$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa File: 4db5426a-7913-3935-8211-d1ea3af21f76.roa (raw, json) Hash identifier: 0UQ5eoiEWcj+Mm+MT1D/tYOcB2uVwaJfJoF0R21X+9g= Subject key identifier: EF:FE:C1:5D:FF:F1:33:F3:C7:20:E7:41:A0:67:2E:1C:5C:98:95:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636651A30D768B67B1350C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:65:1a:30:d7:68:b6:7b:13:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=33939d65-2b31-499b-90eb-8202a29aa95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:5b:28:51:bf:c4:54:9a:da:93:1a:a8:c3: e8:b1:55:55:a0:87:aa:7a:0a:c5:cd:e2:8a:2c:58: 48:b5:56:95:2f:d7:f2:6e:40:ad:61:32:55:a7:66: e9:0a:57:d5:35:62:42:bd:2d:41:52:f1:8b:35:f5: 97:58:1c:ae:72:e2:95:e8:e4:c8:5f:8d:55:a0:9e: 0b:91:54:1a:75:c3:a1:f0:29:96:c6:dc:c4:bf:97: d8:25:43:48:4f:d8:52:0d:b0:be:45:bd:8f:bd:e1: 37:c6:d4:41:1e:90:15:8d:b7:9e:95:80:c3:7a:29: ec:5c:26:27:f1:9a:a2:13:55:c8:bf:fe:cb:b0:b4: 13:dd:b6:55:11:44:15:83:bd:ec:e2:e6:a8:1d:ff: 2d:6c:13:07:91:17:7c:6c:6f:e2:c9:0c:1f:d4:d5: f7:d4:78:40:90:b2:7c:47:fc:d6:ba:3a:b2:9c:83: 1f:cf:aa:b1:80:d3:94:1b:e2:9b:70:93:cb:a2:ce: 54:97:c7:e9:85:bb:8f:9c:d0:1c:31:38:65:b7:2e: ea:08:88:3a:5f:c8:19:d0:ad:43:fb:4b:90:ac:06: b8:0a:df:53:3d:b3:ea:08:a6:36:4d:60:d4:d3:71: ae:43:79:97:19:b8:89:87:e9:da:8b:2d:29:10:57: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FE:C1:5D:FF:F1:33:F3:C7:20:E7:41:A0:67:2E:1C:5C:98:95:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4db5426a-7913-3935-8211-d1ea3af21f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:0c:9b:bb:32:1a:4a:61:6a:df:86:29:95:b3:2e:a3:fd:8f: eb:bc:d4:5e:a9:08:b8:9d:69:c1:d5:3c:a3:38:ba:66:1b:11: c2:cd:fd:f3:df:79:0d:bc:3b:43:84:d3:08:4e:93:5c:cb:6c: f5:fd:60:b9:27:7d:bc:d3:9c:16:93:be:92:40:e1:d5:c3:06: 27:76:6f:02:00:cd:1a:a5:ac:de:75:8c:b6:a4:22:24:65:74: 75:3b:db:cc:8e:68:bf:e3:3c:39:de:be:54:5e:10:1b:a6:c2: 89:20:9a:30:43:f7:28:02:7a:34:d0:67:36:4e:a7:b2:7e:08: e6:d5:bc:28:59:6f:51:19:8a:98:f1:06:bb:94:0a:78:ff:05: f7:3a:fe:af:f7:c2:b5:7f:9a:8e:7b:4d:8b:c8:26:fc:05:05: 6d:d3:1a:43:eb:7f:9f:11:c3:ab:c5:2e:da:e6:31:0e:dd:a2: 1c:bf:c4:5b:5f:94:79:ad:5d:4c:4c:c8:fa:08:32:49:f9:f1: bc:b2:de:24:0e:88:10:ef:5e:ac:dd:0e:18:fb:95:c9:54:66: a8:9e:2d:e0:74:60:1e:a4:cd:2e:70:f8:f5:4e:1d:11:27:02: 24:ca:75:49:fe:9a:a4:63:f7:c4:13:cd:c2:3c:08:31:bb:c7: 32:90:6f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmUaMNdotnsTUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzM5MzlkNjUtMmIzMS00OTliLTkwZWItODIwMmEyOWFhOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqblbKFG/xFSa2pMaqMPosVVVoIeqegrFzeKK LFhItVaVL9fybkCtYTJVp2bpClfVNWJCvS1BUvGLNfWXWByucuKV6OTIX41VoJ4L kVQadcOh8CmWxtzEv5fYJUNIT9hSDbC+Rb2PveE3xtRBHpAVjbeelYDDeinsXCYn 8ZqiE1XIv/7LsLQT3bZVEUQVg73s4uaoHf8tbBMHkRd8bG/iyQwf1NX31HhAkLJ8 R/zWujqynIMfz6qxgNOUG+KbcJPLos5Ul8fphbuPnNAcMThlty7qCIg6X8gZ0K1D +0uQrAa4Ct9TPbPqCKY2TWDU03GuQ3mXGbiJh+naiy0pEFe3TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/+wV3/8TPzxyDnQaBnLhxcmJXvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRiNTQyNmEtNzkxMy0z OTM1LTgyMTEtZDFlYTNhZjIxZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8Mm7syGkphat+GKZWzLqP9j+u81F6pCLidacHVPKM4umYbEcLN/fPf eQ28O0OE0whOk1zLbPX9YLknfbzTnBaTvpJA4dXDBid2bwIAzRqlrN51jLakIiRl dHU728yOaL/jPDnevlReEBumwokgmjBD9ygCejTQZzZOp7J+CObVvChZb1EZipjx BruUCnj/Bfc6/q/3wrV/mo57TYvIJvwFBW3TGkPrf58Rw6vFLtrmMQ7dohy/xFtf lHmtXUxMyPoIMkn58byy3iQOiBDvXqzdDhj7lclUZqieLeB0YB6kzS5w+PVOHREn AiTKdUn+mqRj98QTzcI8CDG7xzKQb80= -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:53 2025 by rpki-client