$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa File: 524ae170-b28a-36e5-a920-d65b545312e1.roa (raw, json) Hash identifier: lkqneRiMEm68ZwEOkWsr/z+QUEXW0Nc8e25L8hhfHTs= Subject key identifier: B2:3A:64:0B:28:57:C4:96:6B:11:D0:1B:45:79:E2:EB:CB:87:71:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A14657F05A856D817B0B64698 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 22773 IP address blocks: 68.226.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:7f:05:a8:56:d8:17:b0:b6:46:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=4b0cf03c-f386-40bc-8caf-621afa3f0286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:8a:05:bd:b7:0e:46:7e:e8:c1:96:05:da: 25:da:fb:9a:95:cd:40:67:1c:13:9a:9b:2c:eb:54: fd:be:41:f2:f4:47:3f:e8:8a:c5:88:91:d6:d8:88: b3:16:65:e7:13:1e:c5:b6:7d:10:4c:f4:cd:43:b4: 22:fb:38:ea:32:ce:81:17:95:bd:50:17:04:66:2e: 3e:49:f2:25:55:5b:28:7c:88:ac:de:ea:b7:46:6f: 63:6f:73:a8:a8:eb:d0:1e:63:c8:f2:a4:20:ee:18: ca:5e:21:73:d7:41:53:79:47:ed:3c:05:94:9d:a7: 3b:9a:51:7c:9c:a9:97:bc:32:48:cd:2e:27:c3:cd: 56:2f:99:ac:14:39:d3:09:6e:a7:2b:3e:ec:dd:24: 66:a9:c9:37:7f:10:74:81:aa:21:97:e1:b8:25:7d: 70:8e:ba:68:2c:ee:f8:f9:bd:58:b8:64:4c:c6:0d: 28:ae:5e:5c:de:6f:7f:fd:05:da:1c:9d:9c:06:26: 2f:4b:cb:be:e5:12:46:6f:ab:38:f7:9f:d0:11:8d: f7:36:c5:3a:cb:89:10:cb:05:ed:06:c3:57:e3:06: e1:2c:4d:f4:f3:5b:c4:54:fe:a3:cf:57:c0:ac:e6: 5c:a8:80:2a:cd:a4:ea:0e:56:11:4d:cd:b3:58:16: 89:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3A:64:0B:28:57:C4:96:6B:11:D0:1B:45:79:E2:EB:CB:87:71:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1e:1c:c2:d1:74:cd:48:81:32:fa:0a:45:c9:27:df:17:de: fb:46:f7:05:51:2c:cc:b0:2a:fc:68:3b:f4:93:9f:72:e0:41: e9:f9:d4:76:e4:cf:06:ff:56:43:5d:e0:62:ee:45:54:33:ee: 8e:02:65:ed:5b:99:2e:9d:b3:6e:b2:7b:2a:d7:81:40:1e:8d: 8d:a2:60:86:70:0a:f2:8c:5f:04:91:22:d1:9c:23:11:f0:f9: 60:53:5b:9d:0a:dd:7f:d3:49:8e:25:f3:a4:73:e3:ad:d1:46: da:7c:c8:b2:0c:97:a3:99:d4:c9:bb:36:39:4a:86:93:81:62: 77:8b:16:e1:22:2b:f8:02:98:6b:86:fe:1e:6a:d3:12:51:50: 90:14:2b:ab:17:64:32:c8:43:a1:3d:c4:bb:05:18:fa:ca:f7: 46:db:25:2d:f0:00:2d:56:89:f8:bc:04:ac:65:45:35:82:56: d7:65:b7:bd:1b:b1:a2:e2:5c:c5:21:13:9f:f2:21:0d:d0:5e: b5:9c:f5:52:91:b0:ee:c0:ba:1c:ea:a8:81:ea:61:a5:05:15: a7:95:db:2c:85:36:ea:73:d3:d0:66:79:8f:a7:69:32:8d:0e: 21:60:79:da:3e:2e:f6:cc:38:b7:e1:6e:dd:60:45:49:e7:c8: f4:91:24:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZX8FqFbYF7C2RpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NGIwY2YwM2MtZjM4Ni00MGJjLThjYWYtNjIxYWZhM2YwMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl6KBb23DkZ+6MGWBdol2vualc1AZxwTmpss 61T9vkHy9Ec/6IrFiJHW2IizFmXnEx7Ftn0QTPTNQ7Qi+zjqMs6BF5W9UBcEZi4+ SfIlVVsofIis3uq3Rm9jb3OoqOvQHmPI8qQg7hjKXiFz10FTeUftPAWUnac7mlF8 nKmXvDJIzS4nw81WL5msFDnTCW6nKz7s3SRmqck3fxB0gaohl+G4JX1wjrpoLO74 +b1YuGRMxg0orl5c3m9//QXaHJ2cBiYvS8u+5RJGb6s495/QEY33NsU6y4kQywXt BsNX4wbhLE3081vEVP6jz1fArOZcqIAqzaTqDlYRTc2zWBaJiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI6ZAsoV8SWaxHQG0V54uvLh3FIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0YWUxNzAtYjI4YS0z NmU1LWE5MjAtZDY1YjU0NTMxMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKweHMLRdM1IgTL6CkXJJ98X3vtG9wVRLMywKvxoO/STn3LgQen51Hbk zwb/VkNd4GLuRVQz7o4CZe1bmS6ds26yeyrXgUAejY2iYIZwCvKMXwSRItGcIxHw +WBTW50K3X/TSY4l86Rz463RRtp8yLIMl6OZ1Mm7NjlKhpOBYneLFuEiK/gCmGuG /h5q0xJRUJAUK6sXZDLIQ6E9xLsFGPrK90bbJS3wAC1Wifi8BKxlRTWCVtdlt70b saLiXMUhE5/yIQ3QXrWc9VKRsO7AuhzqqIHqYaUFFaeV2yyFNupz09BmeY+naTKN DiFgedo+LvbMOLfhbt1gRUnnyPSRJLE= -----END CERTIFICATE-----Generated at Tue Jun 17 04:02:06 2025 by rpki-client