$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cafbd35e-600e-3e24-9dd0-dcf91d868083.roa File: cafbd35e-600e-3e24-9dd0-dcf91d868083.roa (raw, json) Hash identifier: vOYyYi35nvSdisnkTZxYUPfQynmtgkUyXg3eWPezGiw= Subject key identifier: DD:7C:77:0B:8A:7B:FF:CA:7C:89:BB:63:2C:15:BB:32:DA:51:61:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A6CA5A5C8073CE9920ADC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cafbd35e-600e-3e24-9dd0-dcf91d868083.roa Signing time: Fri 20 Jun 2025 09:28:34 +0000 ROA not before: Fri 20 Jun 2025 09:28:34 +0000 ROA not after: Thu 18 Sep 2025 09:28:34 +0000 asID: 22773 IP address blocks: 68.96.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a6:ca:5a:5c:80:73:ce:99:20:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:28:34 2025 GMT Not After : Sep 18 09:28:34 2025 GMT Subject: CN=7f2ebc55-07ad-4aa2-bd85-bc994f05c244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:dd:36:4b:ee:a4:d9:57:78:99:f7:f1:d9: a6:ab:8a:ea:99:89:af:6f:90:ae:af:40:98:e4:9c: b8:80:04:ff:72:aa:c4:b4:61:db:2d:91:c9:51:bb: 66:b7:0c:d2:7e:71:eb:61:f2:6d:f8:2d:2d:fb:63: 70:a4:e4:54:91:fd:ec:3b:b8:08:ae:19:62:ea:92: 4e:b9:c6:37:3b:3a:70:aa:65:ed:af:2d:d4:6d:53: 89:41:a6:ae:ad:d1:df:2c:50:3d:b6:89:f0:7b:24: b3:fa:90:25:3e:f0:ce:f6:7f:5b:e9:6c:c8:bd:b7: ad:b7:b5:d5:b3:7f:f1:da:8b:f1:6d:52:66:2e:ec: a2:6b:6e:fd:c6:15:ed:a6:71:e5:e8:b1:04:93:3d: b3:56:54:b4:59:be:27:7d:c1:b1:cb:e5:38:89:0a: 74:39:8d:4f:e7:53:a2:c6:4b:fc:f2:77:1c:58:78: e4:5f:fc:58:69:dd:af:f5:68:fb:c8:19:f9:d8:2e: 0e:61:3c:31:8c:13:43:5c:50:62:1e:1f:cb:99:16: 25:cd:52:9e:93:25:8b:42:ea:57:92:d9:70:b3:3c: a7:92:47:a8:ad:36:dd:8b:44:bd:f5:6a:c9:7c:7a: 7e:cb:f8:0a:d0:0c:87:bc:57:b9:56:19:0f:20:ca: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:77:0B:8A:7B:FF:CA:7C:89:BB:63:2C:15:BB:32:DA:51:61:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cafbd35e-600e-3e24-9dd0-dcf91d868083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9c:03:39:34:af:1d:9c:87:a4:8e:b0:d2:c2:01:8e:ce:25: 6a:59:54:6f:49:e4:00:95:f7:56:d0:35:41:65:9c:d2:0b:5a: 34:e4:35:8d:9f:4a:c8:b9:da:4f:59:05:4b:b5:df:04:31:8c: fe:df:dd:c2:14:6d:65:a0:10:34:2b:99:56:d4:c2:7b:f2:f2: 2c:86:77:0e:53:48:22:21:66:b7:f4:e2:14:8f:6b:f2:b6:71: b3:3f:86:98:c2:d2:2d:03:29:0c:11:8a:bf:e8:68:42:05:1a: 17:3d:f8:a8:4c:bc:fc:63:2d:88:1e:91:88:d6:eb:e6:11:a4: 76:8b:63:4a:74:b6:d3:8d:ef:19:69:f6:54:9a:99:8c:ab:df: ca:5c:64:94:a4:5f:7b:43:dd:1a:37:b5:ce:99:18:40:ae:aa: b8:f8:54:6b:4d:01:74:66:1d:c8:76:9a:ce:f5:34:64:6b:f6: 25:8a:fb:3b:44:12:0a:11:85:bd:58:62:48:8e:1d:48:6e:ae: c3:0e:5d:be:fd:a3:99:3a:36:c3:5c:b2:c9:a9:89:d1:1e:0a: d6:f4:b3:96:44:cf:be:5d:f3:7e:f8:63:3c:bb:cb:d5:74:f4: a5:6f:12:b6:b9:f1:58:f4:1f:0d:8d:a6:61:84:f2:0f:d1:e1: be:cb:64:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpApspaXIBzzpkgrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MjgzNFoXDTI1MDkxODA5MjgzNFowLzEtMCsGA1UEAxMk N2YyZWJjNTUtMDdhZC00YWEyLWJkODUtYmM5OTRmMDVjMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUTdNkvupNlXeJn38dmmq4rqmYmvb5Cur0CY 5Jy4gAT/cqrEtGHbLZHJUbtmtwzSfnHrYfJt+C0t+2NwpORUkf3sO7gIrhli6pJO ucY3OzpwqmXtry3UbVOJQaaurdHfLFA9tonweySz+pAlPvDO9n9b6WzIvbett7XV s3/x2ovxbVJmLuyia279xhXtpnHl6LEEkz2zVlS0Wb4nfcGxy+U4iQp0OY1P51Oi xkv88nccWHjkX/xYad2v9Wj7yBn52C4OYTwxjBNDXFBiHh/LmRYlzVKekyWLQupX ktlwszynkkeorTbdi0S99WrJfHp+y/gK0AyHvFe5VhkPIMp9pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN18dwuKe//KfIm7YywVuzLaUWH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FmYmQzNWUtNjAwZS0z ZTI0LTlkZDAtZGNmOTFkODY4MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAycAzk0rx2ch6SOsNLCAY7OJWpZVG9J5ACV91bQNUFlnNILWjTkNY2f Ssi52k9ZBUu13wQxjP7f3cIUbWWgEDQrmVbUwnvy8iyGdw5TSCIhZrf04hSPa/K2 cbM/hpjC0i0DKQwRir/oaEIFGhc9+KhMvPxjLYgekYjW6+YRpHaLY0p0ttON7xlp 9lSamYyr38pcZJSkX3tD3Ro3tc6ZGECuqrj4VGtNAXRmHch2ms71NGRr9iWK+ztE EgoRhb1YYkiOHUhursMOXb79o5k6NsNcssmpidEeCtb0s5ZEz75d8374Yzy7y9V0 9KVvEra58Vj0Hw2NpmGE8g/R4b7LZPI= -----END CERTIFICATE-----Generated at Wed Jul 2 06:11:20 2025 by rpki-client