$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4be4f012-0fbd-3dc6-8f59-f2adf4de3032.roa File: 4be4f012-0fbd-3dc6-8f59-f2adf4de3032.roa (raw, json) Hash identifier: Fker3jwRFQxMFwllgyS9WpeLHMibxJ/dxtrYb8Er4os= Subject key identifier: 1A:28:10:45:D5:D2:8E:5B:34:D6:9C:5D:AE:5A:49:11:9E:39:11:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963656BC068024E5F79C4E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4be4f012-0fbd-3dc6-8f59-f2adf4de3032.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:56:bc:06:80:24:e5:f7:9c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=c07ddf84-80ba-49a1-bfe1-b6ac4bdbee09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:3e:21:c4:9c:ba:85:1e:a5:3d:d5:b7:2f: 10:e4:22:0b:e2:7b:06:4b:a9:c2:fc:00:50:e8:53: 43:37:3f:5b:ca:e7:37:63:ee:d0:da:05:d8:4d:63: b6:23:e2:f0:42:51:71:76:68:54:b2:06:89:4d:e9: 90:b7:88:89:11:87:e0:40:61:d6:83:ed:d4:26:da: 2a:94:a0:16:2f:e4:b8:d5:6d:78:45:36:01:e5:f3: 45:4d:e7:04:f0:b8:28:79:da:05:43:2c:ad:79:b8: c1:ab:0a:9e:64:48:e8:1e:fc:93:d3:9e:73:00:cf: 6f:b7:fe:16:e3:b5:a6:54:82:73:2d:63:d0:35:07: a1:11:51:2b:a6:f7:3b:96:5a:ce:6d:bc:41:c4:0e: 09:69:7e:9e:da:eb:aa:e6:08:90:94:a1:96:48:8e: 12:a7:02:56:27:cf:82:ad:b4:54:ed:91:f2:c0:bf: 9c:0a:65:d8:30:2e:69:b3:91:5d:c8:d7:d0:d1:0a: d2:59:49:30:2d:7c:9a:ce:0f:93:b7:9c:07:80:76: f2:c3:d4:96:8d:b0:3c:70:2c:8e:6e:a9:32:b0:ca: 19:93:bb:0a:e0:c5:d8:65:65:b4:f8:e5:b3:44:b5: 81:3e:23:84:b0:76:c1:a8:0f:f6:52:3e:86:f2:f7: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:10:45:D5:D2:8E:5B:34:D6:9C:5D:AE:5A:49:11:9E:39:11:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4be4f012-0fbd-3dc6-8f59-f2adf4de3032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d2:61:86:dc:fc:67:e3:8b:6a:97:0b:e4:d7:89:5f:0b:ad: fc:0c:e6:32:aa:4d:52:e8:9d:05:36:73:5c:62:43:6b:36:20: 91:ec:96:ec:c3:3f:2e:23:a1:d4:d6:ba:90:f9:a6:70:fe:26: 6b:e6:2e:bf:04:64:b2:50:ff:cc:57:6e:12:b5:73:68:4a:e5: be:56:21:c4:4f:41:53:70:37:0d:f9:8d:30:ef:75:7e:4e:a3: 8e:d6:e6:09:ab:07:90:6f:b2:55:72:9a:f5:13:9b:0c:27:c5: 77:fa:30:c3:2d:43:f7:fa:6c:7f:00:c9:e2:cb:81:f3:2e:15: df:23:40:4b:f6:04:ed:7d:42:e8:c3:0a:05:95:30:e7:d8:ff: a5:bf:e5:83:c4:b1:2a:77:48:a0:bf:91:ab:21:1b:12:32:65: 51:61:30:57:dd:d2:50:b5:fa:3b:2f:42:0a:a1:81:bd:09:be: 55:b9:af:c8:03:1e:92:ee:47:8f:dc:86:52:dc:7f:d2:7c:f6: 94:c5:8d:44:e2:97:7f:8d:22:76:12:19:77:78:dc:bf:dd:46: 44:c3:7b:2d:48:9c:22:4f:a2:d0:70:91:a9:3d:27:72:ea:0b: 9e:72:c0:46:a2:25:fd:44:35:8f:5e:07:e3:0d:65:87:60:05: 28:3a:57:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNla8BoAk5fecTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YzA3ZGRmODQtODBiYS00OWExLWJmZTEtYjZhYzRiZGJlZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWc+IcScuoUepT3Vty8Q5CIL4nsGS6nC/ABQ 6FNDNz9byuc3Y+7Q2gXYTWO2I+LwQlFxdmhUsgaJTemQt4iJEYfgQGHWg+3UJtoq lKAWL+S41W14RTYB5fNFTecE8LgoedoFQyytebjBqwqeZEjoHvyT055zAM9vt/4W 47WmVIJzLWPQNQehEVErpvc7llrObbxBxA4JaX6e2uuq5giQlKGWSI4SpwJWJ8+C rbRU7ZHywL+cCmXYMC5ps5FdyNfQ0QrSWUkwLXyazg+Tt5wHgHbyw9SWjbA8cCyO bqkysMoZk7sK4MXYZWW0+OWzRLWBPiOEsHbBqA/2Uj6G8vcHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBooEEXV0o5bNNacXa5aSRGeORExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJlNGYwMTItMGZiZC0z ZGM2LThmNTktZjJhZGY0ZGUzMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfSYYbc/Gfji2qXC+TXiV8LrfwM5jKqTVLonQU2c1xiQ2s2IJHsluzD Py4jodTWupD5pnD+JmvmLr8EZLJQ/8xXbhK1c2hK5b5WIcRPQVNwNw35jTDvdX5O o47W5gmrB5BvslVymvUTmwwnxXf6MMMtQ/f6bH8AyeLLgfMuFd8jQEv2BO19QujD CgWVMOfY/6W/5YPEsSp3SKC/kashGxIyZVFhMFfd0lC1+jsvQgqhgb0JvlW5r8gD HpLuR4/chlLcf9J89pTFjUTil3+NInYSGXd43L/dRkTDey1InCJPotBwkak9J3Lq C55ywEaiJf1ENY9eB+MNZYdgBSg6V3E= -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:35 2025 by rpki-client