$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/345d939a-7051-38b3-9e5d-d94b08731ea0.roa File: 345d939a-7051-38b3-9e5d-d94b08731ea0.roa (raw, json) Hash identifier: bdnrPX6j0svFZBHXZJbVKy2ypWQ+A9m7HhdcW5zcEr4= Subject key identifier: E0:26:C8:09:68:90:7C:AA:F4:BE:D6:8A:A7:73:52:3E:2F:95:0A:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5634644A28BEF5D533D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/345d939a-7051-38b3-9e5d-d94b08731ea0.roa Signing time: Thu 01 May 2025 17:09:34 +0000 ROA not before: Thu 01 May 2025 17:09:34 +0000 ROA not after: Wed 30 Jul 2025 17:09:34 +0000 asID: 22773 IP address blocks: 68.227.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:63:46:44:a2:8b:ef:5d:53:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:34 2025 GMT Not After : Jul 30 17:09:34 2025 GMT Subject: CN=056df133-c2a5-4588-ba6b-884e457a83e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:94:cb:d4:6e:ae:59:f8:dd:cb:dd:1e:b9: c0:6c:53:ab:e2:ec:84:75:26:9b:9e:dc:a2:34:28: be:89:a1:2b:a2:7c:a3:7d:2c:87:97:59:d0:42:b7: ad:3b:af:94:05:b1:28:99:8b:e4:74:5a:0e:bd:99: 81:0d:37:b3:3c:02:99:7d:1c:cd:2c:b8:1b:67:40: 32:9f:cd:b6:54:3b:d8:17:83:05:bc:cb:6a:f4:6f: 49:c2:72:d8:2a:2a:76:9d:90:36:68:a4:fa:73:02: 18:5b:77:2c:a7:6d:82:a8:87:34:09:39:0f:f0:b4: 86:12:e8:7e:26:ea:8a:47:cc:6c:a0:5f:14:6a:6c: 56:1c:15:06:cd:77:a6:be:e6:a4:b3:c1:63:51:67: c2:95:86:54:47:9f:2b:e0:08:73:aa:78:de:e4:ff: 54:f7:63:83:00:91:66:66:ae:a4:5e:9a:08:a2:ec: a9:01:fb:70:5d:d4:db:bf:a4:48:ba:b2:4b:6e:67: 87:f2:ec:f9:66:95:6e:fa:30:c3:4e:76:1e:e7:02: 4a:21:29:4b:64:a8:93:70:63:f3:f4:f8:c0:ea:10: 11:e2:37:38:57:fa:e6:b8:98:1c:e0:36:77:26:6a: b2:da:ef:a6:6c:d7:60:4a:ad:6e:a3:63:03:fa:77: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:C8:09:68:90:7C:AA:F4:BE:D6:8A:A7:73:52:3E:2F:95:0A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/345d939a-7051-38b3-9e5d-d94b08731ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:67:61:b6:f2:2f:a9:39:4f:3c:56:85:e6:54:6c:5d:87:47: c2:10:64:52:dd:4e:d5:3c:9d:68:8f:15:e1:f4:1e:b2:c8:89: 1f:72:9c:6c:82:0f:6d:02:0d:a0:f5:91:51:6f:9a:c1:07:98: ed:3f:cf:36:73:03:40:7b:64:4a:4c:92:57:ac:41:0c:cc:82: 3b:f3:7b:4b:0c:89:e8:f3:a7:a7:1f:24:3c:4a:79:33:2f:84: 4d:58:05:44:87:69:26:ad:6d:89:a6:6f:5f:e4:84:39:f5:c3: 4d:e9:1b:09:a1:7c:db:06:68:af:84:3d:a5:8b:64:89:15:db: cd:0a:f7:3b:c3:79:11:a0:b8:02:d8:93:7d:c5:ba:23:ac:9e: eb:10:51:56:98:7f:b5:5c:62:c6:08:55:cb:32:81:98:51:d4: 4b:2d:8f:1c:b4:14:e3:c9:57:25:2c:c6:d8:b4:69:84:75:72: 47:49:10:d4:30:07:6e:23:90:9a:04:fc:2b:28:4c:7b:6b:c4: 67:4d:06:a6:7c:5e:32:b7:f4:2a:b1:3a:fd:72:f7:8a:03:19: e4:78:9d:31:0f:94:09:34:31:c5:cf:fb:5d:34:9e:94:92:8b: f5:0f:73:18:e3:cb:27:55:6f:da:9d:b0:14:8d:8c:6d:ee:f5: d4:9d:56:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19WNGRKKL711TPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzNFoXDTI1MDczMDE3MDkzNFowLzEtMCsGA1UEAxMk MDU2ZGYxMzMtYzJhNS00NTg4LWJhNmItODg0ZTQ1N2E4M2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBGUy9Rurln43cvdHrnAbFOr4uyEdSabntyi NCi+iaEronyjfSyHl1nQQretO6+UBbEomYvkdFoOvZmBDTezPAKZfRzNLLgbZ0Ay n822VDvYF4MFvMtq9G9JwnLYKip2nZA2aKT6cwIYW3csp22CqIc0CTkP8LSGEuh+ JuqKR8xsoF8UamxWHBUGzXemvuaks8FjUWfClYZUR58r4Ahzqnje5P9U92ODAJFm Zq6kXpoIouypAftwXdTbv6RIurJLbmeH8uz5ZpVu+jDDTnYe5wJKISlLZKiTcGPz 9PjA6hAR4jc4V/rmuJgc4DZ3Jmqy2u+mbNdgSq1uo2MD+ncAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAmyAlokHyq9L7WiqdzUj4vlQoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ1ZDkzOWEtNzA1MS0z OGIzLTllNWQtZDk0YjA4NzMxZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtnYbbyL6k5TzxWheZUbF2HR8IQZFLdTtU8nWiPFeH0HrLIiR9ynGyC D20CDaD1kVFvmsEHmO0/zzZzA0B7ZEpMklesQQzMgjvze0sMiejzp6cfJDxKeTMv hE1YBUSHaSatbYmmb1/khDn1w03pGwmhfNsGaK+EPaWLZIkV280K9zvDeRGguALY k33FuiOsnusQUVaYf7VcYsYIVcsygZhR1Estjxy0FOPJVyUsxti0aYR1ckdJENQw B24jkJoE/CsoTHtrxGdNBqZ8XjK39CqxOv1y94oDGeR4nTEPlAk0McXP+100npSS i/UPcxjjyydVb9qdsBSNjG3u9dSdVtk= -----END CERTIFICATE-----Generated at Mon May 12 18:23:38 2025 by rpki-client