$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa File: c4c76863-7694-37b8-9c50-582f40a2b334.roa (raw, json) Hash identifier: RGJx54QZB6kpbAXzMDqI3jyElaESD7CICBdIiLtvZtU= Subject key identifier: 2A:E4:2A:1D:31:38:24:39:77:64:C4:07:98:1F:30:DA:E3:08:86:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963612A88F61C0980D30C200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:12:a8:8f:61:c0:98:0d:30:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=23e84562-7d86-43ed-aa9b-fec4b319bbad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:11:ac:58:27:60:bd:4d:c2:eb:43:7d:d5: 45:19:fb:c6:44:5a:32:0f:1b:3d:3b:65:25:a0:12: 07:d6:6b:ba:f8:ec:7d:7c:10:c7:b7:04:ac:78:d7: 88:a5:62:fe:46:63:d3:0c:d5:93:13:25:be:97:55: 56:a7:4c:52:1d:be:a9:a7:61:29:19:86:d3:ca:3f: f1:5c:9b:e9:8f:8e:ca:a4:7b:92:c3:32:21:0e:a7: 2c:7b:db:67:8e:69:6b:68:36:6d:12:6d:89:66:e3: e5:42:ef:96:2d:48:99:64:5c:25:e9:96:e9:da:ca: d5:0b:26:ad:f3:3d:62:a8:06:56:13:8e:b1:da:e0: 67:14:46:17:ee:18:d4:f1:a7:74:64:00:1c:b6:e6: 99:4a:d4:fc:b9:6c:56:94:40:e2:f0:ce:ca:34:63: 70:69:1c:90:b1:33:46:86:68:0d:9e:e7:6f:1b:a1: 5d:5c:96:92:05:e0:c0:b5:6c:ce:44:b1:f6:69:58: 7a:f7:36:ec:c9:4c:0c:fb:f8:81:ef:69:b3:8f:59: cb:7c:9c:a0:dd:23:42:dd:c4:4b:c5:e9:1f:04:1b: d9:fb:1e:9f:55:f5:ea:c5:15:19:67:5f:e4:ef:6c: ef:cd:61:8c:f8:ef:27:aa:d8:f6:70:8a:10:b5:cc: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:2A:1D:31:38:24:39:77:64:C4:07:98:1F:30:DA:E3:08:86:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4c76863-7694-37b8-9c50-582f40a2b334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:55:c1:99:9d:f2:f9:b4:6c:14:8a:d4:3e:7e:50:5b:92:c7: 3f:d4:29:ec:77:bf:52:af:22:70:6e:5e:c1:9e:0c:ea:fe:4e: 7c:91:d7:75:64:12:ab:1a:24:8e:95:0a:5f:0e:87:ae:82:e8: 0c:5d:dd:90:93:92:20:8d:7c:15:2b:74:49:bf:3b:6b:5c:80: e0:5b:45:ee:30:69:2e:97:42:03:fc:37:05:00:f8:44:8d:e3: ad:13:c7:e9:08:7c:29:8a:02:35:76:45:c3:d5:47:c3:a4:54: dd:cb:12:01:12:8d:35:b1:ad:a4:cc:4e:4a:9f:d8:c3:87:e7: 5a:fe:51:38:18:d3:a9:7c:d6:38:26:0b:ba:00:45:e9:bd:6a: 5d:cc:4d:c1:11:1c:7f:ef:83:5e:b4:0d:a5:d2:bf:bd:30:0c: ac:62:0f:b2:e2:7d:f3:3d:28:a0:48:53:e3:4b:f5:cc:4e:63: ab:2e:58:db:76:01:b0:2e:02:13:3d:7a:ff:2e:39:af:93:3f: c2:0e:ce:e7:de:59:ca:ba:7d:a7:60:41:5b:7e:7b:e2:54:3b: ea:e8:0f:60:42:c7:b5:ba:bd:62:28:f5:56:9c:f9:58:c2:5a: d6:3d:2f:65:4b:e3:48:0f:fd:66:05:d2:45:41:70:81:3d:49: 12:f1:f8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhKoj2HAmA0wwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjNlODQ1NjItN2Q4Ni00M2VkLWFhOWItZmVjNGIzMTliYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopsRrFgnYL1NwutDfdVFGfvGRFoyDxs9O2Ul oBIH1mu6+Ox9fBDHtwSseNeIpWL+RmPTDNWTEyW+l1VWp0xSHb6pp2EpGYbTyj/x XJvpj47KpHuSwzIhDqcse9tnjmlraDZtEm2JZuPlQu+WLUiZZFwl6Zbp2srVCyat 8z1iqAZWE46x2uBnFEYX7hjU8ad0ZAActuaZStT8uWxWlEDi8M7KNGNwaRyQsTNG hmgNnudvG6FdXJaSBeDAtWzORLH2aVh69zbsyUwM+/iB72mzj1nLfJyg3SNC3cRL xekfBBvZ+x6fVfXqxRUZZ1/k72zvzWGM+O8nqtj2cIoQtcxCiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrkKh0xOCQ5d2TEB5gfMNrjCIZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzRjNzY4NjMtNzY5NC0z N2I4LTljNTAtNTgyZjQwYTJiMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlVwZmd8vm0bBSK1D5+UFuSxz/UKex3v1KvInBuXsGeDOr+TnyR13Vk EqsaJI6VCl8Oh66C6Axd3ZCTkiCNfBUrdEm/O2tcgOBbRe4waS6XQgP8NwUA+ESN 460Tx+kIfCmKAjV2RcPVR8OkVN3LEgESjTWxraTMTkqf2MOH51r+UTgY06l81jgm C7oARem9al3MTcERHH/vg160DaXSv70wDKxiD7LiffM9KKBIU+NL9cxOY6suWNt2 AbAuAhM9ev8uOa+TP8IOzufeWcq6fadgQVt+e+JUO+roD2BCx7W6vWIo9Vac+VjC WtY9L2VL40gP/WYF0kVBcIE9SRLx+Do= -----END CERTIFICATE-----Generated at Fri Aug 8 19:32:57 2025 by rpki-client