$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d06ec31-25d1-307d-bc82-24ebebfd3ca9.roa File: 0d06ec31-25d1-307d-bc82-24ebebfd3ca9.roa (raw, json) Hash identifier: n8h9I0riehcbtfA2K2Or7XjYm1C89e6WixsGE1Mtle0= Subject key identifier: 98:B9:9E:57:9E:5A:92:C4:C8:1D:2D:C9:BC:F8:97:68:9B:75:9F:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA3309CB26A51185C7EC60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d06ec31-25d1-307d-bc82-24ebebfd3ca9.roa Signing time: Fri 20 Jun 2025 09:35:26 +0000 ROA not before: Fri 20 Jun 2025 09:35:26 +0000 ROA not after: Thu 18 Sep 2025 09:35:26 +0000 asID: 22773 IP address blocks: 174.68.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:33:09:cb:26:a5:11:85:c7:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:26 2025 GMT Not After : Sep 18 09:35:26 2025 GMT Subject: CN=0c05b68d-4370-4cfd-a6b5-b166af2dbdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:4a:dd:be:c7:66:03:47:ae:21:e8:17:97: fc:6a:37:f1:f2:07:1b:8b:3e:5a:1e:63:fa:8c:50: 21:3b:0e:9d:23:89:24:86:0d:1a:b0:84:bd:eb:b3: 63:e3:16:48:dd:21:1c:b2:48:86:4c:fb:89:3f:28: 0d:47:00:72:68:a6:c3:cd:93:75:76:21:f4:df:53: c1:c2:14:8f:bd:74:14:db:02:54:e5:09:1c:79:75: a9:c1:0d:9c:b7:ac:bd:f7:94:e8:b3:9b:c7:32:63: 68:f4:bc:eb:2d:52:3f:09:eb:b8:6c:3a:ac:e3:54: 40:4d:96:22:65:bd:d1:36:27:9f:0c:d3:9d:2b:84: 07:97:a8:b7:02:e7:7a:3e:9b:f9:23:cb:1c:78:59: 45:e0:f7:bb:82:10:82:82:9b:67:70:b4:e3:46:12: 42:43:a3:a5:aa:bc:8b:65:54:98:da:fb:ff:72:ff: 2b:af:c3:02:41:c4:8d:c0:d2:13:7f:87:f8:28:11: 45:05:6a:6f:4c:32:48:11:0c:f1:b6:73:9e:92:80: 4b:50:3f:4a:aa:68:45:0a:bb:a5:f0:ae:cb:0a:93: 7a:87:4a:36:b4:99:ba:6e:eb:c0:e9:4f:f0:06:cb: 4a:25:cc:06:d2:5f:1d:24:4f:f3:e0:a2:a4:88:94: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B9:9E:57:9E:5A:92:C4:C8:1D:2D:C9:BC:F8:97:68:9B:75:9F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d06ec31-25d1-307d-bc82-24ebebfd3ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ff:ef:11:00:70:28:86:0f:6f:d0:83:c7:07:5f:5a:07:8a: 06:cb:8a:35:b5:be:93:c2:85:1d:1d:b6:86:e9:44:6b:de:40: 80:66:66:30:5d:6b:8d:91:87:84:24:f2:4d:a5:d5:11:00:e9: 43:7e:1f:e7:be:f0:55:c7:07:62:48:63:b4:e2:85:b7:23:75: c9:69:e4:2e:22:9c:2b:88:9d:b1:fd:60:8c:ce:4e:d6:67:da: e8:34:e9:01:b8:34:94:a6:27:67:94:f7:36:b0:6b:7d:db:ec: c1:56:65:9c:8e:6c:32:f2:90:94:fc:21:84:23:db:61:ec:4c: 2f:40:fc:20:87:71:17:16:a6:63:12:b8:e2:be:7c:09:2b:1e: e0:64:87:5f:63:60:89:34:cc:15:5c:b4:17:b3:8c:07:13:71: 37:a1:ca:7a:27:49:c6:6b:e1:96:63:29:38:ea:01:a7:5a:b0: c4:86:fd:be:3a:ed:ad:b3:49:47:12:38:8b:71:ce:1d:be:5d: dd:c9:ae:ab:10:e0:57:21:f1:aa:83:be:55:71:f0:47:c0:2e: 0e:5c:a2:71:93:18:0c:1e:69:76:34:5f:61:ea:8f:6b:0a:aa: 8f:41:2d:4d:84:61:c5:73:28:4d:12:74:c3:ce:ba:bd:6e:70: 03:64:5b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqjMJyyalEYXH7GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUyNloXDTI1MDkxODA5MzUyNlowLzEtMCsGA1UEAxMk MGMwNWI2OGQtNDM3MC00Y2ZkLWE2YjUtYjE2NmFmMmRiZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwpK3b7HZgNHriHoF5f8ajfx8gcbiz5aHmP6 jFAhOw6dI4kkhg0asIS967Nj4xZI3SEcskiGTPuJPygNRwByaKbDzZN1diH031PB whSPvXQU2wJU5QkceXWpwQ2ct6y995Tos5vHMmNo9LzrLVI/Ceu4bDqs41RATZYi Zb3RNiefDNOdK4QHl6i3Aud6Ppv5I8sceFlF4Pe7ghCCgptncLTjRhJCQ6OlqryL ZVSY2vv/cv8rr8MCQcSNwNITf4f4KBFFBWpvTDJIEQzxtnOekoBLUD9KqmhFCrul 8K7LCpN6h0o2tJm6buvA6U/wBstKJcwG0l8dJE/z4KKkiJSd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi5nleeWpLEyB0tybz4l2ibdZ/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQwNmVjMzEtMjVkMS0z MDdkLWJjODItMjRlYmViZmQzY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkSqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn/7xEAcCiGD2/Qg8cHX1oHigbLijW1vpPChR0dtobpRGveQIBmZjBd a42Rh4Qk8k2l1REA6UN+H+e+8FXHB2JIY7Tihbcjdclp5C4inCuInbH9YIzOTtZn 2ug06QG4NJSmJ2eU9zawa33b7MFWZZyObDLykJT8IYQj22HsTC9A/CCHcRcWpmMS uOK+fAkrHuBkh19jYIk0zBVctBezjAcTcTehynonScZr4ZZjKTjqAadasMSG/b46 7a2zSUcSOItxzh2+Xd3JrqsQ4Fch8aqDvlVx8EfALg5conGTGAweaXY0X2Hqj2sK qo9BLU2EYcVzKE0SdMPOur1ucANkW+M= -----END CERTIFICATE-----Generated at Tue Jul 1 21:04:00 2025 by rpki-client