$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2b9b39e-6aa5-33e2-8c13-c6d1c60318c3.roa File: c2b9b39e-6aa5-33e2-8c13-c6d1c60318c3.roa (raw, json) Hash identifier: mlq6ZSahNa2VKjwqDEEDiW8/CBMHCga+FuFjPDFsTGk= Subject key identifier: CE:83:1A:56:BB:F9:2F:8B:98:1C:00:97:53:C8:50:46:FF:0A:6C:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96361A619797F9A2C0FC6860 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2b9b39e-6aa5-33e2-8c13-c6d1c60318c3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.14.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:1a:61:97:97:f9:a2:c0:fc:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=bbc9f33f-f55f-4f8b-bd2b-d82c57703830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:8a:17:33:ea:9d:d6:4d:0b:3a:33:28:e0: aa:01:50:7e:6f:9d:5e:33:12:44:02:66:93:c2:b7: 61:56:ec:ce:20:3e:7d:b8:89:67:5b:50:60:bf:1e: 4a:76:7b:eb:4f:ce:89:8b:f8:75:80:d8:9b:95:2d: 16:ef:2b:da:de:fb:6b:49:59:f7:0f:6f:e2:f8:5f: 30:50:8b:3a:2c:a5:0b:95:4a:64:66:9b:7f:d1:e7: 07:42:87:97:e3:cd:6c:c4:1e:e8:c1:0e:df:75:e7: 18:80:e6:25:af:af:2f:03:19:73:37:c4:c8:e8:8f: 4f:bb:cd:5f:cb:8f:cb:16:38:03:40:29:59:0a:4d: 80:f2:76:86:bf:47:77:f7:35:3e:59:bc:a1:0f:a8: 29:01:ae:8f:da:be:61:ce:6d:34:22:ac:09:81:32: 90:a2:09:de:e2:28:c2:24:f6:ca:04:74:78:28:58: c7:e2:4d:31:cd:93:1b:f0:d0:19:68:5f:72:22:62: 3f:25:e5:96:b8:70:1f:63:da:66:48:20:30:a8:f8: 6f:b2:21:8c:4c:39:ba:3c:c5:b3:d4:17:fe:c0:9c: 93:3c:8f:23:d7:bf:84:19:20:df:f4:1a:45:ce:e5: 68:ba:c1:cc:b9:c3:eb:17:1b:04:c4:44:7f:51:24: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:1A:56:BB:F9:2F:8B:98:1C:00:97:53:C8:50:46:FF:0A:6C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c2b9b39e-6aa5-33e2-8c13-c6d1c60318c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ab:d2:95:88:7e:71:1c:ac:e3:71:60:0c:ba:1a:68:38:2c: ab:42:e3:33:b3:87:3f:6c:21:5a:47:2e:cf:ec:c8:60:c1:e5: f0:c1:6c:fa:fa:47:35:10:d7:4e:68:25:99:08:70:b7:06:40: 00:7d:82:d6:ec:41:d6:42:85:f9:52:5c:d8:6a:a0:c8:06:0c: cc:f2:02:1b:36:9a:14:aa:03:3b:5d:c1:7d:a8:01:90:cf:dc: 0c:a4:8b:05:2b:27:b7:54:a6:8e:53:f1:de:32:50:a9:6c:78: 2a:2e:c9:f8:25:00:2c:91:e2:02:37:98:fe:e7:a7:9c:0b:b4: 57:54:a9:d8:02:51:6a:08:28:f1:6c:50:e0:19:2b:8d:61:45: 51:3e:39:04:c3:ad:65:00:9c:09:07:80:80:8c:0c:6b:2e:00: 00:b3:14:8f:d4:b5:aa:01:62:33:0f:71:17:27:20:a9:79:22: e2:34:e1:08:a0:8d:16:79:5a:12:1a:85:f6:3a:3f:f7:1b:61: 8e:65:a2:86:0e:86:cf:0c:b4:f2:57:af:9f:60:5e:70:bf:15: 65:f0:8f:15:e5:9e:73:a3:ef:4e:c1:96:07:7e:b5:7d:3d:66: 2f:dc:dc:15:dc:92:58:2e:18:d4:52:95:d6:f3:fe:9c:3d:95: 27:54:5a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhphl5f5osD8aGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmJjOWYzM2YtZjU1Zi00ZjhiLWJkMmItZDgyYzU3NzAzODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6aKFzPqndZNCzozKOCqAVB+b51eMxJEAmaT wrdhVuzOID59uIlnW1Bgvx5KdnvrT86Ji/h1gNiblS0W7yva3vtrSVn3D2/i+F8w UIs6LKULlUpkZpt/0ecHQoeX481sxB7owQ7fdecYgOYlr68vAxlzN8TI6I9Pu81f y4/LFjgDQClZCk2A8naGv0d39zU+WbyhD6gpAa6P2r5hzm00IqwJgTKQogne4ijC JPbKBHR4KFjH4k0xzZMb8NAZaF9yImI/JeWWuHAfY9pmSCAwqPhvsiGMTDm6PMWz 1Bf+wJyTPI8j17+EGSDf9BpFzuVousHMucPrFxsExER/UST03QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6DGla7+S+LmBwAl1PIUEb/CmxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzJiOWIzOWUtNmFhNS0z M2UyLThjMTMtYzZkMWM2MDMxOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImr0pWIfnEcrONxYAy6Gmg4LKtC4zOzhz9sIVpHLs/syGDB5fDBbPr6 RzUQ105oJZkIcLcGQAB9gtbsQdZChflSXNhqoMgGDMzyAhs2mhSqAztdwX2oAZDP 3AykiwUrJ7dUpo5T8d4yUKlseCouyfglACyR4gI3mP7np5wLtFdUqdgCUWoIKPFs UOAZK41hRVE+OQTDrWUAnAkHgICMDGsuAACzFI/UtaoBYjMPcRcnIKl5IuI04Qig jRZ5WhIahfY6P/cbYY5looYOhs8MtPJXr59gXnC/FWXwjxXlnnOj707Blgd+tX09 Zi/c3BXcklguGNRSldbz/pw9lSdUWos= -----END CERTIFICATE-----Generated at Wed Aug 6 04:09:34 2025 by rpki-client