$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a41674a-93c9-349c-b21f-f7f8ab223b7e.roa File: 3a41674a-93c9-349c-b21f-f7f8ab223b7e.roa (raw, json) Hash identifier: lyfKz4TNY2nay5b17D7pnPfDbouLMCrYCQyHW5Dk4+I= Subject key identifier: 73:92:7E:8D:6A:4D:B4:0E:C6:C0:9A:B9:D9:7C:32:69:3F:52:19:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCE4BB02273BE871010200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a41674a-93c9-349c-b21f-f7f8ab223b7e.roa Signing time: Thu 01 May 2025 17:24:41 +0000 ROA not before: Thu 01 May 2025 17:24:41 +0000 ROA not after: Wed 30 Jul 2025 17:24:41 +0000 asID: 22773 IP address blocks: 68.7.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:e4:bb:02:27:3b:e8:71:01:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:41 2025 GMT Not After : Jul 30 17:24:41 2025 GMT Subject: CN=4b811998-6e8f-4345-88c1-632b5368aa4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:e4:99:bc:52:9a:25:4a:d5:df:48:b1:4a: cf:02:65:f7:bb:c2:6d:53:ce:1a:c2:69:1d:73:15: 17:13:6d:a5:d9:fa:c7:c5:3e:df:dd:62:9c:07:7e: ad:d8:0b:23:ab:8a:c8:96:70:63:43:b3:2f:c0:8d: 03:84:ad:52:4d:f5:8e:61:93:e6:d3:14:65:5e:75: 1c:0d:1d:03:e7:bc:bb:bf:26:37:7d:ce:e4:1a:d3: 4a:17:82:02:5d:85:d1:15:ea:53:76:a2:57:48:c8: bb:0d:ab:5c:1c:f1:f9:a0:35:ab:35:fe:96:8c:35: 2e:68:cd:3c:68:59:e5:55:96:05:67:7c:fe:37:50: 50:12:87:4a:62:87:59:4c:36:3e:00:21:be:af:52: 77:80:66:32:d9:42:d2:6b:5d:39:8f:eb:59:62:98: 13:c0:bf:32:e5:6e:4e:c6:8a:a8:28:a2:63:67:77: 7d:26:5c:b3:29:d6:f2:b1:ef:d9:04:65:7b:10:4e: 54:c4:5e:b5:24:0f:a0:90:c6:d9:e9:6f:8d:a7:f6: b2:ec:e7:9f:be:f0:e9:29:98:aa:37:e3:1c:59:97: a6:cb:2d:28:70:81:cf:58:e2:9e:86:99:ba:d3:fd: b6:e7:4b:00:e4:fc:63:b7:94:45:41:63:4c:7c:d6: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:92:7E:8D:6A:4D:B4:0E:C6:C0:9A:B9:D9:7C:32:69:3F:52:19:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a41674a-93c9-349c-b21f-f7f8ab223b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:24:09:6a:92:3f:cf:a8:d0:f7:98:9c:b1:94:89:8b:8b:70: 19:14:dc:4c:6a:3d:e8:48:08:64:ed:7a:66:57:6e:02:98:92: 85:79:fc:d5:e8:d6:cf:ce:07:9f:bc:07:76:e8:64:72:9a:57: 17:18:aa:4b:3b:04:ab:a2:61:dd:a1:2d:38:e5:92:4e:93:8a: 9e:8e:48:e4:b3:3f:45:7b:dd:91:5d:be:54:49:9c:38:3e:35: 50:64:e8:44:b0:6d:3c:60:b7:83:51:b5:01:42:27:1a:aa:d8: 0d:19:f9:80:4a:fd:0c:3f:b6:cd:80:ec:c5:fc:a1:01:82:5d: bb:f0:7c:d8:b8:85:64:a3:dc:3f:e9:08:68:d1:18:9b:e1:43: c1:69:3b:c7:73:be:27:a7:6f:bd:1e:e0:02:fe:a9:3f:c9:4d: 96:89:9e:29:d7:9f:9f:35:b1:5f:88:d0:c8:d6:9e:ea:f1:f7: 35:78:b9:3c:33:a2:87:13:da:74:db:21:9e:f5:6d:75:35:e2: 23:85:84:25:1c:91:3a:d2:59:26:f5:ee:c9:f7:1e:ef:7b:cf: 25:b3:c5:1e:9e:de:61:e8:02:9a:d4:3c:e1:60:6f:4a:84:e8: 85:4b:e5:4a:50:62:21:9f:b8:67:6f:db:f5:b1:01:38:a8:81: 12:09:91:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/OS7Aic76HEBAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0MVoXDTI1MDczMDE3MjQ0MVowLzEtMCsGA1UEAxMk NGI4MTE5OTgtNmU4Zi00MzQ1LTg4YzEtNjMyYjUzNjhhYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVzkmbxSmiVK1d9IsUrPAmX3u8JtU84awmkd cxUXE22l2frHxT7f3WKcB36t2Asjq4rIlnBjQ7MvwI0DhK1STfWOYZPm0xRlXnUc DR0D57y7vyY3fc7kGtNKF4ICXYXRFepTdqJXSMi7DatcHPH5oDWrNf6WjDUuaM08 aFnlVZYFZ3z+N1BQEodKYodZTDY+ACG+r1J3gGYy2ULSa105j+tZYpgTwL8y5W5O xoqoKKJjZ3d9JlyzKdbyse/ZBGV7EE5UxF61JA+gkMbZ6W+Np/ay7OefvvDpKZiq N+McWZemyy0ocIHPWOKehpm60/2250sA5Pxjt5RFQWNMfNbw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOSfo1qTbQOxsCaudl8Mmk/UhmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E0MTY3NGEtOTNjOS0z NDljLWIyMWYtZjdmOGFiMjIzYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHskCWqSP8+o0PeYnLGUiYuLcBkU3ExqPehICGTtemZXbgKYkoV5/NXo 1s/OB5+8B3boZHKaVxcYqks7BKuiYd2hLTjlkk6Tip6OSOSzP0V73ZFdvlRJnDg+ NVBk6ESwbTxgt4NRtQFCJxqq2A0Z+YBK/Qw/ts2A7MX8oQGCXbvwfNi4hWSj3D/p CGjRGJvhQ8FpO8dzvienb70e4AL+qT/JTZaJninXn581sV+I0MjWnurx9zV4uTwz oocT2nTbIZ71bXU14iOFhCUckTrSWSb17sn3Hu97zyWzxR6e3mHoAprUPOFgb0qE 6IVL5UpQYiGfuGdv2/WxATiogRIJkek= -----END CERTIFICATE-----Generated at Sun May 11 01:02:19 2025 by rpki-client