$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf44828-6d16-3df2-aa52-ca4748f5d7c5.roa File: 4cf44828-6d16-3df2-aa52-ca4748f5d7c5.roa (raw, json) Hash identifier: YuzsOEmMmlNsOt0VXepub8YSLtmLfk2i9j353QdJCOQ= Subject key identifier: E1:8C:97:8A:F5:3A:89:D0:C3:87:F8:CB:52:C0:25:94:0B:51:22:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361FD587778C887D6A8180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf44828-6d16-3df2-aa52-ca4748f5d7c5.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.228.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1f:d5:87:77:8c:88:7d:6a:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=9571f2d7-29e5-496c-9cfb-e0b95966dbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:93:6c:ab:f9:9a:38:ad:5f:fc:2a:71:c6: fe:59:c4:53:a9:54:01:44:b4:b5:4c:1e:8f:8e:50: b9:97:22:28:c1:c7:32:b1:79:8b:bf:9f:25:7d:49: ee:59:fc:69:aa:9a:dd:74:77:18:d8:44:28:01:9e: 7a:a3:94:5a:c1:d9:f6:1c:a3:92:b2:16:97:06:0e: 21:33:d4:b3:16:f4:6e:ed:dd:11:c3:08:52:1e:3a: 9c:c6:62:39:a9:fd:73:16:57:74:2e:59:dc:08:75: 20:99:9d:a0:9c:0c:e4:0b:5d:23:49:e3:f0:e8:79: d3:ee:af:40:37:47:f2:e8:9a:df:f2:78:7f:5c:68: b9:bb:d1:0a:dd:7e:68:6a:6f:ff:ef:f3:77:9f:20: 0d:76:34:8d:17:17:02:ed:39:2a:00:11:db:cd:b5: ce:e7:07:0e:f6:a8:f9:82:35:ab:53:b2:17:de:f1: b2:4c:34:29:2d:aa:54:30:ec:b7:31:44:88:82:da: e5:7b:6a:92:7a:87:c2:93:1e:11:48:ca:3e:f1:c2: 2e:88:9e:ec:7d:22:5f:eb:86:2b:db:4a:57:56:03: ae:4c:e9:54:a7:36:d2:d1:cc:e0:10:0f:61:9a:d7: d8:bd:30:12:8b:6e:42:de:6f:b9:6e:d1:df:16:f4: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:97:8A:F5:3A:89:D0:C3:87:F8:CB:52:C0:25:94:0B:51:22:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cf44828-6d16-3df2-aa52-ca4748f5d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:08:97:1e:f0:84:d7:0d:0a:0a:90:13:15:39:82:bf:a8:7e: 0e:76:70:19:7c:97:de:5a:a6:16:d5:e3:8b:62:d4:95:fa:93: 10:11:9a:b5:ed:b6:03:f6:bc:d2:e2:e9:cb:59:ec:1f:52:83: a3:6d:4c:89:9b:45:d2:92:90:7f:be:70:16:76:e2:93:d5:ce: ca:50:32:23:14:7e:3e:df:73:f4:61:5a:f1:ce:c9:14:e1:1e: d8:b5:98:07:7c:f8:08:83:27:5c:d7:27:52:3b:a0:f1:ae:33: e2:8d:48:ad:a6:56:4a:31:75:46:80:19:29:e6:82:5b:1b:4c: cf:a1:c2:ea:76:95:14:90:8c:06:b9:e3:66:67:cf:86:6e:0f: 62:ef:a0:e8:6e:83:c7:7d:31:bd:58:88:3e:dc:71:2d:bd:8c: 1c:36:ae:ec:00:b1:2b:68:e5:76:22:b4:1b:c6:41:b4:ee:3a: 06:fa:d8:ac:33:33:6d:7c:4e:45:71:e4:4e:e8:67:33:68:67: 88:ba:8f:02:39:fa:73:09:b8:5e:49:ee:08:e0:83:35:0a:ce: 3a:20:77:5a:81:22:20:ec:a7:a5:4f:13:9f:49:54:9d:72:06: 93:6e:11:9d:ec:4a:23:34:2d:09:6b:44:c0:3a:de:89:17:6f: 51:a5:58:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNh/Vh3eMiH1qgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk OTU3MWYyZDctMjllNS00OTZjLTljZmItZTBiOTU5NjZkYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhuTbKv5mjitX/wqccb+WcRTqVQBRLS1TB6P jlC5lyIowccysXmLv58lfUnuWfxpqprddHcY2EQoAZ56o5Rawdn2HKOSshaXBg4h M9SzFvRu7d0RwwhSHjqcxmI5qf1zFld0LlncCHUgmZ2gnAzkC10jSePw6HnT7q9A N0fy6Jrf8nh/XGi5u9EK3X5oam//7/N3nyANdjSNFxcC7TkqABHbzbXO5wcO9qj5 gjWrU7IX3vGyTDQpLapUMOy3MUSIgtrle2qSeofCkx4RSMo+8cIuiJ7sfSJf64Yr 20pXVgOuTOlUpzbS0czgEA9hmtfYvTASi25C3m+5btHfFvSPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGMl4r1OonQw4f4y1LAJZQLUSKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNmNDQ4MjgtNmQxNi0z ZGYyLWFhNTItY2E0NzQ4ZjVkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcIlx7whNcNCgqQExU5gr+ofg52cBl8l95aphbV44ti1JX6kxARmrXt tgP2vNLi6ctZ7B9Sg6NtTImbRdKSkH++cBZ24pPVzspQMiMUfj7fc/RhWvHOyRTh Hti1mAd8+AiDJ1zXJ1I7oPGuM+KNSK2mVkoxdUaAGSnmglsbTM+hwup2lRSQjAa5 42Znz4ZuD2LvoOhug8d9Mb1YiD7ccS29jBw2ruwAsSto5XYitBvGQbTuOgb62Kwz M218TkVx5E7oZzNoZ4i6jwI5+nMJuF5J7gjggzUKzjogd1qBIiDsp6VPE59JVJ1y BpNuEZ3sSiM0LQlrRMA63okXb1GlWK4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:33 2025 by rpki-client