$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d21a1a-24e5-3122-8cfa-a7e9b5d0c8ca.roa File: 29d21a1a-24e5-3122-8cfa-a7e9b5d0c8ca.roa (raw, json) Hash identifier: hTMwa/Oc1wrT4TjhYyrVOfDYWqpwfyqmdmlmXFslGso= Subject key identifier: 0E:05:58:30:1F:B9:65:F8:BF:3E:B7:31:D2:53:11:CC:2E:14:8F:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10AD03AB46CFD4D8854180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d21a1a-24e5-3122-8cfa-a7e9b5d0c8ca.roa Signing time: Wed 18 Jun 2025 18:02:52 +0000 ROA not before: Wed 18 Jun 2025 18:02:52 +0000 ROA not after: Tue 16 Sep 2025 18:02:52 +0000 asID: 22773 IP address blocks: 68.99.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:ad:03:ab:46:cf:d4:d8:85:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:52 2025 GMT Not After : Sep 16 18:02:52 2025 GMT Subject: CN=b668f2e3-d1ae-4405-8b22-720d652c27ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:93:59:3d:cd:2b:bf:cd:ff:2d:62:52:c4: 57:5c:a9:bb:c1:6e:4d:f1:ad:b2:0a:f3:97:3e:35: c7:ab:e7:04:48:73:31:87:ec:aa:fc:b1:3b:e4:90: d9:44:7b:a2:51:03:1b:3e:4e:3f:4f:7e:2d:c0:c6: 66:55:4b:68:0a:6a:e6:6e:eb:8b:30:29:d1:45:af: a5:a5:d9:3d:e7:73:aa:13:ce:ed:08:5c:30:ca:f6: 24:ba:f3:fe:db:27:78:ab:ec:73:5e:d8:7f:89:ed: c1:8d:71:a5:3e:29:9a:99:bb:70:80:07:46:a5:f1: 3d:fd:af:b4:15:6f:ee:66:03:a9:5e:e1:4c:4b:a7: 8c:bb:72:ad:f4:e4:bb:de:61:61:71:82:d1:32:32: f6:a7:1f:bb:ae:46:59:5a:e5:38:84:d1:64:1c:a6: c1:92:0e:25:7a:4c:5e:07:02:76:5d:a8:16:b3:a8: b2:83:21:60:1f:00:cb:a1:bb:fc:9e:7c:d5:1d:b3: b4:f2:ed:3d:52:93:56:e5:dd:7b:c7:9e:3c:54:61: 5f:dc:5c:fa:b4:c2:81:b9:b6:d5:98:9d:e7:24:f8: 23:4b:77:4e:fb:b3:57:01:1d:29:19:cf:37:93:70: c4:71:4c:36:45:83:a4:01:bc:7a:e9:9a:22:66:8e: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:58:30:1F:B9:65:F8:BF:3E:B7:31:D2:53:11:CC:2E:14:8F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d21a1a-24e5-3122-8cfa-a7e9b5d0c8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ae:ef:fb:a2:c6:84:4f:16:61:99:1f:50:55:0c:8e:93:ab: 7c:72:97:f1:14:05:3a:b2:39:83:4f:b4:99:92:00:db:85:27: 5b:89:0f:43:8d:6e:45:2b:97:4b:24:c5:37:bd:7c:dc:d4:c3: 2a:4e:bc:3b:60:3b:9e:4a:b4:2b:0a:c0:ee:aa:7e:71:69:20: 40:dc:e1:19:81:cf:52:7d:75:56:a1:e5:3e:d0:c4:96:76:39: 2f:71:3d:ae:9e:78:94:b3:a2:c7:05:d1:bb:54:90:83:5b:ee: 80:52:c6:5e:f7:24:73:b0:bf:97:d8:80:e8:a6:dc:2f:62:06: bb:ca:83:33:0c:69:84:1a:f7:20:ca:25:ea:37:22:ed:5a:7f: 9c:25:fa:1b:f5:e0:21:15:2c:98:5d:88:eb:a5:c8:c5:3e:4f: da:fb:61:5a:28:96:89:a3:82:ed:79:a4:93:d7:40:b6:22:45: 08:da:7a:37:46:41:52:09:1c:d6:4a:10:72:dd:1f:8e:b6:51: f6:d2:77:19:f0:f5:36:cf:56:33:47:2c:3a:87:a8:cb:34:26: a2:f0:d5:58:c0:12:bc:8b:67:06:cf:ae:53:e8:26:90:0a:6e: cf:d9:ee:fe:70:26:a6:31:08:d2:b6:a4:72:81:8a:5c:03:14: 6a:9d:66:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EK0Dq0bP1NiFQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDI1MloXDTI1MDkxNjE4MDI1MlowLzEtMCsGA1UEAxMk YjY2OGYyZTMtZDFhZS00NDA1LThiMjItNzIwZDY1MmMyN2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X+TWT3NK7/N/y1iUsRXXKm7wW5N8a2yCvOX PjXHq+cESHMxh+yq/LE75JDZRHuiUQMbPk4/T34twMZmVUtoCmrmbuuLMCnRRa+l pdk953OqE87tCFwwyvYkuvP+2yd4q+xzXth/ie3BjXGlPimambtwgAdGpfE9/a+0 FW/uZgOpXuFMS6eMu3Kt9OS73mFhcYLRMjL2px+7rkZZWuU4hNFkHKbBkg4lekxe BwJ2XagWs6iygyFgHwDLobv8nnzVHbO08u09UpNW5d17x548VGFf3Fz6tMKBubbV mJ3nJPgjS3dO+7NXAR0pGc83k3DEcUw2RYOkAbx66ZoiZo6nvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4FWDAfuWX4vz63MdJTEcwuFI8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlkMjFhMWEtMjRlNS0z MTIyLThjZmEtYTdlOWI1ZDBjOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKu7/uixoRPFmGZH1BVDI6Tq3xyl/EUBTqyOYNPtJmSANuFJ1uJD0ON bkUrl0skxTe9fNzUwypOvDtgO55KtCsKwO6qfnFpIEDc4RmBz1J9dVah5T7QxJZ2 OS9xPa6eeJSzoscF0btUkINb7oBSxl73JHOwv5fYgOim3C9iBrvKgzMMaYQa9yDK Jeo3Iu1af5wl+hv14CEVLJhdiOulyMU+T9r7YVoolomjgu15pJPXQLYiRQjaejdG QVIJHNZKEHLdH462UfbSdxnw9TbPVjNHLDqHqMs0JqLw1VjAEryLZwbPrlPoJpAK bs/Z7v5wJqYxCNK2pHKBilwDFGqdZtk= -----END CERTIFICATE-----Generated at Tue Jul 1 08:53:49 2025 by rpki-client