$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa File: 438125ea-62d3-37b8-8d16-432d8d0b72b2.roa (raw, json) Hash identifier: El09YmCYp9UNVpH8OgxArKKOrDKMV0V00TPg+Lz6BDw= Subject key identifier: 82:2F:56:0D:B0:CD:E8:10:04:EB:43:D1:7B:D9:07:59:AB:88:BB:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A2EEAB95D2230D14FEBC67240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 22773 IP address blocks: 68.227.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:b9:5d:22:30:d1:4f:eb:c6:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=bd26c93d-c1e3-4382-b436-fc8d2871fdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:ee:29:98:72:a3:26:d7:3c:c1:8b:2a:68: 32:5c:52:06:47:e2:af:2b:23:e0:7e:f2:dd:94:38: 0c:77:0e:e6:cd:3e:97:df:a8:e9:fa:12:7b:de:a1: c2:17:45:20:70:eb:5b:2b:67:ca:71:8b:ab:a7:5a: c7:9e:b2:21:58:88:50:09:ed:2a:3f:ec:0f:1c:08: 2a:bc:b3:8e:7f:b1:f6:ad:f9:e6:26:37:33:47:4d: 67:be:38:8a:83:ed:11:b8:dd:57:e9:1d:3c:db:81: 03:03:a8:24:1c:39:32:1b:58:1a:06:1a:1b:79:a2: ed:40:e7:6a:a3:aa:a2:14:68:9c:b2:d6:83:72:64: 22:03:80:9e:55:f8:1f:47:3a:27:c9:2d:5a:77:fb: bb:52:9a:22:86:68:b2:f5:6c:2f:af:2d:a9:3a:e0: b0:af:a5:79:1e:0c:51:04:c0:96:91:42:4a:83:03: fc:73:4a:f4:ad:de:20:df:fa:41:df:1b:bc:08:40: 46:c9:4e:6c:a7:05:df:6c:bc:7c:e7:03:88:0b:68: 07:6c:97:35:ee:ea:96:ff:27:1e:dd:62:83:4f:64: 0b:4c:6d:73:b7:80:8a:e5:d5:84:9b:0d:d4:51:2d: 80:48:06:e4:46:e5:6a:03:9a:21:75:07:81:e5:09: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:56:0D:B0:CD:E8:10:04:EB:43:D1:7B:D9:07:59:AB:88:BB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:97:c3:ad:22:56:15:c4:38:59:e4:37:64:99:2b:1b:ba: f9:a0:3c:df:42:11:63:1b:8f:09:eb:6f:9f:32:63:a7:4a:a1: 76:17:31:77:d5:ee:f5:eb:92:77:e0:45:fb:db:03:9d:8c:b7: 87:f7:65:88:16:a2:a4:26:ec:a0:a5:53:66:e2:84:f3:a8:fb: 25:da:53:ae:bb:eb:7e:0d:c2:c4:13:62:11:b1:73:18:ae:37: da:0a:90:78:c2:1e:4a:c1:fe:40:fa:c0:8c:df:fa:ce:8d:94: 40:e7:89:1a:b5:61:e3:70:60:6f:34:1a:40:87:0c:7c:92:91: 80:a7:b9:e7:81:07:e6:ab:42:4b:b5:04:8d:25:32:e7:58:45: 28:37:24:61:1f:b3:26:a2:7f:11:6d:ae:44:96:cd:c2:f9:a6: e7:e4:d6:3d:50:40:39:b0:e0:6b:5f:ae:6b:e5:93:ad:9f:78: e4:cb:6d:02:94:31:7b:60:d0:f1:c2:14:f0:39:af:87:fa:c5: e1:73:3e:be:81:97:c4:2e:20:fa:ed:10:83:cc:3e:23:49:f7: d0:a9:92:6d:63:45:e5:51:1f:6e:9e:58:9f:4e:ca:98:7b:27: 87:70:cc:fe:43:39:c6:72:0a:8a:bb:33:18:7f:85:a6:81:98: 10:29:cd:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6rldIjDRT+vGckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk YmQyNmM5M2QtYzFlMy00MzgyLWI0MzYtZmM4ZDI4NzFmZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOLuKZhyoybXPMGLKmgyXFIGR+KvKyPgfvLd lDgMdw7mzT6X36jp+hJ73qHCF0UgcOtbK2fKcYurp1rHnrIhWIhQCe0qP+wPHAgq vLOOf7H2rfnmJjczR01nvjiKg+0RuN1X6R0824EDA6gkHDkyG1gaBhobeaLtQOdq o6qiFGicstaDcmQiA4CeVfgfRzonyS1ad/u7Upoihmiy9Wwvry2pOuCwr6V5HgxR BMCWkUJKgwP8c0r0rd4g3/pB3xu8CEBGyU5spwXfbLx85wOIC2gHbJc17uqW/yce 3WKDT2QLTG1zt4CK5dWEmw3UUS2ASAbkRuVqA5ohdQeB5Qk2EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIvVg2wzegQBOtD0XvZB1mriLtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4MTI1ZWEtNjJkMy0z N2I4LThkMTYtNDMyZDhkMGI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOPl8OtIlYVxDhZ5DdkmSsbuvmgPN9CEWMbjwnrb58yY6dKoXYXMXfV 7vXrknfgRfvbA52Mt4f3ZYgWoqQm7KClU2bihPOo+yXaU667634NwsQTYhGxcxiu N9oKkHjCHkrB/kD6wIzf+s6NlEDniRq1YeNwYG80GkCHDHySkYCnueeBB+arQku1 BI0lMudYRSg3JGEfsyaifxFtrkSWzcL5pufk1j1QQDmw4Gtfrmvlk62feOTLbQKU MXtg0PHCFPA5r4f6xeFzPr6Bl8QuIPrtEIPMPiNJ99Cpkm1jReVRH26eWJ9Oyph7 J4dwzP5DOcZyCoq7Mxh/haaBmBApzaY= -----END CERTIFICATE-----Generated at Wed Jul 2 07:29:33 2025 by rpki-client