$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b97e23b-7a47-37f3-b07a-43f2e3c7048a.roa File: 0b97e23b-7a47-37f3-b07a-43f2e3c7048a.roa (raw, json) Hash identifier: erWRVLP68SAG0YQM+WE0WlXS333wM3p2Gu3wVRD3kd8= Subject key identifier: F6:13:54:E6:00:82:74:91:BC:99:25:BE:CC:36:17:5C:B7:28:2D:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636204274A7978665C6A3A4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b97e23b-7a47-37f3-b07a-43f2e3c7048a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.229.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:20:42:74:a7:97:86:65:c6:a3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=db106845-7141-4db2-9ec4-f0fbda938c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:1d:bb:12:90:f4:0f:bb:64:9a:62:63:4b: 2e:0d:67:9a:84:7a:72:a9:3a:79:f7:d6:27:84:44: 78:39:1b:90:de:cc:07:28:18:a5:2d:b2:06:1f:2d: 04:9c:10:e1:9e:32:08:6d:6b:17:8b:3a:42:1a:9d: 6d:88:8b:26:ef:8b:2b:5d:b9:9c:aa:36:33:be:e3: 14:b1:b8:bb:0e:25:fa:73:f1:aa:8b:78:e7:03:3b: 49:4c:7a:fd:dc:6b:41:b2:94:d3:7c:b4:8c:b4:56: 26:9b:e5:fb:ee:2e:5b:f8:59:79:d4:53:a9:59:70: 89:0c:a9:38:be:fd:2a:f7:91:16:27:8c:bd:06:12: eb:d7:74:14:00:88:91:77:4a:71:64:1a:f8:e7:24: 49:db:22:9b:32:fd:0e:01:4f:0b:e2:45:64:23:b9: 09:b4:b0:0e:d3:f5:a8:35:e1:b8:05:99:a0:68:db: 58:42:51:83:7f:e5:ee:19:f3:7b:e4:d8:67:de:0c: 25:97:d6:b7:6d:32:d6:cf:d1:51:22:a7:cb:5a:60: 81:0d:b2:fc:93:fd:44:75:e2:80:61:11:39:2e:a8: 2f:42:ba:d2:b6:45:5e:23:7b:5d:80:25:f9:cf:82: 67:10:f7:b1:81:c4:21:ec:17:d3:54:41:e2:b4:72: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:54:E6:00:82:74:91:BC:99:25:BE:CC:36:17:5C:B7:28:2D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b97e23b-7a47-37f3-b07a-43f2e3c7048a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cd:7b:8f:2e:ee:5c:b1:32:35:d0:f2:ad:a7:f8:ee:1b:d1: 04:8f:94:be:5b:cf:67:9a:89:73:f1:c5:63:a7:b7:65:7a:53: 15:12:10:66:27:8c:10:71:87:86:24:66:83:95:a0:a8:70:8b: 28:b5:45:5e:76:f1:12:5d:3a:eb:3a:75:b8:c1:dc:cb:6c:24: 0b:13:9e:6e:e1:8a:81:10:00:f3:21:f7:7c:aa:c3:58:8a:20: a9:78:a0:f2:8c:0d:aa:e2:d4:f6:06:30:2d:d7:19:bf:2a:9e: bc:26:cb:6b:83:fe:d5:97:7b:5b:22:d0:50:b1:06:cd:8f:ab: 87:4a:f5:c5:1f:03:1e:31:b4:36:de:5e:f0:70:df:a5:53:3f: 54:f3:37:c1:61:d0:52:d5:56:92:1e:f4:83:c4:a8:c4:96:6a: ad:6d:61:e2:eb:de:12:06:9a:86:a9:04:84:30:8b:c0:02:1d: 40:69:24:1f:c9:17:a2:f6:c9:7c:72:28:ce:1c:e3:2e:c0:e2: 4a:0c:d6:0b:ca:b2:ba:84:58:f6:bd:e9:a4:70:d5:49:a0:25: 2f:f5:f4:71:ed:54:83:d7:36:63:8c:1d:7c:dd:db:f2:c6:6d: a4:1b:c1:ef:22:f2:ae:51:d8:c7:6b:62:0e:c8:6b:10:a0:fe: 37:2c:8a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiBCdKeXhmXGo6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGIxMDY4NDUtNzE0MS00ZGIyLTllYzQtZjBmYmRhOTM4YzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgksduxKQ9A+7ZJpiY0suDWeahHpyqTp599Yn hER4ORuQ3swHKBilLbIGHy0EnBDhnjIIbWsXizpCGp1tiIsm74srXbmcqjYzvuMU sbi7DiX6c/Gqi3jnAztJTHr93GtBspTTfLSMtFYmm+X77i5b+Fl51FOpWXCJDKk4 vv0q95EWJ4y9BhLr13QUAIiRd0pxZBr45yRJ2yKbMv0OAU8L4kVkI7kJtLAO0/Wo NeG4BZmgaNtYQlGDf+XuGfN75Nhn3gwll9a3bTLWz9FRIqfLWmCBDbL8k/1EdeKA YRE5LqgvQrrStkVeI3tdgCX5z4JnEPexgcQh7BfTVEHitHLF8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYTVOYAgnSRvJklvsw2F1y3KC2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGI5N2UyM2ItN2E0Ny0z N2YzLWIwN2EtNDNmMmUzYzcwNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDNe48u7lyxMjXQ8q2n+O4b0QSPlL5bz2eaiXPxxWOnt2V6UxUSEGYn jBBxh4YkZoOVoKhwiyi1RV528RJdOus6dbjB3MtsJAsTnm7hioEQAPMh93yqw1iK IKl4oPKMDari1PYGMC3XGb8qnrwmy2uD/tWXe1si0FCxBs2Pq4dK9cUfAx4xtDbe XvBw36VTP1TzN8Fh0FLVVpIe9IPEqMSWaq1tYeLr3hIGmoapBIQwi8ACHUBpJB/J F6L2yXxyKM4c4y7A4koM1gvKsrqEWPa96aRw1UmgJS/19HHtVIPXNmOMHXzd2/LG baQbwe8i8q5R2MdrYg7IaxCg/jcsinI= -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:00 2025 by rpki-client