$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4cccb7d-6dfb-3343-b356-90a3d27a3091.roa File: f4cccb7d-6dfb-3343-b356-90a3d27a3091.roa (raw, json) Hash identifier: cBmULLhm5ZN6tfrUWrWrl8NF/W27b3afHL8/ulq62JY= Subject key identifier: 93:2C:BE:DC:BB:DB:AC:35:FE:5A:E0:60:23:37:A6:95:DA:F9:07:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365A4555B374354984CE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4cccb7d-6dfb-3343-b356-90a3d27a3091.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:5a:45:55:b3:74:35:49:84:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=34ef5d2a-a57a-4c4f-b429-c54faacb8499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:e2:0b:68:75:f9:a4:de:94:57:87:3c:fe: 51:9a:0d:70:04:96:fc:fb:16:f6:d8:15:80:71:2b: 92:86:28:8d:de:6d:09:24:b8:46:ff:99:46:30:2a: aa:57:6a:9b:a0:29:79:6a:02:4a:9e:0f:80:5e:91: 21:b5:f0:6d:ad:96:af:d6:5b:69:b0:1c:94:ac:6f: a7:a8:24:cb:b7:c2:b1:26:e8:50:92:a3:66:73:45: f4:f8:1a:a0:f5:9f:48:ef:bd:79:af:48:aa:65:7c: c4:dc:31:dd:1e:3b:ce:ad:a0:47:89:5f:b7:b5:3f: 74:fc:72:14:f8:df:dd:a7:eb:f0:86:99:ee:d6:24: a8:6a:b6:bc:ba:dc:06:c7:20:d0:c5:44:af:51:ad: c1:a4:42:e0:7c:4d:1c:93:7d:7f:f3:e3:c1:d4:c3: e4:dd:f9:91:1d:0b:01:07:05:f1:5a:6c:9b:c0:85: 14:0b:8c:e6:56:6f:c4:70:79:06:8e:92:66:23:1c: eb:84:9a:04:e3:ba:71:44:53:b4:de:4f:de:93:dc: 9b:48:2c:db:4d:3d:ce:92:c9:d1:78:ce:46:97:60: b5:e2:7b:fb:61:c5:9f:ee:13:fd:dc:75:98:4e:d7: 9a:76:3c:55:30:e4:af:44:b3:14:cc:85:46:70:76: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2C:BE:DC:BB:DB:AC:35:FE:5A:E0:60:23:37:A6:95:DA:F9:07:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4cccb7d-6dfb-3343-b356-90a3d27a3091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a8:20:dc:5c:99:a7:0b:78:d2:1c:31:a2:90:38:fb:00:ce: 23:55:53:c7:16:c3:29:c7:c5:a0:50:91:d8:cc:3e:4b:16:15: 48:a5:82:9a:96:0b:4d:a6:03:79:94:c1:9e:04:38:6c:87:5e: 1c:a2:87:0b:05:78:a9:9b:6f:c3:e1:73:e9:4c:04:7b:7b:1d: 8b:6b:d3:b5:d0:6a:b0:a6:ee:46:a5:69:e9:47:20:3c:23:20: 6c:39:45:45:78:62:fb:c9:80:22:6f:51:af:9d:8b:3a:61:48: 28:e9:3c:2b:03:30:99:d3:61:89:51:25:1a:62:82:eb:c9:3c: 98:75:8a:78:a2:02:5d:36:a7:26:4d:ce:c5:87:11:e0:80:d2: 1d:d2:69:a2:e4:1f:92:18:74:73:a8:eb:8b:fb:35:00:b1:15: 7e:ed:6c:58:1c:0f:39:c5:f5:3e:32:97:cb:89:cf:e9:9a:62: 94:12:bf:3e:71:ed:ff:77:8c:2a:9e:67:85:eb:a2:57:44:8c: 7e:4a:6e:5e:e7:34:29:1d:49:b7:80:0e:0a:24:22:5b:1c:5d: 84:6a:c0:74:5c:76:75:f1:6d:ec:9c:be:f8:b8:da:84:97:58: 51:53:de:bb:23:6c:fb:74:ce:2b:a0:90:bc:91:5d:7a:29:26: 8d:5b:01:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlpFVbN0NUmEzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzRlZjVkMmEtYTU3YS00YzRmLWI0MjktYzU0ZmFhY2I4NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNDiC2h1+aTelFeHPP5Rmg1wBJb8+xb22BWA cSuShiiN3m0JJLhG/5lGMCqqV2qboCl5agJKng+AXpEhtfBtrZav1ltpsByUrG+n qCTLt8KxJuhQkqNmc0X0+Bqg9Z9I7715r0iqZXzE3DHdHjvOraBHiV+3tT90/HIU +N/dp+vwhpnu1iSoara8utwGxyDQxUSvUa3BpELgfE0ck31/8+PB1MPk3fmRHQsB BwXxWmybwIUUC4zmVm/EcHkGjpJmIxzrhJoE47pxRFO03k/ek9ybSCzbTT3OksnR eM5Gl2C14nv7YcWf7hP93HWYTteadjxVMOSvRLMUzIVGcHaeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMsvty726w1/lrgYCM3ppXa+Qf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjRjY2NiN2QtNmRmYi0z MzQzLWIzNTYtOTBhM2QyN2EzMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAe0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqoINxcmacLeNIcMaKQOPsAziNVU8cWwynHxaBQkdjMPksWFUilgpqW C02mA3mUwZ4EOGyHXhyihwsFeKmbb8Phc+lMBHt7HYtr07XQarCm7kalaelHIDwj IGw5RUV4YvvJgCJvUa+dizphSCjpPCsDMJnTYYlRJRpiguvJPJh1iniiAl02pyZN zsWHEeCA0h3SaaLkH5IYdHOo64v7NQCxFX7tbFgcDznF9T4yl8uJz+maYpQSvz5x 7f93jCqeZ4XroldEjH5Kbl7nNCkdSbeADgokIlscXYRqwHRcdnXxbeycvvi42oSX WFFT3rsjbPt0ziugkLyRXXopJo1bAZM= -----END CERTIFICATE-----Generated at Wed Aug 20 18:20:59 2025 by rpki-client