$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa File: 68944104-1392-3694-99fe-800cb3c95d19.roa (raw, json) Hash identifier: zNKBE0ZgeBNOKE4yiFAziBCS9v+rBzdGTkrfv2b7QHM= Subject key identifier: FE:73:4E:99:A5:7F:14:22:36:92:6C:73:CD:D2:D7:81:0B:30:9D:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD20BE2C4CBE674AE58080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa Signing time: Thu 01 May 2025 17:25:09 +0000 ROA not before: Thu 01 May 2025 17:25:09 +0000 ROA not after: Wed 30 Jul 2025 17:25:09 +0000 asID: 22773 IP address blocks: 68.101.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:20:be:2c:4c:be:67:4a:e5:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:09 2025 GMT Not After : Jul 30 17:25:09 2025 GMT Subject: CN=3519d20f-e316-4673-bb64-f67f9fd9452a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:ad:ea:b5:bc:8f:fd:ee:02:30:d5:0c:e2: 7d:65:85:5f:b7:6f:58:3f:f2:ce:eb:b6:0b:8d:88: 0a:f0:8b:e2:b8:c1:a7:92:ec:01:8c:90:af:5a:bf: b8:59:4c:9e:0e:ca:4d:b4:65:5b:c2:60:02:14:7b: 4a:0d:5a:75:65:7c:a7:c6:1a:15:0a:d0:e8:bd:d9: 31:3b:1d:7f:7b:36:71:b7:00:3b:fa:e1:37:ca:6d: 4b:d9:5c:e7:56:fd:e5:50:cf:97:6e:be:64:8e:98: 7c:b4:59:ec:86:90:34:82:0f:b1:2d:f4:af:b5:6f: 4c:13:b0:ba:79:79:30:c4:be:ca:d2:1c:84:40:57: 4b:2f:bf:08:99:b7:cb:89:20:31:d0:ac:b4:bb:a2: 30:40:cb:ff:0a:d8:87:64:11:2b:19:9e:86:4a:ff: c5:ea:ea:79:48:9a:3e:51:c9:82:95:01:6f:ac:54: a5:a0:a4:8c:c1:68:26:1e:b3:f7:94:0b:e6:a7:b2: ba:a8:16:22:0a:fe:51:76:99:5b:2d:a8:9b:e5:25: e0:53:7f:bb:4a:4e:6e:4a:69:9a:61:95:24:60:79: c7:b5:8c:d5:96:bb:51:91:8d:4f:f9:5d:9b:e0:19: 1e:42:e1:0b:e4:09:82:5e:70:53:a4:8d:0c:11:18: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:73:4E:99:A5:7F:14:22:36:92:6C:73:CD:D2:D7:81:0B:30:9D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/68944104-1392-3694-99fe-800cb3c95d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:20:c9:b2:38:eb:fc:29:2e:5a:4d:d1:3d:b8:6f:31:75:50: 36:46:4d:0a:43:88:4f:8e:58:9f:87:cf:08:59:05:76:ff:a1: 78:3c:fd:66:a9:94:8b:d8:09:1c:7a:cb:dc:c8:fd:35:ae:f6: 03:11:7a:01:21:c1:7a:14:97:36:4a:8d:76:7b:55:95:88:eb: 2c:23:45:24:94:69:aa:5f:ee:46:29:dd:78:41:b8:f3:ef:97: e1:b6:2e:34:fc:f0:8b:9a:b6:74:61:24:68:97:d2:6f:72:75: eb:9e:45:8d:96:ed:98:63:df:72:ee:41:6d:1a:da:7d:21:d5: e0:9c:6b:49:59:d8:60:63:0c:a9:ca:9d:72:6c:66:b1:a3:ce: 40:a6:6c:ca:13:8f:d0:ea:41:5f:4e:7b:8b:4b:50:ec:3c:9e: 79:a0:71:bd:41:a4:4c:db:ec:19:da:3c:82:e9:e8:6d:80:bd: a3:38:3c:fc:45:0b:b7:d3:ed:1c:3e:c3:24:ca:f6:96:96:78: 31:c1:6f:c2:e0:99:b7:f1:43:ca:30:2c:24:41:7c:c0:69:e1: 79:87:50:f4:28:ae:19:6c:0d:3e:7c:63:06:18:82:5e:f7:aa: 6b:dc:a0:be:ad:1b:46:fe:7b:cd:25:0c:17:7d:2e:b9:9d:be: 1e:4a:1b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/SC+LEy+Z0rlgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwOVoXDTI1MDczMDE3MjUwOVowLzEtMCsGA1UEAxMk MzUxOWQyMGYtZTMxNi00NjczLWJiNjQtZjY3ZjlmZDk0NTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ut6rW8j/3uAjDVDOJ9ZYVft29YP/LO67YL jYgK8IviuMGnkuwBjJCvWr+4WUyeDspNtGVbwmACFHtKDVp1ZXynxhoVCtDovdkx Ox1/ezZxtwA7+uE3ym1L2VznVv3lUM+Xbr5kjph8tFnshpA0gg+xLfSvtW9ME7C6 eXkwxL7K0hyEQFdLL78ImbfLiSAx0Ky0u6IwQMv/CtiHZBErGZ6GSv/F6up5SJo+ UcmClQFvrFSloKSMwWgmHrP3lAvmp7K6qBYiCv5RdplbLaib5SXgU3+7Sk5uSmma YZUkYHnHtYzVlrtRkY1P+V2b4BkeQuEL5AmCXnBTpI0MERgZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5zTpmlfxQiNpJsc83S14ELMJ0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjg5NDQxMDQtMTM5Mi0z Njk0LTk5ZmUtODAwY2IzYzk1ZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4gybI46/wpLlpN0T24bzF1UDZGTQpDiE+OWJ+HzwhZBXb/oXg8/Wap lIvYCRx6y9zI/TWu9gMRegEhwXoUlzZKjXZ7VZWI6ywjRSSUaapf7kYp3XhBuPPv l+G2LjT88IuatnRhJGiX0m9ydeueRY2W7Zhj33LuQW0a2n0h1eCca0lZ2GBjDKnK nXJsZrGjzkCmbMoTj9DqQV9Oe4tLUOw8nnmgcb1BpEzb7BnaPILp6G2AvaM4PPxF C7fT7Rw+wyTK9paWeDHBb8LgmbfxQ8owLCRBfMBp4XmHUPQorhlsDT58YwYYgl73 qmvcoL6tG0b+e80lDBd9Lrmdvh5KG48= -----END CERTIFICATE-----Generated at Tue May 13 12:24:21 2025 by rpki-client