$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa File: 0ffa109c-e6b7-3412-9583-bea9431f560f.roa (raw, json) Hash identifier: WC9Eb+MPfuXbd53Yzsell2Z/qaqOwPqoDJmIZqLbqEo= Subject key identifier: 89:54:0E:39:A7:71:18:E4:A6:62:92:D9:B7:A4:7F:BA:D3:CC:6B:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F807F5EDB16E5E7692B600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa Signing time: Thu 01 May 2025 17:14:53 +0000 ROA not before: Thu 01 May 2025 17:14:53 +0000 ROA not after: Wed 30 Jul 2025 17:14:53 +0000 asID: 22773 IP address blocks: 68.225.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:07:f5:ed:b1:6e:5e:76:92:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:53 2025 GMT Not After : Jul 30 17:14:53 2025 GMT Subject: CN=058c725d-2526-4112-9aee-963b6d766311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:75:f9:33:ef:ca:2e:f6:a8:46:d3:b4:20:95: 73:44:fc:7b:63:39:04:b2:16:0b:b7:d3:e2:53:6d: 80:4d:73:a8:91:db:e7:85:16:bd:fd:80:54:4c:42: ec:6f:80:da:44:8e:d2:b1:ee:41:ca:9d:60:30:26: 94:0e:70:45:3e:57:5d:33:19:9f:cb:67:45:a2:5b: c7:df:c3:d1:69:29:47:74:82:f3:52:78:4b:6f:df: 3f:fe:ce:18:0d:a6:61:f0:4b:3f:16:d9:9d:95:3e: af:93:a9:42:15:f8:c6:42:07:ad:bd:ae:ff:81:b4: c9:23:f3:b7:eb:7c:d0:65:c9:f2:2d:f8:2e:30:e8: 05:c4:df:10:d5:ee:8b:e8:5a:14:13:0b:95:1d:fe: 56:86:7d:3b:f4:31:18:81:e7:62:06:d2:67:2e:4e: 9b:12:11:0a:71:13:69:ce:0b:40:b3:fb:45:80:99: dd:b1:be:6c:18:f8:aa:6d:c3:89:26:ac:ff:c1:5f: 7a:d0:62:60:1d:e6:0c:c5:b8:ee:37:95:a3:18:65: 54:c2:1f:e4:6a:f9:c5:7a:57:b8:64:60:ae:90:12: fa:c0:3d:fc:1c:0e:5d:6e:1e:55:af:d0:9f:78:e2: 11:72:0e:4d:47:3f:20:71:4f:51:d5:13:bf:f2:c8: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:54:0E:39:A7:71:18:E4:A6:62:92:D9:B7:A4:7F:BA:D3:CC:6B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:12:4c:36:6d:10:42:f7:b7:9a:a2:3c:17:be:34:e3:fe:f3: cf:ce:74:75:72:22:24:3d:9c:0b:e9:32:4d:d0:71:50:d6:16: 76:93:b2:fc:48:82:d6:9c:99:b4:52:60:e8:f0:98:84:5e:06: 96:b5:1d:6d:80:fc:de:70:b5:d8:a7:17:1e:37:f4:bd:ed:1d: d8:82:7b:2b:e7:b2:1c:60:33:36:56:95:1b:cc:cc:fb:7f:17: 91:62:94:d7:31:1c:3e:e2:19:53:70:a9:fd:43:08:fc:d3:35: ec:ea:3f:a1:9c:c9:a3:46:03:32:8a:4c:55:55:05:39:5b:01: 8a:64:9e:e8:71:c1:11:96:2f:df:80:52:fc:8d:cc:85:fd:31: f0:9f:80:50:13:02:1c:ef:6f:60:85:84:0b:18:20:78:8f:8c: 53:bc:12:ce:91:ea:44:92:1b:99:90:0e:38:9d:de:17:58:f4: b1:67:22:0a:99:51:80:eb:c4:01:e0:e3:13:92:e3:68:90:f8: 7a:ec:84:92:d8:b1:20:86:35:35:b3:db:fb:d4:2c:83:02:de: a8:eb:62:24:3c:9d:e1:bb:24:f2:9e:1f:74:f4:15:1b:fa:3c: cb:b9:a9:f9:76:78:94:a4:e4:83:16:5d:94:41:0a:66:4d:2c: 95:a4:b7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+Af17bFuXnaStgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1M1oXDTI1MDczMDE3MTQ1M1owLzEtMCsGA1UEAxMk MDU4YzcyNWQtMjUyNi00MTEyLTlhZWUtOTYzYjZkNzY2MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHX5M+/KLvaoRtO0IJVzRPx7YzkEshYLt9Pi U22ATXOokdvnhRa9/YBUTELsb4DaRI7Sse5Byp1gMCaUDnBFPlddMxmfy2dFolvH 38PRaSlHdILzUnhLb98//s4YDaZh8Es/FtmdlT6vk6lCFfjGQgetva7/gbTJI/O3 63zQZcnyLfguMOgFxN8Q1e6L6FoUEwuVHf5Whn079DEYgediBtJnLk6bEhEKcRNp zgtAs/tFgJndsb5sGPiqbcOJJqz/wV960GJgHeYMxbjuN5WjGGVUwh/kavnFele4 ZGCukBL6wD38HA5dbh5Vr9CfeOIRcg5NRz8gcU9R1RO/8sjLqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlUDjmncRjkpmKS2bekf7rTzGvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmYTEwOWMtZTZiNy0z NDEyLTk1ODMtYmVhOTQzMWY1NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgSTDZtEEL3t5qiPBe+NOP+88/OdHVyIiQ9nAvpMk3QcVDWFnaTsvxI gtacmbRSYOjwmIReBpa1HW2A/N5wtdinFx439L3tHdiCeyvnshxgMzZWlRvMzPt/ F5FilNcxHD7iGVNwqf1DCPzTNezqP6GcyaNGAzKKTFVVBTlbAYpknuhxwRGWL9+A UvyNzIX9MfCfgFATAhzvb2CFhAsYIHiPjFO8Es6R6kSSG5mQDjid3hdY9LFnIgqZ UYDrxAHg4xOS42iQ+HrshJLYsSCGNTWz2/vULIMC3qjrYiQ8neG7JPKeH3T0FRv6 PMu5qfl2eJSk5IMWXZRBCmZNLJWkt3Y= -----END CERTIFICATE-----Generated at Sun May 11 04:32:15 2025 by rpki-client