$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa File: 1b38c72c-4949-3da0-8260-972471400b8e.roa (raw, json) Hash identifier: glHtWussd7MkMNCbJpuC/25qWAD58xFekwcBa6snYDg= Subject key identifier: C9:0A:B7:1B:EC:09:A4:79:79:96:54:6C:83:FA:BF:F2:24:BF:F7:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C101DA7731353CAEFA4FA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa Signing time: Wed 18 Jun 2025 18:01:44 +0000 ROA not before: Wed 18 Jun 2025 18:01:44 +0000 ROA not after: Tue 16 Sep 2025 18:01:44 +0000 asID: 22773 IP address blocks: 68.3.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:1d:a7:73:13:53:ca:ef:a4:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:44 2025 GMT Not After : Sep 16 18:01:44 2025 GMT Subject: CN=9db5f286-9b23-413d-98d1-b81ad8aab95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:09:4b:d8:94:20:c5:5a:1e:0f:cf:11:d3: 59:d1:81:3b:69:45:fd:4b:37:0d:85:e3:21:9d:aa: 09:5f:8a:fa:42:0b:2a:20:aa:ea:9f:19:62:da:83: 1b:fc:b1:83:01:8a:79:71:f8:4c:62:60:91:58:3d: 6a:91:46:92:c6:5f:4e:24:5b:0c:8b:57:92:69:7c: 8b:5c:97:f1:db:8a:e4:d7:27:1f:5f:2a:9a:3c:bc: 00:ad:d7:c1:67:af:b7:c3:6b:0f:1d:f0:31:5e:f9: e8:06:8e:b4:a1:3b:1a:75:70:21:51:a9:c2:11:fa: 12:84:4b:e3:88:30:cd:95:bb:ef:4e:98:a4:72:7e: fb:7d:42:1b:8b:96:f4:fb:4a:f8:74:1e:c8:92:e6: d5:29:a7:69:ef:d3:dd:97:5d:bd:ad:e1:17:15:68: 7a:87:e6:f1:ad:fe:00:4f:47:73:b4:17:1e:a5:e4: 81:7a:3d:3b:27:02:62:9b:67:c2:90:44:bc:71:b7: e0:96:ac:a3:77:5a:9b:93:7f:f0:bf:c4:62:0f:59: a2:05:06:4a:24:b4:5a:b5:5f:88:b4:26:c0:39:33: a3:79:bd:54:35:42:63:b2:a6:9d:7c:44:ed:22:ff: 4c:09:7d:05:e9:75:a2:18:f3:79:89:bd:f8:ef:50: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:B7:1B:EC:09:A4:79:79:96:54:6C:83:FA:BF:F2:24:BF:F7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b38c72c-4949-3da0-8260-972471400b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:80:61:07:a0:cd:d1:9a:04:8e:49:1f:bf:7b:d2:12:9b:3a: 09:13:0b:67:c9:31:ed:0f:b3:99:4d:6a:99:88:32:ca:3e:04: ed:c3:7b:4f:a8:16:6c:7c:20:08:48:a6:2d:3b:0c:6a:b4:36: 69:f4:d8:b9:01:9e:a8:cf:1e:a3:93:dc:42:20:b1:e7:c5:cf: b4:14:f6:0d:56:b8:e7:3f:f6:29:1d:bd:c0:a8:91:82:7b:d1: 65:80:2f:09:86:49:5c:38:93:37:d6:de:d9:d4:af:8f:9d:98: 72:4b:2f:f8:4c:b7:27:2e:75:ff:b0:0b:00:89:ef:d3:f0:e2: 14:02:54:2d:38:3b:04:d6:1b:76:24:b6:b6:81:dd:d4:16:44: 0f:65:49:be:bf:c6:df:87:b4:76:14:9c:8f:6f:41:38:22:f2: a6:21:a7:87:c1:e4:11:74:62:63:7b:f2:cc:59:12:6f:15:ce: 11:05:b4:1d:92:a7:c2:21:b1:3a:3d:be:f1:98:42:5d:c1:76: 44:50:06:a4:7a:9a:43:57:0d:b2:ed:09:71:64:f9:6d:8c:db: 3d:57:9c:c6:3f:aa:dc:cf:c6:75:54:43:12:cb:6b:2c:06:fa: 17:43:11:2b:af:6e:f5:b5:fc:62:78:36:d1:fb:e0:a1:43:a4: 5e:bc:69:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EB2ncxNTyu+k+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE0NFoXDTI1MDkxNjE4MDE0NFowLzEtMCsGA1UEAxMk OWRiNWYyODYtOWIyMy00MTNkLTk4ZDEtYjgxYWQ4YWFiOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wJS9iUIMVaHg/PEdNZ0YE7aUX9SzcNheMh naoJX4r6QgsqIKrqnxli2oMb/LGDAYp5cfhMYmCRWD1qkUaSxl9OJFsMi1eSaXyL XJfx24rk1ycfXyqaPLwArdfBZ6+3w2sPHfAxXvnoBo60oTsadXAhUanCEfoShEvj iDDNlbvvTpikcn77fUIbi5b0+0r4dB7IkubVKadp79Pdl129reEXFWh6h+bxrf4A T0dztBcepeSBej07JwJim2fCkES8cbfglqyjd1qbk3/wv8RiD1miBQZKJLRatV+I tCbAOTOjeb1UNUJjsqadfETtIv9MCX0F6XWiGPN5ib3471AkTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkKtxvsCaR5eZZUbIP6v/Ikv/c1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWIzOGM3MmMtNDk0OS0z ZGEwLTgyNjAtOTcyNDcxNDAwYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRANIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqAYQegzdGaBI5JH7970hKbOgkTC2fJMe0Ps5lNapmIMso+BO3De0+o Fmx8IAhIpi07DGq0Nmn02LkBnqjPHqOT3EIgsefFz7QU9g1WuOc/9ikdvcCokYJ7 0WWALwmGSVw4kzfW3tnUr4+dmHJLL/hMtycudf+wCwCJ79Pw4hQCVC04OwTWG3Yk traB3dQWRA9lSb6/xt+HtHYUnI9vQTgi8qYhp4fB5BF0YmN78sxZEm8VzhEFtB2S p8IhsTo9vvGYQl3BdkRQBqR6mkNXDbLtCXFk+W2M2z1XnMY/qtzPxnVUQxLLaywG +hdDESuvbvW1/GJ4NtH74KFDpF68aX8= -----END CERTIFICATE-----Generated at Tue Jul 1 22:34:33 2025 by rpki-client