$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa File: 7b652754-9f57-3773-9a15-03fc0f21b9a4.roa (raw, json) Hash identifier: EWEBzbwHW2Ch97GeN7f3lQpyw1PKITpsR0Rbe97kvvs= Subject key identifier: F3:9C:2A:10:AE:CF:CB:99:99:C8:8F:80:A0:6A:BE:93:F4:DD:54:3B Certificate issuer: /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Certificate serial: 010D0C9F4328584A07D537A10A72382B07A09230 Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 204.90.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:37:a1:0a:72:38:2b:07:a0:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2370d91c-db8c-4f2e-a226-c39d5e548b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:77:84:54:64:16:00:0c:08:38:43:4f:85: 41:e5:ef:cf:9f:a4:2e:83:3a:21:59:9c:02:59:f9: 19:9b:61:41:6c:f0:eb:c7:af:f8:7b:14:67:58:3c: 29:61:7b:d5:74:dc:85:9e:07:b1:23:9f:f7:94:76: 2d:c2:e7:88:de:d6:5a:3a:9d:8b:f1:7d:a0:1f:85: 34:7a:c3:bd:a7:b2:21:bc:71:94:4f:eb:93:a1:54: e6:fb:96:e1:26:eb:83:b8:f0:d3:4a:8a:80:74:10: 99:a6:dd:04:28:ef:7a:88:b1:1d:71:7e:f0:8e:c4: f8:3e:cb:fb:29:f3:e2:f5:fe:ec:81:99:89:05:85: 70:20:ce:a9:fe:11:d1:dc:38:d0:e9:6a:c1:ea:b9: ce:dc:a5:52:5f:e8:5a:ec:ed:16:5c:b4:90:1d:27: 43:98:69:28:3b:0a:d0:77:eb:50:03:9d:93:b7:a2: 49:5d:af:75:0c:43:07:e0:2c:6c:22:66:b6:22:b4: 4a:cc:aa:81:3f:96:9c:83:87:c7:1d:f6:6b:81:54: d4:bc:88:c3:aa:c7:58:92:15:27:f3:7b:2c:eb:9e: df:d2:7d:b2:3d:53:37:64:bd:99:df:08:ee:a7:d3: 6a:46:8d:a7:fa:54:87:7a:18:f5:8b:18:e8:7c:a2: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:2A:10:AE:CF:CB:99:99:C8:8F:80:A0:6A:BE:93:F4:DD:54:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/7b652754-9f57-3773-9a15-03fc0f21b9a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl X509v3 Authority Key Identifier: keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer sbgp-ipAddrBlock: critical IPv4: 204.90.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e6:bc:38:e8:42:9f:86:d8:c7:e3:e6:61:9a:26:f9:9d:7c: 1d:1b:11:9c:0c:44:63:91:c7:57:5f:64:13:4f:70:c9:24:51: 53:63:14:b1:30:22:40:23:22:5e:03:e9:01:63:2e:51:6d:2a: 94:8b:b5:2d:f0:f5:7d:5c:96:4c:35:5b:98:4a:65:17:9f:96: 5c:39:1d:6f:ec:29:4a:b6:93:f2:57:7d:5f:be:f6:d0:1f:a2: ab:d7:3f:67:43:a2:b1:27:5b:9f:67:e6:c3:dd:41:eb:35:63: 19:8f:48:18:4a:cc:9c:d8:73:e6:d8:fc:64:6c:e7:c1:e0:51: ae:c6:78:51:10:0e:22:6d:73:ba:5b:b9:3c:e1:62:74:1a:73: e2:a0:dc:aa:6c:42:f7:db:f1:43:48:62:34:d2:d7:94:64:c2: 29:5e:20:98:bf:49:35:de:f3:f9:3a:cb:80:e6:c6:78:b0:19: df:c4:3e:1d:ff:d9:99:43:99:b5:d6:84:50:e1:d1:77:59:9c: ff:79:64:42:ed:f9:7f:ea:98:33:92:b1:59:a1:5b:86:d9:ec: 78:09:a5:ec:81:dd:22:85:ff:05:ad:2c:81:7c:1f:71:cf:fd: b2:fe:03:9a:fa:a9:cc:48:56:ed:02:65:4d:6e:08:01:b5:6b: 5f:e9:a0:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TehCnI4KwegkjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM5MGNhOWUtNjQxMi00YmQ2LTg2MjEtZWVhZjQ0OTMw YjFmMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MjM3MGQ5MWMtZGI4Yy00ZjJlLWEyMjYtYzM5ZDVlNTQ4YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih53hFRkFgAMCDhDT4VB5e/Pn6QugzohWZwC WfkZm2FBbPDrx6/4exRnWDwpYXvVdNyFngexI5/3lHYtwueI3tZaOp2L8X2gH4U0 esO9p7IhvHGUT+uToVTm+5bhJuuDuPDTSoqAdBCZpt0EKO96iLEdcX7wjsT4Psv7 KfPi9f7sgZmJBYVwIM6p/hHR3DjQ6WrB6rnO3KVSX+ha7O0WXLSQHSdDmGkoOwrQ d+tQA52Tt6JJXa91DEMH4CxsIma2IrRKzKqBP5acg4fHHfZrgVTUvIjDqsdYkhUn 83ss657f0n2yPVM3ZL2Z3wjup9NqRo2n+lSHehj1ixjofKJbXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOcKhCuz8uZmciPgKBqvpP03VQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkw Y2E5ZS02NDEyLTRiZDYtODYyMS1lZWFmNDQ5MzBiMWYvN2I2NTI3NTQtOWY1Ny0z NzczLTlhMTUtMDNmYzBmMjFiOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmM5MGNhOWUtNjQxMi00YmQ2LTg2 MjEtZWVhZjQ0OTMwYjFmL2JjOTBjYTllLTY0MTItNGJkNi04NjIxLWVlYWY0NDkz MGIxZi5jcmwwHwYDVR0jBBgwFoAUZ1ggbyYWDhdeFkLwk/8nyE63iWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYzkwY2E5ZS02NDEyLTRiZDYtODYyMS1lZWFm NDQ5MzBiMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFpcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETmvDjoQp+G2Mfj5mGaJvmdfB0bEZwMRGORx1dfZBNPcMkkUVNjFLEw IkAjIl4D6QFjLlFtKpSLtS3w9X1clkw1W5hKZRefllw5HW/sKUq2k/JXfV++9tAf oqvXP2dDorEnW59n5sPdQes1YxmPSBhKzJzYc+bY/GRs58HgUa7GeFEQDiJtc7pb uTzhYnQac+Kg3KpsQvfb8UNIYjTS15RkwileIJi/STXe8/k6y4DmxniwGd/EPh3/ 2ZlDmbXWhFDh0XdZnP95ZELt+X/qmDOSsVmhW4bZ7HgJpeyB3SKF/wWtLIF8H3HP /bL+A5r6qcxIVu0CZU1uCAG1a1/poCY= -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:06 2025 by rpki-client