$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa File: 33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa (raw, json) Hash identifier: 8/zMbHoDA475fTIqlJMpZrFD139rXqxx1nOxcYciFjg= Subject key identifier: EB:B7:24:91:9B:DF:E7:FA:A9:D5:D4:BE:50:51:83:DB:DB:E3:A2:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963664133DFBAF1E567F53C4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.107.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:64:13:3d:fb:af:1e:56:7f:53:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c8ed063c-a18c-4593-99db-35488ce5a795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:2e:14:86:60:c2:55:50:35:22:a6:4b:b5: 68:94:13:33:6a:08:6b:89:28:83:d5:0b:df:3b:50: 64:e2:ae:ab:af:b5:ed:ff:5e:a1:17:19:23:60:68: d4:86:31:d4:88:f8:97:cd:60:a1:6e:ed:1c:77:57: 64:1b:5c:62:b6:4f:54:57:4e:9b:21:f6:1b:39:b1: 2e:14:13:c2:cb:e2:0a:f6:bf:9e:f0:02:da:72:08: c6:4e:75:4d:f4:ea:17:48:34:d0:a9:86:27:44:47: 08:ce:b7:18:a9:b5:c0:36:83:8f:e4:0c:65:9a:c6: 6f:2f:1a:87:68:f7:4f:79:dc:0c:16:fa:e8:0f:23: 8e:b3:74:f1:ab:3f:72:b9:ee:6b:ad:e7:dc:ac:e7: 49:0e:c0:c8:85:e7:49:b5:7a:ce:3a:b4:ca:1e:dc: ea:79:10:44:c4:e8:71:ad:0c:0f:bf:0c:e7:b6:b6: 41:da:81:18:48:ee:09:81:8f:d9:f2:f4:a6:fb:6a: 40:43:ea:88:c4:58:c8:91:29:08:40:e1:da:a7:3c: b9:93:50:2a:16:71:e3:0e:42:ba:3e:15:22:72:0e: 48:a5:3d:46:4f:1a:b4:74:3f:3a:59:bc:8f:0f:3e: 7d:79:10:54:78:da:90:92:4a:25:f4:5d:a9:54:0c: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:24:91:9B:DF:E7:FA:A9:D5:D4:BE:50:51:83:DB:DB:E3:A2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33fb1034-d3b3-31d2-8b24-d2aaac1b1688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d5:12:91:b2:06:27:1d:69:54:9e:84:56:e8:04:6f:93:3d: 57:1a:73:1f:c5:c2:73:09:41:29:cd:a7:2a:ca:08:40:4a:ed: ae:7c:ba:50:aa:0f:85:78:31:02:63:29:40:5d:4c:20:91:d1: d0:4b:48:9f:fb:b2:66:b6:9c:5b:1e:1d:d6:13:94:09:98:0a: e9:90:b8:7b:06:13:32:b2:81:91:09:ce:1e:8b:4b:8d:56:9d: 13:e5:4b:71:d8:e6:e9:68:29:ed:78:81:ba:2a:32:fb:5f:e1: 99:8d:df:df:5f:b8:3a:51:7d:f9:29:2a:21:28:02:03:d4:70: 10:89:af:31:a1:a3:4e:f2:8a:76:48:3c:bf:64:6a:e2:f9:b4: c6:e5:22:bc:20:ed:2f:b7:f8:63:99:57:2f:e2:58:35:40:12: db:2f:a4:d0:34:e7:8f:56:bd:02:4b:87:ca:42:00:42:2b:40: a5:54:4f:6d:31:6b:4a:48:e2:6d:90:6c:09:0f:55:e3:0e:0a: ac:d4:8b:87:12:df:ba:5c:4c:c6:d3:4e:68:65:c6:31:bf:a2: 01:c8:18:4a:48:c4:56:2d:3e:17:da:41:49:68:19:7b:e1:37: bd:6f:93:78:35:24:30:4c:6e:9f:f7:eb:d7:a1:6f:3b:f8:be: f3:7b:da:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmQTPfuvHlZ/U8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzhlZDA2M2MtYTE4Yy00NTkzLTk5ZGItMzU0ODhjZTVhNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0QuFIZgwlVQNSKmS7VolBMzaghriSiD1Qvf O1Bk4q6rr7Xt/16hFxkjYGjUhjHUiPiXzWChbu0cd1dkG1xitk9UV06bIfYbObEu FBPCy+IK9r+e8ALacgjGTnVN9OoXSDTQqYYnREcIzrcYqbXANoOP5AxlmsZvLxqH aPdPedwMFvroDyOOs3Txqz9yue5rrefcrOdJDsDIhedJtXrOOrTKHtzqeRBExOhx rQwPvwzntrZB2oEYSO4JgY/Z8vSm+2pAQ+qIxFjIkSkIQOHapzy5k1AqFnHjDkK6 PhUicg5IpT1GTxq0dD86WbyPDz59eRBUeNqQkkol9F2pVAzNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu3JJGb3+f6qdXUvlBRg9vb46I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNmYjEwMzQtZDNiMy0z MWQyLThiMjQtZDJhYWFjMWIxNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvVEpGyBicdaVSehFboBG+TPVcacx/FwnMJQSnNpyrKCEBK7a58ulCq D4V4MQJjKUBdTCCR0dBLSJ/7sma2nFseHdYTlAmYCumQuHsGEzKygZEJzh6LS41W nRPlS3HY5uloKe14gboqMvtf4ZmN399fuDpRffkpKiEoAgPUcBCJrzGho07yinZI PL9kauL5tMblIrwg7S+3+GOZVy/iWDVAEtsvpNA0549WvQJLh8pCAEIrQKVUT20x a0pI4m2QbAkPVeMOCqzUi4cS37pcTMbTTmhlxjG/ogHIGEpIxFYtPhfaQUloGXvh N71vk3g1JDBMbp/369ehbzv4vvN72ig= -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:19 2025 by rpki-client