$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ea98123-8326-3891-aadc-875cc79ed21f.roa File: 4ea98123-8326-3891-aadc-875cc79ed21f.roa (raw, json) Hash identifier: DXX3iPAy7VPrAQeBSeO+k6wHWVQLuXYuDBIOoVFK4bk= Subject key identifier: DC:B2:7F:D7:21:50:80:FF:09:80:1C:7A:A2:D1:D3:86:84:49:DC:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F80D8601D376471CC2EFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ea98123-8326-3891-aadc-875cc79ed21f.roa Signing time: Thu 01 May 2025 17:14:56 +0000 ROA not before: Thu 01 May 2025 17:14:56 +0000 ROA not after: Wed 30 Jul 2025 17:14:56 +0000 asID: 22773 IP address blocks: 68.229.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:0d:86:01:d3:76:47:1c:c2:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:56 2025 GMT Not After : Jul 30 17:14:56 2025 GMT Subject: CN=2d516358-9432-499a-b8b8-56e2463a0f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:23:e7:09:54:6c:ac:8b:b3:bb:2e:4a:98:7b: 41:a2:55:22:0c:e5:e6:20:89:84:07:69:8b:87:77: a3:1a:fd:6e:cb:a5:f8:e0:8b:bf:9f:b8:3c:24:6f: 60:32:06:f9:54:77:92:b6:75:9c:ec:7b:28:78:b4: b7:d2:91:b4:64:28:5c:88:5f:c2:8e:6c:cf:22:29: 70:4e:87:8d:e4:44:1d:c9:c6:b3:67:fa:fc:e2:8d: e7:96:62:b2:45:a6:0a:62:d2:a3:0d:8e:db:df:f3: fe:56:c9:03:6e:81:24:ae:f0:46:01:00:47:90:ff: e4:27:d0:96:46:26:cd:73:8f:6a:41:40:63:b5:a3: 47:f4:87:64:fd:ec:e5:58:91:e4:d6:5a:35:d3:db: e2:bc:35:c3:f9:de:ff:29:c5:aa:66:d3:72:73:6b: 0d:46:c7:ac:a9:94:40:d2:69:13:47:42:0b:44:5e: 8c:66:6f:25:f6:e8:7d:fa:2d:3e:d8:f8:9b:b8:3a: 03:13:24:da:4b:e8:c6:17:41:8a:38:ef:03:40:ed: 2d:c8:05:96:6e:e4:0c:50:83:5f:18:0e:0a:66:20: 0f:4a:29:4f:68:4f:0e:b0:0d:da:f1:4c:e6:15:49: 16:d3:b0:19:3e:1a:df:a0:0c:88:66:7b:4d:c7:86: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B2:7F:D7:21:50:80:FF:09:80:1C:7A:A2:D1:D3:86:84:49:DC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ea98123-8326-3891-aadc-875cc79ed21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:36:3a:48:a4:d2:3e:13:95:f4:89:74:0e:1a:47:94:e1: fd:c1:0a:32:87:86:40:8b:7d:c0:2c:64:96:4f:d3:41:a4:22: 7d:8a:e5:a0:57:d6:5a:6b:af:44:98:97:e1:1f:5b:92:d0:44: 19:80:84:f9:31:3e:56:9a:10:36:89:d1:10:39:f2:15:e3:cc: 9e:c7:80:d0:26:f0:b4:8e:af:f1:ac:03:7b:52:22:d2:25:69: d2:1d:44:be:af:f5:df:aa:30:9f:25:b3:aa:75:3e:f3:73:c4: 5c:1e:86:c0:08:25:0e:4d:30:19:6c:8d:0d:74:e1:b2:01:ee: 01:13:d3:9b:9a:d6:58:db:29:e8:50:a7:ea:e3:25:ed:54:50: 80:c1:28:96:82:69:0e:42:1f:a6:40:e2:21:0c:f3:bf:96:69: 3a:d9:8d:33:92:17:dc:3d:1b:df:00:f6:47:41:09:b0:50:6c: c4:36:dd:14:6b:cb:e7:9d:8a:c4:51:f8:d4:3c:23:3a:bf:40: a6:15:69:09:2f:94:ac:e3:c4:c9:6a:eb:fa:56:e1:88:63:65: 65:46:a0:db:15:52:73:ed:ef:06:cf:58:cc:f0:a2:4b:d0:6f: fa:33:63:6f:b7:ec:c7:c8:e6:7e:81:00:01:6d:c4:15:a1:11: a5:c8:d7:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+A2GAdN2RxzC78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1NloXDTI1MDczMDE3MTQ1NlowLzEtMCsGA1UEAxMk MmQ1MTYzNTgtOTQzMi00OTlhLWI4YjgtNTZlMjQ2M2EwZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyPnCVRsrIuzuy5KmHtBolUiDOXmIImEB2mL h3ejGv1uy6X44Iu/n7g8JG9gMgb5VHeStnWc7HsoeLS30pG0ZChciF/CjmzPIilw ToeN5EQdycazZ/r84o3nlmKyRaYKYtKjDY7b3/P+VskDboEkrvBGAQBHkP/kJ9CW RibNc49qQUBjtaNH9Idk/ezlWJHk1lo109vivDXD+d7/KcWqZtNyc2sNRsesqZRA 0mkTR0ILRF6MZm8l9uh9+i0+2PibuDoDEyTaS+jGF0GKOO8DQO0tyAWWbuQMUINf GA4KZiAPSilPaE8OsA3a8UzmFUkW07AZPhrfoAyIZntNx4avhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyyf9chUID/CYAceqLR04aESdxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGVhOTgxMjMtODMyNi0z ODkxLWFhZGMtODc1Y2M3OWVkMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI87NjpIpNI+E5X0iXQOGkeU4f3BCjKHhkCLfcAsZJZP00GkIn2K5aBX 1lprr0SYl+EfW5LQRBmAhPkxPlaaEDaJ0RA58hXjzJ7HgNAm8LSOr/GsA3tSItIl adIdRL6v9d+qMJ8ls6p1PvNzxFwehsAIJQ5NMBlsjQ104bIB7gET05ua1ljbKehQ p+rjJe1UUIDBKJaCaQ5CH6ZA4iEM87+WaTrZjTOSF9w9G98A9kdBCbBQbMQ23RRr y+edisRR+NQ8Izq/QKYVaQkvlKzjxMlq6/pW4YhjZWVGoNsVUnPt7wbPWMzwokvQ b/ozY2+37MfI5n6BAAFtxBWhEaXI10A= -----END CERTIFICATE-----Generated at Tue May 13 07:59:00 2025 by rpki-client