$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c5faf34-0bb6-3f04-a194-e587ee88e364.roa File: 4c5faf34-0bb6-3f04-a194-e587ee88e364.roa (raw, json) Hash identifier: GH2gxSc5ror9Bp8QGCC8R2iBl13xnwkUvFr5YRs+nro= Subject key identifier: D5:8C:19:43:3E:87:83:36:30:68:CE:80:F7:8F:71:2A:9C:F7:83:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F568E0AA09E3D8A97B7900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c5faf34-0bb6-3f04-a194-e587ee88e364.roa Signing time: Thu 01 May 2025 17:09:36 +0000 ROA not before: Thu 01 May 2025 17:09:36 +0000 ROA not after: Wed 30 Jul 2025 17:09:36 +0000 asID: 22773 IP address blocks: 68.229.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:68:e0:aa:09:e3:d8:a9:7b:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:36 2025 GMT Not After : Jul 30 17:09:36 2025 GMT Subject: CN=7b47f9bd-a346-41cf-9149-5dc69bb7040f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:e4:fa:1f:4d:a3:47:a4:74:d8:c0:a9:a8: ee:77:ac:1f:3e:d0:70:6c:5c:b0:3a:da:af:38:77: 21:0c:71:31:59:5a:af:d5:81:44:cb:1b:c1:1c:0d: 81:d8:05:87:22:63:8d:11:53:35:05:a2:c6:33:55: c1:0b:d6:4a:f7:03:c7:36:12:41:0a:d6:20:0d:12: da:25:47:65:de:7c:ce:84:d6:bb:13:81:64:bc:e6: 94:b1:5b:64:03:92:d7:5a:02:1a:74:6f:b6:16:29: 13:55:b0:c3:4f:ac:14:5f:22:bc:3b:64:5c:15:a6: d9:20:08:12:e0:ee:7d:d7:9e:57:69:20:84:90:38: 7d:75:a5:f7:d7:8b:af:c1:1d:f7:c1:6d:1a:6e:63: b9:60:44:83:1c:ac:12:65:b7:b0:a5:56:63:4e:0f: f5:1f:a1:6e:6f:3e:38:74:31:0e:62:80:4f:22:89: 4e:a8:df:97:83:40:8a:4f:4c:2d:86:21:1d:46:99: 6c:c4:3a:09:89:89:fb:b9:23:85:00:84:8b:d9:c3: fb:b0:77:88:54:87:4e:7b:b6:1a:cf:da:88:c9:d0: 34:43:cc:f6:ab:43:ce:de:da:7b:1a:84:58:6f:64: 5c:c4:d9:f6:82:05:a9:27:9a:9c:9f:13:05:93:d3: 99:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8C:19:43:3E:87:83:36:30:68:CE:80:F7:8F:71:2A:9C:F7:83:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c5faf34-0bb6-3f04-a194-e587ee88e364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ce:b0:60:7b:de:5b:95:c3:97:e3:9a:b3:d0:7c:8c:1e:b2: 12:9e:45:08:6f:e5:82:b1:e8:28:e3:e6:6b:03:d1:71:48:64: ed:97:c4:ca:ce:cd:8c:73:9f:d3:8e:e3:8f:a7:93:f9:fa:13: 2c:39:31:ce:b3:18:07:d6:e4:b1:b0:d6:c9:95:fb:0c:70:87: 22:3e:f5:09:aa:b1:4b:9b:c7:19:90:8f:7a:0b:9f:4a:4d:d3: 63:0f:58:60:02:aa:10:82:56:dc:f0:0e:f2:c2:4a:9d:d0:fa: c3:9c:eb:4f:01:86:cf:f7:f8:0d:5d:39:2b:14:47:37:97:17: 04:81:13:4d:85:0b:f2:37:cd:e7:b8:36:72:e0:25:dd:6b:38: 83:ab:a8:d8:93:b4:37:a6:94:25:de:16:0d:ee:b2:7f:d6:65: 47:40:e2:63:32:c5:ef:b8:84:54:b7:f5:76:44:4e:65:51:72: 9f:eb:bc:74:ca:fb:30:ba:7f:1d:a4:75:02:77:c5:49:05:d3: 05:47:7c:65:cb:4a:eb:4b:4d:0c:1b:e7:cb:76:00:65:2f:02: 52:96:10:b7:63:ba:49:0f:9b:bd:3f:00:b6:74:62:75:13:1d: a6:6a:13:f2:92:19:03:7e:57:f9:b0:49:f2:8a:9d:03:51:5f: fe:b5:c5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Wjgqgnj2Kl7eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzNloXDTI1MDczMDE3MDkzNlowLzEtMCsGA1UEAxMk N2I0N2Y5YmQtYTM0Ni00MWNmLTkxNDktNWRjNjliYjcwNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8fk+h9No0ekdNjAqajud6wfPtBwbFywOtqv OHchDHExWVqv1YFEyxvBHA2B2AWHImONEVM1BaLGM1XBC9ZK9wPHNhJBCtYgDRLa JUdl3nzOhNa7E4FkvOaUsVtkA5LXWgIadG+2FikTVbDDT6wUXyK8O2RcFabZIAgS 4O59155XaSCEkDh9daX314uvwR33wW0abmO5YESDHKwSZbewpVZjTg/1H6Fubz44 dDEOYoBPIolOqN+Xg0CKT0wthiEdRplsxDoJiYn7uSOFAISL2cP7sHeIVIdOe7Ya z9qIydA0Q8z2q0PO3tp7GoRYb2RcxNn2ggWpJ5qcnxMFk9OZjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWMGUM+h4M2MGjOgPePcSqc94McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGM1ZmFmMzQtMGJiNi0z ZjA0LWExOTQtZTU4N2VlODhlMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrOsGB73luVw5fjmrPQfIweshKeRQhv5YKx6Cjj5msD0XFIZO2XxMrO zYxzn9OO44+nk/n6Eyw5Mc6zGAfW5LGw1smV+wxwhyI+9QmqsUubxxmQj3oLn0pN 02MPWGACqhCCVtzwDvLCSp3Q+sOc608Bhs/3+A1dOSsURzeXFwSBE02FC/I3zee4 NnLgJd1rOIOrqNiTtDemlCXeFg3usn/WZUdA4mMyxe+4hFS39XZETmVRcp/rvHTK +zC6fx2kdQJ3xUkF0wVHfGXLSutLTQwb58t2AGUvAlKWELdjukkPm70/ALZ0YnUT HaZqE/KSGQN+V/mwSfKKnQNRX/61xZk= -----END CERTIFICATE-----Generated at Sun May 11 04:19:02 2025 by rpki-client