$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa File: 033950d8-0213-3cac-a0c6-a58cf35f17df.roa (raw, json) Hash identifier: trWXbg8sSWN/CX+pmBVaeh2+VZebiTITM/sBTGd40Sc= Subject key identifier: BD:25:EB:02:A6:F8:AB:0A:B0:92:2B:6B:03:9E:C5:F5:AA:A8:7A:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD3ABA48257AE6DF5F39E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa Signing time: Thu 01 May 2025 17:25:22 +0000 ROA not before: Thu 01 May 2025 17:25:22 +0000 ROA not after: Wed 30 Jul 2025 17:25:22 +0000 asID: 22773 IP address blocks: 68.111.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:3a:ba:48:25:7a:e6:df:5f:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:22 2025 GMT Not After : Jul 30 17:25:22 2025 GMT Subject: CN=0d901ce1-7122-4872-a048-84bc20351dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:21:1a:ee:4a:43:3d:1f:ff:c7:af:58:b7: b7:04:c6:bb:a4:0e:ee:ce:92:1b:33:cc:1b:e9:5f: e6:79:f2:96:38:93:32:53:b9:10:a8:61:b8:e6:6f: e9:98:8f:b1:f2:c8:96:d0:01:84:1e:0e:85:20:e8: c7:85:d3:a3:64:99:e8:b7:44:18:f3:49:21:2f:07: c0:7b:3f:91:6e:78:f9:ae:c6:b6:d0:5d:e6:96:b2: 20:4b:16:8e:3c:89:92:d3:27:eb:a5:a8:07:71:7a: 3b:77:03:ca:d6:84:c6:11:36:81:d0:ac:7a:fd:83: 51:fe:ff:62:89:2a:84:84:79:56:f1:bc:5e:e3:a3: 20:0f:ab:24:89:60:4a:e8:a0:c7:57:e9:87:0e:81: a2:2e:72:77:71:23:67:09:15:8c:f5:48:8f:0f:41: 9f:dc:15:76:03:12:fc:74:e6:08:cb:dc:98:1c:eb: 76:76:15:42:d9:89:ea:d5:c4:6d:36:5a:64:bf:80: 5b:0d:60:09:a1:de:1c:7e:ba:41:22:50:bf:70:f8: 02:d2:8f:9e:73:a6:d6:3b:bc:b1:5b:89:73:65:de: ae:51:0f:74:7a:28:9e:7c:0d:6a:06:73:55:92:4d: 95:41:d3:55:c2:94:81:cc:83:9b:ab:bf:94:5e:49: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:25:EB:02:A6:F8:AB:0A:B0:92:2B:6B:03:9E:C5:F5:AA:A8:7A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033950d8-0213-3cac-a0c6-a58cf35f17df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f1:74:69:e6:93:d9:f8:d3:1d:45:34:9a:b4:7d:38:d0:57: b0:36:bc:59:f5:43:80:25:de:b2:b8:1e:2a:a1:3f:fd:6d:60: a3:03:7c:d9:cf:c5:ca:7a:48:36:85:53:5f:b7:e4:ec:e2:14: 51:3f:81:af:60:df:dd:e7:43:c7:58:60:f4:d8:e4:92:d0:1d: 3d:ba:68:cd:fc:40:75:b8:ab:a8:bf:11:f4:fa:29:6b:b2:5f: 62:ba:60:19:80:e5:9e:79:95:79:c0:91:4a:81:56:25:b4:f3: 0c:d5:24:8b:ce:e0:27:21:2f:c0:5a:3f:22:0e:f1:4a:5f:6c: 3a:55:4e:7c:cc:42:3b:be:61:9a:39:29:9f:b2:fc:ce:b0:d2: 57:05:cf:86:47:ae:10:34:5b:29:04:8d:af:a3:df:ef:fa:12: dd:e7:b9:b5:1a:12:87:ac:60:e6:fc:2d:16:64:ed:91:ad:9e: b8:b5:65:2c:e3:62:ab:00:7b:b2:e9:10:b4:83:54:84:81:30: f7:6f:9b:08:b9:38:0c:ea:c3:f4:97:76:7e:d1:d9:dd:e7:b1: 18:42:b2:5f:24:2a:9e:75:dc:59:f2:8b:73:86:35:a3:a4:48: 51:1a:9b:4c:f0:d2:96:5d:c8:4a:27:c4:82:2e:18:a6:f1:14: b3:a1:79:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Tq6SCV65t9fOeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUyMloXDTI1MDczMDE3MjUyMlowLzEtMCsGA1UEAxMk MGQ5MDFjZTEtNzEyMi00ODcyLWEwNDgtODRiYzIwMzUxZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzIhGu5KQz0f/8evWLe3BMa7pA7uzpIbM8wb 6V/mefKWOJMyU7kQqGG45m/pmI+x8siW0AGEHg6FIOjHhdOjZJnot0QY80khLwfA ez+Rbnj5rsa20F3mlrIgSxaOPImS0yfrpagHcXo7dwPK1oTGETaB0Kx6/YNR/v9i iSqEhHlW8bxe46MgD6skiWBK6KDHV+mHDoGiLnJ3cSNnCRWM9UiPD0Gf3BV2AxL8 dOYIy9yYHOt2dhVC2Ynq1cRtNlpkv4BbDWAJod4cfrpBIlC/cPgC0o+ec6bWO7yx W4lzZd6uUQ90eiiefA1qBnNVkk2VQdNVwpSBzIObq7+UXklH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0l6wKm+KsKsJIrawOexfWqqHpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzOTUwZDgtMDIxMy0z Y2FjLWEwYzYtYTU4Y2YzNWYxN2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHxdGnmk9n40x1FNJq0fTjQV7A2vFn1Q4Al3rK4HiqhP/1tYKMDfNnP xcp6SDaFU1+35OziFFE/ga9g393nQ8dYYPTY5JLQHT26aM38QHW4q6i/EfT6KWuy X2K6YBmA5Z55lXnAkUqBViW08wzVJIvO4CchL8BaPyIO8UpfbDpVTnzMQju+YZo5 KZ+y/M6w0lcFz4ZHrhA0WykEja+j3+/6Et3nubUaEoesYOb8LRZk7ZGtnri1ZSzj YqsAe7LpELSDVISBMPdvmwi5OAzqw/SXdn7R2d3nsRhCsl8kKp513Fnyi3OGNaOk SFEam0zw0pZdyEonxIIuGKbxFLOhedY= -----END CERTIFICATE-----Generated at Sat May 10 19:39:50 2025 by rpki-client