$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47a8c6a6-225a-3213-baf6-f8a7c1b7f54b.roa File: 47a8c6a6-225a-3213-baf6-f8a7c1b7f54b.roa (raw, json) Hash identifier: M5pCQx9NTFJdiHZWmPys8qullVzOs9la/a8M/BhozO0= Subject key identifier: 51:97:C3:E9:89:49:D8:AC:F8:4F:66:53:99:AB:0A:97:44:C4:07:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4FAAE48929230D9E1D680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47a8c6a6-225a-3213-baf6-f8a7c1b7f54b.roa Signing time: Thu 01 May 2025 17:08:44 +0000 ROA not before: Thu 01 May 2025 17:08:44 +0000 ROA not after: Wed 30 Jul 2025 17:08:44 +0000 asID: 22773 IP address blocks: 68.1.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:fa:ae:48:92:92:30:d9:e1:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:44 2025 GMT Not After : Jul 30 17:08:44 2025 GMT Subject: CN=75597d10-4f1b-483c-b93a-5506073d8ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:39:4b:8e:10:56:54:51:78:75:62:a1:55: 01:dd:7e:45:79:28:0b:3f:bc:86:99:93:9a:7d:29: 70:fa:14:7f:f7:94:50:26:51:cf:d5:af:e4:4f:47: 30:20:03:43:79:28:47:25:4f:a5:b4:53:ff:8f:ef: 85:57:84:a1:22:61:ff:24:c9:37:fd:d2:6f:83:55: 3e:9d:a4:5c:75:d0:68:4d:72:09:b6:b8:0f:e8:d3: e5:e3:34:46:97:2b:a5:d5:6f:3b:95:53:82:0a:df: ce:bb:c1:d8:50:a4:b5:f9:e8:c1:7c:b9:9e:e6:2a: d0:0b:f6:4b:5e:b7:ba:dd:72:7c:46:b9:db:ff:46: c9:b8:03:2b:41:19:5c:b6:71:e8:6b:25:fe:0e:45: fc:9a:21:3a:d9:bc:af:0a:07:b2:81:fb:a7:80:68: 18:43:65:b2:bd:81:5b:3e:5a:15:a3:ea:8b:a0:2d: 1c:0d:79:e9:03:f0:fb:1d:61:36:07:99:4f:44:13: c6:a4:c0:ac:59:76:11:94:59:75:c3:0e:6e:4f:69: 2b:93:81:28:d3:59:54:be:3f:dd:6e:26:b6:13:c6: c3:f2:61:fe:ab:01:a5:c5:8e:2e:ca:08:e5:35:1f: b6:cf:8e:a0:a2:df:71:90:23:d5:88:57:0d:62:89: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:97:C3:E9:89:49:D8:AC:F8:4F:66:53:99:AB:0A:97:44:C4:07:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47a8c6a6-225a-3213-baf6-f8a7c1b7f54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:35:52:04:9d:9b:c6:f3:a2:44:47:41:fa:4b:6f:1a:e9:3c: 1a:8f:cf:9a:a6:93:e4:60:8a:84:d1:8f:90:c5:fd:34:a4:6d: f0:20:10:f9:86:23:09:58:79:74:bd:66:cb:18:a8:dc:3f:64: 74:f9:e1:2f:34:c3:62:aa:58:4e:d1:45:30:0a:f6:eb:f8:fa: 3d:49:e5:94:91:b2:34:70:a7:ac:0d:1e:6c:0d:e9:6d:12:80: c8:9f:1b:59:61:9a:22:17:7d:58:9c:ab:b5:6c:68:07:c0:d6: f7:05:97:cc:49:7a:3d:91:b1:14:40:05:fe:1b:eb:ea:42:d8: ff:47:b1:f8:0f:d5:44:1b:0e:10:fc:de:90:18:46:3d:3b:05: df:ad:48:7f:b8:04:37:2b:9a:ea:e0:c6:af:27:27:3f:37:aa: c1:0d:35:76:36:77:14:db:31:95:56:d4:97:31:af:02:c9:a2: 21:69:f5:a6:bb:24:70:82:86:59:9e:cf:8f:a6:7d:ed:46:6e: b4:a5:5a:6e:2a:0c:28:64:b3:00:99:18:a6:57:f1:31:22:1e: ed:96:68:20:86:9b:4b:33:56:5c:df:13:7e:47:56:a7:34:90: 88:1d:af:5f:b7:0f:b8:2c:d6:d8:03:cd:57:99:b4:ce:e2:ba: c6:0c:98:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PquSJKSMNnh1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0NFoXDTI1MDczMDE3MDg0NFowLzEtMCsGA1UEAxMk NzU1OTdkMTAtNGYxYi00ODNjLWI5M2EtNTUwNjA3M2Q4ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6c5S44QVlRReHVioVUB3X5FeSgLP7yGmZOa fSlw+hR/95RQJlHP1a/kT0cwIANDeShHJU+ltFP/j++FV4ShImH/JMk3/dJvg1U+ naRcddBoTXIJtrgP6NPl4zRGlyul1W87lVOCCt/Ou8HYUKS1+ejBfLme5irQC/ZL Xre63XJ8Rrnb/0bJuAMrQRlctnHoayX+DkX8miE62byvCgeygfungGgYQ2WyvYFb PloVo+qLoC0cDXnpA/D7HWE2B5lPRBPGpMCsWXYRlFl1ww5uT2krk4Eo01lUvj/d bia2E8bD8mH+qwGlxY4uygjlNR+2z46got9xkCPViFcNYokNSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGXw+mJSdis+E9mU5mrCpdExAcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDdhOGM2YTYtMjI1YS0z MjEzLWJhZjYtZjhhN2MxYjdmNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAGlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB81UgSdm8bzokRHQfpLbxrpPBqPz5qmk+RgioTRj5DF/TSkbfAgEPmG IwlYeXS9ZssYqNw/ZHT54S80w2KqWE7RRTAK9uv4+j1J5ZSRsjRwp6wNHmwN6W0S gMifG1lhmiIXfVicq7VsaAfA1vcFl8xJej2RsRRABf4b6+pC2P9HsfgP1UQbDhD8 3pAYRj07Bd+tSH+4BDcrmurgxq8nJz83qsENNXY2dxTbMZVW1JcxrwLJoiFp9aa7 JHCChlmez4+mfe1GbrSlWm4qDChkswCZGKZX8TEiHu2WaCCGm0szVlzfE35HVqc0 kIgdr1+3D7gs1tgDzVeZtM7iusYMmJI= -----END CERTIFICATE-----Generated at Tue Jul 1 12:26:20 2025 by rpki-client