Shck1jHO44gCuCUHwG9Ns= Subject key identifier: B1:43:6D:CB:B8:C1:36:C9:D8:DB:FA:5D:2E:14:71:63:A7:0A:0E:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7BFAB2AF66AF786320B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b370f712-f1fa-3936-99c0-6dcda6d87cc6.roa Signing time: Fri 20 Jun 2025 09:30:29 +0000 ROA not before: Fri 20 Jun 2025 09:30:29 +0000 ROA not after: Thu 18 Sep 2025 09:30:29 +0000 asID: 22773 IP address blocks: 68.224.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:bf:ab:2a:f6:6a:f7:86:32:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:29 2025 GMT Not After : Sep 18 09:30:29 2025 GMT Subject: CN=7422df72-2a88-4f6b-a858-65a9244a22e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:8d:f0:7e:8a:ad:22:93:41:6c:9a:0b:2f: 56:5c:0a:91:0c:ee:f6:01:ae:9f:3d:48:d5:99:7f: bc:75:2f:10:26:ee:73:f6:14:05:1b:c7:b4:72:3f: e5:01:b3:49:aa:5a:a0:6f:55:7e:83:67:b5:00:e8: db:df:5f:7d:c4:b0:16:31:fe:00:23:31:cb:ce:cd: 86:b5:e3:53:fc:14:4b:7d:fb:46:16:dc:69:0e:35: a9:55:f7:fe:f3:d9:02:01:98:d3:8b:0c:2f:ba:9d: 74:1e:e6:d6:70:47:2b:64:23:bc:38:f3:e9:43:c3: 56:98:de:cf:1c:eb:d9:9d:f8:50:d0:75:51:86:48: 67:6b:dc:95:89:86:d1:3a:4e:c4:6d:b3:b8:48:f9: 72:08:4d:3b:4e:7f:2a:a8:ec:c6:00:cd:75:3b:8b: e0:9b:bd:58:7a:da:f5:d5:d5:c6:d5:46:8e:aa:88: 74:f9:fe:19:5b:a7:d5:29:e1:85:c0:db:f2:ca:6e: b9:11:71:94:a9:e0:e7:54:b1:67:d9:0f:04:3b:c0: d3:0a:e7:61:d4:55:96:fd:2d:c5:93:02:62:33:ae: 0c:ea:e3:30:81:18:8b:9b:7d:c4:ce:cf:c1:10:d0: ec:15:51:be:e7:c1:27:11:0e:15:dd:5a:33:3a:df: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:43:6D:CB:B8:C1:36:C9:D8:DB:FA:5D:2E:14:71:63:A7:0A:0E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b370f712-f1fa-3936-99c0-6dcda6d87cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:13:64:d9:c0:49:0f:21:d5:47:7d:8a:ab:ef:d4:1f:e0:8c: e5:2e:15:d2:90:18:83:3e:99:a9:71:e2:35:76:f6:5c:08:fa: b4:a1:c2:ed:03:07:81:bf:c5:96:ff:a6:f1:dd:b3:63:82:e8: f0:17:18:a3:32:ed:5b:ad:63:eb:b4:8b:16:22:b0:57:51:3e: ef:16:4e:09:a2:de:eb:1a:2c:c7:9a:99:77:ea:7c:49:d1:86: 54:19:b9:c9:85:c6:6e:46:54:5c:9a:6e:4c:cb:cb:bb:0a:4a: 0e:bb:11:15:4b:6c:2e:ce:fc:08:ee:f3:70:e4:5d:5b:f5:07: 35:af:26:b7:54:4d:f4:35:dc:a1:49:2f:9b:96:b9:35:a0:a7: d2:44:e2:1f:ff:fb:9d:36:17:b5:a5:25:e1:f1:95:7a:81:b2: af:e4:e9:25:ef:63:be:c4:92:ee:67:a4:91:01:8d:4b:e8:79: 89:03:b8:8b:bd:5b:50:c0:f4:f0:06:e7:56:96:43:4b:4c:bd: f4:f8:5c:84:52:b1:25:34:0c:88:79:f2:b3:40:d6:5d:88:be: 0b:4c:6f:9b:e8:8b:82:77:24:04:a7:5d:d3:8f:fd:b4:e1:1f: 5d:0d:3a:3e:e4:ea:41:8e:7a:73:3d:0b:de:55:4c:db:0e:83: 6d:20:96:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp7+rKvZq94YyCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAyOVoXDTI1MDkxODA5MzAyOVowLzEtMCsGA1UEAxMk NzQyMmRmNzItMmE4OC00ZjZiLWE4NTgtNjVhOTI0NGEyMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin+N8H6KrSKTQWyaCy9WXAqRDO72Aa6fPUjV mX+8dS8QJu5z9hQFG8e0cj/lAbNJqlqgb1V+g2e1AOjb3199xLAWMf4AIzHLzs2G teNT/BRLfftGFtxpDjWpVff+89kCAZjTiwwvup10HubWcEcrZCO8OPPpQ8NWmN7P HOvZnfhQ0HVRhkhna9yViYbROk7EbbO4SPlyCE07Tn8qqOzGAM11O4vgm71Yetr1 1dXG1UaOqoh0+f4ZW6fVKeGFwNvyym65EXGUqeDnVLFn2Q8EO8DTCudh1FWW/S3F kwJiM64M6uMwgRiLm33Ezs/BENDsFVG+58EnEQ4V3VozOt+LJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFDbcu4wTbJ2Nv6XS4UcWOnCg4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjM3MGY3MTItZjFmYS0z OTM2LTk5YzAtNmRjZGE2ZDg3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQTZNnASQ8h1Ud9iqvv1B/gjOUuFdKQGIM+malx4jV29lwI+rShwu0D B4G/xZb/pvHds2OC6PAXGKMy7VutY+u0ixYisFdRPu8WTgmi3usaLMeamXfqfEnR hlQZucmFxm5GVFyabkzLy7sKSg67ERVLbC7O/Aju83DkXVv1BzWvJrdUTfQ13KFJ L5uWuTWgp9JE4h//+502F7WlJeHxlXqBsq/k6SXvY77Eku5npJEBjUvoeYkDuIu9 W1DA9PAG51aWQ0tMvfT4XIRSsSU0DIh58rNA1l2IvgtMb5voi4J3JASnXdOP/bTh H10NOj7k6kGOenM9C95VTNsOg20glqM= -----END CERTIFICATE-----Generated at Wed Jul 2 14:35:16 2025 by rpki-client