$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/741a3f0e-0c2f-3f1e-82d9-9c0a01d6cac8.roa File: 741a3f0e-0c2f-3f1e-82d9-9c0a01d6cac8.roa (raw, json) Hash identifier: 824b8+QzCuZh1FX5hN36rOkm3O5c6cFW5W+kyzahd+o= Subject key identifier: EB:C7:D1:F4:E8:ED:89:C4:66:53:7B:2D:4B:5C:04:D3:BA:4F:67:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0E7521E2E45966DB8AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/741a3f0e-0c2f-3f1e-82d9-9c0a01d6cac8.roa Signing time: Thu 01 May 2025 17:25:01 +0000 ROA not before: Thu 01 May 2025 17:25:01 +0000 ROA not after: Wed 30 Jul 2025 17:25:01 +0000 asID: 22773 IP address blocks: 68.8.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0e:75:21:e2:e4:59:66:db:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:01 2025 GMT Not After : Jul 30 17:25:01 2025 GMT Subject: CN=cf89c13c-9b33-4e33-b6ac-76c0e6c7e38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:c3:a2:bf:59:31:f7:8a:49:05:e4:21:2a: 14:76:ac:f1:74:6f:9c:fc:dd:2b:64:94:7c:eb:af: 91:85:e4:85:b8:13:01:40:38:d3:11:9c:5e:1d:ba: 7f:a7:3e:45:6a:40:7a:84:47:95:59:1d:90:72:dc: d4:4f:1c:65:bd:1c:98:1e:ba:86:44:00:f3:3f:f5: fb:5c:00:e9:06:f2:9d:56:3b:45:66:bc:54:74:c4: 4b:1c:9b:ec:e1:da:f7:00:03:89:59:39:94:ac:1b: c3:7a:64:6b:cb:cf:fb:74:ee:ae:5c:96:c5:16:38: 43:2e:e2:a6:29:c2:eb:b1:0f:9b:b1:08:cb:99:0c: 45:21:56:a0:04:65:72:2f:81:b2:9b:38:cb:07:24: 27:eb:a6:87:8d:b1:a9:4c:ee:ee:13:59:01:71:7a: c1:1b:9d:0f:b9:e8:3e:c5:e3:0c:a4:6d:1d:04:e6: ad:6f:b9:f3:ba:62:e0:30:81:57:d6:b2:6b:fb:7d: 8c:10:fa:86:4c:2a:f6:6c:06:33:14:39:cf:fe:b9: 71:c1:db:e5:e4:d0:d0:76:a0:d5:c1:bb:0b:1f:42: d2:89:8b:b9:22:b7:40:cc:9a:9b:78:00:65:d9:7e: 45:ac:21:4d:3c:62:b5:f0:f0:ca:5a:02:d6:69:c3: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:D1:F4:E8:ED:89:C4:66:53:7B:2D:4B:5C:04:D3:BA:4F:67:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/741a3f0e-0c2f-3f1e-82d9-9c0a01d6cac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f7:a3:2c:95:08:09:d7:89:ca:f9:26:90:c5:33:19:ba:b5: 79:3b:a0:39:e3:4e:72:d1:1d:d6:a9:35:f7:08:4d:58:1e:40: e6:92:06:dd:65:22:84:c3:8d:90:dd:bd:b1:02:4a:b8:0d:8c: 47:97:48:93:23:e2:6e:80:52:77:16:6d:f7:80:32:fb:9b:66: 62:5e:ec:5c:18:81:41:08:84:e6:6f:43:40:57:be:dd:21:7b: 31:c1:49:fd:e0:13:7b:a6:ed:7b:bd:0c:a7:31:d9:1e:f2:e9: 53:35:3d:f4:7e:90:a3:e9:50:71:15:32:dc:68:b5:98:6a:19: 9b:40:f2:b4:a4:3d:16:56:02:80:90:f1:39:db:21:ae:62:b1: 58:60:88:12:21:3b:4a:d1:01:68:43:02:12:c3:4f:ea:8b:0d: 79:33:2f:85:6c:88:c8:2a:a6:05:86:fa:83:28:17:24:38:e1: 85:74:1e:49:50:bf:0c:5f:7c:15:99:ab:ed:16:fd:c0:f0:c7: 18:8a:45:55:5d:15:2e:2c:52:d0:d2:5f:e5:26:8d:f3:f0:43: 59:bc:92:4e:cb:83:fc:e1:ca:b5:33:80:2c:b5:d0:06:c9:25: 0b:05:35:20:a6:dc:e0:b0:25:eb:c1:21:5f:64:02:10:97:cb: d5:76:5d:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Q51IeLkWWbbisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMVoXDTI1MDczMDE3MjUwMVowLzEtMCsGA1UEAxMk Y2Y4OWMxM2MtOWIzMy00ZTMzLWI2YWMtNzZjMGU2YzdlMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkebDor9ZMfeKSQXkISoUdqzxdG+c/N0rZJR8 66+RheSFuBMBQDjTEZxeHbp/pz5FakB6hEeVWR2QctzUTxxlvRyYHrqGRADzP/X7 XADpBvKdVjtFZrxUdMRLHJvs4dr3AAOJWTmUrBvDemRry8/7dO6uXJbFFjhDLuKm KcLrsQ+bsQjLmQxFIVagBGVyL4GymzjLByQn66aHjbGpTO7uE1kBcXrBG50Pueg+ xeMMpG0dBOatb7nzumLgMIFX1rJr+32MEPqGTCr2bAYzFDnP/rlxwdvl5NDQdqDV wbsLH0LSiYu5IrdAzJqbeABl2X5FrCFNPGK18PDKWgLWacNaSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvH0fTo7YnEZlN7LUtcBNO6T2c8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzQxYTNmMGUtMGMyZi0z ZjFlLTgyZDktOWMwYTAxZDZjYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb3oyyVCAnXicr5JpDFMxm6tXk7oDnjTnLRHdapNfcITVgeQOaSBt1l IoTDjZDdvbECSrgNjEeXSJMj4m6AUncWbfeAMvubZmJe7FwYgUEIhOZvQ0BXvt0h ezHBSf3gE3um7Xu9DKcx2R7y6VM1PfR+kKPpUHEVMtxotZhqGZtA8rSkPRZWAoCQ 8TnbIa5isVhgiBIhO0rRAWhDAhLDT+qLDXkzL4VsiMgqpgWG+oMoFyQ44YV0HklQ vwxffBWZq+0W/cDwxxiKRVVdFS4sUtDSX+UmjfPwQ1m8kk7Lg/zhyrUzgCy10AbJ JQsFNSCm3OCwJevBIV9kAhCXy9V2XWw= -----END CERTIFICATE-----Generated at Sat May 10 05:12:36 2025 by rpki-client