$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa File: f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa (raw, json) Hash identifier: x/kvWqLRlpRsZ1CP7LgsIEGsV5dbKNKa79hbBresrt0= Subject key identifier: 34:DC:E6:2D:C8:FF:3E:C9:5F:53:C5:AA:B4:8E:15:E4:76:A1:26:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5E915F0A2CE53B0DB400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 68.227.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:5e:91:5f:0a:2c:e5:3b:0d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=b68b6008-d51d-478d-86e1-6077a51a77ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:66:79:a2:88:75:fa:a4:8a:f4:ff:88:34: 2c:44:6c:a8:de:5f:50:d9:69:40:61:34:3c:15:0e: 3c:e6:fb:c2:d0:24:28:5e:66:95:d2:0a:d9:fa:43: 3c:58:4e:9f:65:2d:82:38:d5:0e:a0:57:d2:c4:3e: b3:4d:bc:50:4f:c7:62:7d:5a:0f:3e:2f:f8:09:82: ec:ff:5e:d5:16:47:24:5b:1b:f5:49:be:3e:73:f9: 53:ac:ad:8b:3e:96:dc:55:f8:6a:d9:50:d4:88:02: 4f:a9:07:16:ef:6f:47:18:6f:62:2d:8e:e7:f4:13: 9a:8a:ad:40:c4:f3:52:0d:27:6f:89:49:dd:c0:28: 5b:0e:ed:b2:d5:1f:50:aa:d8:74:e5:b3:3a:07:d7: 95:9c:44:55:55:b3:d9:72:0d:c5:e8:40:e5:a6:64: 6b:ad:0c:ef:ae:51:d1:82:c3:5c:12:ab:4e:6d:ff: 42:37:01:4d:6a:4c:ba:55:cc:26:24:40:72:b8:9d: ab:1e:0b:3b:f3:31:15:a9:78:91:50:d0:c9:79:aa: 9c:ab:ac:b1:43:d6:5b:b9:58:eb:f5:cf:08:c3:b7: 48:ff:32:f4:bc:17:06:97:fc:b4:87:c4:af:71:19: 68:47:05:9a:8b:3f:3f:ca:18:d6:e4:5d:93:c5:07: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:E6:2D:C8:FF:3E:C9:5F:53:C5:AA:B4:8E:15:E4:76:A1:26:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4258bc9-24f2-3d35-a831-ef370d6a5da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:77:57:28:69:49:09:94:f1:34:4a:53:ce:48:9f:3b:ee:b1: ea:14:bd:31:80:0f:31:d4:16:f8:2a:8f:33:e6:e7:c7:91:f6: 1a:90:e2:4b:43:00:e8:df:ab:23:4b:ba:ab:bb:a8:f9:14:f2: 86:44:14:12:17:3e:73:ab:39:43:b4:62:eb:ec:e4:56:c2:16: 5b:9e:ab:1a:92:f1:a6:d0:fb:ea:0e:6c:9c:c7:5c:08:01:76: c6:d2:96:3f:cc:78:a3:2b:e8:fc:f8:56:31:e9:df:a0:9f:33: 1e:ec:99:72:0b:ae:ca:94:7f:bd:3a:e9:3d:5e:49:0e:c1:07: 8b:5c:7d:82:bc:fa:8b:63:0f:6f:a5:c2:3d:68:ce:36:20:c6: c7:9a:44:2c:db:c6:e3:74:71:84:9a:e2:88:59:f5:61:40:13: 50:3f:fb:5d:f7:ed:23:b0:9f:84:bb:e2:e3:07:5a:3d:6b:af: 74:8f:6f:fe:d6:39:cd:1b:45:fe:9e:4c:01:0b:a3:b7:4e:90: 31:de:93:1d:e3:4e:e7:76:fe:64:76:08:23:89:26:26:c7:38: b6:82:5f:3c:01:9e:01:ca:a6:78:31:46:3b:ff:33:95:74:6e: 31:80:d6:79:90:6e:a6:32:34:17:37:c9:6e:b6:7f:3b:d6:c5: 66:4f:79:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6l6RXwos5TsNtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YjY4YjYwMDgtZDUxZC00NzhkLTg2ZTEtNjA3N2E1MWE3N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlmeaKIdfqkivT/iDQsRGyo3l9Q2WlAYTQ8 FQ485vvC0CQoXmaV0grZ+kM8WE6fZS2CONUOoFfSxD6zTbxQT8difVoPPi/4CYLs /17VFkckWxv1Sb4+c/lTrK2LPpbcVfhq2VDUiAJPqQcW729HGG9iLY7n9BOaiq1A xPNSDSdviUndwChbDu2y1R9Qqth05bM6B9eVnERVVbPZcg3F6EDlpmRrrQzvrlHR gsNcEqtObf9CNwFNaky6VcwmJEByuJ2rHgs78zEVqXiRUNDJeaqcq6yxQ9ZbuVjr 9c8Iw7dI/zL0vBcGl/y0h8SvcRloRwWaiz8/yhjW5F2TxQc5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTc5i3I/z7JX1PFqrSOFeR2oSajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjQyNThiYzktMjRmMi0z ZDM1LWE4MzEtZWYzNzBkNmE1ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ3VyhpSQmU8TRKU85InzvuseoUvTGADzHUFvgqjzPm58eR9hqQ4ktD AOjfqyNLuqu7qPkU8oZEFBIXPnOrOUO0Yuvs5FbCFlueqxqS8abQ++oObJzHXAgB dsbSlj/MeKMr6Pz4VjHp36CfMx7smXILrsqUf7066T1eSQ7BB4tcfYK8+otjD2+l wj1ozjYgxseaRCzbxuN0cYSa4ohZ9WFAE1A/+1337SOwn4S74uMHWj1rr3SPb/7W Oc0bRf6eTAELo7dOkDHekx3jTud2/mR2CCOJJibHOLaCXzwBngHKpngxRjv/M5V0 bjGA1nmQbqYyNBc3yW62fzvWxWZPefo= -----END CERTIFICATE-----Generated at Tue Jun 17 09:17:49 2025 by rpki-client