$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b98a3b7a-105c-3528-831e-22b4064fd35f.roa File: b98a3b7a-105c-3528-831e-22b4064fd35f.roa (raw, json) Hash identifier: 6gHbun+aFI1M4ht0UnC5Pc5OnvKnv+R/tzxqZM1nYj8= Subject key identifier: 5E:88:BE:5F:E0:9F:07:96:E4:FD:F8:46:9B:A1:44:F7:85:7E:DF:22 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA2093390E3D2EDEAC5C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b98a3b7a-105c-3528-831e-22b4064fd35f.roa Signing time: Fri 20 Jun 2025 09:35:17 +0000 ROA not before: Fri 20 Jun 2025 09:35:17 +0000 ROA not after: Thu 18 Sep 2025 09:35:17 +0000 asID: 22773 IP address blocks: 174.68.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:20:93:39:0e:3d:2e:de:ac:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:17 2025 GMT Not After : Sep 18 09:35:17 2025 GMT Subject: CN=5b2845eb-fd04-4637-930a-6ceab6ea642e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2c:17:c9:3d:a0:57:a9:89:32:88:cb:1d:a3: 86:14:30:11:bf:c6:d5:ee:91:fa:42:5f:83:c8:5a: 1b:c1:16:7a:a3:1e:bd:de:0e:31:32:26:e3:47:a6: 3a:fa:5c:6c:a7:71:ef:b7:39:45:12:e4:8f:29:93: fe:4e:93:91:ba:9d:ed:75:54:33:93:23:ca:96:6d: ee:2c:aa:86:17:f9:7a:07:c7:89:16:3d:7b:d9:f8: 52:5d:8b:3f:ec:b6:01:6c:aa:88:91:0e:91:c3:c8: 64:21:63:86:ed:1c:90:11:19:1f:16:a0:67:a8:af: 2e:f3:0c:00:1a:2e:ca:05:5a:57:5e:19:f3:36:79: ac:e6:38:d1:d0:44:fc:be:d3:54:4b:62:2b:b6:b4: 31:45:c6:0f:ec:f8:34:ec:cc:e6:65:ec:58:35:f8: 79:df:ae:62:88:dc:fe:ba:04:fa:e5:27:45:5e:3f: 77:c0:be:ed:be:94:5a:03:5a:5c:a6:f9:fc:5b:c6: ad:fb:c7:1e:82:66:4f:88:05:0b:32:3e:d5:15:f3: 41:6a:25:86:91:0c:b0:7b:36:a7:05:78:2f:45:c8: ec:54:2d:d7:81:31:83:c3:96:a9:d9:7a:f7:b7:10: 21:14:02:98:1b:a7:64:9c:11:f0:fd:6e:51:a9:3e: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:88:BE:5F:E0:9F:07:96:E4:FD:F8:46:9B:A1:44:F7:85:7E:DF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b98a3b7a-105c-3528-831e-22b4064fd35f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:87:98:30:01:2a:ce:92:e5:4d:25:6e:4d:c6:a2:56:bb:a2: b5:9a:2b:69:71:d7:2d:6b:49:03:d5:b8:15:c5:47:91:6d:20: 5b:b5:c8:46:ed:ce:09:66:c2:8c:e4:49:5b:5c:00:fb:b5:13: 4f:31:ec:94:d4:5f:36:0e:d1:d1:d7:db:c8:8b:e2:f5:4d:01: fc:bb:e9:02:0c:cc:f4:d4:64:4c:d9:b4:55:ca:11:5e:b0:8e: 0b:37:36:0b:0b:c1:80:d0:a4:28:5b:0c:f1:21:c0:c6:8f:20: b2:ae:29:9b:56:23:7d:49:75:3c:b2:7f:f6:35:93:54:08:9c: 0c:e7:31:f8:74:74:f8:02:9f:d7:e2:45:70:bd:f3:ee:0c:5a: b2:f5:6a:76:19:66:98:21:e7:ac:33:7e:5c:8b:bd:7f:54:17: 8a:a9:15:18:7c:ce:8a:5e:d6:de:0e:c4:3f:08:1f:06:28:d6: 94:57:f5:37:c8:8a:24:31:d6:a2:5a:cd:94:12:4e:e0:6a:f0: 7b:d3:e5:8f:53:1f:2e:ed:4c:6a:63:ed:d2:6a:f7:34:28:8c: ba:07:f1:05:71:7d:9f:8a:4d:a8:e3:24:c4:3d:c4:a2:a5:17: 5e:c7:38:2e:43:e0:0a:9f:c3:d4:71:ef:89:11:e7:0d:93:b1: e3:64:26:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqiCTOQ49Lt6sXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxN1oXDTI1MDkxODA5MzUxN1owLzEtMCsGA1UEAxMk NWIyODQ1ZWItZmQwNC00NjM3LTkzMGEtNmNlYWI2ZWE2NDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSwXyT2gV6mJMojLHaOGFDARv8bV7pH6Ql+D yFobwRZ6ox693g4xMibjR6Y6+lxsp3HvtzlFEuSPKZP+TpORup3tdVQzkyPKlm3u LKqGF/l6B8eJFj172fhSXYs/7LYBbKqIkQ6Rw8hkIWOG7RyQERkfFqBnqK8u8wwA Gi7KBVpXXhnzNnms5jjR0ET8vtNUS2IrtrQxRcYP7Pg07MzmZexYNfh5365iiNz+ ugT65SdFXj93wL7tvpRaA1pcpvn8W8at+8cegmZPiAULMj7VFfNBaiWGkQywezan BXgvRcjsVC3XgTGDw5ap2Xr3txAhFAKYG6dknBHw/W5RqT4+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6Ivl/gnweW5P34RpuhRPeFft8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk4YTNiN2EtMTA1Yy0z NTI4LTgzMWUtMjJiNDA2NGZkMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESHmDABKs6S5U0lbk3Gola7orWaK2lx1y1rSQPVuBXFR5FtIFu1yEbt zglmwozkSVtcAPu1E08x7JTUXzYO0dHX28iL4vVNAfy76QIMzPTUZEzZtFXKEV6w jgs3NgsLwYDQpChbDPEhwMaPILKuKZtWI31JdTyyf/Y1k1QInAznMfh0dPgCn9fi RXC98+4MWrL1anYZZpgh56wzflyLvX9UF4qpFRh8zope1t4OxD8IHwYo1pRX9TfI iiQx1qJazZQSTuBq8HvT5Y9THy7tTGpj7dJq9zQojLoH8QVxfZ+KTajjJMQ9xKKl F17HOC5D4Aqfw9Rx74kR5w2TseNkJgQ= -----END CERTIFICATE-----Generated at Tue Jul 1 20:39:29 2025 by rpki-client