$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cee98dc-37ac-396a-aad3-b71c1964a9a1.roa File: 2cee98dc-37ac-396a-aad3-b71c1964a9a1.roa (raw, json) Hash identifier: GPjmDhBKXUCfjEpkHj+jYC8z7ETpBY/NQGG8SJVlXic= Subject key identifier: 64:28:1E:B8:3D:09:FA:90:E8:20:EC:78:A5:81:F7:A3:44:12:A5:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7775609B547BDFA429490 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cee98dc-37ac-396a-aad3-b71c1964a9a1.roa Signing time: Fri 20 Jun 2025 09:29:55 +0000 ROA not before: Fri 20 Jun 2025 09:29:55 +0000 ROA not after: Thu 18 Sep 2025 09:29:55 +0000 asID: 22773 IP address blocks: 68.108.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:77:56:09:b5:47:bd:fa:42:94:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:55 2025 GMT Not After : Sep 18 09:29:55 2025 GMT Subject: CN=2d542f79-ac84-4b5f-80ce-d5bf2cd2285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:47:3e:cc:ce:f6:52:c7:29:3d:b1:70:7d: 8d:c6:04:d6:97:6c:b1:da:56:22:57:1e:af:2d:53: e9:83:29:da:46:85:c1:39:36:64:ef:fc:4b:b4:fb: 46:af:91:8b:1f:42:14:bd:a1:a4:1e:1d:e8:d5:e1: 43:08:a4:14:ef:d2:5f:cf:ad:50:fa:d7:96:3f:05: a4:45:bd:46:a2:d0:12:9d:5e:e7:cc:e2:49:df:b9: 26:24:07:ba:b6:49:3d:58:16:41:8e:bf:b4:e0:48: 83:81:b0:05:93:e7:4b:55:48:12:fe:3b:d4:75:85: d2:47:60:ce:03:b8:fb:c1:f3:a8:8c:71:9d:45:0f: 1d:b8:91:ee:70:85:c3:d1:fc:a4:b9:83:6b:2a:a0: 8e:e3:71:90:79:12:87:40:4e:0a:2b:6b:87:74:01: 7d:1d:82:f4:e3:b2:9a:6f:44:36:55:7d:f5:73:b3: 9c:a5:9c:57:14:3e:89:c1:bd:cf:b7:bf:f6:54:ea: 62:85:76:9b:72:92:52:99:03:64:dc:42:74:36:0e: 65:92:c5:36:ed:72:a7:46:75:b0:6b:a3:35:cb:a3: 5a:d0:d1:8d:ea:b4:a9:6a:07:d1:bd:67:c8:18:b6: 5f:4b:49:1c:97:19:e4:b6:2c:c1:0f:3b:1d:d9:4c: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:28:1E:B8:3D:09:FA:90:E8:20:EC:78:A5:81:F7:A3:44:12:A5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2cee98dc-37ac-396a-aad3-b71c1964a9a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a4:9b:d1:1e:4e:c6:06:99:81:b0:ab:f7:67:3f:c1:66:36: 63:ca:c0:48:31:ae:12:d7:3f:8f:85:f4:8a:84:35:99:ac:9c: 0a:0e:3c:9f:60:c5:a9:2c:11:a8:a7:8b:78:ca:2b:f6:f2:dc: b0:c1:b8:fa:ca:6c:7f:75:67:11:f4:8f:79:98:23:4b:de:18: 0a:97:4c:6c:ab:4b:c0:f0:18:1b:8a:e6:82:fa:c9:88:48:94: 4f:42:a1:2e:d1:5f:5c:d1:28:90:a5:54:fe:3e:e4:20:85:67: e7:01:c1:aa:e9:76:ea:32:9b:eb:9c:fb:8a:85:57:74:b2:19: 12:e4:09:de:16:94:55:b3:4c:f1:f3:01:73:65:64:a9:37:48: a9:10:69:f5:ff:10:91:86:2d:a5:27:06:c4:b7:78:dd:15:9c: f0:1f:c3:c1:78:bb:ff:47:b5:15:df:90:2d:0c:4a:33:fa:54: 00:2f:e6:33:61:ca:ff:72:fa:e1:a6:10:33:32:60:03:2f:8a: da:eb:39:6a:4f:df:aa:3e:62:6d:d1:c0:d3:67:37:74:cb:9b: 32:96:02:8d:5e:e9:22:ac:b7:8b:43:2f:90:23:cb:0c:45:08: c5:55:d6:d3:35:a8:79:a8:9f:32:08:25:3b:af:16:66:c9:41: a5:21:f9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp3dWCbVHvfpClJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjk1NVoXDTI1MDkxODA5Mjk1NVowLzEtMCsGA1UEAxMk MmQ1NDJmNzktYWM4NC00YjVmLTgwY2UtZDViZjJjZDIyODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVNHPszO9lLHKT2xcH2NxgTWl2yx2lYiVx6v LVPpgynaRoXBOTZk7/xLtPtGr5GLH0IUvaGkHh3o1eFDCKQU79Jfz61Q+teWPwWk Rb1GotASnV7nzOJJ37kmJAe6tkk9WBZBjr+04EiDgbAFk+dLVUgS/jvUdYXSR2DO A7j7wfOojHGdRQ8duJHucIXD0fykuYNrKqCO43GQeRKHQE4KK2uHdAF9HYL047Ka b0Q2VX31c7OcpZxXFD6Jwb3Pt7/2VOpihXabcpJSmQNk3EJ0Ng5lksU27XKnRnWw a6M1y6Na0NGN6rSpagfRvWfIGLZfS0kclxnktizBDzsd2UyWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQoHrg9CfqQ6CDseKWB96NEEqX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNlZTk4ZGMtMzdhYy0z OTZhLWFhZDMtYjcxYzE5NjRhOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGydMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6km9EeTsYGmYGwq/dnP8FmNmPKwEgxrhLXP4+F9IqENZmsnAoOPJ9g xaksEaini3jKK/by3LDBuPrKbH91ZxH0j3mYI0veGAqXTGyrS8DwGBuK5oL6yYhI lE9CoS7RX1zRKJClVP4+5CCFZ+cBwarpduoym+uc+4qFV3SyGRLkCd4WlFWzTPHz AXNlZKk3SKkQafX/EJGGLaUnBsS3eN0VnPAfw8F4u/9HtRXfkC0MSjP6VAAv5jNh yv9y+uGmEDMyYAMvitrrOWpP36o+Ym3RwNNnN3TLmzKWAo1e6SKst4tDL5AjywxF CMVV1tM1qHmonzIIJTuvFmbJQaUh+cs= -----END CERTIFICATE-----Generated at Wed Jul 2 05:47:58 2025 by rpki-client