$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23f4cd3a-33d7-374f-ba0a-1c7a8f0df1fc.roa File: 23f4cd3a-33d7-374f-ba0a-1c7a8f0df1fc.roa (raw, json) Hash identifier: 7J2laAZtcxaohJ/ZRy8zVnau9HULI27/MfJXkatvecs= Subject key identifier: 85:25:8E:4F:86:A5:C6:6F:F4:3B:8C:FE:25:35:6B:74:D4:F7:58:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD68475CC70F737B774E600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23f4cd3a-33d7-374f-ba0a-1c7a8f0df1fc.roa Signing time: Thu 19 Jun 2025 09:17:18 +0000 ROA not before: Thu 19 Jun 2025 09:17:18 +0000 ROA not after: Wed 17 Sep 2025 09:17:18 +0000 asID: 22773 IP address blocks: 68.228.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d6:84:75:cc:70:f7:37:b7:74:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:17:18 2025 GMT Not After : Sep 17 09:17:18 2025 GMT Subject: CN=34c566c0-76e5-42a4-b502-1d0f69a57599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:90:e3:29:36:e2:db:33:e7:28:6b:c1:7f: cc:9b:59:cf:37:9a:5e:a6:97:aa:15:d2:94:a8:cc: 55:13:83:d1:49:96:a7:62:fd:44:e5:d1:69:61:02: c9:ca:91:77:cb:a1:cf:f0:28:37:83:29:a5:17:a9: 2b:83:e6:64:c9:57:57:31:35:2b:34:32:4c:aa:4c: be:8b:39:6c:96:dd:a4:53:91:1e:88:65:8b:34:01: 99:96:1a:88:a2:39:4c:f2:14:16:43:b5:21:75:86: ad:43:f5:52:7d:1d:8c:01:6d:12:2c:79:69:39:8a: 97:49:40:90:68:08:a4:0e:97:42:03:f8:a1:37:bf: 11:b0:af:13:21:a2:37:84:f4:bf:43:48:ce:b9:e8: 77:27:91:ec:bf:74:7b:e9:39:27:50:32:f2:76:0b: 62:bb:b0:a0:87:e1:1d:9f:d6:b7:73:54:99:ca:bf: e4:92:d8:f0:60:a2:5a:fb:18:0e:87:90:f3:ee:eb: df:fb:cf:e9:61:da:3b:57:3d:f2:41:96:4d:7b:bd: c6:8b:e3:1a:fb:67:f3:d7:4b:bb:b6:09:24:2f:0c: 4a:49:a3:50:74:f0:04:36:cf:99:c3:b8:21:60:c6: 0f:8e:c9:52:a9:a8:14:ea:e1:43:20:34:a5:a0:ff: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:8E:4F:86:A5:C6:6F:F4:3B:8C:FE:25:35:6B:74:D4:F7:58:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23f4cd3a-33d7-374f-ba0a-1c7a8f0df1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:71:c6:0b:1b:b6:53:f9:ef:97:55:eb:48:6d:2e:81:ab:21: e2:07:9a:16:22:30:4c:28:9d:8e:5d:ca:c7:70:6c:a5:ea:4b: 21:bb:6e:e1:36:e5:92:e7:8f:7e:27:7f:04:8e:58:b2:89:f0: 90:0d:bc:57:c5:94:85:61:e8:49:c1:80:9b:b8:49:d1:e5:76: f3:b2:bb:d7:a6:2f:40:19:a8:9a:69:91:09:14:d7:96:92:3c: 03:30:51:97:29:7d:63:5b:35:ed:50:d8:65:3d:9c:8b:d0:e5: e1:fd:5c:70:d5:83:89:59:8c:6b:85:88:5f:bb:c8:07:2d:5c: fb:28:95:f0:13:5c:37:37:53:12:97:5f:39:f6:15:70:da:b8: 0b:54:46:0e:c2:b2:0a:4f:fc:e6:11:79:d3:51:42:56:04:f1: 79:90:3b:5b:0b:25:51:e6:a3:b5:87:00:21:77:ee:4a:5b:b3: 10:ac:29:ab:7c:15:1b:e3:e8:5f:27:29:d1:3f:fa:91:c2:61: 06:10:ce:54:4b:86:8c:bd:da:b4:ca:a0:4a:62:87:d2:a9:83: 4e:73:86:45:a5:0c:43:b4:52:d6:8a:4b:5d:58:43:9b:df:55: 41:d5:3a:ea:0f:03:c4:c8:be:6a:fe:1b:29:07:f7:65:da:15: a5:f7:d0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91oR1zHD3N7d05gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTcxOFoXDTI1MDkxNzA5MTcxOFowLzEtMCsGA1UEAxMk MzRjNTY2YzAtNzZlNS00MmE0LWI1MDItMWQwZjY5YTU3NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXqQ4yk24tsz5yhrwX/Mm1nPN5peppeqFdKU qMxVE4PRSZanYv1E5dFpYQLJypF3y6HP8Cg3gymlF6krg+ZkyVdXMTUrNDJMqky+ izlslt2kU5EeiGWLNAGZlhqIojlM8hQWQ7UhdYatQ/VSfR2MAW0SLHlpOYqXSUCQ aAikDpdCA/ihN78RsK8TIaI3hPS/Q0jOueh3J5Hsv3R76TknUDLydgtiu7Cgh+Ed n9a3c1SZyr/kktjwYKJa+xgOh5Dz7uvf+8/pYdo7Vz3yQZZNe73Gi+Ma+2fz10u7 tgkkLwxKSaNQdPAENs+Zw7ghYMYPjslSqagU6uFDIDSloP83+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUljk+GpcZv9DuM/iU1a3TU91jMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNmNGNkM2EtMzNkNy0z NzRmLWJhMGEtMWM3YThmMGRmMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROTOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFxxgsbtlP575dV60htLoGrIeIHmhYiMEwonY5dysdwbKXqSyG7buE2 5ZLnj34nfwSOWLKJ8JANvFfFlIVh6EnBgJu4SdHldvOyu9emL0AZqJppkQkU15aS PAMwUZcpfWNbNe1Q2GU9nIvQ5eH9XHDVg4lZjGuFiF+7yActXPsolfATXDc3UxKX Xzn2FXDauAtURg7CsgpP/OYRedNRQlYE8XmQO1sLJVHmo7WHACF37kpbsxCsKat8 FRvj6F8nKdE/+pHCYQYQzlRLhoy92rTKoEpih9Kpg05zhkWlDEO0UtaKS11YQ5vf VUHVOuoPA8TIvmr+GykH92XaFaX30HA= -----END CERTIFICATE-----Generated at Tue Jul 1 00:29:37 2025 by rpki-client