$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0ac4d1-a100-310b-b5cf-7d20fae0b7c7.roa File: 4d0ac4d1-a100-310b-b5cf-7d20fae0b7c7.roa (raw, json) Hash identifier: yVE6NHcHutxPXXSAyjJU70IT9rIXaCaK/9/m6eX7nYg= Subject key identifier: 77:86:4F:45:E8:32:16:ED:04:72:F7:ED:3B:2F:B8:E2:D4:80:E9:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCFD83CAA77AA7101E0980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0ac4d1-a100-310b-b5cf-7d20fae0b7c7.roa Signing time: Thu 01 May 2025 17:24:53 +0000 ROA not before: Thu 01 May 2025 17:24:53 +0000 ROA not after: Wed 30 Jul 2025 17:24:53 +0000 asID: 22773 IP address blocks: 68.8.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:fd:83:ca:a7:7a:a7:10:1e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:53 2025 GMT Not After : Jul 30 17:24:53 2025 GMT Subject: CN=14b57e88-f857-4ace-a3cf-cd81b227deb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:ff:41:a2:21:02:40:87:3f:69:82:17:65: f3:77:a7:58:a1:14:41:d9:8c:c8:83:83:77:d0:f4: 0a:9d:07:61:ae:17:48:6a:cc:ea:76:45:9e:b5:1d: 74:1a:7b:a9:0c:8c:c0:93:aa:dc:d5:e6:e7:88:b3: 7d:a3:62:3d:ef:bf:7c:b0:85:8b:d7:c4:78:04:74: 10:c6:24:a0:7b:e8:c3:3a:35:a2:ae:4e:15:4b:4b: 37:be:72:18:bf:f6:c6:3d:c6:a3:68:9a:5d:50:e5: 2a:79:47:8b:73:49:42:5f:f8:27:95:01:a5:46:ce: 72:75:9c:6f:3d:f4:e7:3f:db:44:d2:55:7b:73:76: 90:95:54:64:c4:df:d8:2b:e7:d4:97:e5:34:54:c3: 1b:67:09:6c:90:6d:c5:85:77:b4:fa:58:dc:0a:0b: 2f:b5:ac:2b:ff:18:cf:fc:f1:3b:b0:7d:d6:d4:92: 28:03:47:b1:9e:4f:2f:c7:43:20:26:1b:a6:e3:a5: 55:88:fd:d7:98:11:26:23:4e:9c:9a:72:2f:05:c8: 04:2b:fe:79:ea:67:c5:c0:a6:cd:a1:a5:88:0d:09: bc:d8:02:e4:ad:32:f8:78:db:62:fd:15:fe:f3:f8: fc:10:d4:7f:76:24:a5:c8:4e:a5:1e:25:9a:9d:53: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:86:4F:45:E8:32:16:ED:04:72:F7:ED:3B:2F:B8:E2:D4:80:E9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0ac4d1-a100-310b-b5cf-7d20fae0b7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c9:71:d2:e4:a2:4a:31:3b:5e:92:ed:7b:95:7e:e2:b8:3c: 33:4f:1e:f1:1c:17:58:a8:14:c5:ed:76:fd:c0:a7:91:64:45: b2:76:03:0b:1d:68:0d:08:d8:9e:f7:2b:15:de:45:1a:dc:e5: 60:29:6d:3a:b8:ad:19:b7:5a:06:f4:92:b8:3e:66:f0:a6:d9: 44:f1:18:0e:4b:54:fe:c6:12:e6:5e:0c:95:82:92:4b:61:62: 91:2a:63:18:eb:4b:f1:cf:b0:43:a0:42:96:a6:fc:14:06:5e: 48:85:a1:0e:6a:80:98:7f:ce:9f:15:27:e7:af:56:fa:b9:55: 10:9b:ce:37:61:57:56:75:c8:98:48:a2:ba:9d:29:83:e9:bb: d1:d5:9e:8d:67:ed:d2:e1:62:9c:3c:81:b1:1e:8b:28:a6:7d: 04:44:1e:66:5c:8b:88:fc:7d:9c:ac:3b:0f:4d:0b:bc:23:9f: d0:7c:b5:05:2c:ee:5a:08:98:94:12:fb:2c:9c:1a:f0:a3:72: c3:97:38:ea:1e:ef:98:fa:dc:c0:5c:c8:65:0c:a3:b0:1d:b1: e4:48:a5:42:35:65:4d:33:a6:ea:9f:54:ce:ab:72:a6:82:bb: 7b:f6:27:dc:e9:92:d5:a6:8f:af:00:c8:74:26:03:ff:81:ea: cd:6f:c9:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/P2Dyqd6pxAeCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1M1oXDTI1MDczMDE3MjQ1M1owLzEtMCsGA1UEAxMk MTRiNTdlODgtZjg1Ny00YWNlLWEzY2YtY2Q4MWIyMjdkZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtb/QaIhAkCHP2mCF2Xzd6dYoRRB2YzIg4N3 0PQKnQdhrhdIaszqdkWetR10GnupDIzAk6rc1ebniLN9o2I97798sIWL18R4BHQQ xiSge+jDOjWirk4VS0s3vnIYv/bGPcajaJpdUOUqeUeLc0lCX/gnlQGlRs5ydZxv PfTnP9tE0lV7c3aQlVRkxN/YK+fUl+U0VMMbZwlskG3FhXe0+ljcCgsvtawr/xjP /PE7sH3W1JIoA0exnk8vx0MgJhum46VViP3XmBEmI06cmnIvBcgEK/556mfFwKbN oaWIDQm82ALkrTL4eNti/RX+8/j8ENR/diSlyE6lHiWanVOOBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeGT0XoMhbtBHL37TsvuOLUgOnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQwYWM0ZDEtYTEwMC0z MTBiLWI1Y2YtN2QyMGZhZTBiN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAgcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/JcdLkokoxO16S7XuVfuK4PDNPHvEcF1ioFMXtdv3Ap5FkRbJ2Awsd aA0I2J73KxXeRRrc5WApbTq4rRm3Wgb0krg+ZvCm2UTxGA5LVP7GEuZeDJWCkkth YpEqYxjrS/HPsEOgQpam/BQGXkiFoQ5qgJh/zp8VJ+evVvq5VRCbzjdhV1Z1yJhI orqdKYPpu9HVno1n7dLhYpw8gbEeiyimfQREHmZci4j8fZysOw9NC7wjn9B8tQUs 7loImJQS+yycGvCjcsOXOOoe75j63MBcyGUMo7AdseRIpUI1ZU0zpuqfVM6rcqaC u3v2J9zpktWmj68AyHQmA/+B6s1vyZ8= -----END CERTIFICATE-----Generated at Sat May 10 16:47:15 2025 by rpki-client