$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa File: 68944104-1392-3694-99fe-800cb3c95d19.roa (raw, json) Hash identifier: hqst1K+i+/XGleWnRTsCszdPvG/RjO9LtfiNCa4gA1E= Subject key identifier: 36:73:22:EF:12:C5:6A:78:5D:66:4F:8D:FB:CF:46:D7:14:BD:90:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636616FC9BDEC08DD529020 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.101.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:61:6f:c9:bd:ec:08:dd:52:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1bf48941-05e3-4b47-bd1f-5d693f97a9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:e0:bf:85:f9:dd:3a:8c:10:db:d7:72:9a: 55:99:73:06:35:02:22:b8:a9:22:6f:c0:fd:ea:4b: 0e:57:83:05:8c:3a:ab:84:54:15:e6:f4:39:80:b7: 62:d1:26:07:4d:16:2d:1e:eb:a9:ba:9e:f9:55:8b: d6:11:29:f8:96:83:7f:fe:00:bf:b6:e8:26:84:e8: 1d:38:f6:66:9f:b4:bc:61:0d:1f:30:ed:19:80:6d: 9a:bf:a3:09:d6:f7:02:c7:8e:93:ab:2a:5d:8e:fe: b3:7f:be:37:4b:da:82:47:ce:58:71:a6:c4:6d:9d: 34:45:aa:21:06:ce:1f:50:e6:4f:d5:e7:3f:91:8f: ce:80:cd:15:89:54:63:cd:07:2b:83:9e:97:c2:7c: 14:ba:de:36:fc:8a:37:97:65:1d:eb:c1:72:89:89: a0:11:ee:0e:24:70:76:e9:e2:67:68:8e:c9:77:a1: c4:46:b1:df:e8:61:94:82:4b:bb:39:af:57:f7:4c: 0c:b2:9e:56:11:99:cb:22:23:0b:10:63:3c:f2:a9: cd:e6:da:23:d7:00:5d:aa:57:37:8a:56:bd:d5:e8: 88:0a:3f:e9:8a:14:66:79:df:83:4d:6a:65:f2:76: 9f:01:5c:84:9b:12:e3:6b:b9:59:c1:c8:29:f8:2f: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:73:22:EF:12:C5:6A:78:5D:66:4F:8D:FB:CF:46:D7:14:BD:90:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:25:b3:06:97:b5:ed:4f:56:73:d8:61:99:8d:ff:02:49:5e: 8a:ce:54:fc:e3:ce:04:c4:7c:12:f8:ce:d3:8e:e5:d7:77:38: c9:03:68:4d:6a:0f:5c:ac:d0:06:4e:b6:e4:cf:a9:af:e6:e8: 5a:b7:57:9c:73:75:5a:8b:cd:ab:1f:a3:cd:d8:26:1a:ba:87: 90:d7:33:62:44:36:b5:ad:84:44:89:a4:3f:91:0a:b6:c6:ae: e8:80:55:26:5a:97:7f:36:bc:7f:58:df:cf:89:b5:ba:10:d1: 57:0a:b6:73:d6:cf:b0:06:9d:f2:c7:f1:9b:8b:3d:b7:f7:42: 76:56:8f:1a:63:df:09:10:0b:10:9b:5d:d7:8a:4f:19:38:f4: 64:79:cb:56:51:5b:43:6f:50:0f:de:c5:b3:5a:4b:27:aa:62: 43:36:4e:11:af:eb:0e:a1:d1:92:ed:f6:bc:4f:8d:d5:9a:0a: ff:c4:a0:95:8f:7a:81:04:1d:d5:25:ac:7d:88:fe:05:6b:ee: 67:6b:40:cb:ce:17:de:c4:59:92:e2:1e:42:f6:41:04:b6:1c: fe:90:1e:b6:dd:6f:c9:07:4a:21:d2:34:46:63:7c:a3:6b:d5: 13:fe:40:3d:e9:72:1b:fe:11:f6:40:c2:6c:bd:8e:ff:0d:32: 43:f4:f8:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmFvyb3sCN1SkCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWJmNDg5NDEtMDVlMy00YjQ3LWJkMWYtNWQ2OTNmOTdhOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwLgv4X53TqMENvXcppVmXMGNQIiuKkib8D9 6ksOV4MFjDqrhFQV5vQ5gLdi0SYHTRYtHuupup75VYvWESn4loN//gC/tugmhOgd OPZmn7S8YQ0fMO0ZgG2av6MJ1vcCx46Tqypdjv6zf743S9qCR85YcabEbZ00Raoh Bs4fUOZP1ec/kY/OgM0ViVRjzQcrg56XwnwUut42/Io3l2Ud68FyiYmgEe4OJHB2 6eJnaI7Jd6HERrHf6GGUgku7Oa9X90wMsp5WEZnLIiMLEGM88qnN5toj1wBdqlc3 ila91eiICj/pihRmed+DTWpl8nafAVyEmxLja7lZwcgp+C9rzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZzIu8SxWp4XWZPjfvPRtcUvZAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjg5NDQxMDQtMTM5Mi0z Njk0LTk5ZmUtODAwY2IzYzk1ZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwlswaXte1PVnPYYZmN/wJJXorOVPzjzgTEfBL4ztOO5dd3OMkDaE1q D1ys0AZOtuTPqa/m6Fq3V5xzdVqLzasfo83YJhq6h5DXM2JENrWthESJpD+RCrbG ruiAVSZal382vH9Y38+JtboQ0VcKtnPWz7AGnfLH8ZuLPbf3QnZWjxpj3wkQCxCb XdeKTxk49GR5y1ZRW0NvUA/exbNaSyeqYkM2ThGv6w6h0ZLt9rxPjdWaCv/EoJWP eoEEHdUlrH2I/gVr7mdrQMvOF97EWZLiHkL2QQS2HP6QHrbdb8kHSiHSNEZjfKNr 1RP+QD3pchv+EfZAwmy9jv8NMkP0+M0= -----END CERTIFICATE-----Generated at Sat Aug 9 23:07:29 2025 by rpki-client