$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa File: 904d7d38-bca4-360b-a13c-4719b02a2be0.roa (raw, json) Hash identifier: Gdk3gRlAohJ5VAXWPggN9c1HohwMuJJRWLHce78r68k= Subject key identifier: 53:4D:AD:1E:A4:97:D2:07:92:62:7A:8E:BD:06:E2:83:3E:CB:4B:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F547ABF92012AF4BE9C4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa Signing time: Thu 01 May 2025 17:09:21 +0000 ROA not before: Thu 01 May 2025 17:09:21 +0000 ROA not after: Wed 30 Jul 2025 17:09:21 +0000 asID: 22773 IP address blocks: 68.14.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:47:ab:f9:20:12:af:4b:e9:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:21 2025 GMT Not After : Jul 30 17:09:21 2025 GMT Subject: CN=76da38d1-f0a6-4d5e-bca5-373f01ecdee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:2d:ab:6c:86:29:c8:1a:17:0e:36:e9:ac: 1f:bd:f8:e3:d4:2e:28:51:48:a2:d0:e4:4e:07:6e: e2:11:ba:64:7e:4a:de:18:e9:36:50:c2:b6:50:be: 84:4b:a8:e8:ec:20:d6:92:4f:9b:c6:92:6b:80:88: 9a:a3:99:20:8b:13:e0:96:78:cd:c6:81:f5:1d:21: ea:5b:03:c3:cc:8c:e4:3e:5a:e5:7a:74:3f:a7:ff: b3:ae:a3:5c:df:2b:a9:9a:93:b7:8e:8a:9c:33:77: 2f:15:9b:b1:05:5a:d1:f5:e4:4a:e5:66:3f:e8:d3: e3:6e:fc:22:cf:80:f8:9a:9f:77:11:ab:77:f4:3e: 0b:30:a5:3a:38:bb:98:02:74:43:89:ba:d6:3a:67: 95:a3:b8:f6:90:ca:1b:08:8b:37:7a:eb:ee:18:4e: b6:0d:26:69:90:a2:7f:29:6f:97:92:c7:53:4a:b4: 1e:4b:72:72:3f:e3:ef:15:19:3e:82:03:16:91:eb: 58:5c:64:40:4b:05:46:bd:ea:30:b0:2b:26:e6:00: be:58:e9:21:a2:a8:54:3d:74:90:7e:e1:0b:17:82: de:9c:44:f2:0f:dd:4c:81:1f:33:df:87:29:38:a4: 06:bc:eb:07:bb:17:60:29:6b:11:51:73:55:5a:d1: f9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4D:AD:1E:A4:97:D2:07:92:62:7A:8E:BD:06:E2:83:3E:CB:4B:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904d7d38-bca4-360b-a13c-4719b02a2be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7f:8f:05:f6:e3:45:fb:cb:c2:dd:df:da:12:44:f0:96:4a: 1e:fb:bc:93:3b:0f:61:df:c5:2a:5f:43:38:54:68:bb:c7:5c: 77:74:d1:f3:49:cb:e0:df:fc:9a:32:a8:e3:49:dd:88:f4:6c: b1:22:ee:53:59:2d:9b:7e:f6:72:7e:82:17:60:a1:8f:4c:63: 66:c9:f0:43:f6:7d:8a:a0:5e:9b:70:af:2d:77:5a:b8:14:3b: f2:12:b6:41:b9:f9:21:44:65:5f:bc:29:44:19:db:8d:6e:16: 62:ac:1c:27:c0:5e:11:1f:04:57:25:46:9e:de:e7:72:c8:c9: 42:15:4a:e5:69:86:79:29:c5:20:8c:cf:c6:59:18:d0:44:2a: f3:7f:27:ac:5b:23:41:8a:01:df:f7:b4:0f:b0:b1:7f:f2:5a: 13:dd:0a:13:4d:a9:0e:75:db:4d:cb:c1:86:f1:9c:13:49:00: 0f:66:49:24:25:3d:b6:25:d1:8e:7d:32:53:82:b6:4c:63:75: 40:13:0c:3e:c5:c9:53:08:a5:09:3b:a2:97:75:3c:04:10:c7: f3:4d:55:ea:73:1e:94:81:e7:45:33:da:d3:ff:4b:6f:d7:3a: 8b:88:9b:fc:84:a6:f4:3b:1b:fc:19:fe:28:93:2b:e6:9d:f8: e7:81:3b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Uer+SASr0vpxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkyMVoXDTI1MDczMDE3MDkyMVowLzEtMCsGA1UEAxMk NzZkYTM4ZDEtZjBhNi00ZDVlLWJjYTUtMzczZjAxZWNkZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMctq2yGKcgaFw426awfvfjj1C4oUUii0ORO B27iEbpkfkreGOk2UMK2UL6ES6jo7CDWkk+bxpJrgIiao5kgixPglnjNxoH1HSHq WwPDzIzkPlrlenQ/p/+zrqNc3yupmpO3joqcM3cvFZuxBVrR9eRK5WY/6NPjbvwi z4D4mp93Eat39D4LMKU6OLuYAnRDibrWOmeVo7j2kMobCIs3euvuGE62DSZpkKJ/ KW+XksdTSrQeS3JyP+PvFRk+ggMWketYXGRASwVGveowsCsm5gC+WOkhoqhUPXSQ fuELF4LenETyD91MgR8z34cpOKQGvOsHuxdgKWsRUXNVWtH5KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNNrR6kl9IHkmJ6jr0G4oM+y0uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTA0ZDdkMzgtYmNhNC0z NjBiLWExM2MtNDcxOWIwMmEyYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN/jwX240X7y8Ld39oSRPCWSh77vJM7D2HfxSpfQzhUaLvHXHd00fNJ y+Df/JoyqONJ3Yj0bLEi7lNZLZt+9nJ+ghdgoY9MY2bJ8EP2fYqgXptwry13WrgU O/IStkG5+SFEZV+8KUQZ241uFmKsHCfAXhEfBFclRp7e53LIyUIVSuVphnkpxSCM z8ZZGNBEKvN/J6xbI0GKAd/3tA+wsX/yWhPdChNNqQ51203LwYbxnBNJAA9mSSQl PbYl0Y59MlOCtkxjdUATDD7FyVMIpQk7opd1PAQQx/NNVepzHpSB50Uz2tP/S2/X OouIm/yEpvQ7G/wZ/iiTK+ad+OeBO40= -----END CERTIFICATE-----Generated at Mon Jun 30 03:24:45 2025 by rpki-client