$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/719b4445-dd32-3630-a4ab-07ab91fc4296.roa File: 719b4445-dd32-3630-a4ab-07ab91fc4296.roa (raw, json) Hash identifier: Sll8RD6UG4MIIoPhgo98JqPc8rc6+8Tx2dTwyTj3zh0= Subject key identifier: 8C:18:BD:07:30:AE:77:DC:1B:4C:D7:41:A8:D6:B0:85:5D:77:75:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10493B566C1F0B60DD3200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/719b4445-dd32-3630-a4ab-07ab91fc4296.roa Signing time: Wed 18 Jun 2025 18:02:05 +0000 ROA not before: Wed 18 Jun 2025 18:02:05 +0000 ROA not after: Tue 16 Sep 2025 18:02:05 +0000 asID: 22773 IP address blocks: 68.3.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:49:3b:56:6c:1f:0b:60:dd:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:05 2025 GMT Not After : Sep 16 18:02:05 2025 GMT Subject: CN=42a5c470-2ee9-4155-b3ee-8c888d6a3672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:b7:9c:e0:da:c2:d9:57:0a:bd:73:4e:83: 9c:4f:f6:c0:b2:7f:f9:ab:25:42:71:34:4a:6b:f9: 7a:83:61:fd:b4:6d:36:35:2d:55:8c:6f:8c:ca:4b: 12:0c:01:1a:d7:54:77:a5:3a:25:7e:78:2c:f4:59: 4c:57:eb:0e:e7:8c:d5:a2:40:5c:64:6d:55:9d:0b: 42:06:87:20:c5:c0:5c:a7:c1:39:84:45:2a:bd:17: 11:15:a3:a3:2b:1c:e8:0e:81:3d:64:72:ce:af:a4: 25:72:c4:39:dd:e2:4d:c1:8b:ef:98:02:3d:64:21: ba:98:12:55:87:82:4b:9b:a4:fd:d6:89:5e:a3:74: 49:ec:e5:0d:ed:d5:e2:6c:91:1b:f8:f6:be:e8:3e: 8a:4f:ca:87:d0:3d:4c:60:28:56:e6:fb:5f:64:8d: 99:a8:ca:4a:54:5e:73:b9:63:b1:3f:5f:cd:9a:ea: 70:24:22:87:11:99:a8:23:b2:dd:81:61:9c:be:2a: 4f:95:9d:cb:25:ca:36:3e:d7:be:33:df:b7:f5:6a: e2:4f:14:4a:69:75:e2:05:4a:d4:b1:b2:2f:18:af: 8c:dd:31:2e:d5:2a:54:de:96:94:4e:52:f5:64:79: 11:48:a3:fc:49:3f:90:26:f6:b2:e7:7c:af:a1:bf: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:BD:07:30:AE:77:DC:1B:4C:D7:41:A8:D6:B0:85:5D:77:75:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/719b4445-dd32-3630-a4ab-07ab91fc4296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4f:d1:c3:d5:6a:d0:bc:c4:bf:ee:6b:f8:94:dd:12:e2:0e: 8c:f3:e0:57:9e:0c:26:26:0d:5b:82:ff:8a:28:51:3f:65:74: 63:37:58:78:2d:e1:9a:85:5e:44:53:43:64:50:c3:61:87:12: ae:e3:bd:d5:c4:1b:0c:e0:c9:ad:36:ca:89:82:84:df:cb:84: dd:f8:05:c5:3c:fe:94:64:28:ad:06:f9:04:42:cb:a8:e7:b3: e7:76:e0:ff:22:04:af:28:47:21:5b:f2:18:79:b5:1b:41:fb: 41:37:0b:9b:c6:2d:40:d5:d1:09:d1:75:ce:1a:63:17:76:83: be:24:81:99:89:45:df:11:bf:52:e2:5a:a6:4f:ff:fe:d9:a0: 8c:80:5c:ac:cb:b3:67:7f:68:e9:1f:95:bb:ee:8b:47:8b:38: c2:86:70:f2:85:e7:1b:c2:ff:41:2f:c4:10:30:15:0d:bf:01: cb:e3:d0:71:ea:cc:55:2a:65:9a:90:5e:c4:9c:a7:9f:a1:5c: 13:ed:4a:ad:b9:40:50:57:b8:7c:17:20:f3:6f:32:81:ab:32: 1c:c7:bf:15:e9:21:69:6b:79:62:35:4b:ac:bf:0b:38:22:bb: 5a:1d:f5:52:f4:36:8a:be:e9:d3:44:b0:49:a4:35:b6:ef:e4: 86:78:6e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EEk7VmwfC2DdMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIwNVoXDTI1MDkxNjE4MDIwNVowLzEtMCsGA1UEAxMk NDJhNWM0NzAtMmVlOS00MTU1LWIzZWUtOGM4ODhkNmEzNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorK3nODawtlXCr1zToOcT/bAsn/5qyVCcTRK a/l6g2H9tG02NS1VjG+MyksSDAEa11R3pTolfngs9FlMV+sO54zVokBcZG1VnQtC BocgxcBcp8E5hEUqvRcRFaOjKxzoDoE9ZHLOr6QlcsQ53eJNwYvvmAI9ZCG6mBJV h4JLm6T91oleo3RJ7OUN7dXibJEb+Pa+6D6KT8qH0D1MYChW5vtfZI2ZqMpKVF5z uWOxP1/NmupwJCKHEZmoI7LdgWGcvipPlZ3LJco2Pte+M9+39WriTxRKaXXiBUrU sbIvGK+M3TEu1SpU3paUTlL1ZHkRSKP8ST+QJvay53yvob+EVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwYvQcwrnfcG0zXQajWsIVdd3XiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzE5YjQ0NDUtZGQzMi0z NjMwLWE0YWItMDdhYjkxZmM0Mjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVP0cPVatC8xL/ua/iU3RLiDozz4FeeDCYmDVuC/4ooUT9ldGM3WHgt 4ZqFXkRTQ2RQw2GHEq7jvdXEGwzgya02yomChN/LhN34BcU8/pRkKK0G+QRCy6jn s+d24P8iBK8oRyFb8hh5tRtB+0E3C5vGLUDV0QnRdc4aYxd2g74kgZmJRd8Rv1Li WqZP//7ZoIyAXKzLs2d/aOkflbvui0eLOMKGcPKF5xvC/0EvxBAwFQ2/Acvj0HHq zFUqZZqQXsScp5+hXBPtSq25QFBXuHwXIPNvMoGrMhzHvxXpIWlreWI1S6y/Czgi u1od9VL0Noq+6dNEsEmkNbbv5IZ4bv0= -----END CERTIFICATE-----Generated at Wed Jul 2 02:04:54 2025 by rpki-client