$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c086e264-39eb-3843-9f10-fbefa10f0abe.roa File: c086e264-39eb-3843-9f10-fbefa10f0abe.roa (raw, json) Hash identifier: q0FmaA66dxvNCrSwmASfjQ8YwtIJl5JBhp9ym+RURaQ= Subject key identifier: 6D:96:F9:CB:E3:FD:E8:83:C6:57:37:E8:91:E6:FA:F6:92:E8:4D:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963656CBC606FDAB85651D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c086e264-39eb-3843-9f10-fbefa10f0abe.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:56:cb:c6:06:fd:ab:85:65:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fe978c3a-f52d-4a24-8e28-76ede6997227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:28:cf:95:97:08:a0:44:a1:ae:1d:a0:94:db: 56:77:ca:a8:b1:1b:68:2b:f3:12:00:44:38:12:2d: eb:5e:83:3a:f4:79:fb:f9:9d:17:f9:be:a3:a8:d9: 26:e4:72:cf:6a:92:e5:eb:6d:63:4c:00:0f:60:b0: 5e:54:ac:03:95:72:c4:82:8c:11:57:1e:ba:8b:fb: 72:1c:4c:8e:24:76:e7:27:dc:be:cb:89:67:00:af: 5a:41:87:91:fc:97:d5:69:8a:ea:c9:49:f0:f8:df: 32:05:4f:bd:0f:06:9d:0b:5e:fc:6f:4a:bb:50:72: 68:62:0b:ef:66:3c:c0:a1:b5:b3:13:6b:8e:0f:4e: 43:88:05:bc:95:de:ff:6b:fa:e7:26:a9:7a:b2:89: 59:01:81:b7:ac:ee:22:ab:fd:b7:be:48:68:b1:56: e4:e6:49:49:11:21:5a:f2:9d:80:c4:95:0f:cd:3e: 4d:60:e0:4b:74:2f:4f:3c:32:f6:b5:c6:76:78:2a: ba:0f:5d:79:42:fa:24:90:81:38:ae:ae:32:e4:e9: 02:29:40:04:45:c6:51:75:80:12:03:21:9f:14:85: 2f:20:28:27:2d:9e:46:03:b4:fa:97:00:34:5c:f3: 9f:09:73:93:ef:20:71:e5:c7:0f:bc:2c:d1:3c:e8: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:96:F9:CB:E3:FD:E8:83:C6:57:37:E8:91:E6:FA:F6:92:E8:4D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c086e264-39eb-3843-9f10-fbefa10f0abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a1:23:83:5a:65:a6:2b:c9:65:50:91:23:73:a8:9f:a1:77: 1a:8e:27:d5:bf:93:1f:67:36:dc:b2:52:37:9f:97:07:33:8c: 61:9d:ea:ec:ac:e8:a3:8c:f8:bb:f3:b1:da:37:07:7d:38:dd: 4a:e4:e2:8c:a5:ed:03:a1:21:47:f0:b3:ea:01:a1:c3:54:17: 01:55:59:43:4f:25:21:b2:4d:86:0c:f2:3a:d1:0b:e5:f0:55: 10:7a:e0:16:ee:9b:5e:eb:f2:f1:3d:8b:cb:c5:05:3c:b3:02: 9c:1f:dc:31:57:db:7c:da:1e:10:d7:86:09:55:b1:d6:0a:ad: f7:eb:a7:cb:ec:ec:d3:fe:7a:b6:c6:9d:ea:d5:4a:e2:9a:76: 5c:98:34:df:a3:7e:cc:c8:27:bc:50:fd:09:ee:26:6b:98:b2: 11:a9:31:b6:c4:4b:d1:11:9f:1b:81:3f:42:90:8a:34:69:b4: 7f:e9:e0:06:3c:85:ea:e3:63:be:b9:6c:3b:3a:bd:0f:e4:68: 3c:1e:ef:c3:5f:c0:0e:27:d7:da:bf:e0:2c:85:64:7c:6d:0e: c7:73:13:1b:c3:38:41:73:12:ff:95:38:d8:8f:0a:fa:5b:1c: 3d:58:fb:e5:35:02:bd:10:dd:d7:45:8e:55:fb:f0:ca:4f:1f: 5d:a6:4a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlbLxgb9q4VlHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmU5NzhjM2EtZjUyZC00YTI0LThlMjgtNzZlZGU2OTk3MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSjPlZcIoEShrh2glNtWd8qosRtoK/MSAEQ4 Ei3rXoM69Hn7+Z0X+b6jqNkm5HLPapLl621jTAAPYLBeVKwDlXLEgowRVx66i/ty HEyOJHbnJ9y+y4lnAK9aQYeR/JfVaYrqyUnw+N8yBU+9DwadC178b0q7UHJoYgvv ZjzAobWzE2uOD05DiAW8ld7/a/rnJql6solZAYG3rO4iq/23vkhosVbk5klJESFa 8p2AxJUPzT5NYOBLdC9PPDL2tcZ2eCq6D115QvokkIE4rq4y5OkCKUAERcZRdYAS AyGfFIUvICgnLZ5GA7T6lwA0XPOfCXOT7yBx5ccPvCzRPOgl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2W+cvj/eiDxlc36JHm+vaS6E00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA4NmUyNjQtMzllYi0z ODQzLTlmMTAtZmJlZmExMGYwYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyhI4NaZaYryWVQkSNzqJ+hdxqOJ9W/kx9nNtyyUjeflwczjGGd6uys 6KOM+Lvzsdo3B3043Urk4oyl7QOhIUfws+oBocNUFwFVWUNPJSGyTYYM8jrRC+Xw VRB64Bbum17r8vE9i8vFBTyzApwf3DFX23zaHhDXhglVsdYKrffrp8vs7NP+erbG nerVSuKadlyYNN+jfszIJ7xQ/QnuJmuYshGpMbbES9ERnxuBP0KQijRptH/p4AY8 herjY765bDs6vQ/kaDwe78NfwA4n19q/4CyFZHxtDsdzExvDOEFzEv+VONiPCvpb HD1Y++U1Ar0Q3ddFjlX78MpPH12mSvk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:25 2025 by rpki-client