$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa File: 4cb2cb23-e759-3267-8763-33d0b804a8e8.roa (raw, json) Hash identifier: ZjxYqd1tnF9VsKf2eEmhEQ8a3M0AKYIgEuzdAat2NtA= Subject key identifier: 58:53:0E:60:1C:F2:AE:3C:DE:B0:E7:30:4F:52:A7:AD:76:3F:99:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD12F8E5CDA4664DDC7B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa Signing time: Thu 01 May 2025 17:25:03 +0000 ROA not before: Thu 01 May 2025 17:25:03 +0000 ROA not after: Wed 30 Jul 2025 17:25:03 +0000 asID: 22773 IP address blocks: 68.8.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:12:f8:e5:cd:a4:66:4d:dc:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:03 2025 GMT Not After : Jul 30 17:25:03 2025 GMT Subject: CN=b7978c5b-e639-4922-96d9-49b4440c16a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:e0:1c:ea:f1:1d:fb:20:03:6e:8d:4b:79: bd:45:4d:14:38:87:d6:c6:3b:61:65:2a:2a:c3:e4: fc:72:6f:f4:f2:bf:0f:46:64:94:7f:f6:5d:f2:f2: 67:bf:b6:8e:52:6a:ef:01:d1:4a:fb:55:dd:6b:ce: 2f:fc:09:32:60:a4:ac:00:0d:fb:1f:0d:ed:4e:71: d4:ed:8a:7a:8b:0a:38:50:53:6a:a0:29:22:85:6b: b7:af:eb:52:e4:8f:73:65:05:c7:de:f2:bc:48:2d: df:4c:59:99:9f:94:b1:69:f1:59:78:18:ef:98:94: a6:5d:9c:df:b2:b2:4d:fe:1d:64:65:93:ba:4b:06: 2b:f7:91:96:81:e0:47:77:1a:eb:ff:bc:20:6e:7a: 6e:6a:98:af:98:2f:ce:9e:6d:e4:ac:fe:75:5e:77: 74:14:10:f9:a0:09:bb:fb:bf:37:5a:7e:a1:38:cc: 99:bf:7b:e0:61:cc:5a:ab:a8:d8:2a:ce:b3:2f:59: a0:0d:97:86:7c:12:d0:cd:75:3c:e1:38:da:0d:8a: ea:52:32:48:98:29:c6:0d:81:94:50:1a:35:e8:9f: 72:67:59:98:cc:56:8f:8c:b4:38:77:ad:76:ee:8d: 57:5c:6a:52:48:b6:89:03:79:18:3d:34:24:17:f4: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:0E:60:1C:F2:AE:3C:DE:B0:E7:30:4F:52:A7:AD:76:3F:99:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cb2cb23-e759-3267-8763-33d0b804a8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5e:9a:04:a4:71:e2:79:99:b6:25:90:a7:6b:a7:1d:d4:ad: 89:98:5c:1f:93:cf:7e:b9:c0:34:da:86:d0:26:e4:9c:31:b8: d9:6f:87:c9:2e:40:3d:f1:ae:91:0e:91:c7:3d:ca:6e:54:b6: 0c:67:54:0d:93:29:39:c8:de:f1:5a:95:d0:bc:96:76:38:75: 77:3b:22:e2:52:36:85:53:9f:12:50:e6:ba:de:19:80:e8:50: c2:62:51:c7:cb:18:67:e5:6f:4b:04:c7:a6:66:47:61:62:6b: ae:ef:2d:fc:ae:bc:09:d6:72:b3:da:27:c3:d3:fb:12:1f:94: 98:95:cb:2d:df:5a:a9:f5:ef:0f:06:62:b0:83:45:9f:c3:dc: cb:dd:d0:1b:c4:75:86:0f:f2:43:23:a2:ef:ec:3e:a7:35:04: ba:2e:6f:89:6e:84:83:af:4e:cb:b5:63:11:51:0c:ad:b8:5b: 01:26:c9:16:72:2c:1e:7f:8f:a0:76:28:1e:5b:cb:ef:1f:ef: 7f:34:33:75:3e:dc:46:bd:d6:aa:05:a3:05:cd:1d:74:ad:a3: fc:bd:15:74:84:b7:7e:25:41:8b:38:ca:de:9f:b2:bd:3a:a4: d4:f2:df:d0:c1:42:d8:48:02:a2:46:dd:ea:c0:e9:50:07:da: 1d:2a:68:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RL45c2kZk3ce4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwM1oXDTI1MDczMDE3MjUwM1owLzEtMCsGA1UEAxMk Yjc5NzhjNWItZTYzOS00OTIyLTk2ZDktNDliNDQ0MGMxNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNDgHOrxHfsgA26NS3m9RU0UOIfWxjthZSoq w+T8cm/08r8PRmSUf/Zd8vJnv7aOUmrvAdFK+1Xda84v/AkyYKSsAA37Hw3tTnHU 7Yp6iwo4UFNqoCkihWu3r+tS5I9zZQXH3vK8SC3fTFmZn5SxafFZeBjvmJSmXZzf srJN/h1kZZO6SwYr95GWgeBHdxrr/7wgbnpuapivmC/Onm3krP51Xnd0FBD5oAm7 +783Wn6hOMyZv3vgYcxaq6jYKs6zL1mgDZeGfBLQzXU84TjaDYrqUjJImCnGDYGU UBo16J9yZ1mYzFaPjLQ4d6127o1XXGpSSLaJA3kYPTQkF/TRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhTDmAc8q483rDnME9Sp612P5kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNiMmNiMjMtZTc1OS0z MjY3LTg3NjMtMzNkMGI4MDRhOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZemgSkceJ5mbYlkKdrpx3UrYmYXB+Tz365wDTahtAm5JwxuNlvh8ku QD3xrpEOkcc9ym5UtgxnVA2TKTnI3vFaldC8lnY4dXc7IuJSNoVTnxJQ5rreGYDo UMJiUcfLGGflb0sEx6ZmR2Fia67vLfyuvAnWcrPaJ8PT+xIflJiVyy3fWqn17w8G YrCDRZ/D3Mvd0BvEdYYP8kMjou/sPqc1BLoub4luhIOvTsu1YxFRDK24WwEmyRZy LB5/j6B2KB5by+8f7380M3U+3Ea91qoFowXNHXSto/y9FXSEt34lQYs4yt6fsr06 pNTy39DBQthIAqJG3erA6VAH2h0qaKI= -----END CERTIFICATE-----Generated at Mon May 12 07:27:52 2025 by rpki-client