$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/841b6f42-83e8-3733-8e47-3fb874623440.roa File: 841b6f42-83e8-3733-8e47-3fb874623440.roa (raw, json) Hash identifier: lkG1sEXRBoOVD5crYL5L/2f9hClXQqhQqXRpDDQXNZ8= Subject key identifier: 21:5E:F0:9C:E2:33:9E:B3:3E:BC:47:89:DE:67:06:35:2F:56:01:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C0FE15271F488C1F5CEDE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/841b6f42-83e8-3733-8e47-3fb874623440.roa Signing time: Wed 18 Jun 2025 18:01:16 +0000 ROA not before: Wed 18 Jun 2025 18:01:16 +0000 ROA not after: Tue 16 Sep 2025 18:01:16 +0000 asID: 22773 IP address blocks: 68.0.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:0f:e1:52:71:f4:88:c1:f5:ce:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:16 2025 GMT Not After : Sep 16 18:01:16 2025 GMT Subject: CN=d5753ade-eeff-4430-8f45-518235faddf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:9c:93:22:48:ae:1f:41:a3:ea:87:ea:46: 6b:e1:ae:f8:47:8a:25:81:c5:03:60:ba:3b:ea:e7: 93:67:46:4a:65:3a:0d:7a:ca:46:6d:a8:d4:22:0d: 2c:20:22:ed:41:9b:94:86:08:5f:0b:f6:de:29:19: a7:3d:1d:f9:81:e4:bb:63:2f:c4:45:b8:e8:8f:57: 36:fe:f1:ce:51:57:b4:ca:bd:33:19:16:45:79:e3: 5a:89:51:b8:a9:74:4e:25:ec:db:57:1d:8b:fb:b4: cc:57:f0:03:2f:1e:54:50:7e:95:a9:99:d9:38:71: 36:2a:ab:20:30:9c:82:0e:4f:dd:e6:14:61:39:3e: 1f:97:47:81:38:ea:6b:2e:b7:b0:78:74:83:af:e1: cc:f8:1f:cc:f8:0f:24:5f:07:47:8a:78:04:c7:ba: cd:88:65:6b:d2:9d:47:9a:5f:41:c2:6d:15:d2:af: 9b:22:f3:e1:b5:0a:9f:c2:c5:81:d8:74:3e:21:7f: ca:32:fd:f3:81:0f:c1:ea:c8:c6:04:1e:a4:a8:62: b7:4a:1c:49:fd:94:d8:6e:ca:90:9d:1e:d5:69:f9: 00:69:1a:22:1c:84:8c:2a:59:45:ea:2f:56:8c:cb: 3a:bf:ab:65:da:ee:46:bb:78:a0:de:0c:f3:00:c0: 43:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5E:F0:9C:E2:33:9E:B3:3E:BC:47:89:DE:67:06:35:2F:56:01:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/841b6f42-83e8-3733-8e47-3fb874623440.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e1:20:98:b9:83:71:70:aa:69:34:c1:3f:db:06:1d:76:3c: 14:86:9e:12:7a:c7:ac:28:29:bc:c4:ae:4e:c6:32:5f:92:90: 8a:95:56:89:d1:e8:19:a1:bb:b9:49:8a:1e:d6:a7:27:e2:14: 18:67:be:2f:8e:7e:09:f2:1e:63:f3:4b:10:54:b0:fe:0d:ec: 70:90:bf:ee:62:43:29:1b:fe:41:33:36:80:57:ad:11:47:3e: 3d:47:a8:0c:56:4a:ea:42:8b:39:c8:4d:b9:3d:6f:73:55:c1: 2d:60:9f:73:75:c4:be:72:55:a5:3c:25:91:6b:34:79:e7:28: fd:f3:f8:32:e7:9f:db:32:69:d1:57:7f:df:63:8b:16:95:1b: e2:9b:db:d5:30:f7:a5:f0:8d:1f:9f:50:3e:ef:33:69:e8:b6: 39:e4:70:eb:8b:6c:b0:97:ee:76:3a:42:18:ee:ca:ec:ee:3e: 45:5d:ed:ea:a3:ee:38:de:2f:55:d3:8c:b3:71:86:e9:aa:04: 5a:2f:2e:dc:c5:af:c0:36:7e:5f:ea:cf:bf:17:1b:96:51:d9: ed:13:d1:ae:1f:ca:66:dd:e9:2d:9d:03:37:9b:49:64:a4:86: b5:62:f1:49:e8:4f:85:bc:37:10:a3:f3:c6:c1:65:8d:75:02: 3f:15:35:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8D+FScfSIwfXO3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDExNloXDTI1MDkxNjE4MDExNlowLzEtMCsGA1UEAxMk ZDU3NTNhZGUtZWVmZi00NDMwLThmNDUtNTE4MjM1ZmFkZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJmckyJIrh9Bo+qH6kZr4a74R4olgcUDYLo7 6ueTZ0ZKZToNespGbajUIg0sICLtQZuUhghfC/beKRmnPR35geS7Yy/ERbjoj1c2 /vHOUVe0yr0zGRZFeeNaiVG4qXROJezbVx2L+7TMV/ADLx5UUH6VqZnZOHE2Kqsg MJyCDk/d5hRhOT4fl0eBOOprLreweHSDr+HM+B/M+A8kXwdHingEx7rNiGVr0p1H ml9Bwm0V0q+bIvPhtQqfwsWB2HQ+IX/KMv3zgQ/B6sjGBB6kqGK3ShxJ/ZTYbsqQ nR7VafkAaRoiHISMKllF6i9WjMs6v6tl2u5Gu3ig3gzzAMBDMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFe8JziM56zPrxHid5nBjUvVgE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODQxYjZmNDItODNlOC0z NzMzLThlNDctM2ZiODc0NjIzNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArhIJi5g3Fwqmk0wT/bBh12PBSGnhJ6x6woKbzErk7GMl+SkIqVVonR 6Bmhu7lJih7WpyfiFBhnvi+OfgnyHmPzSxBUsP4N7HCQv+5iQykb/kEzNoBXrRFH Pj1HqAxWSupCiznITbk9b3NVwS1gn3N1xL5yVaU8JZFrNHnnKP3z+DLnn9syadFX f99jixaVG+Kb29Uw96XwjR+fUD7vM2notjnkcOuLbLCX7nY6QhjuyuzuPkVd7eqj 7jjeL1XTjLNxhumqBFovLtzFr8A2fl/qz78XG5ZR2e0T0a4fymbd6S2dAzebSWSk hrVi8UnoT4W8NxCj88bBZY11Aj8VNZM= -----END CERTIFICATE-----Generated at Wed Jul 2 19:32:32 2025 by rpki-client