$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa File: baf52cea-1a37-3a90-875b-5f7337efea59.roa (raw, json) Hash identifier: a/uP97PvigM4+MbPvMkEjsi68HBuzrZ7mrNH7dsTP+c= Subject key identifier: AF:B0:45:C9:73:6E:6B:6E:6C:53:B0:0D:A3:6C:77:72:41:DB:F9:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD5C101D7901513BEB99140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa Signing time: Thu 19 Jun 2025 09:15:46 +0000 ROA not before: Thu 19 Jun 2025 09:15:46 +0000 ROA not after: Wed 17 Sep 2025 09:15:46 +0000 asID: 22773 IP address blocks: 68.106.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d5:c1:01:d7:90:15:13:be:b9:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:15:46 2025 GMT Not After : Sep 17 09:15:46 2025 GMT Subject: CN=ca6c93c2-1a77-45f7-82d2-e449d1ed8309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:1e:9c:c1:e9:3e:ea:19:c1:c7:61:1f:84: f6:37:b2:af:4a:24:d7:aa:c6:79:af:79:7e:ee:aa: 1b:f9:60:57:23:84:f9:9e:fe:93:04:e4:ba:0c:97: 14:60:48:53:52:bc:92:5e:0e:32:07:fe:89:39:a2: 11:73:eb:0d:22:70:f6:2d:84:ed:34:58:c0:b4:8c: 85:2c:0a:4f:a8:41:7d:b5:c7:6c:7a:78:85:93:bf: 31:9f:52:3f:1e:a1:d3:35:ae:6e:ae:60:b6:23:60: f6:8f:92:ee:02:be:b1:86:35:74:32:9d:41:4a:ed: 4b:1c:14:7f:05:0c:2e:85:4b:33:ec:1f:00:18:2b: 43:26:5a:13:5b:1f:50:93:ba:18:e6:ba:f5:79:4c: d3:8a:41:9d:c8:61:10:d2:7a:01:06:4c:c4:58:88: f6:a8:bd:21:e1:7f:b2:89:b1:5e:28:ad:d7:69:91: e9:47:34:bb:f9:9c:02:68:7b:44:07:fe:3c:eb:e6: 7d:5b:6a:af:61:60:ca:47:d8:90:28:d2:14:ae:20: 26:e3:31:26:68:6c:b8:89:01:c4:c7:16:54:af:0b: 0f:ee:bd:82:19:29:3f:b0:78:6b:d4:43:ce:b5:e8: c2:cd:2f:68:95:02:74:18:ae:87:5a:5a:0a:5a:4b: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:45:C9:73:6E:6B:6E:6C:53:B0:0D:A3:6C:77:72:41:DB:F9:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:db:e8:ec:0b:f2:45:52:2c:1d:bb:77:20:8d:89:87:a5:53: 22:de:ab:bb:ce:77:69:4e:94:a7:49:a1:8b:3f:19:81:8e:a8: cb:68:ec:96:83:e2:09:9a:f7:0a:dd:a0:57:a3:2c:64:93:e8: 23:ea:3e:a9:03:be:f5:28:d3:94:ab:61:0a:bb:66:9f:ca:50: 0f:37:27:8f:60:fe:07:46:3b:66:95:32:49:64:53:92:65:2c: 71:a9:ba:48:94:b9:83:eb:41:6b:cd:f3:66:a4:5e:dc:eb:31: 79:58:ee:3d:eb:31:87:50:f4:6b:3f:83:49:56:f2:82:8d:11: e6:1d:e4:63:c0:bb:76:75:39:b2:3b:fb:c8:22:22:e8:38:0e: 9e:e6:2b:9d:90:40:2e:e6:b5:84:0f:6d:f6:30:9c:21:f6:1b: 88:28:2c:68:8c:a9:0e:da:ef:7b:38:be:36:5f:83:93:ed:57: 8f:b3:4e:aa:52:92:30:76:cd:bd:49:65:e1:bd:e1:3b:43:5b: e8:38:08:6e:0a:4a:b3:c0:67:ed:b1:d2:c5:49:54:ae:8a:8b: 86:81:41:81:42:14:77:af:f3:e5:0d:cf:3f:18:c7:45:b8:ab: 48:0d:e1:7b:81:8b:07:96:9f:38:fa:77:b7:31:f7:24:4d:dc: 01:68:ba:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91cEB15AVE765kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTU0NloXDTI1MDkxNzA5MTU0NlowLzEtMCsGA1UEAxMk Y2E2YzkzYzItMWE3Ny00NWY3LTgyZDItZTQ0OWQxZWQ4MzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGEenMHpPuoZwcdhH4T2N7KvSiTXqsZ5r3l+ 7qob+WBXI4T5nv6TBOS6DJcUYEhTUrySXg4yB/6JOaIRc+sNInD2LYTtNFjAtIyF LApPqEF9tcdseniFk78xn1I/HqHTNa5urmC2I2D2j5LuAr6xhjV0Mp1BSu1LHBR/ BQwuhUsz7B8AGCtDJloTWx9Qk7oY5rr1eUzTikGdyGEQ0noBBkzEWIj2qL0h4X+y ibFeKK3XaZHpRzS7+ZwCaHtEB/486+Z9W2qvYWDKR9iQKNIUriAm4zEmaGy4iQHE xxZUrwsP7r2CGSk/sHhr1EPOtejCzS9olQJ0GK6HWloKWkuK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+wRclzbmtubFOwDaNsd3JB2/lpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFmNTJjZWEtMWEzNy0z YTkwLTg3NWItNWY3MzM3ZWZlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXb6OwL8kVSLB27dyCNiYelUyLeq7vOd2lOlKdJoYs/GYGOqMto7JaD 4gma9wrdoFejLGST6CPqPqkDvvUo05SrYQq7Zp/KUA83J49g/gdGO2aVMklkU5Jl LHGpukiUuYPrQWvN82akXtzrMXlY7j3rMYdQ9Gs/g0lW8oKNEeYd5GPAu3Z1ObI7 +8giIug4Dp7mK52QQC7mtYQPbfYwnCH2G4goLGiMqQ7a73s4vjZfg5PtV4+zTqpS kjB2zb1JZeG94TtDW+g4CG4KSrPAZ+2x0sVJVK6Ki4aBQYFCFHev8+UNzz8Yx0W4 q0gN4XuBiweWnzj6d7cx9yRN3AFoumM= -----END CERTIFICATE-----Generated at Tue Jul 1 06:43:31 2025 by rpki-client