$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa File: b756613e-7683-3979-b4d7-4e00819d14a9.roa (raw, json) Hash identifier: heD4Ct5V2C2jYcpBaTB7kKCl9Vrt2/3DDWsJKL9tEWU= Subject key identifier: BE:2B:44:6D:95:B1:2C:33:A4:61:56:95:0C:F3:DF:63:06:65:CC:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C104AC116F01088215EDF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa Signing time: Wed 18 Jun 2025 18:02:05 +0000 ROA not before: Wed 18 Jun 2025 18:02:05 +0000 ROA not after: Tue 16 Sep 2025 18:02:05 +0000 asID: 22773 IP address blocks: 68.3.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:4a:c1:16:f0:10:88:21:5e:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:05 2025 GMT Not After : Sep 16 18:02:05 2025 GMT Subject: CN=d7e0fcf1-d3c7-4465-b7ba-729f2aedc448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ae:d8:8f:da:94:33:03:8d:3e:a4:26:e5:02: 77:f9:d6:3c:0b:d8:ad:77:e1:5a:c3:20:8e:68:28: a7:49:3e:bc:95:1d:3b:04:f2:ed:f9:98:04:6b:8e: 1f:84:1b:96:95:83:9a:99:96:9d:13:7b:49:38:12: 46:22:bc:ba:fe:ce:db:17:40:4b:cd:b2:11:f9:c9: 23:d3:1e:6a:d0:bd:a7:99:21:4f:84:88:b5:54:42: c7:b5:d3:b2:06:0d:19:81:b9:16:90:f1:64:1e:99: ad:e3:16:84:2a:a4:e7:94:c7:7a:00:62:a2:b5:34: 46:e1:8d:eb:76:32:94:93:3a:91:cb:30:8c:8e:e2: c2:56:55:63:d5:ec:10:de:6e:46:1a:e4:c0:0b:41: b9:6f:ef:76:2b:c2:fb:61:88:32:63:10:47:c6:5d: eb:29:82:72:54:ad:83:2a:0c:74:69:76:9b:c3:a3: 3b:be:60:a0:4e:0b:26:96:29:91:c7:a1:cf:27:ec: 16:57:90:09:24:29:a4:d2:51:e7:ac:3b:01:21:f0: c7:b5:81:9a:1a:b9:d8:e9:f2:5d:30:7c:42:cb:27: 96:79:d1:ea:a5:fa:28:db:fb:ea:b7:71:15:70:78: f5:10:c8:16:5a:64:bb:fa:2f:3d:d7:6f:e8:5a:2c: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2B:44:6D:95:B1:2C:33:A4:61:56:95:0C:F3:DF:63:06:65:CC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7d:86:5e:95:c9:4e:c8:34:43:8c:ac:90:5a:56:85:72:9d: d7:c7:4a:19:26:5f:6a:9c:6a:81:1b:cf:73:b9:39:79:63:1e: 43:59:18:81:0d:b1:da:f2:3c:a0:07:23:c3:1c:ff:c4:e7:8e: 75:9f:7d:67:d9:e2:69:a1:91:97:46:64:06:2f:29:4c:41:3f: 47:ed:b2:83:42:83:84:8a:ce:6d:3c:c1:71:db:95:fe:a0:4a: e2:f4:89:3c:02:40:a2:17:81:3f:af:c9:d0:ae:ca:88:65:0d: a3:f7:19:09:a9:63:83:1b:d0:38:eb:8f:50:45:3a:34:23:06: 5c:52:04:ac:8e:00:16:83:98:c7:41:3e:56:2a:a9:aa:18:05: 6e:63:57:3e:13:ea:d2:f0:f8:7c:05:e4:82:a2:e7:56:2f:a0: 20:db:8e:cf:0a:3b:a1:c1:2f:c9:b6:da:5f:cc:66:0b:85:9a: ec:36:03:14:b6:8a:7b:ea:52:8c:8b:5f:91:f0:da:54:69:23: 6d:51:32:6c:3f:fe:7c:76:7f:95:75:a8:f3:5f:f4:23:64:c1: f0:27:dd:85:ed:6e:9f:d7:b4:77:e7:a7:ff:a5:46:67:c8:07: a7:52:fd:07:41:0b:73:95:6e:fb:be:40:51:e9:8b:2c:a9:a9: 91:21:eb:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EErBFvAQiCFe3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIwNVoXDTI1MDkxNjE4MDIwNVowLzEtMCsGA1UEAxMk ZDdlMGZjZjEtZDNjNy00NDY1LWI3YmEtNzI5ZjJhZWRjNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra7Yj9qUMwONPqQm5QJ3+dY8C9itd+FawyCO aCinST68lR07BPLt+ZgEa44fhBuWlYOamZadE3tJOBJGIry6/s7bF0BLzbIR+ckj 0x5q0L2nmSFPhIi1VELHtdOyBg0ZgbkWkPFkHpmt4xaEKqTnlMd6AGKitTRG4Y3r djKUkzqRyzCMjuLCVlVj1ewQ3m5GGuTAC0G5b+92K8L7YYgyYxBHxl3rKYJyVK2D Kgx0aXabw6M7vmCgTgsmlimRx6HPJ+wWV5AJJCmk0lHnrDsBIfDHtYGaGrnY6fJd MHxCyyeWedHqpfoo2/vqt3EVcHj1EMgWWmS7+i8912/oWizD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4rRG2VsSwzpGFWlQzz32MGZcxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjc1NjYxM2UtNzY4My0z OTc5LWI0ZDctNGUwMDgxOWQxNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx9hl6VyU7INEOMrJBaVoVyndfHShkmX2qcaoEbz3O5OXljHkNZGIEN sdryPKAHI8Mc/8TnjnWffWfZ4mmhkZdGZAYvKUxBP0ftsoNCg4SKzm08wXHblf6g SuL0iTwCQKIXgT+vydCuyohlDaP3GQmpY4Mb0Djrj1BFOjQjBlxSBKyOABaDmMdB PlYqqaoYBW5jVz4T6tLw+HwF5IKi51YvoCDbjs8KO6HBL8m22l/MZguFmuw2AxS2 invqUoyLX5Hw2lRpI21RMmw//nx2f5V1qPNf9CNkwfAn3YXtbp/XtHfnp/+lRmfI B6dS/QdBC3OVbvu+QFHpiyypqZEh67c= -----END CERTIFICATE-----Generated at Wed Jul 2 14:29:24 2025 by rpki-client