$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa File: 471bbc1a-78cc-3142-a892-46654e3a587c.roa (raw, json) Hash identifier: l6Cu0RWmdnYk94xHQCSSrNx+ebNNvbV/GX5c1d7qG94= Subject key identifier: 0D:87:90:DB:B2:2A:75:3C:00:55:BD:E2:74:B5:B8:2A:3E:22:BD:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963665F870E29D90814CF680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:65:f8:70:e2:9d:90:81:4c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d1db76f7-0f76-44b8-bbae-5f68ad005dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:21:71:d5:ca:2d:64:6c:57:19:56:cf:02: 77:37:8d:9f:7d:e7:b7:e4:72:57:6b:9e:06:c5:45: d5:7e:94:b3:a5:9a:ca:59:22:97:26:91:b8:34:82: c9:e4:4b:a9:d7:34:44:cd:aa:6f:e3:1d:65:cc:5a: f0:8b:81:a9:2c:ee:a2:50:5b:92:b2:51:af:c7:9b: 59:3b:a8:21:14:5f:0d:a9:55:e2:45:df:b3:ac:54: 2a:07:5f:b0:5c:35:31:b2:28:49:92:60:67:59:42: 19:84:0e:42:a3:5c:55:f7:4f:14:d4:93:2d:99:41: a4:de:1b:8a:06:4c:f6:99:32:b7:60:e0:db:98:a3: f4:e0:11:cc:6c:c8:c9:75:b5:40:8e:d5:6a:f4:95: 29:24:97:89:22:5e:8f:52:03:1c:7f:b0:08:1d:2a: 22:b8:07:88:6b:d0:7c:23:c0:71:dd:51:d6:d8:a3: 5e:10:1e:60:af:17:69:fc:88:af:38:2b:29:d9:93: 03:b9:8a:44:44:c1:0a:7c:c3:f9:7b:cf:80:c5:26: 44:ba:1e:64:21:34:68:7d:6b:4c:7d:31:f2:10:46: 97:af:3a:d8:23:62:69:a3:de:6c:c2:2c:44:1d:04: 26:99:82:2d:3e:33:93:2a:e3:30:6d:d3:6b:9e:0a: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:90:DB:B2:2A:75:3C:00:55:BD:E2:74:B5:B8:2A:3E:22:BD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471bbc1a-78cc-3142-a892-46654e3a587c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e8:5f:3c:a3:6b:f2:72:56:ba:4b:17:df:90:a8:e6:1d:3a: 2e:70:d2:0c:d4:7a:fb:0b:32:eb:46:d0:1e:92:2e:d4:ad:93: a9:b6:72:a7:71:d7:55:62:d9:9a:99:0c:60:ce:12:9e:78:3f: 6a:a1:85:ec:a1:74:61:b7:08:f2:2d:18:f9:31:c5:a1:d0:4e: 28:40:07:91:85:7f:af:c4:dd:05:c1:f1:79:96:8b:ef:52:51: 02:77:98:a3:7d:42:c0:3c:da:68:ba:7d:48:4a:16:1d:90:fc: 48:c4:f1:0b:e3:5c:a1:82:2d:e8:51:ae:28:d5:03:3b:25:a1: a0:d7:1f:ae:c1:9d:fb:db:30:cc:de:23:6a:d9:2d:95:da:c2: b7:e4:2b:9b:4a:12:07:87:c3:64:af:3e:8c:b8:d2:4d:0a:76: e9:44:8f:b1:94:97:d6:7f:15:d6:a0:74:be:5a:6c:72:c4:15: 45:73:27:5c:c2:99:26:e7:90:39:0d:b2:28:a0:8b:56:1b:1a: 5f:78:c4:24:3b:e4:40:c9:9c:28:a7:02:e6:db:80:28:4e:8a: 04:0e:16:1b:90:7e:d0:ea:96:3c:ff:e3:bc:9c:fb:7a:12:a9: dc:9e:b6:9f:25:48:6b:0c:bd:a7:26:61:2a:89:1f:69:85:8b: 5c:7b:7c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmX4cOKdkIFM9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDFkYjc2ZjctMGY3Ni00NGI4LWJiYWUtNWY2OGFkMDA1ZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1ohcdXKLWRsVxlWzwJ3N42ffee35HJXa54G xUXVfpSzpZrKWSKXJpG4NILJ5Eup1zREzapv4x1lzFrwi4GpLO6iUFuSslGvx5tZ O6ghFF8NqVXiRd+zrFQqB1+wXDUxsihJkmBnWUIZhA5Co1xV908U1JMtmUGk3huK Bkz2mTK3YODbmKP04BHMbMjJdbVAjtVq9JUpJJeJIl6PUgMcf7AIHSoiuAeIa9B8 I8Bx3VHW2KNeEB5grxdp/IivOCsp2ZMDuYpERMEKfMP5e8+AxSZEuh5kITRofWtM fTHyEEaXrzrYI2Jpo95swixEHQQmmYItPjOTKuMwbdNrngo9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2HkNuyKnU8AFW94nS1uCo+Ir1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDcxYmJjMWEtNzhjYy0z MTQyLWE4OTItNDY2NTRlM2E1ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIboXzyja/JyVrpLF9+QqOYdOi5w0gzUevsLMutG0B6SLtStk6m2cqdx 11Vi2ZqZDGDOEp54P2qhheyhdGG3CPItGPkxxaHQTihAB5GFf6/E3QXB8XmWi+9S UQJ3mKN9QsA82mi6fUhKFh2Q/EjE8QvjXKGCLehRrijVAzsloaDXH67BnfvbMMze I2rZLZXawrfkK5tKEgeHw2SvPoy40k0KdulEj7GUl9Z/FdagdL5abHLEFUVzJ1zC mSbnkDkNsiigi1YbGl94xCQ75EDJnCinAubbgChOigQOFhuQftDqljz/47yc+3oS qdyetp8lSGsMvacmYSqJH2mFi1x7fNU= -----END CERTIFICATE-----Generated at Fri Aug 8 19:39:10 2025 by rpki-client