$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3947bff8-f196-39ef-a817-e2834c5402b9.roa File: 3947bff8-f196-39ef-a817-e2834c5402b9.roa (raw, json) Hash identifier: qqY27wAXDBMSeCA9GjjDIQu+pckqaed1R5iPdBeqKpY= Subject key identifier: 2A:D1:96:67:0D:DE:AE:C2:45:85:66:6B:81:33:80:E9:C7:A2:CA:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A788476A8D3047537DEF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3947bff8-f196-39ef-a817-e2834c5402b9.roa Signing time: Fri 20 Jun 2025 09:30:03 +0000 ROA not before: Fri 20 Jun 2025 09:30:03 +0000 ROA not after: Thu 18 Sep 2025 09:30:03 +0000 asID: 22773 IP address blocks: 68.224.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:88:47:6a:8d:30:47:53:7d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:03 2025 GMT Not After : Sep 18 09:30:03 2025 GMT Subject: CN=5ec0e0d3-80a3-4fe1-bba6-e5bbfbbfa113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:ba:11:08:b6:f4:f4:f8:22:8b:e8:91:60: 8e:15:03:44:10:15:42:53:b0:2c:31:aa:ad:45:b3: 30:fe:b7:c3:4e:79:19:99:50:cf:54:16:ea:7d:4a: 05:ec:41:9a:38:91:a5:b0:52:32:84:16:2b:cd:22: 01:e1:69:2d:f9:4e:8b:93:a0:44:8a:96:ab:a8:13: 17:31:45:cc:1d:31:42:c7:7f:2d:5d:38:43:86:62: 93:d4:3d:28:e2:19:e2:5c:5b:5e:06:fd:9a:41:a0: 3c:d2:33:1e:9c:ca:74:7c:2a:b3:87:18:0c:2f:ab: d5:40:35:ac:33:31:18:60:a4:cf:74:bf:27:2c:7e: 71:e3:ec:6a:da:fd:92:87:2a:18:a7:49:d8:92:c1: 23:52:4c:d9:f6:a3:d9:60:87:ad:7b:db:3d:27:71: 79:d6:f2:fd:fb:ab:25:b8:ae:ec:73:b0:8f:e5:a7: f4:25:23:5c:ce:67:2f:00:56:5d:c2:c6:04:80:1a: 07:9a:0f:16:f0:bd:cb:9a:77:7e:8a:01:f5:58:cf: da:8c:4d:a8:9f:72:cc:35:47:f6:2b:5e:3b:92:95: a3:18:60:ef:c9:7d:75:8a:f3:25:87:17:c9:ce:c4: a1:3f:de:28:4f:e1:cd:78:c7:f5:4c:d4:9d:aa:38: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D1:96:67:0D:DE:AE:C2:45:85:66:6B:81:33:80:E9:C7:A2:CA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3947bff8-f196-39ef-a817-e2834c5402b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:dd:de:c7:a7:ec:00:db:ea:0d:bf:7a:4f:c2:7d:54:ae:0e: 61:f7:48:b0:03:b4:1a:26:70:e6:1b:85:ba:2a:9a:33:3b:21: 9c:8f:17:e0:32:96:cf:8d:94:1a:8c:8e:40:48:6d:b0:d8:45: 37:5d:12:6e:e2:69:b0:70:57:fc:8d:ec:8d:89:ce:52:a8:37: f9:ca:cd:22:09:8e:09:f7:8c:c1:36:24:9d:07:63:ff:7d:68: 99:6e:e1:13:be:ed:6b:d5:4b:87:14:20:8d:18:55:85:49:48: ff:af:d9:87:89:89:91:74:3b:80:64:c5:2e:b9:3c:35:cb:1c: f8:3b:44:8f:61:9a:9d:eb:48:bc:03:ea:15:5b:d3:3d:02:94: f0:42:49:7a:62:a2:a3:09:4b:e6:cf:55:22:2e:0e:f0:30:15: bd:34:db:e0:36:a8:4e:ad:de:e5:07:79:b8:eb:e1:6b:08:3d: 4a:38:49:ed:df:49:59:aa:ea:d3:1a:fc:ba:a5:a3:81:29:8d: 33:cb:7c:26:ad:c5:23:d8:67:d5:b1:c9:d2:5b:a9:5d:c6:92: d2:c4:cc:1f:56:a5:20:14:68:57:3b:98:90:78:93:cf:8e:65: f5:4b:d6:ab:ba:a9:95:c3:c0:2d:4c:d6:89:4e:ee:b2:5e:ad: 8b:d7:8a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp4hHao0wR1N974AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAwM1oXDTI1MDkxODA5MzAwM1owLzEtMCsGA1UEAxMk NWVjMGUwZDMtODBhMy00ZmUxLWJiYTYtZTViYmZiYmZhMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb66EQi29PT4IovokWCOFQNEEBVCU7AsMaqt RbMw/rfDTnkZmVDPVBbqfUoF7EGaOJGlsFIyhBYrzSIB4Wkt+U6Lk6BEiparqBMX MUXMHTFCx38tXThDhmKT1D0o4hniXFteBv2aQaA80jMenMp0fCqzhxgML6vVQDWs MzEYYKTPdL8nLH5x4+xq2v2ShyoYp0nYksEjUkzZ9qPZYIete9s9J3F51vL9+6sl uK7sc7CP5af0JSNczmcvAFZdwsYEgBoHmg8W8L3Lmnd+igH1WM/ajE2on3LMNUf2 K147kpWjGGDvyX11ivMlhxfJzsShP94oT+HNeMf1TNSdqjgGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrRlmcN3q7CRYVma4EzgOnHosqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzk0N2JmZjgtZjE5Ni0z OWVmLWE4MTctZTI4MzRjNTQwMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7d3sen7ADb6g2/ek/CfVSuDmH3SLADtBomcOYbhboqmjM7IZyPF+Ay ls+NlBqMjkBIbbDYRTddEm7iabBwV/yN7I2JzlKoN/nKzSIJjgn3jME2JJ0HY/99 aJlu4RO+7WvVS4cUII0YVYVJSP+v2YeJiZF0O4BkxS65PDXLHPg7RI9hmp3rSLwD 6hVb0z0ClPBCSXpioqMJS+bPVSIuDvAwFb002+A2qE6t3uUHebjr4WsIPUo4Se3f SVmq6tMa/Lqlo4EpjTPLfCatxSPYZ9WxydJbqV3GktLEzB9WpSAUaFc7mJB4k8+O ZfVL1qu6qZXDwC1M1olO7rJerYvXivs= -----END CERTIFICATE-----Generated at Tue Jul 1 11:05:15 2025 by rpki-client