$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa File: 253e9225-1332-3dc8-aa80-96ac2f362b8e.roa (raw, json) Hash identifier: fBXV9sFbPiAO0d1MlmVDj1cLT4rlO8OFvyfJIgC9znU= Subject key identifier: 81:19:94:05:5A:B9:0D:D4:48:E4:A2:0A:D2:2B:6F:AF:A4:CC:86:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96363E8C2964273D76DD5E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:3e:8c:29:64:27:3d:76:dd:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=eaad2998-6469-481b-a19c-65a6ead704dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:27:a5:67:30:89:44:ea:8b:ce:f8:09:4e:5c: f5:04:4d:ff:0c:ad:18:c3:31:68:16:36:90:6e:09: a6:3b:8b:3a:9c:d9:0f:9c:0e:86:36:ac:39:da:0c: 72:70:da:8e:0e:32:08:dc:66:47:a9:40:1c:d3:a2: 5c:88:a0:c1:38:22:64:f8:2a:82:92:7d:2c:e1:25: 21:a5:48:30:d1:3f:a3:53:9b:44:85:b1:36:5b:88: 3e:13:b8:2a:40:17:da:6c:3a:79:32:9d:74:38:90: 06:2a:8b:60:47:d6:9e:57:c7:6c:ab:e4:2f:42:35: 3b:d5:e2:60:f6:d9:bf:55:2b:42:af:e3:ab:fb:f3: 4f:17:dd:89:48:fa:d4:97:28:b5:fe:0d:ee:c6:2b: 6a:e2:1b:20:6d:db:86:3c:4f:dc:7c:07:a8:49:e9: 75:aa:36:52:19:aa:9a:b7:67:b2:87:16:17:db:13: f6:73:f4:05:5e:43:84:22:74:84:3d:a1:96:97:05: bd:4a:a0:de:46:12:09:ad:59:e9:13:fc:71:18:91: a7:1e:e8:74:56:a4:5c:d9:de:37:e4:7e:db:65:16: 8c:7f:ae:c4:00:f2:49:f1:55:f5:bd:e9:12:64:88: 1b:5b:64:bc:74:c2:76:b0:8c:0d:db:4c:38:38:83: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:94:05:5A:B9:0D:D4:48:E4:A2:0A:D2:2B:6F:AF:A4:CC:86:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:d6:d6:dd:64:f0:a5:fb:03:93:e7:a2:10:6b:61:d0:2f:53: 5f:4d:97:95:82:51:bf:53:9e:5e:e2:50:6f:80:b5:d3:30:36: 14:0d:43:e0:26:e8:1b:2a:e2:b5:26:b8:2c:aa:1a:5d:e3:b0: 26:5c:8a:5b:bd:6c:c5:9b:b4:c1:0b:2b:ac:ff:d1:b6:aa:71: 9e:f5:97:e8:4b:35:bb:d9:48:77:08:4a:d9:1a:03:72:42:1a: 2b:cf:8c:e1:e0:84:14:82:34:14:76:a5:8e:c0:7f:27:96:ce: 73:0d:3c:ec:e2:27:90:6e:06:d6:19:ef:cd:ee:a2:48:a7:34: ca:0e:6b:d8:95:a3:e3:5b:41:9e:f0:d9:06:35:24:6f:83:43: 81:6c:94:39:d6:e9:1f:f0:6a:1c:fe:6a:8e:a3:b0:0d:e7:8c: af:20:73:33:cd:6f:60:b4:26:be:4b:4c:8a:6b:21:da:ff:29: 1a:70:d7:e7:9a:02:4f:a0:62:6e:ca:de:5e:26:f8:22:d9:e8: 8c:a5:4a:52:a3:c1:28:ce:dd:c8:a0:9a:a3:ae:45:8e:27:2a: 07:f5:90:54:45:64:39:b2:43:90:14:fc:86:15:fe:16:d9:c0: 1c:e8:06:b5:d7:7e:95:9f:c9:57:43:9d:c5:f0:2b:40:09:b0: 84:9f:92:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNj6MKWQnPXbdXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWFhZDI5OTgtNjQ2OS00ODFiLWExOWMtNjVhNmVhZDcwNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryelZzCJROqLzvgJTlz1BE3/DK0YwzFoFjaQ bgmmO4s6nNkPnA6GNqw52gxycNqODjII3GZHqUAc06JciKDBOCJk+CqCkn0s4SUh pUgw0T+jU5tEhbE2W4g+E7gqQBfabDp5Mp10OJAGKotgR9aeV8dsq+QvQjU71eJg 9tm/VStCr+Or+/NPF92JSPrUlyi1/g3uxitq4hsgbduGPE/cfAeoSel1qjZSGaqa t2eyhxYX2xP2c/QFXkOEInSEPaGWlwW9SqDeRhIJrVnpE/xxGJGnHuh0VqRc2d43 5H7bZRaMf67EAPJJ8VX1vekSZIgbW2S8dMJ2sIwN20w4OIM7qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEZlAVauQ3USOSiCtIrb6+kzIYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUzZTkyMjUtMTMzMi0z ZGM4LWFhODAtOTZhYzJmMzYyYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbW1t1k8KX7A5PnohBrYdAvU19Nl5WCUb9Tnl7iUG+AtdMwNhQNQ+Am 6Bsq4rUmuCyqGl3jsCZcilu9bMWbtMELK6z/0baqcZ71l+hLNbvZSHcIStkaA3JC GivPjOHghBSCNBR2pY7AfyeWznMNPOziJ5BuBtYZ783uokinNMoOa9iVo+NbQZ7w 2QY1JG+DQ4FslDnW6R/wahz+ao6jsA3njK8gczPNb2C0Jr5LTIprIdr/KRpw1+ea Ak+gYm7K3l4m+CLZ6IylSlKjwSjO3cigmqOuRY4nKgf1kFRFZDmyQ5AU/IYV/hbZ wBzoBrXXfpWfyVdDncXwK0AJsISfkpw= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:46 2025 by rpki-client