$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3184eb4f-fdc3-31be-8db0-4eb5ab5b796f.roa File: 3184eb4f-fdc3-31be-8db0-4eb5ab5b796f.roa (raw, json) Hash identifier: r17uZTlGlou7ooEt5iv42jGiQMBbOrlVLFrqpyQ+ICM= Subject key identifier: 4F:FD:8C:D6:2A:FD:F0:63:B6:07:5C:15:B8:6E:D6:EE:C1:D4:72:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F50B36F58B8D749BC3259C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3184eb4f-fdc3-31be-8db0-4eb5ab5b796f.roa Signing time: Thu 01 May 2025 17:08:52 +0000 ROA not before: Thu 01 May 2025 17:08:52 +0000 ROA not after: Wed 30 Jul 2025 17:08:52 +0000 asID: 22773 IP address blocks: 68.9.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:0b:36:f5:8b:8d:74:9b:c3:25:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:52 2025 GMT Not After : Jul 30 17:08:52 2025 GMT Subject: CN=3957e93c-c228-453e-8489-93702623c5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:22:82:a4:5c:fd:f5:4d:a2:95:41:ef:83: 11:e8:85:69:86:0a:15:2f:c0:5d:f7:e4:f1:07:3c: a3:15:ac:eb:3e:41:34:7d:bc:39:10:55:f4:98:70: f5:50:cf:75:24:58:38:e4:6a:c1:a1:53:72:bd:31: 6a:52:7f:0f:86:69:e8:61:7e:3a:86:fe:9a:da:3c: 9f:5b:24:31:4c:94:09:f3:c4:6d:3c:a5:3d:b1:71: 22:00:cf:3b:da:7d:39:73:4b:47:53:fb:27:10:05: c4:13:d2:8c:28:a3:07:99:05:ab:21:8f:f6:d7:7f: 9f:6b:89:f1:31:f2:6a:98:e3:ba:dc:93:23:34:f1: ae:3e:d6:ee:2a:d5:9a:dc:cc:c3:90:f3:33:43:b0: a9:1a:18:0e:0b:cc:24:1b:3f:fa:fa:9e:64:23:96: 63:d6:de:92:34:91:bd:9c:65:47:a9:20:5f:45:d7: a3:a8:ed:31:67:76:cc:c2:50:04:85:37:92:e8:d3: 5b:00:1f:bd:2a:05:67:95:fb:7c:5d:57:f5:6f:0b: cf:34:e1:b1:53:11:9b:6d:a6:d3:76:28:15:0c:9d: b9:4a:39:8e:83:0b:3c:af:ae:d6:7d:9b:95:6f:ea: 66:6d:50:0a:09:99:56:54:47:6a:51:2d:e8:46:ed: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:8C:D6:2A:FD:F0:63:B6:07:5C:15:B8:6E:D6:EE:C1:D4:72:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3184eb4f-fdc3-31be-8db0-4eb5ab5b796f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:63:16:2c:fb:69:40:db:56:83:41:0e:2e:5f:4e:11:b0:40: c8:9f:99:b3:08:14:a0:c9:41:8f:41:b7:53:78:14:8d:73:03: 06:1a:4a:90:4d:66:0b:80:b0:9c:b7:c1:c7:3b:a9:4b:09:b6: bf:05:16:7e:b4:4c:9b:a5:51:61:f5:5e:ff:d1:ff:64:a6:97: 3e:8b:07:91:be:ba:e0:8e:da:86:86:fe:2a:aa:69:a1:c5:69: de:11:90:01:f2:d2:fc:f2:73:b4:b0:ed:d8:d5:6e:a7:94:82: a0:06:92:a8:56:1d:d0:30:ae:c5:69:29:c3:06:d1:0b:49:98: 8d:b4:ee:c9:d8:95:58:82:af:12:b4:0f:f4:2a:89:5a:cb:ea: ea:47:2e:8d:c9:d4:5a:84:de:7c:4b:a2:5c:a0:51:eb:bb:0a: f5:d4:6f:d2:70:00:d0:2d:7c:e7:a6:3b:b3:99:80:a4:f9:d9: 2e:4c:8b:08:06:60:4d:df:0a:c9:e7:17:d1:db:1a:be:e8:1d: 89:b5:4a:99:9a:a8:73:dd:0c:d5:4b:ca:c8:c4:4a:10:4f:ce: b1:7f:cd:48:d4:39:d9:d7:59:60:7e:75:2f:08:fd:ae:e2:b3: 02:4f:a8:4a:68:81:fc:78:4b:58:d6:e2:24:f2:4c:78:1f:4c: 29:fb:13:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Qs29YuNdJvDJZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1MloXDTI1MDczMDE3MDg1MlowLzEtMCsGA1UEAxMk Mzk1N2U5M2MtYzIyOC00NTNlLTg0ODktOTM3MDI2MjNjNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdgigqRc/fVNopVB74MR6IVphgoVL8Bd9+Tx BzyjFazrPkE0fbw5EFX0mHD1UM91JFg45GrBoVNyvTFqUn8PhmnoYX46hv6a2jyf WyQxTJQJ88RtPKU9sXEiAM872n05c0tHU/snEAXEE9KMKKMHmQWrIY/213+fa4nx MfJqmOO63JMjNPGuPtbuKtWa3MzDkPMzQ7CpGhgOC8wkGz/6+p5kI5Zj1t6SNJG9 nGVHqSBfRdejqO0xZ3bMwlAEhTeS6NNbAB+9KgVnlft8XVf1bwvPNOGxUxGbbabT digVDJ25SjmOgws8r67WfZuVb+pmbVAKCZlWVEdqUS3oRu1GRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/9jNYq/fBjtgdcFbhu1u7B1HJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzE4NGViNGYtZmRjMy0z MWJlLThkYjAtNGViNWFiNWI3OTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBjFiz7aUDbVoNBDi5fThGwQMifmbMIFKDJQY9Bt1N4FI1zAwYaSpBN ZguAsJy3wcc7qUsJtr8FFn60TJulUWH1Xv/R/2Smlz6LB5G+uuCO2oaG/iqqaaHF ad4RkAHy0vzyc7Sw7djVbqeUgqAGkqhWHdAwrsVpKcMG0QtJmI207snYlViCrxK0 D/QqiVrL6upHLo3J1FqE3nxLolygUeu7CvXUb9JwANAtfOemO7OZgKT52S5MiwgG YE3fCsnnF9HbGr7oHYm1SpmaqHPdDNVLysjEShBPzrF/zUjUOdnXWWB+dS8I/a7i swJPqEpogfx4S1jW4iTyTHgfTCn7E50= -----END CERTIFICATE-----Generated at Mon May 12 04:25:55 2025 by rpki-client