$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa File: 262741d7-8c75-34e2-88a9-91b27f51794f.roa (raw, json) Hash identifier: glpjbVgGFpeqbh70EW2vohx89s0bXmqIuhO0q733LHo= Subject key identifier: 95:AD:9A:AD:21:9B:D6:8B:8A:70:E5:CB:D3:CF:16:8B:DD:93:2D:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD2DD2BC5952115D2B9780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa Signing time: Thu 01 May 2025 17:25:16 +0000 ROA not before: Thu 01 May 2025 17:25:16 +0000 ROA not after: Wed 30 Jul 2025 17:25:16 +0000 asID: 22773 IP address blocks: 68.107.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:2d:d2:bc:59:52:11:5d:2b:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:16 2025 GMT Not After : Jul 30 17:25:16 2025 GMT Subject: CN=cd670dca-4d21-4875-a024-3464fd66270d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:98:fc:31:32:99:90:bd:4b:04:9a:3b:fd:c1: f3:93:89:8e:7f:17:5c:ad:5c:16:a8:2d:2d:bb:c3: 45:23:63:95:fa:35:30:22:d0:8a:5e:af:92:55:11: be:52:47:ee:8b:ac:db:9b:dc:33:1e:17:4d:1d:42: ce:bb:65:f9:29:16:71:99:2c:e5:72:70:1b:e5:d5: 1e:b9:02:79:6e:eb:4f:1a:66:a7:be:29:45:3a:68: 98:1c:67:78:b2:3a:bf:e0:e9:68:47:a1:36:08:19: 1b:4e:0a:43:db:34:d3:3a:1a:1e:bd:78:f7:2f:16: 99:d2:b3:2a:d4:b7:8c:6d:b7:c7:5a:e2:79:26:c9: 67:05:98:1b:a5:88:24:28:fc:83:32:39:93:aa:50: 8a:48:3a:e6:1a:8f:71:b1:ce:f8:00:7e:f3:50:51: 01:bd:ed:10:00:22:5f:ab:92:ca:84:b8:58:37:5d: 69:68:b0:19:82:23:16:12:d3:3c:0a:a6:65:5a:84: e1:57:5c:fc:cd:61:2f:df:10:4f:4a:9d:a9:91:1c: 85:bd:44:37:52:26:8d:61:e3:27:60:b0:82:f2:b7: 0e:a8:b0:f8:13:87:04:c1:b1:0c:6a:d8:0c:90:e7: bc:2b:b9:25:b1:12:79:29:ac:b5:f4:7e:b2:86:2a: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:9A:AD:21:9B:D6:8B:8A:70:E5:CB:D3:CF:16:8B:DD:93:2D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/262741d7-8c75-34e2-88a9-91b27f51794f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:66:eb:e8:86:9b:02:a6:e0:83:c8:02:83:37:b8:fb:82:70: 87:d9:ae:5d:58:74:e0:1e:83:ad:fd:c8:22:e4:0d:aa:5e:6d: d9:ce:0d:74:13:bf:11:24:53:28:a2:8f:8d:b1:8f:73:cd:dd: ea:d3:0d:b8:b8:54:3a:24:fe:8b:dc:86:49:af:1f:d6:e1:42: 3e:03:42:55:18:1c:93:41:8a:a9:45:37:7e:20:c2:03:e7:e9: 78:c1:99:38:3d:ed:d1:b5:ac:0c:7f:15:94:be:53:63:50:b1: b6:36:59:fa:3a:fe:68:a0:14:6e:5c:b5:91:2a:69:1b:db:b2: 1f:5e:f8:1a:bd:cd:e1:3f:f8:ec:98:f7:43:ad:71:08:1c:c9: b9:8b:6e:64:8a:05:97:f8:b5:42:db:8a:be:79:bc:4f:7f:b9: 05:ea:db:f6:0c:9f:bb:cd:41:86:b2:b2:6b:df:24:ac:0c:64: 9f:e7:75:34:5f:71:e5:cb:94:7b:89:48:8f:7e:de:20:e5:cc: 58:11:23:09:a1:99:c4:b3:57:af:26:04:1f:fb:59:a0:d7:d4: c5:8b:db:1a:96:0a:3c:2d:dd:89:0f:75:59:2a:d0:a6:df:2f: b0:65:4b:b1:2f:42:1f:71:b2:a3:e2:96:34:e8:a9:39:65:f0: 41:24:41:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/S3SvFlSEV0rl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxNloXDTI1MDczMDE3MjUxNlowLzEtMCsGA1UEAxMk Y2Q2NzBkY2EtNGQyMS00ODc1LWEwMjQtMzQ2NGZkNjYyNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zj8MTKZkL1LBJo7/cHzk4mOfxdcrVwWqC0t u8NFI2OV+jUwItCKXq+SVRG+Ukfui6zbm9wzHhdNHULOu2X5KRZxmSzlcnAb5dUe uQJ5butPGmanvilFOmiYHGd4sjq/4OloR6E2CBkbTgpD2zTTOhoevXj3LxaZ0rMq 1LeMbbfHWuJ5JslnBZgbpYgkKPyDMjmTqlCKSDrmGo9xsc74AH7zUFEBve0QACJf q5LKhLhYN11paLAZgiMWEtM8CqZlWoThV1z8zWEv3xBPSp2pkRyFvUQ3UiaNYeMn YLCC8rcOqLD4E4cEwbEMatgMkOe8K7klsRJ5Kay19H6yhip7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWtmq0hm9aLinDly9PPFovdky29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjYyNzQxZDctOGM3NS0z NGUyLTg4YTktOTFiMjdmNTE3OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVm6+iGmwKm4IPIAoM3uPuCcIfZrl1YdOAeg639yCLkDapebdnODXQT vxEkUyiij42xj3PN3erTDbi4VDok/ovchkmvH9bhQj4DQlUYHJNBiqlFN34gwgPn 6XjBmTg97dG1rAx/FZS+U2NQsbY2Wfo6/migFG5ctZEqaRvbsh9e+Bq9zeE/+OyY 90OtcQgcybmLbmSKBZf4tULbir55vE9/uQXq2/YMn7vNQYaysmvfJKwMZJ/ndTRf ceXLlHuJSI9+3iDlzFgRIwmhmcSzV68mBB/7WaDX1MWL2xqWCjwt3YkPdVkq0Kbf L7BlS7EvQh9xsqPiljToqTll8EEkQaI= -----END CERTIFICATE-----Generated at Sun May 11 09:07:42 2025 by rpki-client