$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa File: ff054053-2588-33ba-9fcb-2ca154b8f051.roa (raw, json) Hash identifier: EeDu43aQ2I6zUQJIgsUzvouyQcX/8TNR7TuCJsqEOfw= Subject key identifier: 00:E4:F7:68:F5:3D:90:7E:AB:66:3A:38:A0:E9:FE:E4:78:BD:F3:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1098B6876BB74C731EB640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa Signing time: Wed 18 Jun 2025 18:02:42 +0000 ROA not before: Wed 18 Jun 2025 18:02:42 +0000 ROA not after: Tue 16 Sep 2025 18:02:42 +0000 asID: 22773 IP address blocks: 68.98.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:98:b6:87:6b:b7:4c:73:1e:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:42 2025 GMT Not After : Sep 16 18:02:42 2025 GMT Subject: CN=04e711af-de00-419f-b2c7-bedb36f04b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:6d:da:30:73:5d:0f:38:ea:c0:e3:e4:71: a7:3c:5f:36:9e:95:c6:ba:4a:77:40:96:c2:ee:c3: c4:b4:c1:ec:f2:9f:9d:34:85:76:94:a2:e8:09:66: 87:5f:3e:fb:5c:5f:53:6e:1e:22:11:1a:0a:37:8a: 7c:4f:31:d7:46:11:3d:cb:36:2e:72:46:a2:67:ae: 48:b8:27:46:e6:4a:47:ae:1e:9c:ce:3e:0f:11:f7: 2e:1a:7b:03:fc:18:dc:4b:67:14:24:69:f7:39:43: 32:24:25:8a:ba:fd:11:46:d6:c6:42:f6:9c:8a:47: 82:12:61:5f:4a:d7:0b:52:34:c3:31:81:25:f4:3d: fe:d1:9e:93:80:bc:ee:e3:41:2c:cc:b0:54:9d:ed: 4f:c0:57:c9:4b:61:35:aa:f5:0a:56:5a:b4:e7:a2: 77:d5:62:49:4e:29:61:46:b5:af:53:9a:5e:2d:7a: 98:13:0d:c4:24:a2:50:7c:ba:50:4e:84:ea:bf:75: 4f:18:76:45:76:3d:c4:b2:85:26:3c:45:f0:9a:13: a6:b1:cf:91:22:51:b2:ae:59:11:2a:54:a7:50:30: 56:5b:a5:ef:d3:c6:3a:70:ee:6f:1b:18:f7:5c:03: 75:f1:76:a8:7b:7c:20:f2:c2:e2:23:72:d5:8c:f6: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:F7:68:F5:3D:90:7E:AB:66:3A:38:A0:E9:FE:E4:78:BD:F3:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7f:dc:3a:8b:54:fc:03:a5:93:a9:d2:70:c8:99:c9:93:30: dc:7b:41:bf:1e:59:8d:e9:13:b0:16:f1:9e:f5:bc:c4:3f:53: 2b:24:9b:5a:6a:41:3f:53:8b:05:46:d9:93:31:3f:bb:a9:ce: 07:fc:d0:a2:ad:9c:89:1c:6c:69:98:8e:af:65:2c:95:ae:1d: 9d:66:71:74:84:d6:0c:ec:de:d3:92:1d:af:e5:78:52:57:04: fa:44:0b:77:0c:56:81:8e:64:40:5d:fe:84:f7:97:af:e6:ee: 31:dc:f1:08:da:bc:cf:33:ef:f3:02:ad:ca:df:fd:d9:08:3b: 69:ef:0d:c4:e3:7d:ae:c1:78:55:8b:eb:66:05:3e:2f:d7:63: 0d:10:21:2c:88:f3:82:40:1d:c0:b4:46:b4:18:4f:bf:04:95: 2d:11:1b:00:b0:04:a1:bc:06:84:cc:06:30:35:52:21:11:25: c6:4c:d4:a9:1e:78:12:4c:68:05:0f:4f:44:d0:3a:a0:f7:84: 76:72:ae:b5:16:91:97:69:63:44:56:98:53:cd:a1:6f:87:4e: e5:95:5f:a8:a6:aa:2b:29:db:bd:c1:91:da:e5:5e:ab:2f:36: 82:35:2f:c2:b7:d3:05:b8:1c:a9:b1:49:99:2f:1a:df:7f:9a: db:2b:fb:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EJi2h2u3THMetkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDI0MloXDTI1MDkxNjE4MDI0MlowLzEtMCsGA1UEAxMk MDRlNzExYWYtZGUwMC00MTlmLWIyYzctYmVkYjM2ZjA0YjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluFt2jBzXQ846sDj5HGnPF82npXGukp3QJbC 7sPEtMHs8p+dNIV2lKLoCWaHXz77XF9Tbh4iERoKN4p8TzHXRhE9yzYuckaiZ65I uCdG5kpHrh6czj4PEfcuGnsD/BjcS2cUJGn3OUMyJCWKuv0RRtbGQvacikeCEmFf StcLUjTDMYEl9D3+0Z6TgLzu40EszLBUne1PwFfJS2E1qvUKVlq056J31WJJTilh RrWvU5peLXqYEw3EJKJQfLpQToTqv3VPGHZFdj3EsoUmPEXwmhOmsc+RIlGyrlkR KlSnUDBWW6Xv08Y6cO5vGxj3XAN18Xaoe3wg8sLiI3LVjPaB1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADk92j1PZB+q2Y6OKDp/uR4vfP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYwNTQwNTMtMjU4OC0z M2JhLTlmY2ItMmNhMTU0YjhmMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp/3DqLVPwDpZOp0nDImcmTMNx7Qb8eWY3pE7AW8Z71vMQ/Uyskm1pq QT9TiwVG2ZMxP7upzgf80KKtnIkcbGmYjq9lLJWuHZ1mcXSE1gzs3tOSHa/leFJX BPpEC3cMVoGOZEBd/oT3l6/m7jHc8QjavM8z7/MCrcrf/dkIO2nvDcTjfa7BeFWL 62YFPi/XYw0QISyI84JAHcC0RrQYT78ElS0RGwCwBKG8BoTMBjA1UiERJcZM1Kke eBJMaAUPT0TQOqD3hHZyrrUWkZdpY0RWmFPNoW+HTuWVX6imqisp273BkdrlXqsv NoI1L8K30wW4HKmxSZkvGt9/mtsr+2A= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:53 2025 by rpki-client