$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa File: 253e9225-1332-3dc8-aa80-96ac2f362b8e.roa (raw, json) Hash identifier: IjIQdGJQ3sMzjRARbjCt8P60GXLq2Xz998jLjo5S6UA= Subject key identifier: A3:72:19:02:60:B5:D3:01:BF:CA:78:AF:69:7B:E0:34:F7:3F:EC:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F80BAE60BE429C030E0280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa Signing time: Thu 01 May 2025 17:14:55 +0000 ROA not before: Thu 01 May 2025 17:14:55 +0000 ROA not after: Wed 30 Jul 2025 17:14:55 +0000 asID: 22773 IP address blocks: 68.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:0b:ae:60:be:42:9c:03:0e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:55 2025 GMT Not After : Jul 30 17:14:55 2025 GMT Subject: CN=5c852c85-3d98-4d5c-888c-42b3433dfd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:86:9e:0c:20:ca:2f:24:44:f6:2a:c3:fa: 91:f6:c8:62:68:b6:2f:78:0c:3f:22:06:06:06:cf: 0c:cd:ef:fb:bf:bc:36:f1:cc:ee:f8:b4:02:df:40: b4:6f:b3:a6:81:10:e6:8a:9b:5c:22:34:1a:bd:03: 9a:4e:91:93:10:69:e0:e3:cb:54:8f:62:0f:6c:69: f6:0b:65:98:e5:dc:e0:e8:4d:fe:39:b7:a9:72:b6: eb:fd:b9:b8:73:29:bf:11:0d:38:27:f3:cc:33:a8: 54:7b:b2:55:85:c3:76:c9:c2:f8:dd:4a:09:5d:4e: 4e:fb:3d:1c:a8:dd:ba:87:72:1c:09:d5:70:65:84: 8b:5c:26:78:40:f2:b4:e0:4c:5a:cd:1a:77:bc:91: 52:b5:d9:dc:ee:56:10:e6:de:1f:f0:55:fa:9a:2d: 0d:8a:d1:31:8f:de:2b:27:86:d5:83:a4:56:6b:16: 47:16:71:92:56:43:a8:86:4d:85:8e:1c:7d:13:cf: b8:c6:02:da:8d:90:12:c0:c4:1e:a3:0d:3f:68:3c: e6:2d:9b:86:b3:ac:f0:e2:70:4d:46:a1:af:c3:8c: e8:3d:21:cf:b0:cb:5a:7e:bb:d8:d9:3b:79:0e:6a: 51:c4:bd:ec:df:06:b3:98:04:7d:f9:b9:1d:91:40: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:72:19:02:60:B5:D3:01:BF:CA:78:AF:69:7B:E0:34:F7:3F:EC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:75:00:f7:19:f8:53:32:b1:4f:79:c5:7b:84:6a:33:66:aa: 5f:c3:fb:48:7c:80:8f:35:5d:81:f5:24:09:d5:c8:e7:11:72: a5:2c:58:8d:6c:60:60:32:85:dd:bf:74:d6:31:75:5f:95:0e: 1f:31:bb:ad:6e:4c:d8:59:a4:21:34:f5:45:c5:eb:3e:48:22: 01:6d:dc:f2:99:a6:e6:91:f7:fe:c3:80:da:c8:0e:be:b2:69: 83:6b:8e:66:fb:7b:fb:cd:ec:d9:9c:4b:1b:62:b1:ec:4a:66: f1:5b:29:84:73:7e:b2:b1:c9:0d:42:93:c7:88:76:e1:5f:f6: 82:e4:3d:0e:1a:89:ca:ad:6b:71:14:f5:15:b4:da:11:8c:91: 41:7b:63:34:83:4a:b9:2a:d9:d9:8e:11:38:1c:db:ed:6c:ae: 83:4b:65:b5:66:5b:42:5f:82:b6:25:09:12:d9:91:2c:bf:ec: 83:b3:e8:9a:94:e0:03:e5:a2:50:91:58:32:90:d0:99:01:17: 7a:46:05:12:dd:c4:c6:6a:c8:84:3a:04:c4:e1:5c:2c:07:7b: 89:c8:9c:3b:ef:91:9b:f8:31:44:ac:a0:2e:97:08:c6:a5:bd: e6:66:b1:27:5f:2a:a5:9c:b9:6c:4e:dc:d5:e4:7a:7a:bf:33: 38:b8:6a:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+AuuYL5CnAMOAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1NVoXDTI1MDczMDE3MTQ1NVowLzEtMCsGA1UEAxMk NWM4NTJjODUtM2Q5OC00ZDVjLTg4OGMtNDJiMzQzM2RmZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh+Gngwgyi8kRPYqw/qR9shiaLYveAw/IgYG Bs8Mze/7v7w28czu+LQC30C0b7OmgRDmiptcIjQavQOaTpGTEGng48tUj2IPbGn2 C2WY5dzg6E3+Obepcrbr/bm4cym/EQ04J/PMM6hUe7JVhcN2ycL43UoJXU5O+z0c qN26h3IcCdVwZYSLXCZ4QPK04ExazRp3vJFStdnc7lYQ5t4f8FX6mi0NitExj94r J4bVg6RWaxZHFnGSVkOohk2Fjhx9E8+4xgLajZASwMQeow0/aDzmLZuGs6zw4nBN RqGvw4zoPSHPsMtafrvY2Tt5DmpRxL3s3wazmAR9+bkdkUA4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNyGQJgtdMBv8p4r2l74DT3P+yoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUzZTkyMjUtMTMzMi0z ZGM4LWFhODAtOTZhYzJmMzYyYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA51APcZ+FMysU95xXuEajNmql/D+0h8gI81XYH1JAnVyOcRcqUsWI1s YGAyhd2/dNYxdV+VDh8xu61uTNhZpCE09UXF6z5IIgFt3PKZpuaR9/7DgNrIDr6y aYNrjmb7e/vN7NmcSxtisexKZvFbKYRzfrKxyQ1Ck8eIduFf9oLkPQ4aicqta3EU 9RW02hGMkUF7YzSDSrkq2dmOETgc2+1sroNLZbVmW0JfgrYlCRLZkSy/7IOz6JqU 4APlolCRWDKQ0JkBF3pGBRLdxMZqyIQ6BMThXCwHe4nInDvvkZv4MUSsoC6XCMal veZmsSdfKqWcuWxO3NXkenq/Mzi4ah4= -----END CERTIFICATE-----Generated at Thu Jun 19 05:54:35 2025 by rpki-client