$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa File: 32ca86c9-22b2-3701-a945-35a051e74c44.roa (raw, json) Hash identifier: z0w8rMQUi3mHiekwvptwJ+DidiuUgbV5guqo4C4X4SM= Subject key identifier: A7:B6:6E:36:E3:87:14:34:F8:3D:7D:88:71:FD:07:9C:18:01:31:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7E71DF8E7ADC07A09B980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa Signing time: Fri 20 Jun 2025 09:30:48 +0000 ROA not before: Fri 20 Jun 2025 09:30:48 +0000 ROA not after: Thu 18 Sep 2025 09:30:48 +0000 asID: 22773 IP address blocks: 68.229.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:e7:1d:f8:e7:ad:c0:7a:09:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:48 2025 GMT Not After : Sep 18 09:30:48 2025 GMT Subject: CN=349354a9-0ec5-4e83-acf8-3b54c85f1745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:19:7a:0c:5c:20:61:f5:f2:30:70:15:bd: 45:c9:16:d5:10:87:eb:fc:05:60:25:8c:61:58:c4: 70:c7:dd:6e:b7:f8:54:1a:b3:d3:9a:ec:4b:85:25: b0:49:c8:87:c9:db:98:99:25:57:f8:1a:28:93:40: bd:eb:94:82:87:b3:32:e0:f4:f9:5c:b2:cb:b6:e9: 89:ee:2a:65:0e:c0:c6:74:52:2d:64:82:b1:47:91: c1:f7:87:85:bf:43:f2:e9:73:28:99:16:e6:b1:08: 3d:a1:61:e0:a1:bc:8e:c8:e5:28:67:81:9c:14:ee: 28:ab:d1:fe:53:7b:f6:7d:77:ed:25:9f:d0:1d:fc: 67:06:e7:92:5b:ed:87:12:fe:ec:e7:4c:f4:74:10: 4f:c3:fc:99:03:62:c4:0e:93:5c:78:73:3b:54:de: ee:93:82:16:04:7d:e4:d3:06:47:39:e2:47:0d:c0: 08:2b:f3:78:07:b7:3b:33:a5:68:59:95:b9:7c:b2: 03:f4:57:04:e3:d4:70:91:3f:37:98:24:3c:30:4f: 83:f5:87:21:1a:06:77:c0:8d:06:3f:ab:c9:c9:82: c6:2a:5b:09:14:0c:83:a9:e3:52:1a:52:bc:35:85: 12:e9:97:42:24:a7:45:b7:a9:81:45:6f:bb:40:73: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B6:6E:36:E3:87:14:34:F8:3D:7D:88:71:FD:07:9C:18:01:31:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ca86c9-22b2-3701-a945-35a051e74c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9c:57:f5:e2:9c:87:cd:3a:20:f2:5e:76:3a:27:80:1c:0d: 8b:c6:9e:66:d4:78:17:3f:ff:6c:74:78:c1:2a:3b:92:b7:6d: be:f6:61:65:f7:9e:50:84:11:d0:01:fb:34:75:ae:34:f6:8e: 79:27:d6:10:5b:b6:74:48:3a:73:81:e2:be:1f:b1:2e:54:93: 8e:7f:4d:36:19:11:fc:7f:96:85:86:6a:36:17:1e:85:f2:12: ef:9e:2c:6d:08:9b:7f:ae:b7:03:cd:88:f5:0a:51:2f:d1:e8: 4b:34:e1:4b:50:7f:c6:ed:c7:a3:a0:fd:59:f4:70:f0:70:94: 62:72:2b:2b:67:44:e7:d1:f6:2b:4e:87:3f:84:b7:06:7a:f0: a6:61:8d:a5:e4:98:2f:67:24:55:d7:a9:cd:90:10:6e:f4:4d: 0d:56:94:25:42:e6:d0:08:3b:00:4c:54:a4:cf:bf:08:8e:3e: df:74:82:c4:61:b5:0d:92:c7:ba:cd:8d:89:a7:e7:15:33:ca: 28:6b:7a:4e:7c:97:0f:62:e3:67:46:04:ef:a5:50:42:44:38: 2e:73:af:e8:34:99:e7:0a:1d:3e:bf:4a:79:97:ed:96:f0:6b: d6:94:31:9f:15:65:ab:2c:15:14:69:6f:92:4b:54:e0:29:c9: fa:8a:0a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp+cd+OetwHoJuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA0OFoXDTI1MDkxODA5MzA0OFowLzEtMCsGA1UEAxMk MzQ5MzU0YTktMGVjNS00ZTgzLWFjZjgtM2I1NGM4NWYxNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQEZegxcIGH18jBwFb1FyRbVEIfr/AVgJYxh WMRwx91ut/hUGrPTmuxLhSWwSciHyduYmSVX+Book0C965SCh7My4PT5XLLLtumJ 7iplDsDGdFItZIKxR5HB94eFv0Py6XMomRbmsQg9oWHgobyOyOUoZ4GcFO4oq9H+ U3v2fXftJZ/QHfxnBueSW+2HEv7s50z0dBBPw/yZA2LEDpNceHM7VN7uk4IWBH3k 0wZHOeJHDcAIK/N4B7c7M6VoWZW5fLID9FcE49RwkT83mCQ8ME+D9YchGgZ3wI0G P6vJyYLGKlsJFAyDqeNSGlK8NYUS6ZdCJKdFt6mBRW+7QHN17wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe2bjbjhxQ0+D19iHH9B5wYATFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJjYTg2YzktMjJiMi0z NzAxLWE5NDUtMzVhMDUxZTc0YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGcV/XinIfNOiDyXnY6J4AcDYvGnmbUeBc//2x0eMEqO5K3bb72YWX3 nlCEEdAB+zR1rjT2jnkn1hBbtnRIOnOB4r4fsS5Uk45/TTYZEfx/loWGajYXHoXy Eu+eLG0Im3+utwPNiPUKUS/R6Es04UtQf8btx6Og/Vn0cPBwlGJyKytnROfR9itO hz+EtwZ68KZhjaXkmC9nJFXXqc2QEG70TQ1WlCVC5tAIOwBMVKTPvwiOPt90gsRh tQ2Sx7rNjYmn5xUzyihrek58lw9i42dGBO+lUEJEOC5zr+g0mecKHT6/SnmX7Zbw a9aUMZ8VZassFRRpb5JLVOApyfqKCqQ= -----END CERTIFICATE-----Generated at Tue Jul 1 15:15:47 2025 by rpki-client