$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa File: 28f48885-1529-3cc6-99f5-c11c8192cce8.roa (raw, json) Hash identifier: M7TbrGnUs0IJT9c6p9OhsHUgJ7gl7yPNy4y74bklI3w= Subject key identifier: 21:70:85:7D:86:6A:19:6A:87:FC:77:41:5E:79:AA:4D:E8:B8:7D:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA661D596839390A4C9A700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 68.230.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:61:d5:96:83:93:90:a4:c9:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=47e97234-182a-45c6-baef-886e635b6f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:98:4b:63:dd:a8:db:fa:72:57:44:6a:50:15: ab:b7:0a:45:90:92:ba:c0:46:52:2b:74:26:a0:67: 90:c0:10:c1:eb:af:bb:0d:65:b7:19:8c:df:e3:2f: c8:fa:c9:fc:40:fd:d8:f6:51:93:59:56:61:a3:31: 7c:55:28:6b:d4:b9:9a:d8:1b:3b:4e:c5:47:77:21: 40:89:45:38:11:5a:5d:1f:25:d7:03:9d:e4:32:5d: 03:88:d1:ab:b3:e9:16:44:d4:a1:9a:73:41:cd:46: bd:3b:97:4f:c7:0a:f9:42:7c:e0:6f:5b:9c:b3:e7: 3c:f9:b0:d5:61:c0:1e:49:3e:74:07:b7:53:7d:e9: e2:30:3b:2d:e0:68:e1:21:ac:03:5a:63:1e:99:50: 6e:9e:df:16:b4:3f:5f:cc:27:58:51:ef:21:68:c1: 70:78:45:bb:6c:b7:a3:ab:3d:75:7a:7a:7f:4e:9b: 60:f4:a5:38:47:d3:d2:8f:d3:69:ab:a5:82:51:e8: ce:98:c3:bb:0a:57:91:57:96:ef:e2:3f:95:26:fe: 7b:4c:8f:1f:b7:26:de:a3:9d:85:20:dd:56:51:5e: cc:6c:d8:89:ff:26:e6:a6:f5:5f:95:e5:ea:51:a6: 34:dd:22:bf:cc:8e:21:17:18:b6:33:6f:3f:7e:51: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:85:7D:86:6A:19:6A:87:FC:77:41:5E:79:AA:4D:E8:B8:7D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:00:b2:1c:fe:11:84:76:ff:5a:c5:c4:ac:47:6e:6a:81:71: 2f:2c:90:89:cc:86:58:87:ef:d8:b5:d5:3a:01:a4:97:1d:7c: d1:35:89:bd:0c:f1:1d:24:69:88:47:a7:16:07:e4:46:78:25: b8:66:43:e3:0e:c5:e3:b4:72:5a:18:db:a7:dd:41:66:13:87: 1a:4b:83:36:54:81:79:61:bd:6f:d0:d9:7b:66:be:ec:9d:5a: 1a:c4:9a:a7:fc:19:93:b7:69:4a:e3:a7:fd:2b:a1:7a:56:fe: 10:b1:f8:62:98:c2:74:88:da:16:b5:04:f4:f3:cf:8d:bd:ef: bd:44:af:d3:82:0e:14:39:ff:e4:b8:04:90:be:ab:af:30:a5: 72:4f:3c:14:06:1a:0a:8c:75:40:22:55:e8:4e:f8:6d:89:86: d1:c4:fd:9a:8e:76:d1:a5:fb:2a:34:03:7a:7e:0c:56:27:65: 7d:31:df:41:6f:7d:43:fd:1b:19:29:ba:8e:b3:8c:c6:bb:1a: 3f:82:42:34:8f:0b:67:67:de:ac:1b:d7:26:3f:30:d1:51:e7: 2d:b6:ba:f3:21:88:bb:2e:2a:3b:9c:d0:bc:ea:02:6a:c2:28: 73:3c:57:bb:58:d7:6c:da:00:a4:69:65:cb:d6:80:ac:63:ca: 00:c3:1e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmHVloOTkKTJpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NDdlOTcyMzQtMTgyYS00NWM2LWJhZWYtODg2ZTYzNWI2ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2phLY92o2/pyV0RqUBWrtwpFkJK6wEZSK3Qm oGeQwBDB66+7DWW3GYzf4y/I+sn8QP3Y9lGTWVZhozF8VShr1Lma2Bs7TsVHdyFA iUU4EVpdHyXXA53kMl0DiNGrs+kWRNShmnNBzUa9O5dPxwr5Qnzgb1ucs+c8+bDV YcAeST50B7dTfeniMDst4GjhIawDWmMemVBunt8WtD9fzCdYUe8haMFweEW7bLej qz11enp/Tptg9KU4R9PSj9Npq6WCUejOmMO7CleRV5bv4j+VJv57TI8ftybeo52F IN1WUV7MbNiJ/ybmpvVfleXqUaY03SK/zI4hFxi2M28/flGc5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFwhX2Gahlqh/x3QV55qk3ouH0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmNDg4ODUtMTUyOS0z Y2M2LTk5ZjUtYzExYzgxOTJjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsAshz+EYR2/1rFxKxHbmqBcS8skInMhliH79i11ToBpJcdfNE1ib0M 8R0kaYhHpxYH5EZ4JbhmQ+MOxeO0cloY26fdQWYThxpLgzZUgXlhvW/Q2Xtmvuyd WhrEmqf8GZO3aUrjp/0roXpW/hCx+GKYwnSI2ha1BPTzz429771Er9OCDhQ5/+S4 BJC+q68wpXJPPBQGGgqMdUAiVehO+G2JhtHE/ZqOdtGl+yo0A3p+DFYnZX0x30Fv fUP9Gxkpuo6zjMa7Gj+CQjSPC2dn3qwb1yY/MNFR5y22uvMhiLsuKjuc0LzqAmrC KHM8V7tY12zaAKRpZcvWgKxjygDDHo4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:48 2025 by rpki-client