$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0fb06e5-6a5d-320f-a639-de5df66e0002.roa File: f0fb06e5-6a5d-320f-a639-de5df66e0002.roa (raw, json) Hash identifier: +cQYXg0ZJ+mIPHDA/xE6KEoCW14WtkO4SNqFXYDiL0Q= Subject key identifier: 0A:4F:BE:A2:41:96:80:B8:9D:9E:E9:F1:7C:C3:C0:03:01:F4:27:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7983B9587E8C8EB197FE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0fb06e5-6a5d-320f-a639-de5df66e0002.roa Signing time: Fri 20 Jun 2025 09:30:11 +0000 ROA not before: Fri 20 Jun 2025 09:30:11 +0000 ROA not after: Thu 18 Sep 2025 09:30:11 +0000 asID: 22773 IP address blocks: 68.224.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:98:3b:95:87:e8:c8:eb:19:7f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:11 2025 GMT Not After : Sep 18 09:30:11 2025 GMT Subject: CN=7bb52c3b-6baf-4a9e-bf82-e5b9cdaa2066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:a8:61:50:d0:26:c0:bc:44:fc:0b:da:1b: 7e:0e:45:00:a7:0c:38:4f:e8:fe:36:9f:99:8f:29: a7:2d:ef:e4:e0:52:f4:15:ea:65:10:d9:45:ea:c0: 95:70:1c:1f:79:0a:73:4c:b1:6f:c6:de:e7:5c:12: 1d:68:6b:ba:63:05:e7:8f:25:1b:a7:44:e1:90:a3: 3a:75:1c:52:38:9e:0d:13:f8:89:e7:ce:a8:98:96: f0:8e:84:76:7f:15:cb:8a:85:2c:f8:52:41:dc:54: cb:b2:89:59:2c:f7:ca:09:c9:6c:c9:43:1b:0a:2f: 10:d7:e9:30:05:54:c7:39:91:af:1e:85:73:8c:42: 94:f6:07:94:26:23:02:a3:e0:9f:17:81:ad:ca:d3: 68:46:86:32:b1:48:b8:45:a4:2c:ad:23:01:b0:e3: 58:a4:a2:b7:7c:f4:b4:1e:e0:83:84:58:7c:7a:fe: 8f:e3:d2:42:a1:f7:4f:b7:fb:e1:a3:16:c2:80:85: 19:4b:53:1b:c9:b3:1a:a1:51:c4:ef:f3:8e:af:97: b3:9a:fa:f5:39:4a:78:b6:22:6b:9f:1f:85:90:45: 1e:5f:2f:7a:f0:5d:71:84:83:38:41:ae:87:88:00: 2b:e0:c7:7b:a2:d2:5f:73:fa:36:22:48:85:15:ce: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4F:BE:A2:41:96:80:B8:9D:9E:E9:F1:7C:C3:C0:03:01:F4:27:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f0fb06e5-6a5d-320f-a639-de5df66e0002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:da:bd:8a:0e:fd:35:5b:9d:04:52:84:2b:db:2f:92:42:5a: 22:29:8e:3d:fb:6c:f9:33:bb:12:fd:75:a1:a3:20:49:de:8a: 65:a5:a0:e6:b9:62:5e:db:20:67:8b:69:05:fb:50:b9:12:8a: 0e:6c:43:34:95:62:2a:f7:5f:33:aa:e4:5d:fc:5a:e5:0c:7d: de:d6:63:03:05:ca:a4:17:d2:99:5a:98:97:f7:0a:79:42:f6: 18:c2:74:47:33:e4:f1:0f:20:af:2d:33:21:e7:af:d9:54:f3: 44:5f:5f:e7:3d:72:a2:f2:00:b1:88:79:4b:82:8b:9d:3d:ac: ac:24:ed:07:fb:36:76:e9:16:29:67:b3:17:ab:da:d7:ed:33: d2:9e:c3:a4:a5:92:c7:07:93:8a:7b:85:82:61:10:67:d7:eb: b1:f0:8e:9e:31:08:81:92:3d:08:4a:e0:4d:dc:58:c3:52:6a: 34:67:ee:f4:fd:ac:ec:cd:b5:f9:2c:85:a3:45:0c:13:7c:0e: 67:d4:82:aa:31:0c:d1:d2:43:6a:2d:a3:66:a2:aa:68:98:a9: 60:46:15:7f:1b:98:b6:ae:82:35:f7:07:8d:f1:bb:52:8a:ae: bc:76:27:77:d2:c5:1d:92:21:ef:5c:4c:9f:ef:f4:b9:b1:74: f5:c3:da:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp5g7lYfoyOsZf+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAxMVoXDTI1MDkxODA5MzAxMVowLzEtMCsGA1UEAxMk N2JiNTJjM2ItNmJhZi00YTllLWJmODItZTViOWNkYWEyMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWoYVDQJsC8RPwL2ht+DkUApww4T+j+Np+Z jymnLe/k4FL0FeplENlF6sCVcBwfeQpzTLFvxt7nXBIdaGu6YwXnjyUbp0ThkKM6 dRxSOJ4NE/iJ586omJbwjoR2fxXLioUs+FJB3FTLsolZLPfKCclsyUMbCi8Q1+kw BVTHOZGvHoVzjEKU9geUJiMCo+CfF4GtytNoRoYysUi4RaQsrSMBsONYpKK3fPS0 HuCDhFh8ev6P49JCofdPt/vhoxbCgIUZS1MbybMaoVHE7/OOr5ezmvr1OUp4tiJr nx+FkEUeXy968F1xhIM4Qa6HiAAr4Md7otJfc/o2IkiFFc5tmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApPvqJBloC4nZ7p8XzDwAMB9CfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjBmYjA2ZTUtNmE1ZC0z MjBmLWE2MzktZGU1ZGY2NmUwMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbavYoO/TVbnQRShCvbL5JCWiIpjj37bPkzuxL9daGjIEneimWloOa5 Yl7bIGeLaQX7ULkSig5sQzSVYir3XzOq5F38WuUMfd7WYwMFyqQX0plamJf3CnlC 9hjCdEcz5PEPIK8tMyHnr9lU80RfX+c9cqLyALGIeUuCi509rKwk7Qf7NnbpFiln sxer2tftM9Kew6SlkscHk4p7hYJhEGfX67Hwjp4xCIGSPQhK4E3cWMNSajRn7vT9 rOzNtfkshaNFDBN8DmfUgqoxDNHSQ2oto2aiqmiYqWBGFX8bmLaugjX3B43xu1KK rrx2J3fSxR2SIe9cTJ/v9LmxdPXD2tE= -----END CERTIFICATE-----Generated at Wed Jul 2 06:14:58 2025 by rpki-client