$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1334d152-20ea-3f1d-abf5-36fc5ffb729b.roa File: 1334d152-20ea-3f1d-abf5-36fc5ffb729b.roa (raw, json) Hash identifier: ouLIujHaoCjYuMBXXnrKl5wAAAXzHx4ZtvOEkMyvQms= Subject key identifier: B9:AB:D7:2C:93:6C:F4:67:5F:33:6E:4E:B5:B5:9B:DE:8D:10:84:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F807979BE1F89180880700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1334d152-20ea-3f1d-abf5-36fc5ffb729b.roa Signing time: Thu 01 May 2025 17:14:53 +0000 ROA not before: Thu 01 May 2025 17:14:53 +0000 ROA not after: Wed 30 Jul 2025 17:14:53 +0000 asID: 22773 IP address blocks: 68.225.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:07:97:9b:e1:f8:91:80:88:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:53 2025 GMT Not After : Jul 30 17:14:53 2025 GMT Subject: CN=b8d38c1d-315e-440d-81c2-6dbcb0ee79ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:18:16:1d:b1:72:b9:f5:4c:b2:6f:ed:30: 61:35:c5:ef:21:8c:38:84:a1:19:47:f9:44:1e:f3: 56:8a:c6:e6:a1:2c:89:2e:99:9d:95:cb:88:a0:4d: 00:0a:d5:f3:aa:50:96:18:a6:cb:ea:30:58:1e:2e: 27:11:06:00:72:1a:db:c6:94:1e:67:b6:e5:47:56: b6:f3:eb:68:5e:e2:da:b2:2f:87:90:73:56:63:72: 7f:d2:63:90:ba:b2:c8:6c:1f:6d:bb:ce:91:42:c1: e4:f4:78:a2:17:43:fb:ea:ec:ab:55:28:ca:94:d4: 65:58:c9:f3:60:71:d3:90:6c:e3:ab:af:07:34:e6: 0d:ba:b0:17:99:de:4a:c4:bb:31:46:5c:b5:02:75: 43:bb:9d:ea:ef:02:de:3f:cb:20:fd:de:14:99:9d: e2:81:f6:37:61:4d:b0:a0:14:cc:3d:76:30:fb:2b: 72:a5:fd:18:9f:52:2e:c8:2f:15:ca:f1:0e:1b:0a: 02:bb:d4:da:95:c5:a9:a8:15:c2:35:c2:0b:f5:15: 11:42:98:4f:d0:6e:73:ec:c4:e0:02:64:b3:88:fd: ad:04:24:6f:0c:a4:c5:5c:34:20:21:aa:90:7b:83: 82:02:b8:fc:b2:b3:be:c8:14:44:58:9f:16:0a:dc: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AB:D7:2C:93:6C:F4:67:5F:33:6E:4E:B5:B5:9B:DE:8D:10:84:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1334d152-20ea-3f1d-abf5-36fc5ffb729b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b3:57:d8:d0:19:fa:12:b2:44:50:ba:e7:dc:81:a1:04:1b: 59:04:c2:20:a0:a6:39:02:76:8f:d5:26:61:2c:ce:05:73:41: d6:f0:20:bf:1a:77:25:5b:db:b8:7a:3c:58:58:91:92:45:b4: 84:cf:ad:75:c4:ab:89:d3:2c:fc:dc:4b:17:d7:b2:86:c3:28: 99:1b:23:50:dd:5d:e0:c1:02:04:8f:44:84:d7:12:03:07:0a: 8e:6a:62:4e:cb:10:f0:48:76:a6:60:e3:63:68:2e:97:89:fa: 96:8e:f1:85:92:fb:af:9b:72:2f:ae:48:e5:3e:f4:fa:09:23: c5:a2:0c:d4:96:42:fe:80:19:b0:e8:ef:15:fd:79:47:c0:8e: da:1f:44:db:b5:7b:97:75:4f:33:1a:c7:a7:69:6f:94:e6:2e: a9:4d:5c:4f:ae:88:4b:92:54:58:f6:f3:46:5b:3a:7b:ad:0e: b7:7b:98:43:94:29:bc:96:73:a1:4a:9c:23:9c:b3:cf:3d:cc: 80:b3:5a:ab:22:3e:05:71:b4:44:f3:04:83:e8:54:69:59:60: 4d:24:a8:43:b8:14:0c:c9:77:cc:98:82:40:7a:47:d1:e0:b9: 3f:06:87:04:ef:87:b9:12:e7:1b:a2:38:cd:7c:4f:f9:aa:3b: 0c:f5:f2:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+AeXm+H4kYCIBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1M1oXDTI1MDczMDE3MTQ1M1owLzEtMCsGA1UEAxMk YjhkMzhjMWQtMzE1ZS00NDBkLTgxYzItNmRiY2IwZWU3OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWcYFh2xcrn1TLJv7TBhNcXvIYw4hKEZR/lE HvNWisbmoSyJLpmdlcuIoE0ACtXzqlCWGKbL6jBYHi4nEQYAchrbxpQeZ7blR1a2 8+toXuLasi+HkHNWY3J/0mOQurLIbB9tu86RQsHk9HiiF0P76uyrVSjKlNRlWMnz YHHTkGzjq68HNOYNurAXmd5KxLsxRly1AnVDu53q7wLeP8sg/d4UmZ3igfY3YU2w oBTMPXYw+ytypf0Yn1IuyC8VyvEOGwoCu9TalcWpqBXCNcIL9RURQphP0G5z7MTg AmSziP2tBCRvDKTFXDQgIaqQe4OCArj8srO+yBREWJ8WCty4swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmr1yyTbPRnXzNuTrW1m96NEIRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTMzNGQxNTItMjBlYS0z ZjFkLWFiZjUtMzZmYzVmZmI3MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEezV9jQGfoSskRQuufcgaEEG1kEwiCgpjkCdo/VJmEszgVzQdbwIL8a dyVb27h6PFhYkZJFtITPrXXEq4nTLPzcSxfXsobDKJkbI1DdXeDBAgSPRITXEgMH Co5qYk7LEPBIdqZg42NoLpeJ+paO8YWS+6+bci+uSOU+9PoJI8WiDNSWQv6AGbDo 7xX9eUfAjtofRNu1e5d1TzMax6dpb5TmLqlNXE+uiEuSVFj280ZbOnutDrd7mEOU KbyWc6FKnCOcs889zICzWqsiPgVxtETzBIPoVGlZYE0kqEO4FAzJd8yYgkB6R9Hg uT8GhwTvh7kS5xuiOM18T/mqOwz18uI= -----END CERTIFICATE-----Generated at Sun May 11 16:33:08 2025 by rpki-client