$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa File: 1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa (raw, json) Hash identifier: v8qTN50K+rF/d3GYxZRzpFXRHZvb6MmJ54yDKwR3Tj4= Subject key identifier: 3D:62:B0:38:41:BF:14:32:F1:D2:E4:F3:AD:12:F7:4B:22:D2:B1:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96360F698539EBEFB7B98340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 68.9.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:0f:69:85:39:eb:ef:b7:b9:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=dc688b78-720a-4014-83c0-7f4fb60d1cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5b:a1:0f:23:7a:10:fe:e3:44:22:be:d7:3e: a8:46:c3:e3:93:72:a9:fd:d2:f4:cd:98:78:9b:58: ca:7d:83:bb:ad:24:77:44:1d:fe:f9:75:c4:41:91: 5e:cf:7b:39:60:ff:9f:33:a8:b0:97:98:ec:0c:fb: 49:47:0b:01:ed:06:a4:99:90:fb:fc:11:a5:1d:ef: 35:88:ba:82:33:f8:09:a0:8a:f3:3e:9b:c6:95:e8: e1:ce:a1:cc:74:1d:82:00:4b:b7:8b:17:22:3b:48: f2:c5:ad:d0:27:75:8c:ae:88:13:dd:ec:53:28:10: a2:62:b9:ad:1a:67:38:0b:7d:2f:92:38:b1:2d:4d: 68:04:bc:6c:66:59:f2:d1:ad:11:bf:da:25:8e:98: 23:46:d4:36:bb:e3:a1:cb:bb:4d:84:68:e7:7f:52: bc:cf:bb:29:0b:85:86:af:de:bf:7f:8b:f2:b6:14: 8e:11:35:d4:b8:6e:be:6c:4f:d8:3e:bf:a3:2e:b1: 10:f9:af:2e:86:13:67:36:cb:7b:5a:85:9e:cc:85: 5a:ca:33:1a:73:a6:70:67:23:26:69:b8:6d:de:95: a9:25:6a:a2:93:10:4c:c2:1c:53:72:da:cd:93:75: 0d:83:47:aa:c8:33:19:a6:31:a2:41:b4:75:67:0d: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:62:B0:38:41:BF:14:32:F1:D2:E4:F3:AD:12:F7:4B:22:D2:B1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f6:d4:19:6e:82:46:52:41:d6:98:88:de:ba:05:70:3e:2c: aa:ce:53:20:03:fe:58:28:58:9b:d9:3e:18:c3:78:48:39:ed: 6c:74:ad:67:0d:8a:06:53:28:84:ad:96:3b:16:11:f4:e3:66: 58:7f:80:9c:b7:69:b8:9b:d8:bf:ea:19:70:95:7f:3f:bd:12: 99:27:c1:dd:de:da:08:ee:b0:1c:15:8f:94:c3:3d:9b:fc:23: d3:a3:cd:95:b5:0b:06:e1:ad:c9:e9:45:d3:ac:99:66:ca:d7: 8e:9d:e7:58:b2:64:57:b1:00:31:59:6d:95:da:40:b3:ba:6d: 27:b8:fb:14:96:df:8c:07:a1:41:3a:ce:9b:df:f5:1d:19:eb: 17:d0:34:f3:86:24:1c:86:9d:69:cd:a1:23:72:19:f6:d7:33: 9c:78:bf:d6:8d:a1:b2:9c:a3:3b:2b:d0:51:20:c2:e4:74:40: 30:be:bf:f9:3a:e6:45:4f:68:66:67:d2:68:9a:2a:0c:ef:62: f9:c5:5c:5c:04:e4:c6:3f:4d:b2:05:c4:fb:67:09:db:e7:61: d9:b7:e0:84:7b:10:0f:3d:ec:89:d0:28:fe:a9:26:6d:e3:90: bb:c4:db:da:d0:e5:2e:8a:ad:8d:fb:2c:9d:70:3e:2f:9c:ea: 24:6b:e1:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNg9phTnr77e5g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZGM2ODhiNzgtNzIwYS00MDE0LTgzYzAtN2Y0ZmI2MGQxY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFuhDyN6EP7jRCK+1z6oRsPjk3Kp/dL0zZh4 m1jKfYO7rSR3RB3++XXEQZFez3s5YP+fM6iwl5jsDPtJRwsB7QakmZD7/BGlHe81 iLqCM/gJoIrzPpvGlejhzqHMdB2CAEu3ixciO0jyxa3QJ3WMrogT3exTKBCiYrmt Gmc4C30vkjixLU1oBLxsZlny0a0Rv9oljpgjRtQ2u+Ohy7tNhGjnf1K8z7spC4WG r96/f4vythSOETXUuG6+bE/YPr+jLrEQ+a8uhhNnNst7WoWezIVayjMac6ZwZyMm abht3pWpJWqikxBMwhxTctrNk3UNg0eqyDMZpjGiQbR1Zw3+VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1isDhBvxQy8dLk860S90si0rFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWZmNGExMWUtMjk4NS0z MDJmLTlkOTktN2E5ZmQ0Yjc1Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD721BlugkZSQdaYiN66BXA+LKrOUyAD/lgoWJvZPhjDeEg57Wx0rWcN igZTKIStljsWEfTjZlh/gJy3abib2L/qGXCVfz+9Epknwd3e2gjusBwVj5TDPZv8 I9OjzZW1CwbhrcnpRdOsmWbK146d51iyZFexADFZbZXaQLO6bSe4+xSW34wHoUE6 zpvf9R0Z6xfQNPOGJByGnWnNoSNyGfbXM5x4v9aNobKcozsr0FEgwuR0QDC+v/k6 5kVPaGZn0miaKgzvYvnFXFwE5MY/TbIFxPtnCdvnYdm34IR7EA897InQKP6pJm3j kLvE29rQ5S6KrY37LJ1wPi+c6iRr4Q8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:40 2025 by rpki-client