$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa File: ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa (raw, json) Hash identifier: carxZVP2J8HJ8jbmnPE65X9B8WTOkxTH2BQtvWdarEw= Subject key identifier: 21:C8:56:00:90:79:15:07:C9:D5:F2:D3:30:80:23:77:DE:62:C7:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963665DDE210AAEA94A41040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.111.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:65:dd:e2:10:aa:ea:94:a4:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fb0b688a-014f-47e7-a537-b1e6b93fa200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:cb:82:78:a3:46:43:6a:83:f5:2f:0b:60: 0f:19:0b:45:9f:3b:65:42:86:e3:5d:9e:70:77:03: f8:15:6d:cc:d9:ef:d3:ed:54:f0:f8:8b:85:ae:d7: 9f:84:fe:bb:c2:59:54:77:5a:8c:9a:1d:aa:3d:2b: 0b:42:79:16:9b:c1:e4:b4:14:f5:65:2f:60:13:ae: 0d:eb:5d:ba:0b:03:50:b4:15:e6:25:8e:ad:10:06: 8e:e8:44:f1:f3:3d:81:d9:f6:bb:1e:aa:5d:3b:ec: 8c:6d:d0:02:43:bd:a9:59:cc:0a:69:e8:73:06:66: ee:2b:dd:62:4c:6f:3b:64:dd:65:53:43:c8:e7:81: 1b:94:f0:fd:ba:ee:d8:61:42:13:65:d1:c4:42:ba: fe:27:c0:5f:68:74:ef:d4:13:bf:75:bd:24:32:ec: ac:8f:55:af:21:c4:18:ee:40:1f:e4:92:9a:e1:a7: 74:94:d8:00:2e:9b:b5:ac:f0:96:e8:bc:81:f6:30: 86:d5:f3:6a:86:27:91:1c:a8:0d:d0:8a:0c:2e:d5: 08:41:b4:bf:47:5b:ed:5a:2f:12:3a:8c:0f:b8:f8: 93:a6:3e:ca:7b:d2:6a:d6:60:4a:c5:54:5a:48:f4: 2f:9c:57:91:7d:47:82:3a:f7:75:ad:1a:8d:ab:59: 90:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:56:00:90:79:15:07:C9:D5:F2:D3:30:80:23:77:DE:62:C7:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:49:0a:b9:6b:3a:fb:54:eb:f3:9e:60:d9:2d:03:2f:80:e9: 78:e3:f4:fd:ca:a5:26:ce:f2:75:54:0c:10:64:1f:9b:57:30: dd:13:6e:f5:3c:97:2f:42:11:f7:e4:99:f8:81:de:58:2d:0a: c4:66:3b:76:bd:64:bd:81:89:c1:96:4e:1f:f1:e8:bf:aa:85: 04:40:c1:da:14:0b:28:73:c2:3e:18:bb:09:22:6a:a3:47:16: 8e:a1:34:d4:a6:2c:ed:ca:dd:2e:62:f3:b1:41:97:73:05:0b: 27:f5:2e:7d:f1:d4:61:7e:d5:cd:42:fe:cc:d6:57:d3:20:d5: b1:26:d3:67:c4:37:f9:4a:43:aa:b6:66:5d:ce:76:6d:c8:21: 20:eb:ce:20:bd:b2:20:5f:47:67:fb:c6:c2:14:b9:e3:80:02: b6:19:eb:db:17:5f:81:fa:25:14:a2:92:8d:60:b1:40:8b:67: c3:bb:80:ef:3a:fb:f4:b8:64:cd:77:52:b5:7a:27:dd:3f:c4: b0:5b:3e:40:95:0e:24:b9:6a:79:71:72:5b:2f:69:51:3a:d4: b3:56:2a:c9:02:7b:d3:eb:a1:ba:a2:13:c2:75:3d:02:e3:a3: fc:28:ac:d1:ab:9d:ac:bc:a7:ed:71:8b:06:d0:ce:81:77:4e: 74:d8:6c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNmXd4hCq6pSkEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmIwYjY4OGEtMDE0Zi00N2U3LWE1MzctYjFlNmI5M2ZhMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmTLgnijRkNqg/UvC2APGQtFnztlQobjXZ5w dwP4FW3M2e/T7VTw+IuFrtefhP67wllUd1qMmh2qPSsLQnkWm8HktBT1ZS9gE64N 6126CwNQtBXmJY6tEAaO6ETx8z2B2fa7HqpdO+yMbdACQ72pWcwKaehzBmbuK91i TG87ZN1lU0PI54EblPD9uu7YYUITZdHEQrr+J8BfaHTv1BO/db0kMuysj1WvIcQY 7kAf5JKa4ad0lNgALpu1rPCW6LyB9jCG1fNqhieRHKgN0IoMLtUIQbS/R1vtWi8S OowPuPiTpj7Ke9Jq1mBKxVRaSPQvnFeRfUeCOvd1rRqNq1mQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHIVgCQeRUHydXy0zCAI3feYsfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQwNzIwZmItMWRjNy0z ZmVmLWJlNmEtNzUxN2M1OWNlMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpJCrlrOvtU6/OeYNktAy+A6Xjj9P3KpSbO8nVUDBBkH5tXMN0TbvU8 ly9CEffkmfiB3lgtCsRmO3a9ZL2BicGWTh/x6L+qhQRAwdoUCyhzwj4YuwkiaqNH Fo6hNNSmLO3K3S5i87FBl3MFCyf1Ln3x1GF+1c1C/szWV9Mg1bEm02fEN/lKQ6q2 Zl3Odm3IISDrziC9siBfR2f7xsIUueOAArYZ69sXX4H6JRSiko1gsUCLZ8O7gO86 +/S4ZM13UrV6J90/xLBbPkCVDiS5anlxclsvaVE61LNWKskCe9ProbqiE8J1PQLj o/worNGrnay8p+1xiwbQzoF3TnTYbFE= -----END CERTIFICATE-----Generated at Mon Aug 4 15:38:58 2025 by rpki-client