$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bee25622-cdec-351e-ba4e-dc150d53ba50.roa File: bee25622-cdec-351e-ba4e-dc150d53ba50.roa (raw, json) Hash identifier: HQ3GwOr9BJcrtCjhpuyUWwMiKeaACPm3wC/dvwWPXUE= Subject key identifier: A3:F4:ED:96:B1:D4:29:8E:5F:74:64:4D:ED:49:87:18:6A:64:47:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD6060C883053C3F0A7E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bee25622-cdec-351e-ba4e-dc150d53ba50.roa Signing time: Thu 19 Jun 2025 09:16:18 +0000 ROA not before: Thu 19 Jun 2025 09:16:18 +0000 ROA not after: Wed 17 Sep 2025 09:16:18 +0000 asID: 22773 IP address blocks: 68.109.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:06:0c:88:30:53:c3:f0:a7:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:16:18 2025 GMT Not After : Sep 17 09:16:18 2025 GMT Subject: CN=51c144ca-bd6d-4c68-883e-796b5e33c410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:69:fd:89:9e:39:9b:a3:0a:3f:50:2b:c3: cb:43:2f:64:98:ba:69:e8:60:48:be:63:e8:e7:ad: 1a:19:42:75:57:d7:2e:1c:00:dc:2c:a1:d1:13:3e: fe:4d:04:fe:d6:39:90:24:13:a3:44:b8:59:be:2f: 76:3e:d0:8a:ed:de:84:a2:30:55:61:cd:c0:e0:b7: 2f:0d:a6:a4:ec:16:7f:88:63:d4:24:c6:6d:66:33: 65:b1:53:83:9b:74:b3:36:d5:50:6b:7b:03:4d:e1: 81:b6:e0:c9:5d:95:2e:8d:b2:3e:53:be:91:a5:4a: 23:f6:df:42:d6:04:47:e3:2c:ee:09:93:bf:2d:2d: e3:1b:75:fa:c5:64:16:c9:b8:ed:56:c9:37:8e:84: bc:e4:49:ae:93:41:ef:95:9b:27:bf:66:03:a4:ed: 95:1e:9e:dc:d8:9c:0a:f4:4f:50:14:3c:08:4c:a7: a1:3e:28:56:4a:38:9b:39:18:08:b5:9e:8c:6a:b5: 0c:f6:96:7e:a3:62:e5:18:b7:81:17:37:89:ca:37: ec:d1:4e:fa:26:58:d5:b7:7f:f7:37:20:6b:5b:d3: e0:a8:00:40:12:1a:aa:c1:ba:00:2c:91:6b:48:3e: 16:75:c9:9a:b0:58:5a:7e:a4:7a:64:fd:ce:2a:7c: 96:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:ED:96:B1:D4:29:8E:5F:74:64:4D:ED:49:87:18:6A:64:47:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bee25622-cdec-351e-ba4e-dc150d53ba50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:41:b3:8a:0b:02:0e:36:b8:f9:86:e7:60:20:1d:16:6d:a5: bb:a8:bb:49:77:7f:9d:67:78:ec:2e:c9:94:79:8f:42:1e:62: 28:48:8b:ef:79:7e:69:76:aa:82:b3:da:50:7c:37:97:66:ec: 3f:41:d2:e5:15:8b:00:02:c6:91:8e:fc:14:ea:00:01:c9:be: 1e:50:3b:b9:95:7b:5d:77:45:16:6c:9a:b8:32:4c:66:75:34: b5:67:ca:b3:f1:2b:d2:dd:bc:92:e5:1e:ff:f6:c6:f5:4a:75: 6f:f8:b6:22:e6:16:84:15:61:22:b5:67:d3:56:3f:81:65:09: b4:ca:0c:a5:34:3b:2e:14:21:ab:f0:91:bf:99:f7:bb:17:5c: c3:24:85:8b:e9:72:ed:36:5b:8a:b3:f8:01:17:74:55:18:da: a8:01:98:97:e4:ae:d5:2f:ca:eb:c9:a3:e7:b8:7e:99:04:f7: 3c:6f:a5:47:02:02:ae:83:e6:20:d7:18:49:0b:5e:74:2e:c0: 38:5e:f4:e2:81:e5:a7:88:48:3b:09:91:5b:9f:8c:6a:c3:65: bd:f2:2a:fe:00:12:a2:aa:e2:54:6a:89:0b:7c:6a:93:26:cf: 7d:77:c2:39:7a:52:8f:48:bc:48:0c:93:19:6c:f3:d5:55:13: e9:68:ab:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91gYMiDBTw/Cn4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTYxOFoXDTI1MDkxNzA5MTYxOFowLzEtMCsGA1UEAxMk NTFjMTQ0Y2EtYmQ2ZC00YzY4LTg4M2UtNzk2YjVlMzNjNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Bp/YmeOZujCj9QK8PLQy9kmLpp6GBIvmPo 560aGUJ1V9cuHADcLKHREz7+TQT+1jmQJBOjRLhZvi92PtCK7d6EojBVYc3A4Lcv Daak7BZ/iGPUJMZtZjNlsVODm3SzNtVQa3sDTeGBtuDJXZUujbI+U76RpUoj9t9C 1gRH4yzuCZO/LS3jG3X6xWQWybjtVsk3joS85Emuk0HvlZsnv2YDpO2VHp7c2JwK 9E9QFDwITKehPihWSjibORgItZ6MarUM9pZ+o2LlGLeBFzeJyjfs0U76JljVt3/3 NyBrW9PgqABAEhqqwboALJFrSD4WdcmasFhafqR6ZP3OKnyWlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP07Zax1CmOX3RkTe1JhxhqZEeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmVlMjU2MjItY2RlYy0z NTFlLWJhNGUtZGMxNTBkNTNiYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNBs4oLAg42uPmG52AgHRZtpbuou0l3f51neOwuyZR5j0IeYihIi+95 fml2qoKz2lB8N5dm7D9B0uUViwACxpGO/BTqAAHJvh5QO7mVe113RRZsmrgyTGZ1 NLVnyrPxK9LdvJLlHv/2xvVKdW/4tiLmFoQVYSK1Z9NWP4FlCbTKDKU0Oy4UIavw kb+Z97sXXMMkhYvpcu02W4qz+AEXdFUY2qgBmJfkrtUvyuvJo+e4fpkE9zxvpUcC Aq6D5iDXGEkLXnQuwDhe9OKB5aeISDsJkVufjGrDZb3yKv4AEqKq4lRqiQt8apMm z313wjl6Uo9IvEgMkxls89VVE+loqyA= -----END CERTIFICATE-----Generated at Wed Jul 2 07:21:57 2025 by rpki-client