$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa File: 9385082e-5803-3163-baea-1f8c50d29c52.roa (raw, json) Hash identifier: zVknSJHJKxQGJe/8zc5D/A7zzPI6DPvZMwdU55wWS+A= Subject key identifier: 07:82:95:A7:AB:3B:CB:53:A8:1C:29:28:31:7B:CF:3E:3E:D9:E9:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A39907E55DC6E2EF80ADBF380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa Signing time: Tue 17 Jun 2025 20:32:58 +0000 ROA not before: Tue 17 Jun 2025 20:32:58 +0000 ROA not after: Mon 15 Sep 2025 20:32:58 +0000 asID: 22773 IP address blocks: 68.2.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:7e:55:dc:6e:2e:f8:0a:db:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:32:58 2025 GMT Not After : Sep 15 20:32:58 2025 GMT Subject: CN=61a0a7d6-82a9-47d3-8696-5a568a9a57cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b8:c2:6b:4a:29:1b:e1:db:11:37:c4:46:99: 8b:c2:08:ec:ea:6b:3d:c7:f6:26:8e:53:dd:c5:d4: a5:35:6a:17:08:df:ad:8e:b7:6b:82:dc:26:c6:5c: ef:9a:19:f3:26:7d:6f:f4:5d:6b:73:7d:05:a2:0c: 5f:00:79:35:ed:a6:1f:3c:c3:3b:6a:24:00:cf:57: 43:80:05:d7:35:e8:24:16:fc:4c:27:a7:ba:cd:39: e3:71:1d:bd:19:02:1d:9b:2a:d1:cc:98:c4:14:54: 30:b7:07:3e:06:a1:52:57:67:34:9e:89:a8:a2:ee: a3:32:8c:03:8c:a1:7b:12:8d:37:f3:9e:20:c8:9c: ea:f7:c7:a2:df:9d:db:56:66:05:8e:3a:6a:87:ee: cf:e2:52:eb:ce:f4:d7:4b:b6:61:b5:d6:24:8d:c3: 76:60:e9:a8:f3:e4:96:83:02:4f:91:8c:53:0f:a8: 33:fd:fc:49:57:c3:ae:a4:76:a1:69:00:d9:ac:fd: 86:c2:00:20:13:08:bf:ea:7e:c3:c4:8e:6c:68:1b: b2:f6:fe:8e:7a:62:79:8b:5c:a7:ce:f3:ac:15:77: 20:b9:a5:ef:9c:6c:bc:4c:79:64:52:93:bc:6b:78: 51:1f:95:62:df:a3:87:92:0c:25:27:f4:b6:4e:c1: fb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:82:95:A7:AB:3B:CB:53:A8:1C:29:28:31:7B:CF:3E:3E:D9:E9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:74:bc:97:9e:8e:2e:e9:71:14:dc:03:22:55:d4:f5:3e:14: b3:fd:c0:d2:2c:7d:2b:76:ef:06:ab:55:23:e5:21:9e:73:f6: 63:46:15:c0:89:3c:6a:3e:3c:6a:28:50:96:d0:4a:53:a8:da: 25:9f:1e:a8:af:a4:b3:cc:69:db:49:23:79:8c:98:75:6f:22: 77:38:d7:68:92:bd:f8:64:9a:93:64:bc:c5:06:08:85:a9:f1: b8:b2:06:4a:9f:18:3b:d8:dd:b7:d6:1c:3a:67:d7:19:10:99: 9a:4b:0c:d0:ca:19:de:d8:7a:e0:5b:79:04:5c:e4:2f:dd:15: 07:e6:ab:8d:5f:b1:dd:43:4d:5a:0e:c6:16:a1:f2:54:80:b4: 6e:e9:4c:95:5d:ba:26:49:42:f2:96:ff:f4:6d:ef:90:69:11: f1:e7:78:47:0a:5b:dd:f5:82:e2:4c:7c:bf:f7:c1:81:19:d4: e8:e6:37:73:f1:eb:4b:2a:c3:3e:ed:62:1c:b4:c6:69:d3:ad: f5:73:63:fb:e5:1f:6c:75:6f:b1:51:74:d7:04:58:84:3f:b8: 88:cb:77:88:75:1c:24:05:8d:a8:c8:bf:b9:ec:78:52:4d:81: 49:a1:01:7f:81:04:c9:70:f5:ac:f9:a2:34:05:21:94:ec:b7: 51:bc:68:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kH5V3G4u+Arb84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzI1OFoXDTI1MDkxNTIwMzI1OFowLzEtMCsGA1UEAxMk NjFhMGE3ZDYtODJhOS00N2QzLTg2OTYtNWE1NjhhOWE1N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLjCa0opG+HbETfERpmLwgjs6ms9x/YmjlPd xdSlNWoXCN+tjrdrgtwmxlzvmhnzJn1v9F1rc30FogxfAHk17aYfPMM7aiQAz1dD gAXXNegkFvxMJ6e6zTnjcR29GQIdmyrRzJjEFFQwtwc+BqFSV2c0nomoou6jMowD jKF7Eo03854gyJzq98ei353bVmYFjjpqh+7P4lLrzvTXS7ZhtdYkjcN2YOmo8+SW gwJPkYxTD6gz/fxJV8OupHahaQDZrP2GwgAgEwi/6n7DxI5saBuy9v6OemJ5i1yn zvOsFXcguaXvnGy8THlkUpO8a3hRH5Vi36OHkgwlJ/S2TsH7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeClaerO8tTqBwpKDF7zz4+2elpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTM4NTA4MmUtNTgwMy0z MTYzLWJhZWEtMWY4YzUwZDI5YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV0vJeeji7pcRTcAyJV1PU+FLP9wNIsfSt27warVSPlIZ5z9mNGFcCJ PGo+PGooUJbQSlOo2iWfHqivpLPMadtJI3mMmHVvInc412iSvfhkmpNkvMUGCIWp 8biyBkqfGDvY3bfWHDpn1xkQmZpLDNDKGd7YeuBbeQRc5C/dFQfmq41fsd1DTVoO xhah8lSAtG7pTJVduiZJQvKW//Rt75BpEfHneEcKW931guJMfL/3wYEZ1OjmN3Px 60sqwz7tYhy0xmnTrfVzY/vlH2x1b7FRdNcEWIQ/uIjLd4h1HCQFjajIv7nseFJN gUmhAX+BBMlw9az5ojQFIZTst1G8aJ0= -----END CERTIFICATE-----Generated at Wed Jul 2 16:32:52 2025 by rpki-client