$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44242a25-6670-393e-9eea-8f75a5de3d17.roa File: 44242a25-6670-393e-9eea-8f75a5de3d17.roa (raw, json) Hash identifier: AkJw27oO6oDREXAecdjZdqfnckhjlZoMvbbJYZTH5NY= Subject key identifier: 3B:C6:EC:9A:22:66:5F:6E:F0:5D:1B:7F:04:9C:92:48:A6:2F:90:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0D5D6CB5A1EAFAE7CE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44242a25-6670-393e-9eea-8f75a5de3d17.roa Signing time: Thu 01 May 2025 17:25:00 +0000 ROA not before: Thu 01 May 2025 17:25:00 +0000 ROA not after: Wed 30 Jul 2025 17:25:00 +0000 asID: 22773 IP address blocks: 68.8.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0d:5d:6c:b5:a1:ea:fa:e7:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:00 2025 GMT Not After : Jul 30 17:25:00 2025 GMT Subject: CN=68556585-bc7b-4319-bee6-7baf5cf205ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:c0:87:37:27:4d:d7:aa:59:5b:78:df:02: 31:55:7f:4b:b9:64:23:52:1a:72:5e:20:96:f2:44: 6d:fa:39:6f:e2:7a:dd:14:70:fd:5b:58:61:aa:5e: 87:01:34:73:02:f6:6a:17:ad:ae:b9:1a:03:51:af: c7:7e:5a:68:97:d8:4d:29:bd:3e:07:0b:67:58:6c: 53:a4:c2:51:71:56:f7:ed:89:0d:f4:a2:af:40:a9: de:4e:b6:cb:16:9a:cc:4c:42:6a:f1:1e:32:7a:5b: ec:50:60:32:41:bd:5d:3a:28:e4:38:37:7f:36:98: 3e:78:ff:53:17:b8:ad:a0:98:b9:48:f1:07:58:38: 01:db:f5:85:9b:65:bf:66:01:79:58:28:4f:a7:55: 43:64:ea:53:48:4f:0b:c0:78:81:a4:e4:fb:49:63: 73:92:54:41:d4:bf:52:21:ec:ed:9e:16:69:c0:b4: 66:cf:1b:1e:fc:4d:41:aa:8f:12:57:60:80:13:94: 32:2c:61:18:5e:83:ab:03:37:18:7e:35:cc:6f:26: 6a:37:2b:e4:dc:05:b4:1b:7c:be:f0:20:8d:bf:90: 24:ae:69:d7:a5:f3:f8:6c:fc:85:b2:d5:21:7b:14: 4c:85:20:3d:bc:0a:43:af:01:d8:82:1d:58:9c:1a: 88:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C6:EC:9A:22:66:5F:6E:F0:5D:1B:7F:04:9C:92:48:A6:2F:90:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44242a25-6670-393e-9eea-8f75a5de3d17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:56:e8:d7:10:bb:31:bc:55:3d:ae:e9:4b:5c:b1:f3:e3:a7: 50:aa:1a:6b:04:ff:8c:02:92:58:66:67:5c:6d:ff:95:6d:4c: fd:3e:d9:90:96:70:e8:9a:26:81:b9:27:0d:54:8c:f8:9f:f8: 9d:68:3b:3f:a6:df:22:42:7b:72:77:ae:53:de:ac:0d:5a:22: 1b:b2:25:7d:32:76:22:31:ee:5b:97:31:41:67:c2:eb:07:5c: dd:1a:0a:60:ad:f8:42:2e:1b:d5:8f:37:0b:82:cb:8c:f6:91: 60:da:ac:4a:c7:95:da:1c:14:51:52:75:b5:16:59:c4:d0:70: 55:ed:f4:82:be:96:eb:d9:2a:81:b5:70:5d:de:8c:08:10:0f: c7:94:0b:f3:03:3e:ef:be:a1:28:0e:1f:c0:47:22:79:72:a2: 0f:b9:07:c2:2f:29:b6:71:6e:56:16:fc:6f:81:6d:d4:47:61: 15:6d:5d:f6:64:9a:38:01:0b:71:19:e8:c9:d9:76:cb:b0:1b: 78:cb:4b:14:32:f5:8a:06:47:63:bc:9e:4d:f4:98:66:ea:43: ae:eb:21:56:54:59:87:6d:e5:1a:61:7e:0d:d0:67:9a:b6:31: eb:15:ec:49:12:49:57:e9:29:40:c3:a0:67:90:82:b2:65:3f: fc:9a:c3:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Q1dbLWh6vrnzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMFoXDTI1MDczMDE3MjUwMFowLzEtMCsGA1UEAxMk Njg1NTY1ODUtYmM3Yi00MzE5LWJlZTYtN2JhZjVjZjIwNWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiafAhzcnTdeqWVt43wIxVX9LuWQjUhpyXiCW 8kRt+jlv4nrdFHD9W1hhql6HATRzAvZqF62uuRoDUa/Hflpol9hNKb0+BwtnWGxT pMJRcVb37YkN9KKvQKneTrbLFprMTEJq8R4yelvsUGAyQb1dOijkODd/Npg+eP9T F7itoJi5SPEHWDgB2/WFm2W/ZgF5WChPp1VDZOpTSE8LwHiBpOT7SWNzklRB1L9S IeztnhZpwLRmzxse/E1Bqo8SV2CAE5QyLGEYXoOrAzcYfjXMbyZqNyvk3AW0G3y+ 8CCNv5AkrmnXpfP4bPyFstUhexRMhSA9vApDrwHYgh1YnBqI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvG7JoiZl9u8F0bfwSckkimL5DnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQyNDJhMjUtNjY3MC0z OTNlLTllZWEtOGY3NWE1ZGUzZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdW6NcQuzG8VT2u6UtcsfPjp1CqGmsE/4wCklhmZ1xt/5VtTP0+2ZCW cOiaJoG5Jw1UjPif+J1oOz+m3yJCe3J3rlPerA1aIhuyJX0ydiIx7luXMUFnwusH XN0aCmCt+EIuG9WPNwuCy4z2kWDarErHldocFFFSdbUWWcTQcFXt9IK+luvZKoG1 cF3ejAgQD8eUC/MDPu++oSgOH8BHInlyog+5B8IvKbZxblYW/G+BbdRHYRVtXfZk mjgBC3EZ6MnZdsuwG3jLSxQy9YoGR2O8nk30mGbqQ67rIVZUWYdt5Rphfg3QZ5q2 MesV7EkSSVfpKUDDoGeQgrJlP/yaw0Y= -----END CERTIFICATE-----Generated at Sun May 11 19:07:51 2025 by rpki-client