$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9e3ce53b-12ce-3fc2-a609-b41897328586.roa File: 9e3ce53b-12ce-3fc2-a609-b41897328586.roa (raw, json) Hash identifier: vi0Fp27ZFr2fVhPrWqGHzY6asOr1RspfBb3IFBDl7qE= Subject key identifier: F9:51:07:01:8E:A0:9B:FB:D1:29:3F:3A:72:34:2C:97:E6:F5:54:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636621982E75B40867C6E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9e3ce53b-12ce-3fc2-a609-b41897328586.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.101.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:62:19:82:e7:5b:40:86:7c:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1edd2248-b973-4bfd-b6b4-8da0dba1eec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:e8:70:df:98:14:d8:25:28:f4:2f:1c:a2: 6d:c6:2e:29:c2:bf:61:05:d1:03:ed:fb:96:d4:95: 78:69:6b:fa:0a:25:74:f8:02:b6:87:99:44:22:e5: a3:b7:d9:b9:d2:11:ed:ed:c5:84:e3:fe:17:d9:11: 6b:62:83:c6:b5:94:95:36:55:e6:cb:b1:fd:95:32: 58:a4:1a:a1:5f:b9:7b:a8:1a:71:ff:54:c3:c3:f8: 25:01:82:7e:92:7c:0b:d8:fa:15:b4:b7:90:c5:68: d6:8b:a6:3b:76:6c:25:50:2a:d3:57:52:74:cf:38: a6:71:30:99:03:3f:f8:b6:74:12:e0:26:dd:ba:64: af:af:d7:3f:23:f1:66:31:e4:96:c0:9f:d2:56:fe: 49:4f:53:cf:8b:da:aa:9d:c9:b5:e1:6b:59:4e:ac: 55:da:41:19:3a:60:94:27:2c:e2:c4:5e:24:b9:2a: b7:82:e4:fc:79:af:9c:61:2d:8a:f8:fa:16:6e:46: 67:99:d5:a6:06:97:28:ed:9e:50:df:0b:13:10:4d: 68:78:2f:41:a7:8f:78:a3:ab:95:e6:af:a6:55:d3: d1:bd:ba:17:27:10:ac:1b:54:d3:c5:3e:42:72:b0: a8:5f:29:75:65:98:09:bb:9f:1d:65:78:7f:31:b5: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:51:07:01:8E:A0:9B:FB:D1:29:3F:3A:72:34:2C:97:E6:F5:54:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9e3ce53b-12ce-3fc2-a609-b41897328586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ce:57:24:3d:4f:3f:a7:3e:86:d7:9c:69:83:89:6e:2b:9d: 71:7a:17:b1:a1:b5:00:a0:c2:3f:03:54:10:20:a2:d1:c2:4a: a0:e2:f0:98:9a:5b:3d:a0:50:7e:d6:c4:e9:cc:45:3d:2a:f4: 37:77:2a:79:91:9a:61:46:16:7e:7d:3d:31:81:46:ce:3f:b4: 75:05:5e:85:41:39:5f:e7:c7:23:62:50:02:49:29:ad:ab:14: b3:d3:af:0e:d3:31:6a:a8:2e:ca:64:e0:bb:25:69:61:b6:4b: 3d:51:41:a3:14:d4:8d:ae:ef:13:8c:2c:28:a9:b2:c8:30:a6: fa:20:a6:83:a1:e1:66:50:4f:15:95:7e:94:69:60:2e:14:ab: b9:73:ea:a4:94:32:93:f1:64:32:6e:b0:92:70:7b:c0:18:f0: 04:7d:5f:fd:9c:00:34:07:e7:80:8c:8d:c2:90:9b:c0:39:6a: 93:d1:87:9d:2f:b2:c3:5f:b7:13:0b:7c:ae:30:ff:9b:24:3f: 68:1f:f2:0c:65:63:73:ba:c2:07:75:0b:66:2a:65:13:d2:31: 62:de:6a:08:c8:0b:15:9b:38:0d:9b:20:68:40:88:0e:73:03: 7c:2e:af:65:e3:7e:30:23:f4:c4:19:fc:07:1c:be:20:31:d8: 96:4d:f8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmIZgudbQIZ8bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWVkZDIyNDgtYjk3My00YmZkLWI2YjQtOGRhMGRiYTFlZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCbocN+YFNglKPQvHKJtxi4pwr9hBdED7fuW 1JV4aWv6CiV0+AK2h5lEIuWjt9m50hHt7cWE4/4X2RFrYoPGtZSVNlXmy7H9lTJY pBqhX7l7qBpx/1TDw/glAYJ+knwL2PoVtLeQxWjWi6Y7dmwlUCrTV1J0zzimcTCZ Az/4tnQS4CbdumSvr9c/I/FmMeSWwJ/SVv5JT1PPi9qqncm14WtZTqxV2kEZOmCU JyzixF4kuSq3guT8ea+cYS2K+PoWbkZnmdWmBpco7Z5Q3wsTEE1oeC9Bp494o6uV 5q+mVdPRvboXJxCsG1TTxT5CcrCoXyl1ZZgJu58dZXh/MbXzxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlRBwGOoJv70Sk/OnI0LJfm9VSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWUzY2U1M2ItMTJjZS0z ZmMyLWE2MDktYjQxODk3MzI4NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETOVyQ9Tz+nPobXnGmDiW4rnXF6F7GhtQCgwj8DVBAgotHCSqDi8Jia Wz2gUH7WxOnMRT0q9Dd3KnmRmmFGFn59PTGBRs4/tHUFXoVBOV/nxyNiUAJJKa2r FLPTrw7TMWqoLspk4LslaWG2Sz1RQaMU1I2u7xOMLCipssgwpvogpoOh4WZQTxWV fpRpYC4Uq7lz6qSUMpPxZDJusJJwe8AY8AR9X/2cADQH54CMjcKQm8A5apPRh50v ssNftxMLfK4w/5skP2gf8gxlY3O6wgd1C2YqZRPSMWLeagjICxWbOA2bIGhAiA5z A3wur2XjfjAj9MQZ/AccviAx2JZN+PE= -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:09 2025 by rpki-client