$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3ac951-e59d-3fff-8d74-0ec875e5ef86.roa File: 4c3ac951-e59d-3fff-8d74-0ec875e5ef86.roa (raw, json) Hash identifier: dj41KRLyXFUeSNBd2GFhYm5Ys3DpVcpmscs4Te0Y3vc= Subject key identifier: 33:FB:00:DF:1A:74:3A:FE:A4:C6:D4:27:1C:46:8A:A6:4A:FE:15:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCF6EE5E595F924021DB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3ac951-e59d-3fff-8d74-0ec875e5ef86.roa Signing time: Thu 01 May 2025 17:24:50 +0000 ROA not before: Thu 01 May 2025 17:24:50 +0000 ROA not after: Wed 30 Jul 2025 17:24:50 +0000 asID: 22773 IP address blocks: 68.7.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:f6:ee:5e:59:5f:92:40:21:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:50 2025 GMT Not After : Jul 30 17:24:50 2025 GMT Subject: CN=ff9ec0ab-fe10-473d-952e-63c12d4dcc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:83:f9:01:e4:c9:bb:d0:4b:80:b0:d9:84: d3:f9:ed:61:54:9c:21:91:fd:5b:3d:4a:38:f1:ab: 86:f7:40:65:41:2a:fb:b2:ba:7a:d0:58:8d:66:84: cb:65:c6:bf:a6:cf:73:1c:95:a9:ee:cc:ed:f0:5a: e1:5d:c1:d0:04:23:63:e8:83:a3:8f:73:2c:8b:4b: 40:92:34:e9:67:dd:14:68:53:97:64:a4:83:2c:9c: 99:f4:d1:e4:fe:22:39:b3:f9:ba:b0:82:ca:b4:88: 20:09:d0:f5:2c:9c:62:4f:df:55:4a:f1:8f:cd:11: 32:c9:c3:22:47:27:5d:7b:f7:79:b3:4b:d8:61:38: 22:28:4c:06:de:22:a3:f2:89:4a:3b:4e:d2:cf:a2: fd:42:f7:7e:5b:03:17:ef:ed:92:e2:c6:4c:14:38: 5e:61:5e:f4:4f:26:01:13:65:a7:46:d4:90:a3:b5: 80:ac:84:bb:59:fd:2f:2e:47:ee:e8:68:36:e4:51: c5:01:cb:10:9e:c0:db:f4:4b:e7:3c:7b:e4:bd:f1: 3c:90:52:13:c8:81:ea:c7:21:21:f7:70:c6:bd:01: 11:30:67:5f:b6:9a:5e:9f:8f:cb:f5:ee:cf:a2:b9: c5:c8:ef:8a:e9:46:da:39:43:7a:f1:1b:ae:58:ea: 9a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:00:DF:1A:74:3A:FE:A4:C6:D4:27:1C:46:8A:A6:4A:FE:15:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3ac951-e59d-3fff-8d74-0ec875e5ef86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6b:9e:a7:ca:60:ed:1c:53:69:6c:d8:34:fb:58:e3:a0:a1: 87:b1:29:2c:a6:8d:9a:8d:32:20:05:f4:46:cb:94:98:6f:27: db:48:1c:e9:57:93:70:50:b7:2e:4b:28:a2:bc:03:11:3a:ea: 58:ec:6e:3f:a4:f8:65:11:38:13:1c:2d:37:92:a3:df:60:d0: 4f:8d:ff:9e:15:13:f4:21:e8:49:b3:31:19:17:95:8f:17:8a: aa:33:17:1b:f5:91:bd:64:a9:9e:ec:d1:f6:28:c7:37:2f:0d: 1b:c3:1d:ec:e2:d1:1e:26:89:fb:b4:76:ac:41:09:bd:3b:f0: 8a:46:c7:1d:f8:04:49:e2:86:2a:6d:f5:b0:6a:82:24:14:83: 3a:eb:d8:c9:b7:35:97:19:d9:84:2e:03:a2:08:76:2b:b9:e5: 99:cb:55:24:2a:19:da:15:d5:40:4d:91:94:b5:1c:2c:97:87: 59:cd:f9:f1:52:34:28:65:b1:5c:19:ca:d6:e3:a4:52:7f:b8: 58:3a:8c:0e:94:5c:31:1e:22:af:72:fd:f2:8d:de:fe:37:e2: 7e:3f:e7:c4:f6:ca:8e:c8:66:2b:e9:99:ca:47:4e:04:02:e7: 80:6e:5e:62:39:26:72:77:c1:8d:44:7b:78:9e:5f:28:54:16: dd:97:e0:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/PbuXllfkkAh24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1MFoXDTI1MDczMDE3MjQ1MFowLzEtMCsGA1UEAxMk ZmY5ZWMwYWItZmUxMC00NzNkLTk1MmUtNjNjMTJkNGRjYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqOD+QHkybvQS4Cw2YTT+e1hVJwhkf1bPUo4 8auG90BlQSr7srp60FiNZoTLZca/ps9zHJWp7szt8FrhXcHQBCNj6IOjj3Msi0tA kjTpZ90UaFOXZKSDLJyZ9NHk/iI5s/m6sILKtIggCdD1LJxiT99VSvGPzREyycMi Rydde/d5s0vYYTgiKEwG3iKj8olKO07Sz6L9Qvd+WwMX7+2S4sZMFDheYV70TyYB E2WnRtSQo7WArIS7Wf0vLkfu6Gg25FHFAcsQnsDb9EvnPHvkvfE8kFITyIHqxyEh 93DGvQERMGdftppen4/L9e7PornFyO+K6UbaOUN68RuuWOqa1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP7AN8adDr+pMbUJxxGiqZK/hWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGMzYWM5NTEtZTU5ZC0z ZmZmLThkNzQtMGVjODc1ZTVlZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVrnqfKYO0cU2ls2DT7WOOgoYexKSymjZqNMiAF9EbLlJhvJ9tIHOlX k3BQty5LKKK8AxE66ljsbj+k+GUROBMcLTeSo99g0E+N/54VE/Qh6EmzMRkXlY8X iqozFxv1kb1kqZ7s0fYoxzcvDRvDHezi0R4mifu0dqxBCb078IpGxx34BEnihipt 9bBqgiQUgzrr2Mm3NZcZ2YQuA6IIdiu55ZnLVSQqGdoV1UBNkZS1HCyXh1nN+fFS NChlsVwZytbjpFJ/uFg6jA6UXDEeIq9y/fKN3v434n4/58T2yo7IZivpmcpHTgQC 54BuXmI5JnJ3wY1Ee3ieXyhUFt2X4Hw= -----END CERTIFICATE-----Generated at Sun May 11 19:02:42 2025 by rpki-client