$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa File: 32c2ba59-220b-31ee-a55a-b92cf2534bab.roa (raw, json) Hash identifier: w19Ibf4n7PbQFHon3kzcSPGzmWWRH/u4krN4+5BMXbc= Subject key identifier: 25:7B:19:6B:34:8A:5C:C9:B4:F0:33:E0:F9:0F:9A:5D:01:18:92:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD3174F73F04EBE1B4C800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa Signing time: Thu 01 May 2025 17:25:17 +0000 ROA not before: Thu 01 May 2025 17:25:17 +0000 ROA not after: Wed 30 Jul 2025 17:25:17 +0000 asID: 22773 IP address blocks: 68.107.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:31:74:f7:3f:04:eb:e1:b4:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:17 2025 GMT Not After : Jul 30 17:25:17 2025 GMT Subject: CN=adc3f705-1d98-4eb7-a9ea-0817c5d508b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:f9:65:d4:4c:48:d5:fa:60:84:d8:36:49: 7b:0b:64:5e:cc:db:2c:d7:4b:30:91:be:9e:32:d7: 99:94:f3:f5:7b:52:cd:de:6f:e8:77:80:d9:1f:df: 5a:80:80:83:cc:1f:42:e6:a7:9a:a6:b4:56:e9:69: 4f:d3:0f:b8:6a:07:6c:de:bf:01:35:43:d5:ad:71: 78:c9:59:a9:77:08:4f:1e:05:1c:62:8b:6f:09:3c: 64:49:72:8b:7f:e0:fd:1d:39:f9:bd:22:f0:a3:ff: 1a:5d:61:62:ff:2a:5b:6f:21:4c:5c:7c:24:08:0e: 69:c3:99:1f:c2:5b:5b:b4:02:d3:c1:ce:dd:a7:11: 0a:f7:d7:12:6f:fa:26:d4:22:ed:17:12:7f:6a:7e: 3e:75:bd:77:a7:d2:4b:a5:8f:75:5d:45:89:a2:dc: ec:35:49:12:d8:ce:89:5a:03:56:de:f0:fa:22:8d: c5:85:33:fc:c6:f3:b0:c0:32:22:3f:8e:6e:e0:05: 9b:0b:34:46:44:c9:6a:ee:61:9c:4c:74:cd:09:14: 60:77:b9:8d:02:ed:0b:34:db:f4:92:18:6b:ab:d4: f7:02:23:a3:12:28:c2:d1:7c:52:57:60:3d:8f:fc: db:da:3f:cc:a1:3f:ad:0e:4d:d8:8e:d1:29:57:cb: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:19:6B:34:8A:5C:C9:B4:F0:33:E0:F9:0F:9A:5D:01:18:92:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c2ba59-220b-31ee-a55a-b92cf2534bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:36:6f:74:1c:69:48:2b:38:1b:95:d9:0b:f4:54:7f:f9:24: bf:4f:b0:27:74:d5:de:80:80:a3:2e:b4:1a:88:7f:d6:35:6b: c1:58:98:04:cf:da:88:9a:86:e9:4c:20:28:37:64:6b:85:29: 04:df:db:7a:92:4b:b2:db:cd:05:10:5d:07:c0:9f:71:96:4f: 58:ce:23:5e:16:07:e2:a5:3d:c4:b0:08:e6:a7:9c:39:a5:5c: dd:3b:a7:48:8e:89:39:ef:98:fa:ce:1d:ff:bc:9c:c0:54:19: 6f:ca:28:9a:84:f9:30:67:cd:03:58:9c:17:6b:c0:1c:1c:7f: 03:97:e9:2f:88:c2:0b:c8:61:f0:9b:ec:32:cd:2b:e4:05:fe: b0:5b:45:51:5c:52:7b:19:a7:05:de:71:2f:54:3c:cb:20:c2: cd:21:16:a1:46:f9:ab:0e:da:02:9b:d6:2d:3e:30:85:ea:46: 67:b9:9b:98:fd:a5:c2:83:dd:91:32:4a:a7:0c:04:13:c5:46: 1b:44:40:1a:21:3b:da:14:55:74:00:3c:90:3a:4f:ec:c7:e9: c0:d9:4e:1b:f8:64:31:68:a7:cf:7e:99:5e:d5:de:c6:f5:11: 18:dc:12:de:c1:18:09:f4:af:4f:d7:e1:ab:e3:bc:12:bd:08: 7c:0b:b1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/TF09z8E6+G0yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxN1oXDTI1MDczMDE3MjUxN1owLzEtMCsGA1UEAxMk YWRjM2Y3MDUtMWQ5OC00ZWI3LWE5ZWEtMDgxN2M1ZDUwOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSn5ZdRMSNX6YITYNkl7C2RezNss10swkb6e MteZlPP1e1LN3m/od4DZH99agICDzB9C5qeaprRW6WlP0w+4agds3r8BNUPVrXF4 yVmpdwhPHgUcYotvCTxkSXKLf+D9HTn5vSLwo/8aXWFi/ypbbyFMXHwkCA5pw5kf wltbtALTwc7dpxEK99cSb/om1CLtFxJ/an4+db13p9JLpY91XUWJotzsNUkS2M6J WgNW3vD6Io3FhTP8xvOwwDIiP45u4AWbCzRGRMlq7mGcTHTNCRRgd7mNAu0LNNv0 khhrq9T3AiOjEijC0XxSV2A9j/zb2j/MoT+tDk3YjtEpV8ss8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV7GWs0ilzJtPAz4PkPml0BGJJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJjMmJhNTktMjIwYi0z MWVlLWE1NWEtYjkyY2YyNTM0YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKI2b3QcaUgrOBuV2Qv0VH/5JL9PsCd01d6AgKMutBqIf9Y1a8FYmATP 2oiahulMICg3ZGuFKQTf23qSS7LbzQUQXQfAn3GWT1jOI14WB+KlPcSwCOannDml XN07p0iOiTnvmPrOHf+8nMBUGW/KKJqE+TBnzQNYnBdrwBwcfwOX6S+IwgvIYfCb 7DLNK+QF/rBbRVFcUnsZpwXecS9UPMsgws0hFqFG+asO2gKb1i0+MIXqRme5m5j9 pcKD3ZEySqcMBBPFRhtEQBohO9oUVXQAPJA6T+zH6cDZThv4ZDFop89+mV7V3sb1 ERjcEt7BGAn0r0/X4avjvBK9CHwLsSo= -----END CERTIFICATE-----Generated at Sat May 10 22:23:35 2025 by rpki-client