$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56e4bbc0-332e-36ed-9d89-8892215acd21.roa File: 56e4bbc0-332e-36ed-9d89-8892215acd21.roa (raw, json) Hash identifier: mzJIclG4G4Ay6W8LsK/PwzCY4XoLwIO5/Lw9KYQEX+I= Subject key identifier: 8B:EC:4D:98:1C:5F:42:CA:DA:95:DB:EE:AA:0F:A6:04:38:DF:E9:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C101CC92732E456C8D571A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56e4bbc0-332e-36ed-9d89-8892215acd21.roa Signing time: Wed 18 Jun 2025 18:01:44 +0000 ROA not before: Wed 18 Jun 2025 18:01:44 +0000 ROA not after: Tue 16 Sep 2025 18:01:44 +0000 asID: 22773 IP address blocks: 68.3.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:1c:c9:27:32:e4:56:c8:d5:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:44 2025 GMT Not After : Sep 16 18:01:44 2025 GMT Subject: CN=b48e761f-c26d-4699-89ab-a38d914e7100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:99:9c:ca:86:c9:1a:1b:2e:5d:2a:75:81:c5: a3:05:dd:5f:2d:30:2a:77:6f:70:e5:a5:cd:df:c4: b5:b5:ba:24:7f:83:d0:0b:eb:ea:aa:d5:bf:98:5d: 77:b0:5c:52:7d:fd:03:db:93:a7:65:1c:8c:5d:f7: fe:cf:3a:e0:c3:36:93:ba:ed:7a:a3:68:5b:45:94: a7:f4:7d:1c:88:63:64:a2:22:5f:ec:6d:f1:51:cf: 6d:72:9d:57:02:95:ff:3b:eb:09:5b:f3:eb:bc:b6: 59:99:99:02:f4:db:eb:ca:1a:51:b9:82:32:ea:2c: 54:fe:a1:f6:0f:c4:7d:67:1b:f3:6d:f3:79:13:6d: f6:08:b8:b3:17:b0:50:df:4f:48:19:c9:3f:a7:e9: 7b:c8:9a:f7:08:39:cd:69:59:4f:8f:44:e0:65:dd: 1f:55:50:d8:57:48:4c:c0:c0:c3:f6:3c:8b:5a:04: 97:74:5e:4c:3d:be:66:c2:0b:ce:3a:83:f5:9f:86: 48:1d:15:d8:27:80:be:91:0d:9d:40:df:70:ce:a0: 7b:05:a2:13:e8:cb:04:e7:c8:f9:a7:03:47:d6:8f: 1b:df:77:c9:7c:c0:e1:79:00:a8:06:45:b7:1f:9a: 81:ca:b7:e2:95:38:aa:53:4f:39:3a:18:e4:b4:85: 4d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EC:4D:98:1C:5F:42:CA:DA:95:DB:EE:AA:0F:A6:04:38:DF:E9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/56e4bbc0-332e-36ed-9d89-8892215acd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:10:28:a6:60:d6:3f:4f:4f:b9:81:ea:c6:d7:80:3e:e2:a2: 8b:06:9a:94:ae:9a:2a:00:42:f2:4d:0f:d7:f9:31:cc:be:5f: 59:18:cc:cc:b9:97:e3:86:85:c4:b3:86:17:2b:26:27:c5:b7: 3f:15:d7:45:59:78:77:7c:5b:4e:32:00:a2:9e:00:c8:21:a6: 24:98:b6:4e:45:c6:2d:1f:a5:66:9b:56:90:04:a0:34:c9:4d: d7:8c:9d:fe:2b:0b:14:92:77:ca:e8:6b:aa:5e:74:1f:e5:fb: 69:e0:75:17:96:54:c8:86:46:49:22:8f:b8:4e:5c:25:e8:3e: 8b:53:4b:a0:e9:52:0a:b3:11:ea:c4:71:a9:69:ad:78:b6:6c: 38:61:f3:d5:85:75:51:6f:a0:60:7f:3a:4d:cd:c5:4a:bf:4b: cb:8a:91:88:7f:f4:85:34:3b:b0:dd:01:f0:96:63:7e:05:ff: 6b:38:f2:a6:b0:2d:3a:1e:42:da:7a:44:ff:d8:b2:0d:05:38: d5:23:12:ad:e9:e9:8a:9d:05:76:5d:d6:5b:cd:ea:2f:51:7b: 28:6e:41:92:08:b5:e6:f8:59:f7:4f:8d:18:a9:9b:9b:2e:45: e6:bb:d8:47:58:61:d4:df:9f:1b:ef:75:6f:75:ff:ae:57:73: be:ff:fd:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EBzJJzLkVsjVcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE0NFoXDTI1MDkxNjE4MDE0NFowLzEtMCsGA1UEAxMk YjQ4ZTc2MWYtYzI2ZC00Njk5LTg5YWItYTM4ZDkxNGU3MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJmcyobJGhsuXSp1gcWjBd1fLTAqd29w5aXN 38S1tbokf4PQC+vqqtW/mF13sFxSff0D25OnZRyMXff+zzrgwzaTuu16o2hbRZSn 9H0ciGNkoiJf7G3xUc9tcp1XApX/O+sJW/PrvLZZmZkC9NvryhpRuYIy6ixU/qH2 D8R9ZxvzbfN5E232CLizF7BQ309IGck/p+l7yJr3CDnNaVlPj0TgZd0fVVDYV0hM wMDD9jyLWgSXdF5MPb5mwgvOOoP1n4ZIHRXYJ4C+kQ2dQN9wzqB7BaIT6MsE58j5 pwNH1o8b33fJfMDheQCoBkW3H5qByrfilTiqU085OhjktIVNLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvsTZgcX0LK2pXb7qoPpgQ43+mZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTZlNGJiYzAtMzMyZS0z NmVkLTlkODktODg5MjIxNWFjZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARANHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgQKKZg1j9PT7mB6sbXgD7ioosGmpSumioAQvJND9f5Mcy+X1kYzMy5 l+OGhcSzhhcrJifFtz8V10VZeHd8W04yAKKeAMghpiSYtk5Fxi0fpWabVpAEoDTJ TdeMnf4rCxSSd8roa6pedB/l+2ngdReWVMiGRkkij7hOXCXoPotTS6DpUgqzEerE calprXi2bDhh89WFdVFvoGB/Ok3NxUq/S8uKkYh/9IU0O7DdAfCWY34F/2s48qaw LToeQtp6RP/Ysg0FONUjEq3p6YqdBXZd1lvN6i9ReyhuQZIIteb4WfdPjRipm5su Rea72EdYYdTfnxvvdW91/65Xc77//b0= -----END CERTIFICATE-----Generated at Wed Jul 2 22:29:39 2025 by rpki-client