$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8debd019-1484-3f52-9132-2187428a2c25.roa File: 8debd019-1484-3f52-9132-2187428a2c25.roa (raw, json) Hash identifier: 9wkfE+gb9EoGwPWH1ssiDZ7Y59Q5UT/2PowChYuZrSQ= Subject key identifier: FF:DE:1F:7B:61:DC:17:F9:94:6A:F0:61:4B:51:04:62:A3:AB:C4:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C1035DB9F988C57CA8F5FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8debd019-1484-3f52-9132-2187428a2c25.roa Signing time: Wed 18 Jun 2025 18:01:56 +0000 ROA not before: Wed 18 Jun 2025 18:01:56 +0000 ROA not after: Tue 16 Sep 2025 18:01:56 +0000 asID: 22773 IP address blocks: 68.3.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:35:db:9f:98:8c:57:ca:8f:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:01:56 2025 GMT Not After : Sep 16 18:01:56 2025 GMT Subject: CN=d846b797-7454-4f0f-9045-0e47aa60acd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:8a:49:52:4c:97:71:4f:a5:1a:a2:8e:ec: 84:06:2f:90:78:ae:87:f1:21:b8:83:fc:77:28:98: d2:6d:88:1f:8e:42:4c:5e:00:cf:27:31:b0:88:4e: 59:2a:a8:d0:32:b2:20:67:b7:db:ea:42:5e:e2:0f: fc:b7:5f:7d:ac:96:d0:6e:a1:c1:c7:89:0c:03:29: bf:9d:2c:a1:c5:b6:2b:5e:02:f8:83:10:d0:77:8d: 4c:a1:c9:b3:07:04:8d:8f:de:64:0c:e2:70:6b:fa: a2:67:0e:f2:86:5f:e7:0b:37:77:38:60:c0:92:ae: 95:60:10:8e:64:14:dd:34:e2:58:e7:5a:34:4f:d9: b6:78:71:a1:b2:4a:57:de:cf:0f:8e:ca:6e:15:ed: b0:48:18:71:73:d8:75:95:e6:35:bb:4d:2f:11:cb: 65:ed:6b:7a:9e:4f:61:62:e3:46:b0:87:74:64:1f: f0:49:fb:43:f6:3b:03:06:7a:6b:64:c7:05:8a:6d: c0:de:51:85:b2:36:0e:85:57:61:cf:e7:0e:68:da: a3:2a:0c:ff:bf:d9:32:21:6d:2b:ae:82:2f:fc:09: 73:be:6e:f2:ea:d1:a7:1b:e3:f7:92:87:3f:0b:25: 23:4d:c2:f0:28:9e:6c:25:86:42:a3:2a:f6:0e:53: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DE:1F:7B:61:DC:17:F9:94:6A:F0:61:4B:51:04:62:A3:AB:C4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8debd019-1484-3f52-9132-2187428a2c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:90:15:3d:8f:5c:e4:20:4f:6f:c8:fe:e8:52:f8:d8:e1:cb: 71:80:99:c4:a5:92:d1:bb:48:02:9d:73:96:cf:2a:ea:83:a8: 04:63:32:f9:ab:0e:d2:da:cd:3e:6a:27:eb:2f:fa:15:6d:f1: 5b:b4:07:49:18:60:1c:99:81:3d:58:82:b6:dc:02:96:d0:25: 05:bd:70:b8:dd:95:1e:f8:2d:03:4e:5a:db:75:e9:42:b2:dd: ff:92:9a:77:da:17:6b:5b:34:87:25:6f:ed:f6:82:47:b1:a7: 42:6e:08:7f:8c:42:a2:1f:0c:43:0b:3e:d6:2a:85:58:f5:61: 49:33:d9:5f:4f:66:24:e4:70:1d:31:2c:ad:f2:b6:ac:d5:66: 1a:02:14:25:51:99:c1:1c:38:4b:d6:50:a8:06:02:53:be:1e: f7:15:db:6a:50:5f:cd:ee:97:75:19:19:8a:26:85:38:14:f6: 5f:dd:48:18:8a:b2:45:c1:04:28:ce:36:41:cd:61:5b:c2:b9: 36:44:04:ac:54:40:2f:b7:c5:20:65:87:fe:b2:81:49:a9:1f: 67:47:9c:5b:1f:1c:b1:8e:33:63:44:05:ec:62:64:07:e5:5a: 43:dd:81:27:db:b3:77:ae:bf:54:39:e1:bd:90:40:08:2c:c1: 2b:f3:b6:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EDXbn5iMV8qPX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDE1NloXDTI1MDkxNjE4MDE1NlowLzEtMCsGA1UEAxMk ZDg0NmI3OTctNzQ1NC00ZjBmLTkwNDUtMGU0N2FhNjBhY2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhiKSVJMl3FPpRqijuyEBi+QeK6H8SG4g/x3 KJjSbYgfjkJMXgDPJzGwiE5ZKqjQMrIgZ7fb6kJe4g/8t199rJbQbqHBx4kMAym/ nSyhxbYrXgL4gxDQd41MocmzBwSNj95kDOJwa/qiZw7yhl/nCzd3OGDAkq6VYBCO ZBTdNOJY51o0T9m2eHGhskpX3s8PjspuFe2wSBhxc9h1leY1u00vEctl7Wt6nk9h YuNGsId0ZB/wSftD9jsDBnprZMcFim3A3lGFsjYOhVdhz+cOaNqjKgz/v9kyIW0r roIv/Alzvm7y6tGnG+P3koc/CyUjTcLwKJ5sJYZCoyr2DlOW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/eH3th3Bf5lGrwYUtRBGKjq8R8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGRlYmQwMTktMTQ4NC0z ZjUyLTkxMzItMjE4NzQyOGEyYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuQFT2PXOQgT2/I/uhS+Njhy3GAmcSlktG7SAKdc5bPKuqDqARjMvmr DtLazT5qJ+sv+hVt8Vu0B0kYYByZgT1YgrbcApbQJQW9cLjdlR74LQNOWtt16UKy 3f+SmnfaF2tbNIclb+32gkexp0JuCH+MQqIfDEMLPtYqhVj1YUkz2V9PZiTkcB0x LK3ytqzVZhoCFCVRmcEcOEvWUKgGAlO+HvcV22pQX83ul3UZGYomhTgU9l/dSBiK skXBBCjONkHNYVvCuTZEBKxUQC+3xSBlh/6ygUmpH2dHnFsfHLGOM2NEBexiZAfl WkPdgSfbs3euv1Q54b2QQAgswSvztmU= -----END CERTIFICATE-----Generated at Wed Jul 2 20:57:15 2025 by rpki-client