$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa File: 28dc175e-ff33-3ef6-83ef-cae91b51184a.roa (raw, json) Hash identifier: 6DuPUrph15zCeAQUCS0lDvH1aP75Zx4ecb6M4illPX8= Subject key identifier: 11:7F:54:72:26:DC:FD:99:7A:07:47:A1:39:D2:77:7B:C8:C5:B9:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD26A3689684B4D4C4B880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa Signing time: Thu 01 May 2025 17:25:12 +0000 ROA not before: Thu 01 May 2025 17:25:12 +0000 ROA not after: Wed 30 Jul 2025 17:25:12 +0000 asID: 22773 IP address blocks: 68.105.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:26:a3:68:96:84:b4:d4:c4:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:12 2025 GMT Not After : Jul 30 17:25:12 2025 GMT Subject: CN=70e51e4a-8e72-4543-bb66-567af3e27852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:af:dd:f4:90:44:24:e2:d1:2f:3e:89:a0: 85:5f:ca:12:c6:4d:5f:dc:f3:11:34:66:f5:90:e0: c6:2f:ea:cc:67:fd:fb:81:44:3a:fd:6d:e1:3c:21: d6:2e:7d:0b:7d:4a:ae:0e:45:d7:9c:f8:dc:cd:52: a0:b0:a6:01:28:c1:2d:58:53:a5:d6:86:43:06:b2: a9:e9:71:1d:b5:9d:94:79:80:6d:b1:f1:73:0e:09: 79:94:98:64:c9:ee:50:cc:d8:ac:21:9b:c1:8d:7d: 36:cb:cb:6e:cc:2c:30:76:a0:87:e3:ec:2d:f2:19: f9:5c:ab:bc:a8:55:a6:88:24:4c:0e:f7:49:19:61: 91:27:69:64:83:f5:dd:be:a7:de:15:12:c9:ed:7f: 25:76:26:1d:8b:16:2c:1a:95:47:26:7d:6c:33:7d: 8e:02:e3:59:04:66:99:be:b3:50:a8:80:4d:f0:3c: 5b:4e:56:7e:45:4a:e5:0b:a4:07:24:ac:f5:69:e9: a1:23:2e:b6:ed:7e:75:f3:25:22:66:e5:71:00:2b: b2:49:ff:ab:d1:db:d4:7c:0a:5d:61:e9:b5:64:4f: 05:79:2a:2e:29:3a:ca:b1:a2:ee:af:96:a5:d6:29: e7:7a:fb:4b:d7:21:f5:eb:8c:aa:34:95:28:d9:28: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7F:54:72:26:DC:FD:99:7A:07:47:A1:39:D2:77:7B:C8:C5:B9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28dc175e-ff33-3ef6-83ef-cae91b51184a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.105.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:83:7e:a7:a2:a5:37:de:7a:4b:e4:f8:c9:dc:bf:66:8f:18: 3c:38:13:12:f8:de:8e:0d:50:19:5a:2b:35:9f:0d:43:ee:24: fa:36:3d:94:88:3b:0c:69:e7:02:d2:07:4d:3c:7c:0c:73:3d: 66:d1:d7:a7:72:d9:76:7c:4b:63:76:ca:98:27:24:f2:60:68: b7:88:1b:60:43:79:17:2e:0e:97:b9:10:e9:43:d4:5e:27:a5: 9e:6d:7c:6d:96:a0:b0:0a:9f:cb:f7:25:ee:57:5d:af:af:94: f7:5a:02:04:5b:24:f6:58:9b:d5:fb:73:86:2e:c9:73:52:15: b5:75:8b:79:f0:0a:f8:5e:26:27:b4:6a:5d:d8:c1:db:c0:fe: d1:6a:97:51:40:6c:f3:ee:50:3e:05:f6:3a:64:52:31:44:98: 7b:29:d9:1c:7f:41:91:b6:ae:b2:dd:5a:fc:d3:45:6b:e1:f2: 99:28:33:41:88:70:c5:72:8c:24:83:64:95:5f:17:93:87:7c: 71:9d:3a:94:1d:74:0d:f6:5b:a8:22:97:32:a2:1e:0e:ed:70: 12:3c:13:71:4e:0c:6a:a1:10:63:1f:50:e5:d1:69:2d:43:14: d0:f9:7d:4d:25:48:4a:33:b8:c6:d5:60:cf:24:ff:bd:9d:4f: 2e:94:6a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/SajaJaEtNTEuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxMloXDTI1MDczMDE3MjUxMlowLzEtMCsGA1UEAxMk NzBlNTFlNGEtOGU3Mi00NTQzLWJiNjYtNTY3YWYzZTI3ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CWv3fSQRCTi0S8+iaCFX8oSxk1f3PMRNGb1 kODGL+rMZ/37gUQ6/W3hPCHWLn0LfUquDkXXnPjczVKgsKYBKMEtWFOl1oZDBrKp 6XEdtZ2UeYBtsfFzDgl5lJhkye5QzNisIZvBjX02y8tuzCwwdqCH4+wt8hn5XKu8 qFWmiCRMDvdJGWGRJ2lkg/XdvqfeFRLJ7X8ldiYdixYsGpVHJn1sM32OAuNZBGaZ vrNQqIBN8DxbTlZ+RUrlC6QHJKz1aemhIy627X518yUiZuVxACuySf+r0dvUfApd Yem1ZE8FeSouKTrKsaLur5al1innevtL1yH164yqNJUo2SikcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF/VHIm3P2ZegdHoTnSd3vIxbl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhkYzE3NWUtZmYzMy0z ZWY2LTgzZWYtY2FlOTFiNTExODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuDfqeipTfeekvk+Mncv2aPGDw4ExL43o4NUBlaKzWfDUPuJPo2PZSI Owxp5wLSB008fAxzPWbR16dy2XZ8S2N2ypgnJPJgaLeIG2BDeRcuDpe5EOlD1F4n pZ5tfG2WoLAKn8v3Je5XXa+vlPdaAgRbJPZYm9X7c4YuyXNSFbV1i3nwCvheJie0 al3YwdvA/tFql1FAbPPuUD4F9jpkUjFEmHsp2Rx/QZG2rrLdWvzTRWvh8pkoM0GI cMVyjCSDZJVfF5OHfHGdOpQddA32W6gilzKiHg7tcBI8E3FODGqhEGMfUOXRaS1D FND5fU0lSEozuMbVYM8k/72dTy6Uaic= -----END CERTIFICATE-----Generated at Sat May 10 19:27:31 2025 by rpki-client