$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa File: 5998c737-74ca-317e-8cc7-26924c146970.roa (raw, json) Hash identifier: KLqMIJJza8uqQyP5biQju++KAuoMdl/w5I2nQnk1F1I= Subject key identifier: 9E:69:51:72:44:E1:7B:05:A9:09:BA:E7:D4:DD:E9:50:0E:4A:2B:C1 Certificate issuer: /CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Certificate serial: 010D0C9F43285849C4D4C28B1C1B9CFE217DA980 Authority key identifier: 1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 22649 IP address blocks: 165.140.176.0/22 maxlen: 24 2606:7e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:c2:8b:1c:1b:9c:fe:21:7d:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=55d25b90-9c29-4329-aa8e-327c9d2eb6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:70:bc:80:3d:1e:70:2c:81:4f:68:b9:47: 2c:1d:13:20:6b:4c:a2:42:24:66:17:f5:99:e3:62: 3f:5f:9e:64:68:3d:ee:21:17:5b:6d:7b:22:93:d8: 3f:4e:55:57:1d:17:ab:3f:ac:5c:39:66:64:de:79: 3a:4c:fe:2c:09:14:c3:b2:17:32:41:a4:6a:f6:4a: de:6e:2a:9d:ba:56:97:aa:f2:7f:38:97:5a:d3:4d: fa:e4:37:85:b7:79:0e:41:b1:d1:6f:29:f2:4b:ad: 46:72:79:48:08:b9:f2:20:c3:85:85:16:7a:2d:a8: b5:cc:41:be:06:58:4d:ad:f2:d1:dc:ac:6b:c6:5a: c0:6c:a2:b9:56:60:4b:c1:17:2d:db:1b:d9:5f:d4: 94:5a:1b:fc:2f:3c:eb:6e:17:a5:60:80:c8:71:4d: 00:7b:0f:1c:63:4d:e3:ac:75:fb:7e:b5:d1:f1:a1: 86:d0:b3:90:18:db:a4:74:7b:ba:88:9a:ae:0e:ac: f5:56:4d:64:61:de:65:2f:e8:c7:fb:6e:30:3d:a7: c6:42:46:b7:84:0a:70:62:2c:6b:71:1e:93:96:db: dc:26:4a:0b:32:41:e2:61:38:70:96:68:16:36:4d: 1d:cf:f8:db:e1:13:1b:10:cf:bc:7f:db:a9:ee:af: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:69:51:72:44:E1:7B:05:A9:09:BA:E7:D4:DD:E9:50:0E:4A:2B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl X509v3 Authority Key Identifier: keyid:1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.176.0/22 IPv6: 2606:7e40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:25:9d:a5:01:42:65:1a:a2:20:82:b1:75:b8:88:d3:67:8b: bb:1a:27:1b:67:36:55:02:d4:e7:48:74:d3:02:15:9f:23:bf: 1c:49:3c:4c:19:41:59:ca:48:d4:fc:a9:c0:44:0a:1f:67:0c: a8:ad:6a:c9:54:eb:20:c1:1a:bb:10:3f:20:e3:d6:db:9e:3c: c0:20:23:0c:41:cd:4c:a1:58:50:72:34:50:e3:b7:ad:98:98: 41:ee:ee:86:5c:77:af:af:d8:65:9c:58:f4:d7:0a:6d:cd:bc: 85:87:56:be:f7:57:33:04:2f:70:54:0e:ca:7b:8e:6e:50:ac: 62:4d:da:05:74:67:88:16:91:e3:71:61:48:1e:a0:d1:0e:42: c1:4a:00:45:11:73:70:fa:25:82:4d:0a:7b:87:1b:42:f4:b8: c7:ed:a7:28:40:5e:36:68:c3:0d:e8:6b:a2:45:27:44:3b:ff: b2:4b:c2:6c:3d:46:ae:8b:a9:c2:45:af:77:4c:35:a2:0a:0d: 8f:f4:91:cf:0e:2e:b6:37:bc:52:1c:7b:50:3e:c7:4a:37:ad: 80:1b:f1:45:56:be:7a:4d:16:c7:18:f6:88:04:88:e5:43:3c: b3:61:6f:33:b8:c1:d2:3a:ea:e4:e8:4d:73:6c:da:16:22:3f: 73:3a:62:50 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEnE1MKLHBuc/iF9qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBiMzAzYmEtZDJmNC00OTFjLTkwZGItNDg3NWI5ZmZl MDNjMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NTVkMjViOTAtOWMyOS00MzI5LWFhOGUtMzI3YzlkMmViNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX9wvIA9HnAsgU9ouUcsHRMga0yiQiRmF/WZ 42I/X55kaD3uIRdbbXsik9g/TlVXHRerP6xcOWZk3nk6TP4sCRTDshcyQaRq9kre biqdulaXqvJ/OJda00365DeFt3kOQbHRbynyS61GcnlICLnyIMOFhRZ6Lai1zEG+ BlhNrfLR3KxrxlrAbKK5VmBLwRct2xvZX9SUWhv8LzzrbhelYIDIcU0Aew8cY03j rHX7frXR8aGG0LOQGNukdHu6iJquDqz1Vk1kYd5lL+jH+24wPafGQka3hApwYixr cR6TltvcJkoLMkHiYThwlmgWNk0dz/jb4RMbEM+8f9up7q8tvwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJ5pUXJE4XsFqQm659Td6VAOSivBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGIz MDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1YjlmZmUwM2MvNTk5OGM3MzctNzRjYS0z MTdlLThjYzctMjY5MjRjMTQ2OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBiMzAzYmEtZDJmNC00OTFjLTkw ZGItNDg3NWI5ZmZlMDNjLzkwYjMwM2JhLWQyZjQtNDkxYy05MGRiLTQ4NzViOWZm ZTAzYy5jcmwwHwYDVR0jBBgwFoAUHovl4nx7B1nioUPZzhgV1nlgwb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGIzMDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1 YjlmZmUwM2MuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCpYywMA0E AgACMAcDBQAmBn5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEglnaUBQmUaoiCCsXW4iNNni7saJxtnNlUC 1OdIdNMCFZ8jvxxJPEwZQVnKSNT8qcBECh9nDKitaslU6yDBGrsQPyDj1tuePMAg IwxBzUyhWFByNFDjt62YmEHu7oZcd6+v2GWcWPTXCm3NvIWHVr73VzMEL3BUDsp7 jm5QrGJN2gV0Z4gWkeNxYUgeoNEOQsFKAEURc3D6JYJNCnuHG0L0uMftpyhAXjZo ww3oa6JFJ0Q7/7JLwmw9Rq6LqcJFr3dMNaIKDY/0kc8OLrY3vFIce1A+x0o3rYAb 8UVWvnpNFscY9ogEiOVDPLNhbzO4wdI66uToTXNs2hYiP3M6YlA= -----END CERTIFICATE-----Generated at Sat May 10 16:38:01 2025 by rpki-client