$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1d99754-b012-3080-9997-87917cb949a9.roa File: b1d99754-b012-3080-9997-87917cb949a9.roa (raw, json) Hash identifier: EI1VgL5I8OiSgPvuSRJOKUvfkNSYZ1d+WGBtyj/7Hsg= Subject key identifier: DF:E3:3A:5B:65:D6:06:2C:26:8C:55:13:C2:CD:56:A1:75:EC:09:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10571B2F72D4492456DF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1d99754-b012-3080-9997-87917cb949a9.roa Signing time: Wed 18 Jun 2025 18:02:11 +0000 ROA not before: Wed 18 Jun 2025 18:02:11 +0000 ROA not after: Tue 16 Sep 2025 18:02:11 +0000 asID: 22773 IP address blocks: 68.3.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:57:1b:2f:72:d4:49:24:56:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:11 2025 GMT Not After : Sep 16 18:02:11 2025 GMT Subject: CN=1d40f977-1dad-4028-a114-2ba6227176cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:c0:2f:a5:05:18:5a:92:65:b0:a4:7e:09: 21:ec:0f:24:fb:d5:c8:94:22:6d:1b:b3:72:85:f3: 66:e2:e1:dd:de:cd:61:45:c9:2d:f8:d7:b6:bb:a5: 36:97:2f:07:a0:a5:f3:00:47:f4:1c:a4:f5:a1:b1: 2b:a3:89:a0:f1:d2:7b:44:8d:79:42:7d:25:f5:59: 9b:7f:44:c2:11:ec:c3:6b:16:85:ec:fa:e2:b7:1a: aa:ae:a9:46:74:a1:a2:c1:7d:d2:d1:74:45:f0:9c: 58:2c:11:02:c0:46:0a:57:a6:24:93:39:54:20:55: 63:36:9c:79:5b:94:86:37:de:0b:7e:0e:e2:2c:8c: 67:23:38:c1:2f:ce:82:da:68:cb:8d:2b:51:f1:bc: 77:eb:08:4e:b1:a8:48:18:ee:66:cb:5d:0e:d9:0f: 68:0d:40:e4:e9:b7:f0:12:8c:42:09:82:57:48:17: a0:48:20:dc:82:a8:52:e2:7f:aa:29:d8:f0:1f:d5: 0f:f1:8b:0f:c0:1b:96:9b:1a:38:46:60:14:43:0e: 56:9a:1f:47:a0:41:fa:5c:71:10:96:59:09:3e:81: 63:5b:ca:e1:3c:69:2b:d2:e1:19:2d:03:f8:5c:dc: a9:20:66:d1:d3:c4:ff:7e:ab:ce:50:89:a2:ee:6f: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:3A:5B:65:D6:06:2C:26:8C:55:13:C2:CD:56:A1:75:EC:09:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1d99754-b012-3080-9997-87917cb949a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bb:3d:43:29:27:25:f8:be:ae:4a:2f:68:42:bb:a9:5a:38: 5a:8a:d5:60:df:20:9b:cd:19:5e:fe:85:72:0a:b6:48:74:c8: 8f:ae:cd:38:03:a2:d2:e1:84:be:88:26:a2:84:01:a8:59:57: 41:66:7a:2a:28:83:65:8a:e9:ca:76:ba:31:f8:e5:ee:b4:73: ff:86:bf:bf:f6:5a:22:06:ff:98:c9:ad:d1:85:02:f4:59:3a: 22:cb:be:7b:53:eb:e3:93:18:b9:9a:73:ea:25:a0:bf:b0:f4: f1:9b:19:3c:36:b6:87:4a:c3:47:96:a2:81:66:1d:50:be:16: 22:15:d4:ef:0d:2d:46:ce:d1:d1:82:65:2d:1c:26:41:ab:be: eb:06:9b:14:5f:1b:c0:9f:f6:7b:8b:30:4b:9c:61:a1:f0:5a: c2:78:fc:44:b9:b5:ee:16:90:73:d4:75:93:4f:e4:1b:44:83: 40:82:22:9f:e6:02:aa:97:93:33:57:8c:72:49:00:cf:7d:bb: 4c:83:e3:e5:99:e2:71:89:dc:2e:77:12:bd:e8:e1:a0:2c:39: 23:25:09:68:59:9c:dd:7e:3d:a6:93:c8:5b:5b:19:d1:dd:7f: d3:11:01:1f:de:40:f9:b8:d9:c5:70:65:ce:79:49:6a:df:0a: d1:d8:61:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8EFcbL3LUSSRW3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDIxMVoXDTI1MDkxNjE4MDIxMVowLzEtMCsGA1UEAxMk MWQ0MGY5NzctMWRhZC00MDI4LWExMTQtMmJhNjIyNzE3NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxTAL6UFGFqSZbCkfgkh7A8k+9XIlCJtG7Ny hfNm4uHd3s1hRckt+Ne2u6U2ly8HoKXzAEf0HKT1obEro4mg8dJ7RI15Qn0l9Vmb f0TCEezDaxaF7PritxqqrqlGdKGiwX3S0XRF8JxYLBECwEYKV6YkkzlUIFVjNpx5 W5SGN94Lfg7iLIxnIzjBL86C2mjLjStR8bx36whOsahIGO5my10O2Q9oDUDk6bfw EoxCCYJXSBegSCDcgqhS4n+qKdjwH9UP8YsPwBuWmxo4RmAUQw5Wmh9HoEH6XHEQ llkJPoFjW8rhPGkr0uEZLQP4XNypIGbR08T/fqvOUImi7m+pNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/jOltl1gYsJoxVE8LNVqF17AlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjFkOTk3NTQtYjAxMi0z MDgwLTk5OTctODc5MTdjYjk0OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy7PUMpJyX4vq5KL2hCu6laOFqK1WDfIJvNGV7+hXIKtkh0yI+uzTgD otLhhL6IJqKEAahZV0Fmeioog2WK6cp2ujH45e60c/+Gv7/2WiIG/5jJrdGFAvRZ OiLLvntT6+OTGLmac+oloL+w9PGbGTw2todKw0eWooFmHVC+FiIV1O8NLUbO0dGC ZS0cJkGrvusGmxRfG8Cf9nuLMEucYaHwWsJ4/ES5te4WkHPUdZNP5BtEg0CCIp/m AqqXkzNXjHJJAM99u0yD4+WZ4nGJ3C53Er3o4aAsOSMlCWhZnN1+PaaTyFtbGdHd f9MRAR/eQPm42cVwZc55SWrfCtHYYRk= -----END CERTIFICATE-----Generated at Wed Jul 2 22:40:54 2025 by rpki-client