$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/159c7951-3461-3704-8c55-469167035cc3.roa File: 159c7951-3461-3704-8c55-469167035cc3.roa (raw, json) Hash identifier: bx3QvAhQNR4yOoJaAhnDRBIzwgWs0J29TBfg2dde4kA= Subject key identifier: D5:43:94:98:24:04:71:CA:8B:2C:11:6A:58:58:B2:17:35:B5:2C:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD1A1A1E0215D473A29EF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/159c7951-3461-3704-8c55-469167035cc3.roa Signing time: Thu 01 May 2025 17:25:06 +0000 ROA not before: Thu 01 May 2025 17:25:06 +0000 ROA not after: Wed 30 Jul 2025 17:25:06 +0000 asID: 22773 IP address blocks: 68.101.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:1a:1a:1e:02:15:d4:73:a2:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:06 2025 GMT Not After : Jul 30 17:25:06 2025 GMT Subject: CN=a459e2d4-b804-4ad5-a446-682101b317e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:a3:21:45:c1:e7:66:ba:0f:9c:0f:e1:fa: b1:17:d8:2b:e6:ea:0e:91:73:fd:9d:7e:09:d3:10: e0:f8:20:77:bf:76:f7:e4:83:4b:af:ba:46:3c:c8: 3b:a3:c1:ad:51:a7:79:30:b2:a7:10:16:89:85:e9: 6e:49:d8:2a:f6:d1:cc:6c:db:66:21:11:ed:58:ac: 55:3f:32:d6:09:41:60:c3:a0:8d:fd:db:d5:a2:5d: e3:db:53:68:3f:6a:54:03:39:ec:c7:1c:18:6d:3e: a5:6a:3e:36:f7:c8:54:83:d9:cc:86:6f:c0:87:41: eb:70:4c:d7:ac:fe:d2:c4:8e:c5:31:99:5c:33:7a: 6f:a5:ec:75:2b:a2:70:6f:6d:d1:d9:be:ef:dd:ca: f3:8e:67:95:7d:52:ab:f3:7c:eb:3b:2f:1e:00:42: 33:fc:d2:fe:ac:73:85:e7:e7:2a:21:3e:1d:04:5c: a6:c4:7e:19:eb:10:1d:8f:fe:31:66:02:e3:01:3e: fc:a7:1c:f6:0f:23:cd:87:f5:e5:86:2f:52:06:e8: b7:07:1e:b3:e0:db:d5:74:e1:26:37:04:ae:a5:43: 77:8b:e5:e1:10:14:d5:0c:43:f9:b9:9d:30:13:12: 88:fc:81:d4:06:fc:74:6c:eb:5f:0c:23:4c:ea:eb: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:94:98:24:04:71:CA:8B:2C:11:6A:58:58:B2:17:35:B5:2C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/159c7951-3461-3704-8c55-469167035cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:59:74:b1:1a:1a:63:67:83:97:9f:85:1d:fb:b5:ac:37:b8: 12:46:93:c9:a0:df:66:b9:06:2f:3f:96:0b:7a:54:16:03:3b: 6c:11:de:0b:8b:6a:a4:98:6e:f0:6c:d9:da:14:90:3d:c5:02: 99:8e:a2:18:be:cc:fd:a6:7b:a9:d9:06:09:5a:65:52:f9:2e: 9e:6d:a3:7b:a0:39:2a:c0:08:82:5c:3f:15:3a:18:02:4b:9b: f6:24:6c:f4:7e:c6:d9:5b:c2:88:ed:28:f1:90:dc:ef:77:17: f8:9b:56:cf:8a:81:10:c3:09:35:8c:a0:ef:60:db:a5:58:61: 45:90:5a:69:53:94:5e:80:41:2f:88:28:a4:36:b1:0e:f8:6b: cc:c4:ce:d1:96:44:ac:22:ba:07:a9:ad:ec:1e:a4:6f:78:ff: a5:50:b9:44:f8:fd:f6:8d:20:61:00:f9:38:06:26:25:a2:00: 11:34:ee:e6:0a:07:62:4a:b2:27:24:80:5c:a6:48:3d:83:63: d3:a6:83:87:b6:25:6b:c8:4d:50:3f:f6:64:00:54:fc:b8:e9: 4a:8b:3f:47:92:dd:57:bd:f5:23:f2:ee:6e:b3:45:51:2e:81: 0c:3b:2b:6b:43:71:25:c8:14:99:dd:af:45:7a:5f:97:00:31: 1f:a8:5a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RoaHgIV1HOinvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwNloXDTI1MDczMDE3MjUwNlowLzEtMCsGA1UEAxMk YTQ1OWUyZDQtYjgwNC00YWQ1LWE0NDYtNjgyMTAxYjMxN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPCjIUXB52a6D5wP4fqxF9gr5uoOkXP9nX4J 0xDg+CB3v3b35INLr7pGPMg7o8GtUad5MLKnEBaJheluSdgq9tHMbNtmIRHtWKxV PzLWCUFgw6CN/dvVol3j21NoP2pUAznsxxwYbT6laj4298hUg9nMhm/Ah0HrcEzX rP7SxI7FMZlcM3pvpex1K6Jwb23R2b7v3crzjmeVfVKr83zrOy8eAEIz/NL+rHOF 5+cqIT4dBFymxH4Z6xAdj/4xZgLjAT78pxz2DyPNh/Xlhi9SBui3Bx6z4NvVdOEm NwSupUN3i+XhEBTVDEP5uZ0wExKI/IHUBvx0bOtfDCNM6usSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVDlJgkBHHKiywRalhYshc1tSzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTU5Yzc5NTEtMzQ2MS0z NzA0LThjNTUtNDY5MTY3MDM1Y2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGWUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtZdLEaGmNng5efhR37taw3uBJGk8mg32a5Bi8/lgt6VBYDO2wR3guL aqSYbvBs2doUkD3FApmOohi+zP2me6nZBglaZVL5Lp5to3ugOSrACIJcPxU6GAJL m/YkbPR+xtlbwojtKPGQ3O93F/ibVs+KgRDDCTWMoO9g26VYYUWQWmlTlF6AQS+I KKQ2sQ74a8zEztGWRKwiugeprewepG94/6VQuUT4/faNIGEA+TgGJiWiABE07uYK B2JKsickgFymSD2DY9Omg4e2JWvITVA/9mQAVPy46UqLP0eS3Ve99SPy7m6zRVEu gQw7K2tDcSXIFJndr0V6X5cAMR+oWqQ= -----END CERTIFICATE-----Generated at Wed May 14 08:16:47 2025 by rpki-client