$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa File: 33321886-c672-38b9-9057-672086510a4c.roa (raw, json) Hash identifier: k8BVu1pc+NRNGIwIXqetQSPlMpP6gzU1H2rt1ItWSNw= Subject key identifier: EC:DB:95:77:DA:0B:6D:A8:0C:18:F9:49:15:FD:EE:22:67:8A:36:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A727B7984456B1BBAB82C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa Signing time: Fri 20 Jun 2025 09:29:18 +0000 ROA not before: Fri 20 Jun 2025 09:29:18 +0000 ROA not after: Thu 18 Sep 2025 09:29:18 +0000 asID: 22773 IP address blocks: 68.104.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:27:b7:98:44:56:b1:bb:ab:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:18 2025 GMT Not After : Sep 18 09:29:18 2025 GMT Subject: CN=7fb0927d-aab0-47a8-a027-bed84b11834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:79:01:1b:6d:10:14:87:79:16:8b:d1:be: aa:50:2b:7a:21:b1:d1:fd:4c:23:7d:04:5f:e9:a5: 11:70:11:0c:15:78:21:77:aa:76:d5:8d:dd:97:7b: 5f:32:ab:91:8d:f0:c1:de:a0:27:f2:91:a2:cd:0c: 9f:9f:ce:a4:a8:68:fc:2d:ad:fb:01:f6:cd:ce:34: 64:f1:23:77:4d:9b:05:df:c2:57:5e:fe:ae:b3:cf: 1e:66:90:db:2e:35:d8:e7:1c:0f:cb:95:ec:04:5e: 30:aa:61:fc:06:6b:ea:24:a0:09:5e:71:8a:11:78: a9:9b:f1:9c:c0:a7:ef:55:61:44:f0:25:5d:1e:e9: 9f:0c:84:57:1f:c1:49:b2:67:73:cc:52:14:dc:ba: 74:f1:be:92:75:10:38:9f:f7:12:df:43:40:62:e9: 51:ec:fe:47:9b:e6:2e:5f:02:a2:17:3f:43:ae:ae: d2:70:bb:10:c0:2a:94:5d:67:49:42:18:61:d4:20: c4:ae:7a:27:ee:45:c5:7e:b1:69:3d:7b:20:2c:b6: 8a:13:6d:c0:06:86:c0:67:eb:c1:76:03:0b:5d:3e: cf:f9:65:7c:51:fa:c8:02:ca:3e:4a:e3:b4:84:ac: 0a:c9:34:36:3d:57:f5:d1:8c:3e:98:72:fd:ae:4d: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DB:95:77:DA:0B:6D:A8:0C:18:F9:49:15:FD:EE:22:67:8A:36:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33321886-c672-38b9-9057-672086510a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bd:fa:94:fc:47:f2:18:5d:a3:a3:20:c4:f2:8b:9c:85:92: 0a:1e:84:2a:99:00:8c:a1:c6:54:e0:3b:47:7d:65:06:03:1b: 74:c1:59:38:81:bf:f8:bd:a2:f8:64:a9:75:c5:ae:2d:7c:21: 25:46:32:b1:44:c0:36:de:20:7d:a6:dd:31:65:d4:3a:61:8d: aa:f2:d7:f1:89:1f:d8:63:74:1d:ab:9c:19:76:03:e2:d7:08: c7:db:05:d9:77:1a:73:41:ae:61:4e:da:51:6d:16:e6:34:08: 80:98:60:06:49:89:67:83:a4:0b:6c:64:46:98:ef:31:85:23: d2:a5:5c:9d:2f:f7:2c:2a:b3:0b:33:6e:6f:e7:ba:47:83:fe: f2:36:0a:ab:9c:99:f4:6c:ac:f9:c5:e2:5b:80:69:8b:80:6e: 48:47:85:f8:dc:09:18:92:3d:27:34:0b:20:6f:86:4f:52:05: dd:ac:04:17:80:3d:c0:20:7d:cd:64:b9:ce:3f:99:90:fb:58: b4:e6:32:a3:85:31:12:ef:48:a8:35:f5:7d:43:a9:e5:3c:f0: 64:0c:f3:ff:37:b0:7c:2c:8e:0c:48:b4:0b:50:ac:63:66:50: 9b:a5:21:2a:d5:83:87:9c:48:96:9e:18:94:49:b3:a5:eb:d9: 27:09:7a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApye3mERWsburgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkxOFoXDTI1MDkxODA5MjkxOFowLzEtMCsGA1UEAxMk N2ZiMDkyN2QtYWFiMC00N2E4LWEwMjctYmVkODRiMTE4MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6N5ARttEBSHeRaL0b6qUCt6IbHR/UwjfQRf 6aURcBEMFXghd6p21Y3dl3tfMquRjfDB3qAn8pGizQyfn86kqGj8La37AfbNzjRk 8SN3TZsF38JXXv6us88eZpDbLjXY5xwPy5XsBF4wqmH8BmvqJKAJXnGKEXipm/Gc wKfvVWFE8CVdHumfDIRXH8FJsmdzzFIU3Lp08b6SdRA4n/cS30NAYulR7P5Hm+Yu XwKiFz9Drq7ScLsQwCqUXWdJQhhh1CDErnon7kXFfrFpPXsgLLaKE23ABobAZ+vB dgMLXT7P+WV8UfrIAso+SuO0hKwKyTQ2PVf10Yw+mHL9rk35BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzblXfaC22oDBj5SRX97iJnijYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzMzMjE4ODYtYzY3Mi0z OGI5LTkwNTctNjcyMDg2NTEwYTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa9+pT8R/IYXaOjIMTyi5yFkgoehCqZAIyhxlTgO0d9ZQYDG3TBWTiB v/i9ovhkqXXFri18ISVGMrFEwDbeIH2m3TFl1Dphjary1/GJH9hjdB2rnBl2A+LX CMfbBdl3GnNBrmFO2lFtFuY0CICYYAZJiWeDpAtsZEaY7zGFI9KlXJ0v9ywqswsz bm/nukeD/vI2CqucmfRsrPnF4luAaYuAbkhHhfjcCRiSPSc0CyBvhk9SBd2sBBeA PcAgfc1kuc4/mZD7WLTmMqOFMRLvSKg19X1DqeU88GQM8/83sHwsjgxItAtQrGNm UJulISrVg4ecSJaeGJRJs6Xr2ScJen0= -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:47 2025 by rpki-client