$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa File: 2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa (raw, json) Hash identifier: k7mOEBKzQShVcOhaVv3j/XwFcpCBwBkQT61WZn/ugSc= Subject key identifier: 30:10:C2:91:2F:30:F7:F3:45:06:7F:1C:D2:56:39:C3:62:32:F7:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360C7CE65A12D95D047100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.0.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0c:7c:e6:5a:12:d9:5d:04:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=504b804f-7b50-4aa2-82c7-78b5cf26c174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:f1:4b:19:2c:84:90:87:c6:fa:1a:57:ff: 5c:95:5d:25:c9:48:fc:4c:3c:f8:c7:33:30:c0:d0: 1b:15:d7:c2:f8:5a:82:55:e0:ce:8d:ef:ef:3f:3d: a4:1a:81:a5:e6:e5:9c:cc:4c:a4:d6:42:de:a2:68: 4d:c9:27:ba:fa:44:1c:d2:82:72:42:b2:86:fb:3c: 38:73:16:df:14:d5:e0:d6:15:86:72:2c:a1:c8:ed: 92:cc:36:81:48:8e:77:6a:ad:c2:66:f6:fe:21:af: 34:30:eb:58:d6:2c:34:6f:1a:d4:bc:5e:cf:62:21: c4:49:35:e4:29:9a:9a:5d:a8:cc:64:24:4e:5e:8e: c9:48:12:1c:c9:93:d3:46:97:a6:1f:67:97:aa:a4: 8d:77:14:4a:72:61:b3:2e:13:ef:43:72:2a:d4:a2: 08:79:8e:ce:ef:b0:8e:c5:9c:3d:00:41:8d:7b:11: 17:2f:c3:d9:1a:66:fc:09:ae:d0:c0:2a:5d:c6:39: 60:ab:9f:09:3f:c4:d9:b3:a2:fc:6c:56:dd:c5:be: e1:db:d0:2e:e5:7e:c7:63:90:bc:d7:21:f6:89:f5: 03:f9:e4:3c:2b:1c:c4:38:0a:55:32:94:03:95:8d: cc:2e:0b:a5:7b:6d:10:00:fe:69:83:1c:b0:93:5c: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:10:C2:91:2F:30:F7:F3:45:06:7F:1C:D2:56:39:C3:62:32:F7:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2923ccba-5fc2-37a7-ab36-a955e61e7bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:50:ee:3c:f7:f5:d3:82:b4:97:1d:d7:eb:85:cf:3d:07:49: e1:ad:4c:56:25:3f:88:e3:9a:68:8c:26:7d:5f:98:4b:a7:7d: 90:d0:ad:29:ea:dd:23:6c:0f:34:cb:f2:e1:ef:1a:1e:44:85: 76:29:92:3c:98:91:63:28:65:75:9f:3a:44:a4:de:aa:53:51: 7f:70:bd:8c:df:aa:71:9e:a3:0a:69:ac:19:55:69:8b:f5:f5: 73:9f:e1:4c:ad:15:b0:93:e4:18:48:14:29:a6:b2:5f:e3:7f: 6e:4d:81:82:10:c4:ac:68:28:1a:51:96:dd:24:6e:5f:e2:85: fd:b4:92:f3:10:9f:c5:03:53:d5:52:80:b6:98:43:03:ec:5a: e7:fc:f0:8e:ee:41:b5:80:93:0e:10:67:ef:39:3d:e2:b0:a6: 6b:81:95:b8:14:53:ec:b4:d4:7b:55:fd:fc:a5:df:78:55:4d: 20:ea:d6:d8:38:17:6a:e4:ef:da:0a:1f:e5:d4:c7:15:9e:2c: d7:22:c3:d3:da:f7:0a:5a:92:b7:0a:9e:b7:3a:dc:90:c7:36: c1:db:79:51:5a:85:cf:98:54:72:5f:94:06:7f:fa:85:b0:02: c0:d9:e3:11:db:7c:0e:5f:0c:cf:98:53:57:ea:e9:c3:f6:93: 9e:e9:7d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNgx85loS2V0EcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NTA0YjgwNGYtN2I1MC00YWEyLTgyYzctNzhiNWNmMjZjMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOfxSxkshJCHxvoaV/9clV0lyUj8TDz4xzMw wNAbFdfC+FqCVeDOje/vPz2kGoGl5uWczEyk1kLeomhNySe6+kQc0oJyQrKG+zw4 cxbfFNXg1hWGciyhyO2SzDaBSI53aq3CZvb+Ia80MOtY1iw0bxrUvF7PYiHESTXk KZqaXajMZCROXo7JSBIcyZPTRpemH2eXqqSNdxRKcmGzLhPvQ3Iq1KIIeY7O77CO xZw9AEGNexEXL8PZGmb8Ca7QwCpdxjlgq58JP8TZs6L8bFbdxb7h29Au5X7HY5C8 1yH2ifUD+eQ8KxzEOApVMpQDlY3MLgule20QAP5pgxywk1yyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAQwpEvMPfzRQZ/HNJWOcNiMvelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkyM2NjYmEtNWZjMi0z N2E3LWFiMzYtYTk1NWU2MWU3YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNQ7jz39dOCtJcd1+uFzz0HSeGtTFYlP4jjmmiMJn1fmEunfZDQrSnq 3SNsDzTL8uHvGh5EhXYpkjyYkWMoZXWfOkSk3qpTUX9wvYzfqnGeowpprBlVaYv1 9XOf4UytFbCT5BhIFCmmsl/jf25NgYIQxKxoKBpRlt0kbl/ihf20kvMQn8UDU9VS gLaYQwPsWuf88I7uQbWAkw4QZ+85PeKwpmuBlbgUU+y01HtV/fyl33hVTSDq1tg4 F2rk79oKH+XUxxWeLNciw9Pa9wpakrcKnrc63JDHNsHbeVFahc+YVHJflAZ/+oWw AsDZ4xHbfA5fDM+YU1fq6cP2k57pffY= -----END CERTIFICATE-----Generated at Fri Aug 8 19:34:16 2025 by rpki-client