$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa File: cae32259-205b-3e24-9439-5fb4899e96a0.roa (raw, json) Hash identifier: PqF1XKCzMHAsSoyGmYp3lMllrXL9fX4ydVYQ6XQ3fUM= Subject key identifier: D3:8B:B6:07:66:B1:99:29:23:81:59:80:82:0C:12:02:34:2F:E1:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6F9FE07C9F8ED590C4080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa Signing time: Fri 20 Jun 2025 09:28:56 +0000 ROA not before: Fri 20 Jun 2025 09:28:56 +0000 ROA not after: Thu 18 Sep 2025 09:28:56 +0000 asID: 22773 IP address blocks: 68.104.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:f9:fe:07:c9:f8:ed:59:0c:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:56 2025 GMT Not After : Sep 18 09:28:56 2025 GMT Subject: CN=fafc9ee7-88c9-4646-a1eb-6ad182238f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:80:c3:a0:22:f2:68:b8:b6:16:a4:51:e4: 22:35:ac:07:61:12:e3:32:a1:5a:24:c6:fc:55:85: c9:54:fd:6b:94:ff:96:3d:99:1c:94:96:a3:47:b1: 83:30:73:b7:1f:03:72:9a:1a:f2:c6:d7:52:84:cf: fc:40:74:da:5e:01:42:3d:7b:f4:8e:c6:9d:d1:a1: 69:1b:26:2c:ce:40:c7:35:f2:c8:7f:c6:bf:23:ca: 95:4e:42:fd:a4:9f:bb:84:63:63:2d:e3:8b:5d:c1: 5f:9c:cc:05:08:20:c0:1a:fa:bb:f3:4f:0c:23:14: 1e:b2:fb:6b:ca:06:6d:98:44:e8:46:32:5d:85:1d: 7e:d2:ae:e5:f7:a9:82:fc:e1:96:5e:5e:1f:f2:fe: 57:31:4d:2d:72:6f:3b:e2:90:03:b3:07:b8:62:6c: cc:68:7b:47:33:fc:4f:d3:9f:1e:60:24:e9:fd:cf: ce:a5:5b:fd:4b:0f:c4:0d:4f:97:49:02:f2:95:7a: 1b:88:0a:05:4f:05:e5:8a:43:27:e6:b5:ab:4b:d6: aa:57:9c:a3:a8:72:f6:16:72:2a:db:75:65:37:81: f9:8c:c6:f4:f6:e0:ba:94:ac:1f:56:bc:d9:8d:6c: 6e:60:97:6b:20:f4:ae:d4:8e:65:05:aa:a0:66:7b: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8B:B6:07:66:B1:99:29:23:81:59:80:82:0C:12:02:34:2F:E1:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cae32259-205b-3e24-9439-5fb4899e96a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:8f:56:0e:70:40:8e:17:12:e1:79:38:63:cf:00:61:14:cc: eb:11:c8:c6:3f:29:cd:84:7f:85:2e:e9:5e:10:c1:65:ff:99: 90:07:19:2c:94:6f:11:a6:c3:b2:f2:9c:fa:91:6c:e9:4e:c0: 97:a4:66:aa:ed:5a:87:48:4c:74:3d:4d:c4:85:c9:68:15:49: 2c:7c:e3:c3:e3:b1:60:c3:fb:30:fb:cc:8b:c3:d2:07:7c:1a: 65:54:65:5f:ff:43:f6:7b:b5:e2:d7:a8:f7:e0:83:fa:09:9a: 96:a4:4b:7c:74:eb:80:1d:0a:e6:75:e9:d5:30:0b:b6:5c:8d: de:4a:98:e8:f7:7b:0e:ae:6e:89:f3:ae:53:70:f7:01:a5:5c: 68:dd:00:cf:5c:73:19:56:94:1e:c3:cd:33:89:51:21:92:5e: 95:f4:04:83:39:0f:c8:df:4e:bf:3c:1d:35:b8:52:e5:c0:05: fd:20:65:c5:b7:51:67:55:ab:e3:62:a3:c7:ab:56:c0:8d:07: 89:40:0d:aa:5a:66:c8:7b:ce:b8:7a:0f:0d:77:b6:05:19:4e: 03:c4:24:0a:e0:f3:92:7b:c2:fc:6a:b8:8f:ea:83:83:42:ad: a4:7a:c3:9c:07:82:2c:0b:e0:93:47:2d:0d:22:8c:b8:43:b1: 9e:8d:b8:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApvn+B8n47VkMQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5Mjg1NloXDTI1MDkxODA5Mjg1NlowLzEtMCsGA1UEAxMk ZmFmYzllZTctODhjOS00NjQ2LWExZWItNmFkMTgyMjM4Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9+Aw6Ai8mi4thakUeQiNawHYRLjMqFaJMb8 VYXJVP1rlP+WPZkclJajR7GDMHO3HwNymhryxtdShM/8QHTaXgFCPXv0jsad0aFp GyYszkDHNfLIf8a/I8qVTkL9pJ+7hGNjLeOLXcFfnMwFCCDAGvq7808MIxQesvtr ygZtmEToRjJdhR1+0q7l96mC/OGWXl4f8v5XMU0tcm874pADswe4YmzMaHtHM/xP 058eYCTp/c/OpVv9Sw/EDU+XSQLylXobiAoFTwXlikMn5rWrS9aqV5yjqHL2FnIq 23VlN4H5jMb09uC6lKwfVrzZjWxuYJdrIPSu1I5lBaqgZnu6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOLtgdmsZkpI4FZgIIMEgI0L+G5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FlMzIyNTktMjA1Yi0z ZTI0LTk0MzktNWZiNDg5OWU5NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHePVg5wQI4XEuF5OGPPAGEUzOsRyMY/Kc2Ef4Uu6V4QwWX/mZAHGSyU bxGmw7LynPqRbOlOwJekZqrtWodITHQ9TcSFyWgVSSx848PjsWDD+zD7zIvD0gd8 GmVUZV//Q/Z7teLXqPfgg/oJmpakS3x064AdCuZ16dUwC7Zcjd5KmOj3ew6ubonz rlNw9wGlXGjdAM9ccxlWlB7DzTOJUSGSXpX0BIM5D8jfTr88HTW4UuXABf0gZcW3 UWdVq+Nio8erVsCNB4lADapaZsh7zrh6Dw13tgUZTgPEJArg85J7wvxquI/qg4NC raR6w5wHgiwL4JNHLQ0ijLhDsZ6NuAs= -----END CERTIFICATE-----Generated at Wed Jul 2 00:51:56 2025 by rpki-client