$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa File: ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa (raw, json) Hash identifier: 9NGqxnOCVYB/pK3l3prhd53cAWKnKUj5OLqplS4iJNs= Subject key identifier: 93:8C:10:07:98:EE:61:7C:39:0C:0C:73:0F:EE:62:ED:E0:05:83:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A399083E3CC90C86D3B9DFA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa Signing time: Tue 17 Jun 2025 20:33:01 +0000 ROA not before: Tue 17 Jun 2025 20:33:01 +0000 ROA not after: Mon 15 Sep 2025 20:33:01 +0000 asID: 22773 IP address blocks: 68.2.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:90:83:e3:cc:90:c8:6d:3b:9d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 17 20:33:01 2025 GMT Not After : Sep 15 20:33:01 2025 GMT Subject: CN=8f7548ca-189b-4f76-a01a-1aa7bc7b055b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:85:d9:5a:43:7e:0b:4f:8c:a0:6f:b6:e3: 9a:28:b3:ba:f9:ee:a8:31:d8:cb:40:22:37:33:2c: 12:9c:19:b8:ce:4c:25:97:ca:2f:24:5c:ae:78:3e: da:4f:2f:a6:10:e2:38:e2:34:e1:a0:fa:c8:8b:27: 32:cf:81:79:f5:8c:ca:9c:02:9d:7e:82:92:0e:b4: 81:77:90:c9:fd:6f:8d:57:86:49:d5:7e:fc:8a:7b: 3a:8c:65:6e:0d:a7:9b:26:72:f4:02:29:63:2f:5c: 9a:5a:eb:00:99:45:43:3c:40:93:5c:ac:83:0f:b1: ac:73:42:ce:d7:c2:ef:e0:fc:91:96:b8:71:c1:98: b8:d5:3f:0e:c3:24:37:5a:2f:c4:f0:93:57:a6:39: 52:f0:24:c6:95:73:1f:01:14:7e:e6:11:02:a6:f7: 0a:bb:6e:52:4d:4c:f0:f0:db:8c:70:33:c0:43:d5: 82:c3:44:de:66:6f:67:d3:1a:68:31:5f:90:e5:89: 71:ce:a3:2e:30:73:d7:51:73:dc:af:cd:77:6d:1e: 19:3a:0f:ad:f7:20:ed:75:96:a3:cb:f2:ac:f8:ad: 99:ed:1d:6b:26:67:74:a6:f3:25:74:9b:9f:75:70: c7:1c:5f:f2:a7:03:68:c5:09:02:dc:6f:1d:1b:e9: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8C:10:07:98:EE:61:7C:39:0C:0C:73:0F:EE:62:ED:E0:05:83:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccf3243a-423f-3a3f-98b4-121ac45e00a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:77:b5:a4:93:b6:f0:e6:a9:b4:df:f3:39:3f:15:7e:ca:78: 94:7c:75:98:f7:1f:41:9d:bb:b4:96:91:24:ea:bb:2c:70:e2: d9:cf:60:5e:3a:8a:b8:c9:fe:6d:ee:a5:e0:ce:60:bf:85:65: 76:2e:12:c0:8d:cd:2f:c8:02:69:73:be:62:2a:a5:ed:97:6a: 84:85:ee:1b:8d:90:c2:97:04:64:0f:71:9e:b2:d5:ca:c3:d5: 28:00:2a:5b:65:ad:86:a1:ba:05:c0:9e:ff:eb:ff:5d:56:32: 5a:7b:4b:53:82:96:e6:91:c7:82:91:4a:f7:12:26:d6:8d:e5: 19:2f:40:f9:fd:9a:56:a8:9d:11:60:e0:37:12:72:37:49:62: 82:eb:a7:cd:bb:91:cf:a2:58:80:42:67:1c:31:f8:cd:d8:2c: fb:01:f8:9a:04:ee:94:2e:7f:d2:21:44:2b:53:6d:f3:f4:5e: ed:3a:f8:ff:a8:b6:6b:2c:da:70:67:f0:f1:f7:09:ba:60:89: 9f:6d:37:5e:97:1c:ac:75:cc:20:9b:60:09:f7:d0:07:b7:13: eb:dc:74:c8:12:d2:91:79:a5:1a:1d:fb:ef:3e:45:53:16:ad: aa:3b:ad:6b:cd:a2:ea:9d:19:9c:72:9c:17:c7:24:e7:d3:37: 2f:90:69:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kIPjzJDIbTud+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxNzIwMzMwMVoXDTI1MDkxNTIwMzMwMVowLzEtMCsGA1UEAxMk OGY3NTQ4Y2EtMTg5Yi00Zjc2LWEwMWEtMWFhN2JjN2IwNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZiF2VpDfgtPjKBvtuOaKLO6+e6oMdjLQCI3 MywSnBm4zkwll8ovJFyueD7aTy+mEOI44jThoPrIiycyz4F59YzKnAKdfoKSDrSB d5DJ/W+NV4ZJ1X78ins6jGVuDaebJnL0AiljL1yaWusAmUVDPECTXKyDD7Gsc0LO 18Lv4PyRlrhxwZi41T8OwyQ3Wi/E8JNXpjlS8CTGlXMfARR+5hECpvcKu25STUzw 8NuMcDPAQ9WCw0TeZm9n0xpoMV+Q5YlxzqMuMHPXUXPcr813bR4ZOg+t9yDtdZaj y/Ks+K2Z7R1rJmd0pvMldJufdXDHHF/ypwNoxQkC3G8dG+l/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOMEAeY7mF8OQwMcw/uYu3gBYOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2NmMzI0M2EtNDIzZi0z YTNmLTk4YjQtMTIxYWM0NWUwMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd3taSTtvDmqbTf8zk/FX7KeJR8dZj3H0Gdu7SWkSTquyxw4tnPYF46 irjJ/m3upeDOYL+FZXYuEsCNzS/IAmlzvmIqpe2XaoSF7huNkMKXBGQPcZ6y1crD 1SgAKltlrYahugXAnv/r/11WMlp7S1OCluaRx4KRSvcSJtaN5RkvQPn9mlaonRFg 4DcScjdJYoLrp827kc+iWIBCZxwx+M3YLPsB+JoE7pQuf9IhRCtTbfP0Xu06+P+o tmss2nBn8PH3CbpgiZ9tN16XHKx1zCCbYAn30Ae3E+vcdMgS0pF5pRod++8+RVMW rao7rWvNouqdGZxynBfHJOfTNy+QaTk= -----END CERTIFICATE-----Generated at Mon Jun 30 18:00:09 2025 by rpki-client