$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e821f3fe-3fa1-338e-a266-9cfd219a8b9c.roa File: e821f3fe-3fa1-338e-a266-9cfd219a8b9c.roa (raw, json) Hash identifier: cXCFJUBwuFWPxBY1N21xJJieBWGvdhG5722GyXYlvfE= Subject key identifier: D9:66:02:B2:88:46:A4:3C:D2:AB:FA:44:13:F4:C2:FC:12:98:97:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3C10B8BC30E1410D9002DA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e821f3fe-3fa1-338e-a266-9cfd219a8b9c.roa Signing time: Wed 18 Jun 2025 18:02:57 +0000 ROA not before: Wed 18 Jun 2025 18:02:57 +0000 ROA not after: Tue 16 Sep 2025 18:02:57 +0000 asID: 22773 IP address blocks: 68.99.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3c:10:b8:bc:30:e1:41:0d:90:02:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 18 18:02:57 2025 GMT Not After : Sep 16 18:02:57 2025 GMT Subject: CN=dabd5585-56a3-488b-bf08-74492d474e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:dd:fc:1f:bb:09:16:da:d6:ea:1a:e0:4e: 53:bc:e6:fe:7b:b7:42:cb:d9:33:e7:4b:16:50:a9: 52:70:7f:0c:2f:40:63:7b:dd:aa:bd:47:ff:4e:0d: 0e:7b:0f:4c:5f:88:05:04:74:42:fa:a8:85:40:0f: 04:f2:31:10:85:5b:5c:6c:79:83:ca:62:ed:8a:d5: 08:f9:d0:7c:18:87:6d:7a:c1:46:9d:4c:a2:af:ac: 83:40:d2:53:72:cf:bc:00:9e:1b:d4:43:1c:4c:40: 28:bb:49:af:6f:cf:02:de:8f:77:15:33:71:8f:7a: 23:60:e9:da:71:3f:16:1b:75:1c:2d:c9:9a:b9:d7: 4c:a0:9b:17:fb:b0:5b:2b:cc:24:50:da:0f:ff:b9: dc:f2:8e:34:17:50:c7:5f:c0:f7:2d:84:4c:51:d0: 76:1b:93:07:f5:1f:5e:82:3d:47:e2:f7:72:db:3e: d1:d2:60:24:35:b5:58:ea:d6:12:cc:f9:e6:10:17: b6:ef:3b:c2:97:dd:f8:68:8e:60:fc:45:62:b3:a1: 78:4b:de:2a:9a:17:5f:75:01:00:9e:03:c5:ab:a3: 05:06:81:ba:57:2b:1c:85:fc:62:d8:b6:d7:e4:f9: 1e:36:8f:81:04:94:d6:1a:ff:14:6e:30:5f:ec:80: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:02:B2:88:46:A4:3C:D2:AB:FA:44:13:F4:C2:FC:12:98:97:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e821f3fe-3fa1-338e-a266-9cfd219a8b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:05:da:f4:b3:aa:18:4b:93:c2:81:1d:ff:17:d5:71:d7:3d: c3:51:bc:13:bf:78:92:90:20:97:e2:70:36:15:c6:42:ad:f2: b0:a5:78:57:bc:2d:d1:fe:0e:a8:11:98:c5:95:bd:83:51:b0: 78:a1:20:c9:9b:18:3b:f3:e4:0e:46:10:d6:7b:d1:88:c3:b0: 93:cd:b2:74:e1:a8:07:bf:ed:af:5a:d6:43:80:7e:73:38:72: 50:b6:e3:03:45:90:7d:86:65:5e:da:1d:80:bc:26:9e:db:87: cf:67:49:c7:ab:02:d8:ac:ed:6b:f8:00:5f:d4:9f:3e:43:81: 9c:8b:d3:d0:01:4b:44:4f:00:c5:0b:82:3c:c3:7b:79:71:34: 5f:a1:d3:2b:c8:c4:ef:c4:a2:ad:ff:37:2f:c2:9b:4c:bb:60: 56:2e:ed:47:48:b3:68:98:99:6c:fb:a4:05:ba:0d:7d:79:d1: 85:1e:ef:5d:d7:85:22:ba:af:77:1a:4d:c5:30:99:f7:4d:48: 73:ed:70:83:07:c6:4e:98:82:2a:a4:7f:84:8a:3c:f1:d6:4f: 36:8f:23:6c:81:a0:24:bd:64:74:bb:c5:99:15:0f:76:b1:74: 98:1c:01:3a:00:f9:1b:a1:45:23:14:0e:5e:da:26:9c:2b:79: 34:5f:da:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo8ELi8MOFBDZAC2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxODE4MDI1N1oXDTI1MDkxNjE4MDI1N1owLzEtMCsGA1UEAxMk ZGFiZDU1ODUtNTZhMy00ODhiLWJmMDgtNzQ0OTJkNDc0ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVPd/B+7CRba1uoa4E5TvOb+e7dCy9kz50sW UKlScH8ML0Bje92qvUf/Tg0Oew9MX4gFBHRC+qiFQA8E8jEQhVtcbHmDymLtitUI +dB8GIdtesFGnUyir6yDQNJTcs+8AJ4b1EMcTEAou0mvb88C3o93FTNxj3ojYOna cT8WG3UcLcmauddMoJsX+7BbK8wkUNoP/7nc8o40F1DHX8D3LYRMUdB2G5MH9R9e gj1H4vdy2z7R0mAkNbVY6tYSzPnmEBe27zvCl934aI5g/EVis6F4S94qmhdfdQEA ngPFq6MFBoG6Vyschfxi2LbX5PkeNo+BBJTWGv8UbjBf7ICAPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlmArKIRqQ80qv6RBP0wvwSmJfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTgyMWYzZmUtM2ZhMS0z MzhlLWEyNjYtOWNmZDIxOWE4YjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwF2vSzqhhLk8KBHf8X1XHXPcNRvBO/eJKQIJficDYVxkKt8rCleFe8 LdH+DqgRmMWVvYNRsHihIMmbGDvz5A5GENZ70YjDsJPNsnThqAe/7a9a1kOAfnM4 clC24wNFkH2GZV7aHYC8Jp7bh89nScerAtis7Wv4AF/Unz5DgZyL09ABS0RPAMUL gjzDe3lxNF+h0yvIxO/Eoq3/Ny/Cm0y7YFYu7UdIs2iYmWz7pAW6DX150YUe713X hSK6r3caTcUwmfdNSHPtcIMHxk6Ygiqkf4SKPPHWTzaPI2yBoCS9ZHS7xZkVD3ax dJgcAToA+RuhRSMUDl7aJpwreTRf2pM= -----END CERTIFICATE-----Generated at Mon Jun 30 06:51:41 2025 by rpki-client