$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa File: 38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa (raw, json) Hash identifier: lUX2KXVNFf2+I6FdPTq/LkLpgYqiqJI1/oXabmRStJM= Subject key identifier: 2D:0E:77:A1:20:76:77:B2:32:36:FD:95:3E:60:A5:79:8A:01:F0:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F56483EB76CD9743F79D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa Signing time: Thu 01 May 2025 17:09:34 +0000 ROA not before: Thu 01 May 2025 17:09:34 +0000 ROA not after: Wed 30 Jul 2025 17:09:34 +0000 asID: 22773 IP address blocks: 68.227.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:64:83:eb:76:cd:97:43:f7:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:34 2025 GMT Not After : Jul 30 17:09:34 2025 GMT Subject: CN=37e0af87-7292-4612-ac75-1f6c4940dc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:57:4b:c4:cc:6b:55:ca:cd:10:89:75:d9: 7a:db:e4:b2:dc:8b:d6:63:99:11:3a:ae:fe:8b:0e: e6:61:7d:e1:bd:86:7f:16:37:ed:eb:66:25:3c:8d: bc:51:c2:c1:d5:f2:a4:5b:cf:f9:31:7c:8b:fd:98: 66:21:fb:33:60:6b:65:43:df:a9:98:64:a9:2c:3f: 0e:4b:3d:eb:fe:0e:3c:9f:d0:18:66:b2:4c:ce:fd: a9:e9:67:f9:71:f3:8d:a4:53:df:2a:14:c4:53:02: 19:fa:c9:27:dc:8f:d1:06:f9:35:2f:aa:31:e5:0c: e1:bf:b2:b7:a0:7f:d6:18:de:f1:82:7d:2a:3d:64: c0:91:53:3c:87:c8:34:b7:cc:ca:29:12:7d:6e:4f: 74:a7:8f:d4:ed:6a:1e:06:ac:f7:11:45:c9:9b:61: 80:06:28:1a:00:9b:a4:bb:94:eb:88:fc:ae:21:43: 14:da:37:b4:31:41:a8:e8:f8:f9:77:32:fd:5f:23: 34:ca:af:0e:5f:0e:bd:ca:51:d7:73:a8:dd:39:99: 79:13:86:4b:23:48:6b:fd:3c:f4:bb:82:25:45:82: 87:1c:7c:19:cc:95:e2:c2:90:10:43:b5:4d:16:86: 26:eb:8d:c2:eb:33:61:b8:6d:64:21:0a:10:5b:70: e2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:77:A1:20:76:77:B2:32:36:FD:95:3E:60:A5:79:8A:01:F0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38a81b9b-cd79-3eb8-ab86-373920ac59f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:cc:2e:ab:ca:f9:03:b1:5e:c2:c7:67:60:4d:f6:2d:b5:36: 6c:11:85:2d:19:ab:6c:f9:31:0a:c3:ed:68:fa:5e:b0:5d:8d: 63:1a:77:c3:36:93:a2:c9:06:6d:ef:57:11:f3:b9:2e:f7:86: 0b:a8:30:ff:96:c4:f0:b5:14:37:24:25:cd:71:25:e3:54:59: e8:cc:f9:66:00:17:7b:97:69:a2:1d:f2:c1:ae:60:33:15:0f: f0:0f:14:30:9f:c4:ca:99:3b:5e:75:ff:8d:da:a2:78:64:43: c1:25:66:c7:d4:43:48:d3:0b:97:36:83:8d:b7:37:5b:ce:dc: 4b:90:19:de:f9:95:6b:db:db:10:3d:a8:19:d2:2e:af:37:38: 04:dd:b6:4c:42:a8:12:10:e9:7b:ec:01:5e:e4:f4:83:aa:2f: 00:3e:cc:43:07:b4:20:d4:4a:af:da:6d:92:f8:f2:ef:a3:47: 0c:44:6b:5f:25:a4:53:6d:90:0b:df:80:5b:54:c5:8b:d2:9c: 9a:76:26:84:c1:7c:12:9f:a5:f1:c2:56:85:9c:02:39:0a:7d: 16:6c:a6:2c:23:fb:8f:6b:d4:96:d1:b0:d0:c9:51:12:c2:fe: 36:dd:4a:e3:2a:be:e2:72:8a:25:44:71:f2:96:4f:40:75:cc: 00:9e:db:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19WSD63bNl0P3nUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzNFoXDTI1MDczMDE3MDkzNFowLzEtMCsGA1UEAxMk MzdlMGFmODctNzI5Mi00NjEyLWFjNzUtMWY2YzQ5NDBkYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fxXS8TMa1XKzRCJddl62+Sy3IvWY5kROq7+ iw7mYX3hvYZ/Fjft62YlPI28UcLB1fKkW8/5MXyL/ZhmIfszYGtlQ9+pmGSpLD8O Sz3r/g48n9AYZrJMzv2p6Wf5cfONpFPfKhTEUwIZ+skn3I/RBvk1L6ox5Qzhv7K3 oH/WGN7xgn0qPWTAkVM8h8g0t8zKKRJ9bk90p4/U7WoeBqz3EUXJm2GABigaAJuk u5TriPyuIUMU2je0MUGo6Pj5dzL9XyM0yq8OXw69ylHXc6jdOZl5E4ZLI0hr/Tz0 u4IlRYKHHHwZzJXiwpAQQ7VNFoYm643C6zNhuG1kIQoQW3DiRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0Od6EgdneyMjb9lT5gpXmKAfCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhhODFiOWItY2Q3OS0z ZWI4LWFiODYtMzczOTIwYWM1OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrMLqvK+QOxXsLHZ2BN9i21NmwRhS0Zq2z5MQrD7Wj6XrBdjWMad8M2 k6LJBm3vVxHzuS73hguoMP+WxPC1FDckJc1xJeNUWejM+WYAF3uXaaId8sGuYDMV D/APFDCfxMqZO151/43aonhkQ8ElZsfUQ0jTC5c2g423N1vO3EuQGd75lWvb2xA9 qBnSLq83OATdtkxCqBIQ6XvsAV7k9IOqLwA+zEMHtCDUSq/abZL48u+jRwxEa18l pFNtkAvfgFtUxYvSnJp2JoTBfBKfpfHCVoWcAjkKfRZspiwj+49r1JbRsNDJURLC /jbdSuMqvuJyiiVEcfKWT0B1zACe2+I= -----END CERTIFICATE-----Generated at Sun May 11 22:03:21 2025 by rpki-client