$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b54782f-4d53-3cbc-8b7a-a928b6cf5d0f.roa File: 5b54782f-4d53-3cbc-8b7a-a928b6cf5d0f.roa (raw, json) Hash identifier: A/y1CTJurUig5Cfz6PTYsFJPA84y/DB07Cth9DxwyAM= Subject key identifier: 32:49:18:1E:F4:DB:5C:87:C3:04:5D:F7:DB:02:D6:42:01:09:E8:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD2F49D95B6C4CAFEB28E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b54782f-4d53-3cbc-8b7a-a928b6cf5d0f.roa Signing time: Thu 01 May 2025 17:25:16 +0000 ROA not before: Thu 01 May 2025 17:25:16 +0000 ROA not after: Wed 30 Jul 2025 17:25:16 +0000 asID: 22773 IP address blocks: 68.107.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:2f:49:d9:5b:6c:4c:af:eb:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:16 2025 GMT Not After : Jul 30 17:25:16 2025 GMT Subject: CN=3a471998-ea38-48a9-ae3f-42cee2fad2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:67:eb:b7:2c:a2:30:92:c1:78:34:08:a0: 16:5b:1b:fc:f1:ac:7c:e3:d3:79:ec:49:d3:af:a6: 49:cc:d6:8c:4c:a8:52:2a:47:ce:ba:ad:fa:c1:e6: 95:11:8f:f5:14:29:b0:41:85:1d:05:cd:48:c3:76: 80:32:29:d9:3f:ce:a2:a0:c7:83:5b:d6:0b:c0:71: e3:62:02:00:ef:5f:13:8e:9c:96:e9:47:59:71:ca: 1f:59:9e:6e:74:7d:59:6d:1c:29:41:28:71:de:23: 17:c5:82:05:2d:7e:81:9b:d3:d9:3f:e1:bb:b1:63: e5:b9:96:f9:6a:8d:c2:28:a6:8a:e4:46:8f:f2:51: f9:3f:a9:40:ce:32:4f:89:9c:c5:25:95:61:a8:e4: 2b:68:75:18:bc:40:a7:b1:e2:50:bc:69:8c:96:bd: f1:82:c9:96:72:9f:d2:13:c2:75:1d:13:99:e4:d4: a8:52:01:74:b4:23:37:15:f9:52:93:e9:ee:5e:4e: 2d:0c:30:53:b7:66:56:e0:84:9c:88:6a:52:c8:14: 5e:66:f3:39:76:b6:63:f9:87:6e:f8:2a:0b:c6:b3: 93:a9:8b:80:3c:83:07:9e:fb:34:a7:60:32:06:c9: 07:a6:e9:c7:93:0e:3a:3b:87:69:e5:25:a2:86:23: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:49:18:1E:F4:DB:5C:87:C3:04:5D:F7:DB:02:D6:42:01:09:E8:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b54782f-4d53-3cbc-8b7a-a928b6cf5d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f7:ff:bc:9c:41:21:b8:c9:97:6b:b8:b7:59:6c:ef:27:3a: 66:d3:77:f1:7d:8c:e4:67:a6:26:58:4c:3d:44:e2:68:47:22: 6c:31:00:21:c0:30:f4:bb:bf:a7:1b:55:cd:60:6e:e1:57:c1: 56:32:c4:37:50:02:57:78:d8:06:5c:98:29:db:9d:bb:56:0f: 1e:f7:bb:0c:72:50:d1:04:c4:a3:a1:bc:cc:b6:32:88:1b:f3: 42:c1:5b:22:c5:0c:11:c5:e4:21:40:17:c7:0d:bb:c3:d8:43: 11:95:84:ea:55:78:b9:3a:db:0b:66:6c:cd:84:44:c7:cb:bb: 6f:da:b7:4b:88:db:03:cd:0c:fd:26:9b:c2:b5:23:df:42:23: ac:3c:f8:e2:81:94:e5:c8:dd:40:a5:32:cf:ee:92:7e:67:86: 64:eb:02:29:81:cb:43:d5:60:fe:0b:68:3f:68:71:ba:aa:62: 28:4a:84:2c:4c:4c:05:dc:30:d9:16:d4:28:64:8f:f6:c5:ef: 60:2d:84:91:41:03:04:3c:ce:52:00:c5:a5:c8:93:80:64:6f: 69:dc:dd:7c:6d:13:dd:a2:90:86:bb:f7:db:0f:90:da:3f:46: a6:b2:13:57:cb:37:14:03:ad:d4:b5:5f:7a:74:86:e4:4b:70: e4:a9:74:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/S9J2VtsTK/rKOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxNloXDTI1MDczMDE3MjUxNlowLzEtMCsGA1UEAxMk M2E0NzE5OTgtZWEzOC00OGE5LWFlM2YtNDJjZWUyZmFkMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFBn67csojCSwXg0CKAWWxv88ax849N57EnT r6ZJzNaMTKhSKkfOuq36weaVEY/1FCmwQYUdBc1Iw3aAMinZP86ioMeDW9YLwHHj YgIA718TjpyW6UdZccofWZ5udH1ZbRwpQShx3iMXxYIFLX6Bm9PZP+G7sWPluZb5 ao3CKKaK5EaP8lH5P6lAzjJPiZzFJZVhqOQraHUYvECnseJQvGmMlr3xgsmWcp/S E8J1HROZ5NSoUgF0tCM3FflSk+nuXk4tDDBTt2ZW4ISciGpSyBReZvM5drZj+Ydu +CoLxrOTqYuAPIMHnvs0p2AyBskHpunHkw46O4dp5SWihiN4VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJJGB7021yHwwRd99sC1kIBCegrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI1NDc4MmYtNGQ1My0z Y2JjLThiN2EtYTkyOGI2Y2Y1ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn3/7ycQSG4yZdruLdZbO8nOmbTd/F9jORnpiZYTD1E4mhHImwxACHA MPS7v6cbVc1gbuFXwVYyxDdQAld42AZcmCnbnbtWDx73uwxyUNEExKOhvMy2Mogb 80LBWyLFDBHF5CFAF8cNu8PYQxGVhOpVeLk62wtmbM2ERMfLu2/at0uI2wPNDP0m m8K1I99CI6w8+OKBlOXI3UClMs/ukn5nhmTrAimBy0PVYP4LaD9ocbqqYihKhCxM TAXcMNkW1Chkj/bF72AthJFBAwQ8zlIAxaXIk4Bkb2nc3XxtE92ikIa799sPkNo/ RqayE1fLNxQDrdS1X3p0huRLcOSpdKg= -----END CERTIFICATE-----Generated at Sun May 11 04:32:21 2025 by rpki-client