$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9566-4080-316d-bec6-8854c889d669.roa File: bd2a9566-4080-316d-bec6-8854c889d669.roa (raw, json) Hash identifier: K+UE3lnPxD4WiBNY6qGlUxyMqqWgfKDwChkytE+1v9M= Subject key identifier: 88:4C:DC:31:CE:46:FF:93:E6:63:32:B1:75:77:A5:12:7E:C9:06:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD71C224E941B9F09919380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9566-4080-316d-bec6-8854c889d669.roa Signing time: Thu 19 Jun 2025 09:18:29 +0000 ROA not before: Thu 19 Jun 2025 09:18:29 +0000 ROA not after: Wed 17 Sep 2025 09:18:29 +0000 asID: 22773 IP address blocks: 68.231.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:1c:22:4e:94:1b:9f:09:91:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:29 2025 GMT Not After : Sep 17 09:18:29 2025 GMT Subject: CN=47590e3c-70dc-4803-a222-f40c86f69550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:59:2d:7c:80:e6:32:6e:17:f3:09:8a:06: 99:68:17:4a:3e:59:fa:31:c7:d0:34:c5:96:34:a4: b6:fd:37:47:b8:3c:dc:fc:34:6e:1f:0b:2d:e5:ce: f1:eb:d4:2f:54:f9:51:40:14:cf:29:99:57:ca:c3: 42:c2:74:1d:47:8c:bd:89:93:0a:ba:ca:0d:56:7e: b0:80:0b:cf:cb:90:e6:56:0a:e9:fd:e2:8f:36:1f: 5f:d4:eb:9b:2b:2b:f4:96:a9:79:2f:e8:17:ef:80: 29:e4:36:80:9e:00:63:86:8d:c4:35:bb:d4:e5:ff: 26:5a:d2:2b:bf:d8:82:58:63:98:4d:2c:20:ac:e4: 24:39:f9:a8:78:49:d7:b3:6a:b2:d9:e1:d5:b2:dd: cb:4d:c0:c7:2d:1c:a4:53:3b:04:64:31:2f:ff:3f: ae:bb:9b:ec:a2:0b:3f:21:0e:31:3a:84:a9:e7:4f: e3:00:2b:52:a9:a6:63:4e:d1:87:73:08:1d:9b:16: 1a:66:11:33:61:e0:0d:74:f7:be:89:7c:2d:64:96: 59:d5:7e:87:2a:91:f9:9f:87:13:dd:7e:c4:84:86: 51:6a:a9:83:e7:3d:10:65:63:27:27:07:a3:5b:0a: 82:31:e8:1f:37:df:89:ee:e2:77:ba:39:63:db:01: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4C:DC:31:CE:46:FF:93:E6:63:32:B1:75:77:A5:12:7E:C9:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd2a9566-4080-316d-bec6-8854c889d669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6d:22:f4:ec:1f:27:04:19:45:e0:6a:35:c1:1e:ef:80:b6: 7b:2c:b8:78:cb:df:35:c0:ed:53:71:21:93:d0:b8:07:47:d7: 08:eb:9e:06:6f:52:bf:10:c1:5c:fa:af:1b:35:c3:79:d0:69: c2:50:12:1f:82:48:71:b4:6d:36:81:f2:ef:35:b7:33:65:9f: 41:89:16:65:71:b5:42:63:e8:69:d0:35:e9:94:82:7b:49:d0: 13:e7:8e:d6:51:ab:01:7f:3b:43:4e:69:e3:c1:64:06:48:45: 20:02:36:af:7c:bf:f9:a3:27:af:a3:9f:15:f2:a0:2c:78:85: 21:cd:dc:40:ca:39:a0:4f:58:84:08:c4:99:59:63:d8:50:37: 44:81:2d:4d:a7:0c:d1:6b:8d:9f:06:57:3d:29:f9:e7:4e:1a: dc:20:69:3a:b6:89:72:ef:2b:5a:42:34:ea:a6:e6:dd:55:e3: 96:7b:77:aa:88:5c:b6:ea:64:b4:89:2c:78:b1:66:9c:82:38: 19:dc:4b:00:8b:ba:1d:8c:25:f3:96:5e:1a:c3:0c:0b:5d:35: 72:9c:58:14:2b:97:0e:d7:5e:eb:8e:f4:dc:03:a9:34:58:80: 6a:b2:05:10:c2:5c:f3:2f:42:fd:bd:37:6d:68:21:e4:c8:3f: 5b:d5:9f:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91xwiTpQbnwmRk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTgyOVoXDTI1MDkxNzA5MTgyOVowLzEtMCsGA1UEAxMk NDc1OTBlM2MtNzBkYy00ODAzLWEyMjItZjQwYzg2ZjY5NTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznpZLXyA5jJuF/MJigaZaBdKPln6McfQNMWW NKS2/TdHuDzc/DRuHwst5c7x69QvVPlRQBTPKZlXysNCwnQdR4y9iZMKusoNVn6w gAvPy5DmVgrp/eKPNh9f1OubKyv0lql5L+gX74Ap5DaAngBjho3ENbvU5f8mWtIr v9iCWGOYTSwgrOQkOfmoeEnXs2qy2eHVst3LTcDHLRykUzsEZDEv/z+uu5vsogs/ IQ4xOoSp50/jACtSqaZjTtGHcwgdmxYaZhEzYeANdPe+iXwtZJZZ1X6HKpH5n4cT 3X7EhIZRaqmD5z0QZWMnJwejWwqCMegfN9+J7uJ3ujlj2wEbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhM3DHORv+T5mMysXV3pRJ+yQYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQyYTk1NjYtNDA4MC0z MTZkLWJlYzYtODg1NGM4ODlkNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROemMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFtIvTsHycEGUXgajXBHu+AtnssuHjL3zXA7VNxIZPQuAdH1wjrngZv Ur8QwVz6rxs1w3nQacJQEh+CSHG0bTaB8u81tzNln0GJFmVxtUJj6GnQNemUgntJ 0BPnjtZRqwF/O0NOaePBZAZIRSACNq98v/mjJ6+jnxXyoCx4hSHN3EDKOaBPWIQI xJlZY9hQN0SBLU2nDNFrjZ8GVz0p+edOGtwgaTq2iXLvK1pCNOqm5t1V45Z7d6qI XLbqZLSJLHixZpyCOBncSwCLuh2MJfOWXhrDDAtdNXKcWBQrlw7XXuuO9NwDqTRY gGqyBRDCXPMvQv29N21oIeTIP1vVn9Y= -----END CERTIFICATE-----Generated at Wed Jul 2 10:16:19 2025 by rpki-client