$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa File: 2671cac0-3285-328a-a679-36e51060176e.roa (raw, json) Hash identifier: qiVj0+g4cYzhqu1pYrJ0i4DBOwfTucyn4ZI1QBSqh4Q= Subject key identifier: EF:A6:6F:47:94:66:D3:D8:B8:9A:11:35:66:1B:60:A5:CF:D4:65:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96366150EA412E3AD15BD900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.101.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:61:50:ea:41:2e:3a:d1:5b:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=109bf164-d0a4-4c68-82af-d9bc3bec356b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:88:76:80:ed:19:59:6f:0e:fe:2f:16:ec: 97:c6:bb:18:b7:e0:2f:5b:11:ca:08:be:a7:70:80: 4b:c3:bf:3d:79:8c:33:fd:e3:ed:b5:87:9d:02:a5: c8:1c:dc:4c:3e:6c:69:b0:30:cd:91:d9:7d:87:bc: 49:91:e2:e0:17:20:56:9d:11:b6:fb:0a:ea:e2:f5: 80:da:ea:c2:32:b9:24:44:68:0a:b6:5a:73:25:7d: 47:4c:7a:37:19:59:7a:e1:99:58:1d:5a:c2:c5:f4: 50:a3:99:96:e0:27:cd:30:0c:0d:3c:b0:ae:de:ce: da:c8:65:ca:ba:62:35:b8:6b:ae:8e:78:aa:57:9a: 1a:2a:6c:a1:b7:a1:a3:f9:3e:d1:c3:b2:a1:82:4a: c4:b8:5d:1c:bc:0d:38:87:95:37:0b:3c:fe:98:d2: 5b:69:83:7e:80:22:62:20:88:5d:b3:f8:ba:a2:26: 9a:bc:e3:5d:33:54:b1:1d:06:2e:56:2b:a9:5d:6c: b4:75:42:d0:ad:06:95:54:f4:a8:94:b4:c0:d3:e6: 16:e9:83:65:c7:e6:11:ce:48:2e:2a:53:97:11:ba: 19:ee:33:40:69:15:89:1c:dd:a3:56:57:a5:9a:ec: d6:23:27:0e:48:11:35:6b:83:42:b7:a9:28:1a:41: e6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:6F:47:94:66:D3:D8:B8:9A:11:35:66:1B:60:A5:CF:D4:65:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2671cac0-3285-328a-a679-36e51060176e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c7:79:ea:3e:ea:26:bf:61:fe:6e:c7:6d:12:43:66:b2:f7: 6c:1e:a1:d9:aa:4c:b0:63:2c:3c:b0:7c:43:e1:b4:75:61:4c: 6c:1d:94:8c:c9:33:49:ef:bc:ac:91:d9:c8:85:7c:29:a9:15: 57:81:8f:0e:26:93:38:5a:36:1b:98:5d:16:f5:01:20:5c:d7: 48:59:3f:46:d0:00:85:3c:d9:78:66:a5:ea:3e:a3:64:a6:16: 56:3c:2b:65:3a:3e:41:12:3b:be:e3:ed:05:cb:49:f5:92:e3: 8b:80:79:3f:31:8e:8f:68:dd:52:d7:c2:a4:ab:7e:28:cb:b7: 2e:93:b8:c3:88:8e:2d:0c:f9:c5:ca:d7:4c:d4:e3:ee:8f:76: 22:41:ae:9d:c7:bb:9f:2c:eb:09:17:2a:4b:fc:30:65:77:5a: 24:91:35:66:2f:b3:4d:34:95:b7:94:a7:3e:1c:0d:83:21:de: 45:a0:4e:08:74:4e:b8:3f:f7:14:ac:b2:bc:ef:14:52:00:2a: bd:ac:03:dc:eb:36:ff:64:16:c3:c3:41:5f:7d:fa:26:db:bf: db:a8:dc:67:ff:04:c1:6b:a5:a6:30:09:da:96:3e:6c:88:09: e6:d1:57:27:24:f7:15:9d:55:c3:aa:fd:cd:d5:00:84:cc:25: 7c:66:13:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmFQ6kEuOtFb2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTA5YmYxNjQtZDBhNC00YzY4LTgyYWYtZDliYzNiZWMzNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzceIdoDtGVlvDv4vFuyXxrsYt+AvWxHKCL6n cIBLw789eYwz/ePttYedAqXIHNxMPmxpsDDNkdl9h7xJkeLgFyBWnRG2+wrq4vWA 2urCMrkkRGgKtlpzJX1HTHo3GVl64ZlYHVrCxfRQo5mW4CfNMAwNPLCu3s7ayGXK umI1uGuujniqV5oaKmyht6Gj+T7Rw7KhgkrEuF0cvA04h5U3Czz+mNJbaYN+gCJi IIhds/i6oiaavONdM1SxHQYuViupXWy0dULQrQaVVPSolLTA0+YW6YNlx+YRzkgu KlOXEboZ7jNAaRWJHN2jVlelmuzWIycOSBE1a4NCt6koGkHmmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+mb0eUZtPYuJoRNWYbYKXP1GX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjY3MWNhYzAtMzI4NS0z MjhhLWE2NzktMzZlNTEwNjAxNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfHeeo+6ia/Yf5ux20SQ2ay92weodmqTLBjLDywfEPhtHVhTGwdlIzJ M0nvvKyR2ciFfCmpFVeBjw4mkzhaNhuYXRb1ASBc10hZP0bQAIU82Xhmpeo+o2Sm FlY8K2U6PkESO77j7QXLSfWS44uAeT8xjo9o3VLXwqSrfijLty6TuMOIji0M+cXK 10zU4+6PdiJBrp3Hu58s6wkXKkv8MGV3WiSRNWYvs000lbeUpz4cDYMh3kWgTgh0 Trg/9xSssrzvFFIAKr2sA9zrNv9kFsPDQV99+ibbv9uo3Gf/BMFrpaYwCdqWPmyI CebRVyck9xWdVcOq/c3VAITMJXxmE0M= -----END CERTIFICATE-----Generated at Sat Aug 9 22:50:31 2025 by rpki-client