$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b90925-8a26-3431-a6b9-860c75be75f8.roa File: c1b90925-8a26-3431-a6b9-860c75be75f8.roa (raw, json) Hash identifier: jliNIHFcNbRgoK3sHjrBJIHt+YFufGGsfYf1sOMVRXQ= Subject key identifier: 7E:39:C8:27:DB:45:E9:21:5D:48:47:6A:DA:2C:78:04:20:8A:04:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6E28C69CEE988B41D7B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b90925-8a26-3431-a6b9-860c75be75f8.roa Signing time: Fri 20 Jun 2025 09:28:45 +0000 ROA not before: Fri 20 Jun 2025 09:28:45 +0000 ROA not after: Thu 18 Sep 2025 09:28:45 +0000 asID: 22773 IP address blocks: 68.96.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:e2:8c:69:ce:e9:88:b4:1d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:45 2025 GMT Not After : Sep 18 09:28:45 2025 GMT Subject: CN=3e5217c4-f2f9-4cad-81d5-7bbe4e6e2e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:bd:86:b2:0d:0d:43:5b:dd:24:e9:b3:d5: bf:d4:18:e2:4a:76:5c:22:f3:16:e2:1e:c5:8c:bf: 34:e0:e1:3c:96:c3:89:5c:77:39:31:17:83:c6:3f: 19:ce:f3:9d:d5:14:e4:5f:c3:82:2e:cc:50:d0:09: cd:6f:26:75:a2:53:f7:6e:84:47:28:0f:4e:34:3b: ba:d2:e6:39:ef:ad:6b:b1:94:10:3e:57:88:2a:9e: e9:c7:d2:60:87:88:a9:56:7f:a3:12:3a:f9:67:a1: 2a:86:e1:ea:65:14:33:33:e3:8c:3d:ad:5d:df:cd: fc:fd:d1:84:b4:0f:a3:da:5c:1d:61:3f:da:55:4d: b6:74:c7:1a:96:f5:ca:c0:19:13:df:c4:ed:fb:6a: 93:1d:23:35:1e:f4:7c:04:0d:5f:2f:4b:21:89:cd: ed:57:88:56:92:33:ad:09:13:7c:04:a3:7e:04:3a: 81:c7:15:19:33:8e:41:75:2e:e6:1e:49:d5:b1:78: 7d:2b:25:12:00:b6:f5:26:e9:22:f2:31:e3:98:0f: 73:7a:2f:dc:dd:42:ec:e0:c6:66:aa:8d:e1:05:23: eb:20:a5:00:97:49:4a:02:38:0d:5b:79:ff:89:6a: 60:45:ee:bb:b3:ba:51:16:18:c9:55:0f:e2:3c:43: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:C8:27:DB:45:E9:21:5D:48:47:6A:DA:2C:78:04:20:8A:04:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1b90925-8a26-3431-a6b9-860c75be75f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:c4:18:80:d3:ae:bf:67:ca:15:82:59:a4:31:f7:4f:bd: ff:fd:41:46:24:61:a9:7c:3e:fc:51:07:99:5e:63:c2:23:56: 8c:d6:a6:a4:32:2d:b9:b0:9c:e2:25:c0:51:6d:03:f6:99:c6: 37:34:09:92:17:c6:32:a0:7e:df:10:f0:72:eb:0e:28:b6:c1: 57:f6:55:58:4b:d6:3b:82:ee:fc:61:62:5a:38:79:1f:e7:04: 6d:8c:cb:b2:34:d7:c3:7a:57:55:95:ba:62:30:18:70:ad:93: 0c:8b:f7:e8:f0:1d:fe:d4:19:27:9c:47:08:41:63:9b:7a:91: aa:76:95:8b:24:dd:91:15:1a:ae:aa:52:32:6f:67:f1:f6:13: 28:0a:ba:b7:2c:f0:45:7b:67:b1:97:96:af:1a:eb:da:73:eb: 07:fa:bf:55:d7:25:19:fa:b7:4b:e0:ab:9a:11:9f:f0:59:3f: 2a:33:b5:4b:78:67:74:d3:fe:9b:6d:af:e7:58:9c:33:e4:bf: 71:b0:11:9f:ef:e5:a6:42:3f:52:e8:e6:84:fa:6a:94:23:0e: 5f:2b:65:8e:78:24:78:4b:be:21:bf:b0:4b:14:da:dd:68:90: 30:bd:55:55:c7:e4:aa:e4:72:96:93:2b:fc:b5:78:68:c6:1e: d6:95:86:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApuKMac7piLQde4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg0NVoXDTI1MDkxODA5Mjg0NVowLzEtMCsGA1UEAxMk M2U1MjE3YzQtZjJmOS00Y2FkLTgxZDUtN2JiZTRlNmUyZTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNa9hrINDUNb3STps9W/1BjiSnZcIvMW4h7F jL804OE8lsOJXHc5MReDxj8ZzvOd1RTkX8OCLsxQ0AnNbyZ1olP3boRHKA9ONDu6 0uY5761rsZQQPleIKp7px9Jgh4ipVn+jEjr5Z6EqhuHqZRQzM+OMPa1d3838/dGE tA+j2lwdYT/aVU22dMcalvXKwBkT38Tt+2qTHSM1HvR8BA1fL0shic3tV4hWkjOt CRN8BKN+BDqBxxUZM45BdS7mHknVsXh9KyUSALb1Juki8jHjmA9zei/c3ULs4MZm qo3hBSPrIKUAl0lKAjgNW3n/iWpgRe67s7pRFhjJVQ/iPEO8GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH45yCfbRekhXUhHatoseAQgigRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFiOTA5MjUtOGEyNi0z NDMxLWE2YjktODYwYzc1YmU3NWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMJxBiA066/Z8oVglmkMfdPvf/9QUYkYal8PvxRB5leY8IjVozWpqQy LbmwnOIlwFFtA/aZxjc0CZIXxjKgft8Q8HLrDii2wVf2VVhL1juC7vxhYlo4eR/n BG2My7I018N6V1WVumIwGHCtkwyL9+jwHf7UGSecRwhBY5t6kap2lYsk3ZEVGq6q UjJvZ/H2EygKurcs8EV7Z7GXlq8a69pz6wf6v1XXJRn6t0vgq5oRn/BZPyoztUt4 Z3TT/pttr+dYnDPkv3GwEZ/v5aZCP1Lo5oT6apQjDl8rZY54JHhLviG/sEsU2t1o kDC9VVXH5KrkcpaTK/y1eGjGHtaVhpg= -----END CERTIFICATE-----Generated at Sat Aug 9 03:01:00 2025 by rpki-client