$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa File: f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa (raw, json) Hash identifier: caF7eL3VHyOPI7HHp49PeO7/p2LWpjzzer56tYRt38w= Subject key identifier: 24:D0:90:3A:5D:0E:38:FA:C0:59:DA:7B:BD:9E:3D:41:3B:7D:3C:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96365797993AB862AD168A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.7.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:57:97:99:3a:b8:62:ad:16:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f0b3726d-9b83-4bde-befd-044eb459647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:e9:7e:91:29:de:05:c1:30:dc:f8:f8:92: 04:84:86:2d:90:f2:7b:61:d0:dd:fe:b1:0d:20:d2: e1:98:79:f4:02:41:93:53:62:bf:3d:92:28:c9:b2: 5e:cf:7f:06:a9:ff:fc:07:b7:54:61:57:56:e2:52: 7b:35:f6:77:f3:c9:4f:a2:2a:89:e7:e5:e0:48:3d: d5:6a:f6:d4:01:fa:5d:f2:aa:d2:36:eb:e1:6b:11: d0:d6:57:54:87:f2:01:cc:43:31:36:cf:89:6c:c5: 55:2d:90:d9:c0:1e:30:f0:4e:7b:70:1a:2a:56:e0: 3c:0f:e3:c7:ca:f5:87:f1:06:d2:02:62:73:ef:79: 37:7d:f6:d2:dc:98:08:f7:63:09:00:cb:cd:7b:13: e0:10:c0:9e:fb:5a:b7:8d:0d:49:3a:9f:6c:43:c4: 68:d3:9e:9d:f0:db:7f:f0:9c:ce:5f:69:f8:e7:21: 52:5a:8a:dc:31:77:e0:43:d6:1f:af:87:19:67:70: 3f:ea:90:53:3a:91:6e:fd:24:88:c6:24:b8:63:50: 98:e0:94:78:33:fa:d3:15:e2:99:78:43:9f:29:15: c9:44:02:09:b0:a8:bd:7e:63:c6:5f:1c:d9:d5:df: 54:2b:3f:27:d8:06:ac:1d:38:e2:5e:eb:95:97:bd: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D0:90:3A:5D:0E:38:FA:C0:59:DA:7B:BD:9E:3D:41:3B:7D:3C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:14:16:f2:82:e3:85:4f:d5:60:d4:33:bd:52:71:67:c1:74: af:be:9c:e2:a6:22:8b:d5:7a:6b:c5:ed:fe:6c:d9:1c:57:66: 4a:6f:6e:49:7b:a4:b6:55:6a:c9:b1:d5:1e:56:df:a1:6d:e4: ea:87:3d:38:7d:72:53:10:6f:88:21:14:bb:fa:29:a2:dc:81: 65:b5:a0:42:d8:3c:ea:ad:83:37:09:9d:0f:27:07:e6:33:2d: 00:c7:1a:38:e8:6a:8e:fb:af:f5:57:76:82:fe:4e:06:6f:eb: 61:92:0c:31:44:d0:36:86:b5:96:9e:aa:d0:99:6e:58:46:ef: 2b:4d:bb:bc:09:44:76:c3:ab:df:1c:ce:19:03:c2:c4:83:5a: 46:64:b1:dd:ba:6a:c4:b2:1b:cd:d3:89:97:54:5e:06:d7:d7: 24:00:92:2a:51:82:2f:5f:2e:25:04:e4:ab:29:0e:36:ff:ad: 52:09:b3:86:fe:ee:6c:6f:95:68:84:c5:30:0e:b7:44:11:26: ca:14:87:1f:03:40:19:f6:f9:12:f0:44:8b:e6:9e:8f:3e:1c: 99:51:f6:e5:20:fd:04:2e:da:91:c2:09:53:01:c4:37:58:28: 40:2b:e5:31:3a:35:33:1e:43:16:23:74:a3:80:f7:df:c2:1f: a1:8d:0d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNleXmTq4Yq0WioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjBiMzcyNmQtOWI4My00YmRlLWJlZmQtMDQ0ZWI0NTk2NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu7pfpEp3gXBMNz4+JIEhIYtkPJ7YdDd/rEN INLhmHn0AkGTU2K/PZIoybJez38Gqf/8B7dUYVdW4lJ7NfZ388lPoiqJ5+XgSD3V avbUAfpd8qrSNuvhaxHQ1ldUh/IBzEMxNs+JbMVVLZDZwB4w8E57cBoqVuA8D+PH yvWH8QbSAmJz73k3ffbS3JgI92MJAMvNexPgEMCe+1q3jQ1JOp9sQ8Ro056d8Nt/ 8JzOX2n45yFSWorcMXfgQ9Yfr4cZZ3A/6pBTOpFu/SSIxiS4Y1CY4JR4M/rTFeKZ eEOfKRXJRAIJsKi9fmPGXxzZ1d9UKz8n2AasHTjiXuuVl72UMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTQkDpdDjj6wFnae72ePUE7fTwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJmMzNmNzUtNzkxNS0z NmQxLThjNDItNGIwMDc0N2Y3YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgUFvKC44VP1WDUM71ScWfBdK++nOKmIovVemvF7f5s2RxXZkpvbkl7 pLZVasmx1R5W36Ft5OqHPTh9clMQb4ghFLv6KaLcgWW1oELYPOqtgzcJnQ8nB+Yz LQDHGjjoao77r/VXdoL+TgZv62GSDDFE0DaGtZaeqtCZblhG7ytNu7wJRHbDq98c zhkDwsSDWkZksd26asSyG83TiZdUXgbX1yQAkipRgi9fLiUE5KspDjb/rVIJs4b+ 7mxvlWiExTAOt0QRJsoUhx8DQBn2+RLwRIvmno8+HJlR9uUg/QQu2pHCCVMBxDdY KEAr5TE6NTMeQxYjdKOA99/CH6GNDWs= -----END CERTIFICATE-----Generated at Sat Aug 9 01:01:35 2025 by rpki-client