$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4637a2e4-e1da-35cd-88f2-de0c76ed3286.roa File: 4637a2e4-e1da-35cd-88f2-de0c76ed3286.roa (raw, json) Hash identifier: PXbQDDRQq7vh8w4SNNbN4ISY2W/b1TPvx8v8QpqgGrc= Subject key identifier: 42:92:92:CF:F4:FD:F7:FC:B8:D2:0A:18:FD:4C:28:31:7E:8D:53:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A70B16F28E3B70B56E0D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4637a2e4-e1da-35cd-88f2-de0c76ed3286.roa Signing time: Fri 20 Jun 2025 09:29:04 +0000 ROA not before: Fri 20 Jun 2025 09:29:04 +0000 ROA not after: Thu 18 Sep 2025 09:29:04 +0000 asID: 22773 IP address blocks: 68.104.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:0b:16:f2:8e:3b:70:b5:6e:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:29:04 2025 GMT Not After : Sep 18 09:29:04 2025 GMT Subject: CN=794dee4a-52d5-4215-8bde-4f48b4f648f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:1e:ad:d8:2b:72:75:15:77:d4:32:af:b8: ed:e4:c5:14:90:ff:22:a0:b4:4f:86:2d:c7:73:0b: 3e:96:46:90:59:55:15:ee:b6:f2:c9:ef:74:91:ca: df:62:c9:37:ad:75:ad:20:3b:09:90:81:14:c6:36: c9:e6:23:30:16:60:7c:30:f5:6e:59:36:a8:34:47: 2e:80:82:56:f5:d7:13:30:b8:85:e9:fe:58:97:e9: ab:92:4d:26:db:e2:8a:3d:e8:78:e0:24:e8:ae:6a: 62:1b:7c:07:36:0b:7f:72:b5:28:e8:f1:ae:6b:9f: ce:ac:f0:57:cf:5d:28:bc:8b:70:6e:8a:98:6a:4f: 14:9a:87:57:84:7a:e4:0d:f1:58:f5:f1:80:6f:8e: bb:fe:dd:0b:e8:ae:e7:de:0e:03:c8:ed:bd:cc:d9: 0a:a9:f5:0b:1c:d0:e1:4b:87:44:5d:a4:2b:a2:c8: 8e:0e:95:93:3e:db:cb:eb:2a:e2:31:ee:fc:de:3a: 72:cc:bc:ec:e2:71:b7:ea:8f:f9:d1:20:8a:36:ff: 5c:8f:d0:fe:a5:99:24:99:2f:a8:23:66:e2:15:a9: 9f:53:86:b9:2c:1d:03:a2:d8:47:33:6b:56:f2:06: cc:68:b9:47:2d:a1:e0:df:f6:7e:49:95:31:89:59: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:92:CF:F4:FD:F7:FC:B8:D2:0A:18:FD:4C:28:31:7E:8D:53:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4637a2e4-e1da-35cd-88f2-de0c76ed3286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:59:da:0a:a4:5e:21:ce:05:e9:e9:b6:1c:50:d3:72:36:3c: 5c:a3:ce:cd:8b:34:92:cd:8e:43:13:a9:07:3a:47:f3:c8:49: db:e7:94:19:b8:73:d4:09:96:12:df:fc:07:f7:7c:88:d5:3e: aa:b9:25:e0:77:de:30:aa:32:75:07:cb:4a:e7:9e:87:ba:d9: f3:62:dc:9c:0c:85:31:2c:b0:c7:db:46:99:22:a7:bf:f2:29: e5:53:f5:11:09:a3:01:24:ed:25:49:f8:f4:24:40:84:9c:e1: a3:b0:9b:e0:ef:b5:18:a7:63:58:96:e2:e0:e0:bc:99:ab:a2: 7e:de:57:44:52:47:83:b0:4a:56:51:0b:92:5c:8b:f9:9b:1d: c0:52:e0:0b:ff:28:5d:fe:99:2d:ed:e3:4c:d3:61:17:11:4a: 44:4f:a1:09:d2:30:48:70:00:44:ec:4b:01:1c:08:41:39:9f: 32:e4:44:b0:3c:ef:03:03:8c:6c:47:73:30:87:49:0a:46:6c: aa:ef:e7:c1:2a:20:23:66:41:ba:40:3d:26:59:42:01:a3:67: 96:1b:a8:5c:fd:64:cc:8d:a7:29:1e:37:c4:fe:83:38:78:83: 4a:04:7d:9a:ad:af:74:86:7a:bf:96:ad:5d:66:ca:17:0f:0a: df:df:f0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApwsW8o47cLVuDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjkwNFoXDTI1MDkxODA5MjkwNFowLzEtMCsGA1UEAxMk Nzk0ZGVlNGEtNTJkNS00MjE1LThiZGUtNGY0OGI0ZjY0OGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XoerdgrcnUVd9Qyr7jt5MUUkP8ioLRPhi3H cws+lkaQWVUV7rbyye90kcrfYsk3rXWtIDsJkIEUxjbJ5iMwFmB8MPVuWTaoNEcu gIJW9dcTMLiF6f5Yl+mrkk0m2+KKPeh44CTormpiG3wHNgt/crUo6PGua5/OrPBX z10ovItwboqYak8UmodXhHrkDfFY9fGAb467/t0L6K7n3g4DyO29zNkKqfULHNDh S4dEXaQrosiODpWTPtvL6yriMe783jpyzLzs4nG36o/50SCKNv9cj9D+pZkkmS+o I2biFamfU4a5LB0DothHM2tW8gbMaLlHLaHg3/Z+SZUxiVmhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKSks/0/ff8uNIKGP1MKDF+jVOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDYzN2EyZTQtZTFkYS0z NWNkLTg4ZjItZGUwYzc2ZWQzMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGg7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpZ2gqkXiHOBenpthxQ03I2PFyjzs2LNJLNjkMTqQc6R/PISdvnlBm4 c9QJlhLf/Af3fIjVPqq5JeB33jCqMnUHy0rnnoe62fNi3JwMhTEssMfbRpkip7/y KeVT9REJowEk7SVJ+PQkQISc4aOwm+DvtRinY1iW4uDgvJmron7eV0RSR4OwSlZR C5Jci/mbHcBS4Av/KF3+mS3t40zTYRcRSkRPoQnSMEhwAETsSwEcCEE5nzLkRLA8 7wMDjGxHczCHSQpGbKrv58EqICNmQbpAPSZZQgGjZ5YbqFz9ZMyNpykeN8T+gzh4 g0oEfZqtr3SGer+WrV1myhcPCt/f8MY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:43 2025 by rpki-client