$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e019899-3bcc-30b7-8b9f-fe7dd1844ea8.roa File: 0e019899-3bcc-30b7-8b9f-fe7dd1844ea8.roa (raw, json) Hash identifier: yCmJMTtweSp8tnCV1R6Y7Dsk7cn4RYfqqmRNU5f+ZrM= Subject key identifier: 35:AC:EE:5F:13:92:7E:CE:C5:A6:45:00:53:95:AA:D2:46:67:4F:BA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0C2A91D9AFF87AAB0E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e019899-3bcc-30b7-8b9f-fe7dd1844ea8.roa Signing time: Thu 01 May 2025 17:25:00 +0000 ROA not before: Thu 01 May 2025 17:25:00 +0000 ROA not after: Wed 30 Jul 2025 17:25:00 +0000 asID: 22773 IP address blocks: 68.8.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0c:2a:91:d9:af:f8:7a:ab:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:00 2025 GMT Not After : Jul 30 17:25:00 2025 GMT Subject: CN=94ad112d-f999-4bb9-ab7b-4d6c5e3d8a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:2f:51:56:73:5f:5c:be:f8:fa:e6:c7:2c: 60:b7:73:f4:97:24:85:b9:67:2b:13:68:ae:33:8c: 52:ba:32:6a:92:b3:37:4b:ed:91:09:79:6f:fc:63: 28:8d:e0:62:09:77:af:6f:7c:d1:9e:94:a1:b3:df: fe:21:08:a4:3f:fd:63:dd:90:94:19:29:96:dd:22: 10:ac:5c:f4:07:9a:f6:97:74:51:07:30:3a:4f:0c: 95:5d:7f:02:d3:30:02:25:77:4c:94:38:94:56:40: 50:69:52:2b:03:1e:54:5a:6c:e7:22:2f:53:da:0e: d3:f0:43:3c:38:73:63:63:fc:de:26:f8:39:b3:d4: a3:18:96:ef:54:9f:de:96:a0:28:bb:f6:71:f6:23: 9f:67:9c:cd:53:c9:fc:a6:5f:27:db:ac:54:8a:6b: 05:ae:74:7b:df:d2:c6:98:83:8a:7a:8a:ec:55:87: bf:e2:f7:91:2c:0d:c7:da:9d:d4:69:c3:db:5e:64: d6:6e:c8:05:67:9e:35:03:1e:ee:c5:a3:01:56:8e: 07:20:a6:28:46:d9:e6:4e:98:f6:8b:b8:a1:b1:bb: 8a:42:94:e2:cc:ad:8b:57:c1:a8:1a:9b:c6:31:22: 72:aa:85:97:54:f2:dd:95:6c:84:f9:08:de:0e:15: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:EE:5F:13:92:7E:CE:C5:A6:45:00:53:95:AA:D2:46:67:4F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e019899-3bcc-30b7-8b9f-fe7dd1844ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ee:1a:d4:6f:b5:ea:3c:3b:f1:0d:9d:5c:63:73:33:a8:e5: 09:d1:27:1c:93:89:48:11:58:12:8a:98:22:4c:2d:ce:56:d5: 22:f7:1d:5f:67:16:e9:da:56:3a:9d:15:ec:7b:26:3c:16:47: 86:a6:05:53:db:b5:e3:a6:29:c0:4c:19:19:a5:3b:9b:c9:e7: bf:a1:52:8c:43:c7:72:94:7d:08:cd:79:58:32:a8:fb:a0:f3: d3:4c:2b:12:de:d5:1d:3c:65:a1:8c:a7:78:1d:fb:d4:5b:1e: 89:89:50:d3:dc:21:89:66:b5:f1:15:26:2a:58:50:53:be:59: f7:c9:26:f9:75:72:71:59:c0:d5:c6:3e:65:b7:2b:79:6b:f8: 2c:31:80:fc:2b:4f:39:62:17:5f:c2:cf:96:35:84:d2:8a:f4: 0a:5c:fe:c6:26:69:d4:12:53:d9:0d:fa:a7:0f:97:89:98:54: 4e:4a:78:d3:a8:f3:4e:da:3a:b6:04:71:e2:9b:03:60:e6:04: f0:a2:f2:d4:fd:26:c4:57:88:ad:a7:77:54:40:18:e4:ba:4c: bc:d1:b8:ea:98:70:ba:60:01:30:4f:f3:ec:86:0f:01:e1:99: 4f:b6:27:05:f5:23:cb:96:8b:51:d0:ba:68:e7:cc:1e:b1:f2: 20:38:8c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Qwqkdmv+HqrDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMFoXDTI1MDczMDE3MjUwMFowLzEtMCsGA1UEAxMk OTRhZDExMmQtZjk5OS00YmI5LWFiN2ItNGQ2YzVlM2Q4YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2agvUVZzX1y++Prmxyxgt3P0lySFuWcrE2iu M4xSujJqkrM3S+2RCXlv/GMojeBiCXevb3zRnpShs9/+IQikP/1j3ZCUGSmW3SIQ rFz0B5r2l3RRBzA6TwyVXX8C0zACJXdMlDiUVkBQaVIrAx5UWmznIi9T2g7T8EM8 OHNjY/zeJvg5s9SjGJbvVJ/elqAou/Zx9iOfZ5zNU8n8pl8n26xUimsFrnR739LG mIOKeorsVYe/4veRLA3H2p3UacPbXmTWbsgFZ541Ax7uxaMBVo4HIKYoRtnmTpj2 i7ihsbuKQpTizK2LV8GoGpvGMSJyqoWXVPLdlWyE+QjeDhU3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWs7l8Tkn7OxaZFAFOVqtJGZ0+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGUwMTk4OTktM2JjYy0z MGI3LThiOWYtZmU3ZGQxODQ0ZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDuGtRvteo8O/ENnVxjczOo5QnRJxyTiUgRWBKKmCJMLc5W1SL3HV9n FunaVjqdFex7JjwWR4amBVPbteOmKcBMGRmlO5vJ57+hUoxDx3KUfQjNeVgyqPug 89NMKxLe1R08ZaGMp3gd+9RbHomJUNPcIYlmtfEVJipYUFO+WffJJvl1cnFZwNXG PmW3K3lr+CwxgPwrTzliF1/Cz5Y1hNKK9Apc/sYmadQSU9kN+qcPl4mYVE5KeNOo 807aOrYEceKbA2DmBPCi8tT9JsRXiK2nd1RAGOS6TLzRuOqYcLpgATBP8+yGDwHh mU+2JwX1I8uWi1HQumjnzB6x8iA4jOc= -----END CERTIFICATE-----Generated at Wed May 7 22:08:02 2025 by rpki-client