$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd54d97-494a-35df-a2e9-1de9aa2fca4e.roa File: 9cd54d97-494a-35df-a2e9-1de9aa2fca4e.roa (raw, json) Hash identifier: tN7BiPsxaB8cas7Y9F5FVRjIu4iFDJdcKrfOg8hO9nE= Subject key identifier: 99:8E:1A:CC:20:E6:5A:EA:5C:C8:E4:9D:B8:58:AA:E2:97:3A:DE:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7A82469A20F71D2CDD080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd54d97-494a-35df-a2e9-1de9aa2fca4e.roa Signing time: Fri 20 Jun 2025 09:30:18 +0000 ROA not before: Fri 20 Jun 2025 09:30:18 +0000 ROA not after: Thu 18 Sep 2025 09:30:18 +0000 asID: 22773 IP address blocks: 68.224.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:a8:24:69:a2:0f:71:d2:cd:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:18 2025 GMT Not After : Sep 18 09:30:18 2025 GMT Subject: CN=4f874e86-27c2-4fad-9172-2c981afd607e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:31:b8:45:bb:66:31:7e:df:bd:7e:5a:b1: 72:d3:67:44:a7:22:bc:9e:e5:5d:64:bc:c3:6d:67: 81:ff:e0:76:8b:30:52:ee:c8:f2:db:b7:24:6e:6b: d7:69:4f:2f:67:5e:06:03:bb:c1:7d:be:dd:c2:f7: 9d:2f:26:af:8a:d0:1d:c1:a1:86:d7:8a:7c:1f:1a: 75:53:0e:27:b5:16:a1:68:e5:fa:a8:af:59:ce:24: d7:cb:d2:cd:07:41:f7:3e:4c:41:b8:a8:44:f1:b3: cf:ec:76:b4:9e:1d:be:b5:58:30:b3:37:fb:31:aa: ea:46:3c:6a:e1:42:ea:5d:ed:b2:dd:3c:25:48:bb: 59:c9:73:16:21:17:a0:6a:b3:9c:72:7e:39:b1:7d: 14:95:3d:0f:da:8a:15:78:29:5b:4a:05:13:f4:e0: 55:fe:bf:8c:13:a1:80:f5:3b:b9:1b:4b:10:59:f0: 16:7d:0f:3c:f5:0e:6e:0d:4b:d0:72:5b:66:36:ba: df:b3:5d:ce:a4:11:a7:79:da:24:83:22:ad:83:61: 4e:79:d5:05:9d:14:75:81:d2:5d:b1:de:92:26:13: d2:f9:3a:35:63:05:bf:e0:88:40:ac:78:de:ec:ad: 65:61:4b:89:28:01:cc:3f:d8:5b:d3:1c:a4:bb:5f: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8E:1A:CC:20:E6:5A:EA:5C:C8:E4:9D:B8:58:AA:E2:97:3A:DE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd54d97-494a-35df-a2e9-1de9aa2fca4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9e:18:e1:9a:49:bd:7b:db:b1:cc:3e:50:4b:bd:ef:0f:56: e3:a2:ca:f6:fa:f0:76:d6:b8:30:16:8a:b2:82:68:8a:1c:75: 0c:27:59:a1:86:5e:9c:a4:43:ae:3b:3e:9b:06:b7:2b:0a:fd: 14:5d:b5:ae:81:07:cc:0d:c9:b0:47:60:13:73:48:61:68:bb: e6:63:68:19:80:85:89:e3:03:14:02:ac:b1:37:44:e3:00:d9: 94:7d:78:eb:52:9a:a9:b4:57:5c:31:b0:7c:92:fc:68:e4:d6: db:42:15:38:ea:e7:7f:46:64:e8:05:c2:87:f1:6f:a8:f7:33: bf:a7:a4:e9:21:c0:07:31:7c:5c:28:62:92:06:dd:39:3e:26: f8:3f:e7:ef:6e:c4:5e:2e:d9:97:c8:4d:62:6a:e1:b7:62:6e: 5a:17:34:07:4d:5b:6e:71:f7:7c:d7:39:fd:01:d4:f3:a8:3f: 3b:50:99:56:2b:f5:ed:ff:d4:64:a3:51:cb:cb:5a:9c:45:dd: 56:b0:1c:04:14:00:de:74:75:1a:52:f6:5e:c5:18:5b:20:c7: 9b:4c:29:91:af:75:45:c1:1d:3f:05:82:50:01:92:8e:ca:dc: 5c:f5:35:1f:91:8c:da:76:a4:a7:02:ca:c3:d7:1e:9b:0e:45: b2:2f:95:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp6gkaaIPcdLN0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzAxOFoXDTI1MDkxODA5MzAxOFowLzEtMCsGA1UEAxMk NGY4NzRlODYtMjdjMi00ZmFkLTkxNzItMmM5ODFhZmQ2MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQxuEW7ZjF+371+WrFy02dEpyK8nuVdZLzD bWeB/+B2izBS7sjy27ckbmvXaU8vZ14GA7vBfb7dwvedLyavitAdwaGG14p8Hxp1 Uw4ntRahaOX6qK9ZziTXy9LNB0H3PkxBuKhE8bPP7Ha0nh2+tVgwszf7MarqRjxq 4ULqXe2y3TwlSLtZyXMWIRegarOccn45sX0UlT0P2ooVeClbSgUT9OBV/r+ME6GA 9Tu5G0sQWfAWfQ889Q5uDUvQcltmNrrfs13OpBGnedokgyKtg2FOedUFnRR1gdJd sd6SJhPS+To1YwW/4IhArHje7K1lYUuJKAHMP9hb0xyku1/awQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmOGswg5lrqXMjknbhYquKXOt6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWNkNTRkOTctNDk0YS0z NWRmLWEyZTktMWRlOWFhMmZjYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACeGOGaSb1727HMPlBLve8PVuOiyvb68HbWuDAWirKCaIocdQwnWaGG XpykQ647PpsGtysK/RRdta6BB8wNybBHYBNzSGFou+ZjaBmAhYnjAxQCrLE3ROMA 2ZR9eOtSmqm0V1wxsHyS/Gjk1ttCFTjq539GZOgFwofxb6j3M7+npOkhwAcxfFwo YpIG3Tk+Jvg/5+9uxF4u2ZfITWJq4bdibloXNAdNW25x93zXOf0B1POoPztQmVYr 9e3/1GSjUcvLWpxF3VawHAQUAN50dRpS9l7FGFsgx5tMKZGvdUXBHT8FglABko7K 3Fz1NR+RjNp2pKcCysPXHpsORbIvlR8= -----END CERTIFICATE-----Generated at Tue Jul 1 17:06:40 2025 by rpki-client