$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa File: 3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa (raw, json) Hash identifier: JEeQ9/bCL1sG37DfANhKR8OSFjTjzENvU7r+c9Mvcak= Subject key identifier: F4:3E:49:C8:F0:81:DB:F5:7B:07:2E:2B:8D:4E:64:84:50:6D:2E:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD04706E611B1DD2E2B560 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa Signing time: Thu 01 May 2025 17:24:56 +0000 ROA not before: Thu 01 May 2025 17:24:56 +0000 ROA not after: Wed 30 Jul 2025 17:24:56 +0000 asID: 22773 IP address blocks: 68.8.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:04:70:6e:61:1b:1d:d2:e2:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:56 2025 GMT Not After : Jul 30 17:24:56 2025 GMT Subject: CN=4ac960f9-17c5-4e6f-b704-d8e023a1e22c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:47:bc:f8:9d:e4:96:a6:aa:f1:ca:b2:7b: 8c:e2:c9:4b:ed:21:a8:2b:f0:e0:f3:ef:80:2d:d5: b7:a8:0f:da:f9:52:d4:c0:64:6f:b9:82:1a:7c:05: 26:41:c2:81:61:cf:00:50:6e:ee:83:3b:84:10:bf: 0e:ee:f3:3f:9c:69:8b:a0:ff:56:60:81:c7:14:e7: 49:22:cd:af:04:7c:d0:70:9d:b3:b1:3d:99:7e:b3: 02:d5:75:7d:3b:bd:b6:22:71:35:4c:2c:c5:87:47: a6:40:5d:7b:66:cb:97:11:9b:99:f1:98:f6:22:e6: 56:91:bb:e8:3d:96:54:0a:a9:37:80:49:ca:48:d2: 04:9c:ca:2f:93:b6:66:c4:a7:b5:f4:d2:13:d8:a7: 39:67:bb:da:5f:5a:6a:d3:8d:2c:27:21:1c:21:2a: ad:ab:b9:14:86:e7:90:f9:6e:77:12:31:4c:37:1b: 1a:7d:02:eb:4a:b4:18:bd:6e:60:c4:e5:93:5f:82: 97:dd:69:3b:3b:a3:5e:a1:8a:9e:58:86:58:67:49: 34:0a:0b:c8:17:e8:69:d3:18:f1:86:d3:2a:f6:14: 44:2c:ee:87:a5:f4:ae:0c:b1:a0:6c:2a:0c:34:49: 83:60:16:c0:42:d4:5f:b9:ca:6c:52:e3:f4:3d:69: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:49:C8:F0:81:DB:F5:7B:07:2E:2B:8D:4E:64:84:50:6D:2E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3df9fcaa-bea6-3b3d-9bab-32ea7e2f5d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3f:cc:18:a4:24:b5:4b:6e:72:1f:fa:18:c1:5e:ec:2f:ba: 33:e2:6b:6b:5f:47:b7:f5:e1:f1:cc:96:27:9c:09:db:e4:10: e3:7e:69:28:e6:38:f0:2d:f1:d5:51:7e:9d:75:51:3d:f4:ba: 87:4c:48:cf:12:63:5a:2c:fc:3c:5f:71:61:0d:b5:9c:ff:79: 0b:2b:75:b1:01:12:cc:7e:e6:f0:ba:e5:a0:3a:83:03:d0:c1: 98:b0:c7:ed:4a:0a:e9:2d:26:0c:ea:9a:cb:28:e1:b1:a2:84: 23:57:a5:fb:c6:ae:44:12:17:60:d5:13:50:07:35:37:0b:11: 7b:54:11:a2:6a:b8:a1:8c:30:45:28:e1:da:cc:d6:ef:10:b8: c0:f2:66:65:5a:db:ea:1b:62:71:e1:d0:e8:07:58:fe:9e:79: 10:23:dd:0d:cf:34:d6:bc:e7:6b:c8:df:3b:e9:1e:a3:a3:16: 7f:1c:bf:f2:45:26:8c:24:d2:23:e9:81:7c:d3:37:2c:f2:a7: 95:e4:25:71:2b:ee:a7:36:e1:45:bb:41:f6:1f:a3:9b:76:ef: f8:13:f4:46:ee:92:9e:97:1a:89:a7:81:67:9b:65:62:d7:db: 87:cc:89:33:cc:07:c9:2c:73:57:24:06:be:cb:23:94:94:cc: b6:03:4e:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/QRwbmEbHdLitWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1NloXDTI1MDczMDE3MjQ1NlowLzEtMCsGA1UEAxMk NGFjOTYwZjktMTdjNS00ZTZmLWI3MDQtZDhlMDIzYTFlMjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ZHvPid5JamqvHKsnuM4slL7SGoK/Dg8++A LdW3qA/a+VLUwGRvuYIafAUmQcKBYc8AUG7ugzuEEL8O7vM/nGmLoP9WYIHHFOdJ Is2vBHzQcJ2zsT2ZfrMC1XV9O722InE1TCzFh0emQF17ZsuXEZuZ8Zj2IuZWkbvo PZZUCqk3gEnKSNIEnMovk7ZmxKe19NIT2Kc5Z7vaX1pq040sJyEcISqtq7kUhueQ +W53EjFMNxsafQLrSrQYvW5gxOWTX4KX3Wk7O6NeoYqeWIZYZ0k0CgvIF+hp0xjx htMq9hRELO6HpfSuDLGgbCoMNEmDYBbAQtRfucpsUuP0PWkVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ+Scjwgdv1ewcuK41OZIRQbS4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2RmOWZjYWEtYmVhNi0z YjNkLTliYWItMzJlYTdlMmY1ZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAhUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs/zBikJLVLbnIf+hjBXuwvujPia2tfR7f14fHMliecCdvkEON+aSjm OPAt8dVRfp11UT30uodMSM8SY1os/DxfcWENtZz/eQsrdbEBEsx+5vC65aA6gwPQ wZiwx+1KCuktJgzqmsso4bGihCNXpfvGrkQSF2DVE1AHNTcLEXtUEaJquKGMMEUo 4drM1u8QuMDyZmVa2+obYnHh0OgHWP6eeRAj3Q3PNNa852vI3zvpHqOjFn8cv/JF Jowk0iPpgXzTNyzyp5XkJXEr7qc24UW7QfYfo5t27/gT9Ebukp6XGomngWebZWLX 24fMiTPMB8ksc1ckBr7LI5SUzLYDTiM= -----END CERTIFICATE-----Generated at Sun May 11 13:46:15 2025 by rpki-client