$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/385c23a4-6e78-34c5-b35b-315f76c7b378.roa File: 385c23a4-6e78-34c5-b35b-315f76c7b378.roa (raw, json) Hash identifier: KDgapbq4BumLaYbqPci4krjrpN/tHBJ4/2+2d0/YzUY= Subject key identifier: CB:68:3B:DC:6E:25:E3:C8:BE:E5:8D:52:9F:AC:79:6F:30:06:1D:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636117B279D301CF8659680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/385c23a4-6e78-34c5-b35b-315f76c7b378.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:11:7b:27:9d:30:1c:f8:65:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=9fb736fc-7ca6-4dce-a11c-ec3371965324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:a4:3f:2e:12:64:e4:c5:70:4e:61:7d:27: 56:7a:de:d7:10:22:d2:31:4c:d2:92:3a:0a:b8:80: f2:82:73:85:cc:cf:50:28:ca:84:63:05:a9:2a:23: ae:38:7a:00:2b:e9:dc:f8:1c:54:31:ae:45:50:13: a6:72:99:ab:b3:a8:ac:3d:c3:69:fa:91:ca:3c:c5: fb:1b:ea:fd:75:de:c5:70:c1:e0:ba:39:fe:51:00: f6:99:cf:38:4a:3f:32:7f:fd:ce:5e:4d:0a:a3:f8: b2:c1:46:c8:3c:6e:02:28:2c:90:d3:30:f6:33:d7: 52:0a:7e:c9:98:56:ff:1d:c5:42:97:99:d0:5d:2b: 8c:80:e1:52:29:42:43:8f:73:41:36:71:c1:55:d6: 49:d4:12:6b:41:d1:04:18:e8:26:d5:59:0a:ad:c3: e3:58:42:ed:ef:f8:d7:c3:b5:80:0b:48:d7:da:6e: 26:1f:42:cc:80:66:c0:27:eb:12:5d:7c:3d:b2:3a: d8:5e:a1:7c:e1:60:8c:56:06:32:f5:b7:31:4c:82: 70:a5:8e:f5:d4:fd:3b:38:95:4f:68:6a:de:1c:15: 2d:39:4c:25:98:f8:40:d5:e9:c4:b1:aa:b0:0b:08: 1f:1f:19:3e:15:50:a4:54:09:98:96:fb:a5:1a:45: 26:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:3B:DC:6E:25:E3:C8:BE:E5:8D:52:9F:AC:79:6F:30:06:1D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/385c23a4-6e78-34c5-b35b-315f76c7b378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:07:2a:12:1f:c5:d0:b5:87:95:ae:0d:27:f8:c1:9d:14:f0: cb:b6:47:a4:46:24:3f:9d:21:0f:f8:7a:73:b8:96:e0:88:7a: 53:ab:69:bf:08:7e:1b:8a:ee:a0:9a:a7:aa:af:c1:2a:85:25: ee:b3:d0:78:2a:03:38:23:73:67:76:6b:22:15:ca:88:26:66: 65:14:83:01:9c:54:0d:05:a9:b2:81:4a:3a:7b:54:39:28:08: eb:b4:e1:b2:29:91:ba:7f:d8:1a:5e:1a:3e:86:9a:e8:69:64: 93:bc:6c:f8:7f:3e:46:eb:98:10:92:ff:b9:34:45:83:18:a4: b5:04:12:63:8a:b3:8b:00:bb:b6:18:15:33:e9:de:e3:59:09: 3c:26:b8:19:fb:c9:fa:bd:7d:44:44:ee:30:7e:6e:f7:33:88: 3a:70:1a:fa:7c:72:06:1e:13:ee:4f:3f:c2:5d:b7:71:2c:b3: c0:80:48:0d:e5:13:b1:17:88:46:d0:72:cf:60:1e:01:78:1f: b7:d4:f6:4a:6a:79:97:b6:2d:73:ba:ab:a0:5a:62:ae:76:94: 10:b5:13:9e:f2:1a:eb:f0:6d:8a:7a:30:67:ad:fb:c6:e4:f1: 1e:2f:80:88:12:2f:fa:33:64:27:9a:3e:15:00:94:37:d8:0c: d5:fd:c7:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhF7J50wHPhlloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OWZiNzM2ZmMtN2NhNi00ZGNlLWExMWMtZWMzMzcxOTY1MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxmkPy4SZOTFcE5hfSdWet7XECLSMUzSkjoK uIDygnOFzM9QKMqEYwWpKiOuOHoAK+nc+BxUMa5FUBOmcpmrs6isPcNp+pHKPMX7 G+r9dd7FcMHgujn+UQD2mc84Sj8yf/3OXk0Ko/iywUbIPG4CKCyQ0zD2M9dSCn7J mFb/HcVCl5nQXSuMgOFSKUJDj3NBNnHBVdZJ1BJrQdEEGOgm1VkKrcPjWELt7/jX w7WAC0jX2m4mH0LMgGbAJ+sSXXw9sjrYXqF84WCMVgYy9bcxTIJwpY711P07OJVP aGreHBUtOUwlmPhA1enEsaqwCwgfHxk+FVCkVAmYlvulGkUmNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtoO9xuJePIvuWNUp+seW8wBh0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg1YzIzYTQtNmU3OC0z NGM1LWIzNWItMzE1Zjc2YzdiMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMHKhIfxdC1h5WuDSf4wZ0U8Mu2R6RGJD+dIQ/4enO4luCIelOrab8I fhuK7qCap6qvwSqFJe6z0HgqAzgjc2d2ayIVyogmZmUUgwGcVA0FqbKBSjp7VDko COu04bIpkbp/2BpeGj6GmuhpZJO8bPh/PkbrmBCS/7k0RYMYpLUEEmOKs4sAu7YY FTPp3uNZCTwmuBn7yfq9fURE7jB+bvcziDpwGvp8cgYeE+5PP8Jdt3Ess8CASA3l E7EXiEbQcs9gHgF4H7fU9kpqeZe2LXO6q6BaYq52lBC1E57yGuvwbYp6MGet+8bk 8R4vgIgSL/ozZCeaPhUAlDfYDNX9xz0= -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:12 2025 by rpki-client