$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df59d9c-d488-3d6f-9212-1800f6e4ba12.roa File: 2df59d9c-d488-3d6f-9212-1800f6e4ba12.roa (raw, json) Hash identifier: 5aPYNdmqy0bK5P6JuNcOIm3ATT6ftS3Gk8SRpyIh7/I= Subject key identifier: C0:0C:0F:0B:5E:E2:57:C8:32:1E:4B:08:4D:CF:EA:F5:D2:FE:E5:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963638A0F5082EBF7A8F9E30 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df59d9c-d488-3d6f-9212-1800f6e4ba12.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.10.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:38:a0:f5:08:2e:bf:7a:8f:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=3ce6d1ff-5e4b-486d-bf79-a7e5b360e735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:a4:6c:c1:6f:c5:2c:6f:6c:69:8a:36:6b: 1f:aa:48:3a:b7:1d:76:f0:69:4c:74:d5:93:4a:1c: ad:90:b6:a0:30:cb:7a:3f:98:4c:3d:45:2f:25:bf: 01:cd:35:7c:c2:dd:d9:0f:03:3e:7f:92:d7:89:e5: 25:c7:90:ca:d1:46:de:25:f3:4d:1a:05:5a:fc:59: f1:3c:ec:f7:4b:fb:a4:ef:08:66:9a:58:86:2f:21: 4e:c0:a0:08:33:dc:1c:e9:c6:94:88:b8:e1:71:10: e1:1a:f2:55:41:20:1a:d6:95:e3:6f:2d:fa:18:67: 4d:41:8f:c5:2e:a4:87:f8:35:98:7f:a3:75:cc:64: 28:92:92:a8:86:0c:55:1c:13:3b:37:35:f4:9b:a0: 8e:36:bb:ac:1c:78:e0:b3:ad:f3:cd:71:aa:f1:bb: b0:fe:69:3b:e1:e0:d9:d4:3c:8d:ec:f1:09:29:3f: 1d:4e:45:97:8a:05:b3:f9:ef:10:1e:68:03:d6:bc: 21:29:03:73:eb:27:e0:f8:fe:da:c1:b3:75:dc:a4: b5:14:93:85:e4:47:08:84:e3:01:99:35:cd:d4:3d: 73:75:e4:7b:2e:3a:b8:65:7a:ee:22:68:29:30:c4: 96:9b:05:4e:22:b6:4b:22:85:18:09:7a:55:1b:f5: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:0F:0B:5E:E2:57:C8:32:1E:4B:08:4D:CF:EA:F5:D2:FE:E5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df59d9c-d488-3d6f-9212-1800f6e4ba12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7b:ff:48:80:fe:2b:b9:50:e3:f6:00:b9:c9:f3:95:53:eb: 52:7d:f0:1f:67:0d:70:a2:78:ae:9e:a7:db:47:d4:18:8a:88: 2c:2e:00:d4:b2:94:d3:11:0d:3e:39:f9:b2:39:d1:be:af:28: c5:72:45:49:57:d7:77:4a:11:d3:62:c6:6a:66:41:b7:7f:00: ad:4a:20:5c:e5:d0:79:1e:72:d9:58:7b:4a:f8:05:a9:35:0c: f3:15:22:f3:84:29:d3:bc:db:f7:e3:e4:8d:3c:86:d1:dd:18: 16:6e:75:07:3b:f9:59:0f:26:b7:41:36:0e:74:ad:35:d1:d8: 7b:c8:25:21:c3:88:16:17:24:a0:e2:03:0a:04:1a:5d:22:2b: 95:dc:db:4e:1c:5a:b7:f0:b8:db:de:d4:cc:cf:3b:05:37:f1: 1a:00:70:f8:d7:5a:dc:d7:72:72:f9:73:c7:22:fd:1b:61:a5: 8b:ba:29:55:6d:bc:01:4e:5d:94:40:2a:07:ee:a1:26:16:c5: 7c:93:df:fb:1a:e4:c1:25:8b:06:18:1a:0c:a9:ef:b3:95:99: c0:4e:7c:a5:a8:3a:59:52:a2:ac:da:ab:cf:3a:c5:d8:eb:8c: b6:0b:5e:62:68:12:7e:f2:c1:ed:4c:46:69:99:b9:9e:96:26: a6:54:cd:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjig9Qguv3qPnjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk M2NlNmQxZmYtNWU0Yi00ODZkLWJmNzktYTdlNWIzNjBlNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHakbMFvxSxvbGmKNmsfqkg6tx128GlMdNWT ShytkLagMMt6P5hMPUUvJb8BzTV8wt3ZDwM+f5LXieUlx5DK0UbeJfNNGgVa/Fnx POz3S/uk7whmmliGLyFOwKAIM9wc6caUiLjhcRDhGvJVQSAa1pXjby36GGdNQY/F LqSH+DWYf6N1zGQokpKohgxVHBM7NzX0m6CONrusHHjgs63zzXGq8buw/mk74eDZ 1DyN7PEJKT8dTkWXigWz+e8QHmgD1rwhKQNz6yfg+P7awbN13KS1FJOF5EcIhOMB mTXN1D1zdeR7Ljq4ZXruImgpMMSWmwVOIrZLIoUYCXpVG/VHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAMDwte4lfIMh5LCE3P6vXS/uUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRmNTlkOWMtZDQ4OC0z ZDZmLTkyMTItMTgwMGY2ZTRiYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh7/0iA/iu5UOP2ALnJ85VT61J98B9nDXCieK6ep9tH1BiKiCwuANSy lNMRDT45+bI50b6vKMVyRUlX13dKEdNixmpmQbd/AK1KIFzl0HkectlYe0r4Bak1 DPMVIvOEKdO82/fj5I08htHdGBZudQc7+VkPJrdBNg50rTXR2HvIJSHDiBYXJKDi AwoEGl0iK5Xc204cWrfwuNve1MzPOwU38RoAcPjXWtzXcnL5c8ci/RthpYu6KVVt vAFOXZRAKgfuoSYWxXyT3/sa5MEliwYYGgyp77OVmcBOfKWoOllSoqzaq886xdjr jLYLXmJoEn7ywe1MRmmZuZ6WJqZUzeo= -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:17 2025 by rpki-client