$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d966d38-5f4c-3637-88c5-a69743ae5a72.roa File: 4d966d38-5f4c-3637-88c5-a69743ae5a72.roa (raw, json) Hash identifier: Erp1xHryzn05dEc6Vi5wh0IuZ0nZAbdSm7xv+12IE4k= Subject key identifier: 42:4F:DD:6A:AC:AD:F8:F7:59:55:16:9C:A3:35:C5:70:76:0F:98:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3990625035472363BCE11940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d966d38-5f4c-3637-88c5-a69743ae5a72.roa Signing time: Tue 17 Jun 2025 20:32:45 +0000 ROA not before: Tue 17 Jun 2025 20:32:45 +0000 ROA not after: Mon 15 Sep 2025 20:32:45 +0000 asID: 22773 IP address blocks: 68.2.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:62:50:35:47:23:63:bc:e1:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:45 2025 GMT Not After : Sep 15 20:32:45 2025 GMT Subject: CN=224eb59d-b285-429b-a3d2-d521bc2f6d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:79:d1:84:34:ac:74:c9:69:38:50:5e:b3: 2b:c4:2c:43:1e:5a:10:5b:a3:5b:d6:fd:48:8f:4c: b2:5c:74:0d:7a:fd:27:c6:e2:02:d9:8b:5b:99:1b: 01:92:d1:82:6d:35:b9:9d:5a:8b:76:a3:27:ec:6a: 7c:d9:db:04:54:c2:e8:d3:74:7c:d2:2f:16:53:e3: 37:8d:19:88:d7:33:94:7f:55:e5:86:ec:44:64:ce: 49:46:f5:2a:fd:e2:ad:2f:fc:64:5e:0d:b6:4b:f7: 54:e7:54:69:fe:97:27:04:63:80:56:00:6f:30:7b: 8d:db:cc:a7:75:63:29:1c:a3:c2:11:6c:ef:d6:e7: 1a:3f:7e:11:10:2b:3b:07:10:6f:fc:90:52:ff:f8: ce:9f:b6:88:b6:3d:29:75:49:2b:d7:d8:4b:e8:e3: 19:fd:ff:03:d8:99:0a:15:d7:cd:07:f6:a5:51:83: 7f:04:f1:cd:bb:cb:db:48:41:78:18:c6:da:ce:05: cc:d8:2f:b2:2e:49:85:b6:1f:fe:43:c6:b2:fa:28: 2a:94:2f:c0:11:9e:22:9a:01:23:81:44:20:e8:86: 48:bd:17:bd:c4:5d:a9:4c:d8:d8:3f:10:fe:ae:20: 6c:c5:29:aa:e1:59:66:c0:19:f4:e1:1d:71:0a:fc: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4F:DD:6A:AC:AD:F8:F7:59:55:16:9C:A3:35:C5:70:76:0F:98:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d966d38-5f4c-3637-88c5-a69743ae5a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:47:b6:7f:7b:35:c6:2f:3e:c8:38:98:0b:04:d6:7e:d4:5f: 8c:95:90:ce:da:0e:60:66:de:02:8f:f5:42:54:5a:2d:15:16: f8:b5:0b:55:69:b1:81:da:33:a9:3e:a9:38:9f:ec:c5:c1:1c: 66:fd:97:d0:9e:f1:b6:9f:60:53:47:a0:11:75:f8:1c:6c:8c: 59:14:1a:e7:d6:e3:3e:9b:ca:2c:20:3d:2e:a2:5c:19:d1:12: e4:bb:8a:d1:39:be:99:d2:0b:4f:bc:f1:0c:4c:aa:38:db:14: ca:d0:71:52:15:9e:1c:16:53:97:ee:31:9d:4a:06:b2:01:e6: 4d:7c:4a:4a:69:98:08:59:a5:6c:7c:e7:d2:17:a5:39:b7:fe: 36:af:3e:aa:07:00:cf:76:64:6b:88:80:d8:88:b6:7d:57:f6: 12:fa:31:6c:9c:6d:97:fb:27:e8:b2:9c:71:c0:2e:ce:e1:5b: 97:41:1f:45:60:58:ca:16:95:94:a0:d4:b5:6e:86:00:9b:d2: 0e:3c:b5:d2:40:4a:a1:a7:e9:ba:32:33:93:97:4b:90:f7:ac: 3c:17:b8:4f:01:79:8f:dd:f3:c0:8f:64:e3:b1:63:cf:eb:8f: c0:72:92:56:be:d5:19:4e:33:b9:e0:79:b6:83:7f:c1:27:2d: bb:d2:53:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kGJQNUcjY7zhGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI0NVoXDTI1MDkxNTIwMzI0NVowLzEtMCsGA1UEAxMk MjI0ZWI1OWQtYjI4NS00MjliLWEzZDItZDUyMWJjMmY2ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLZ50YQ0rHTJaThQXrMrxCxDHloQW6Nb1v1I j0yyXHQNev0nxuIC2YtbmRsBktGCbTW5nVqLdqMn7Gp82dsEVMLo03R80i8WU+M3 jRmI1zOUf1XlhuxEZM5JRvUq/eKtL/xkXg22S/dU51Rp/pcnBGOAVgBvMHuN28yn dWMpHKPCEWzv1ucaP34RECs7BxBv/JBS//jOn7aItj0pdUkr19hL6OMZ/f8D2JkK FdfNB/alUYN/BPHNu8vbSEF4GMbazgXM2C+yLkmFth/+Q8ay+igqlC/AEZ4imgEj gUQg6IZIvRe9xF2pTNjYPxD+riBsxSmq4VlmwBn04R1xCvyc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJP3Wqsrfj3WVUWnKM1xXB2D5jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQ5NjZkMzgtNWY0Yy0z NjM3LTg4YzUtYTY5NzQzYWU1YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtHtn97NcYvPsg4mAsE1n7UX4yVkM7aDmBm3gKP9UJUWi0VFvi1C1Vp sYHaM6k+qTif7MXBHGb9l9Ce8bafYFNHoBF1+BxsjFkUGufW4z6byiwgPS6iXBnR EuS7itE5vpnSC0+88QxMqjjbFMrQcVIVnhwWU5fuMZ1KBrIB5k18SkppmAhZpWx8 59IXpTm3/javPqoHAM92ZGuIgNiItn1X9hL6MWycbZf7J+iynHHALs7hW5dBH0Vg WMoWlZSg1LVuhgCb0g48tdJASqGn6boyM5OXS5D3rDwXuE8BeY/d88CPZOOxY8/r j8Bykla+1RlOM7ngebaDf8EnLbvSUy8= -----END CERTIFICATE-----Generated at Mon Jun 30 19:55:22 2025 by rpki-client