$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a6cd1e9-60ef-3a04-8194-732b7f474319.roa File: 7a6cd1e9-60ef-3a04-8194-732b7f474319.roa (raw, json) Hash identifier: BRhj7g5ZZE/yGUtrD4SfwFPMtXR8fV8Lz5lSkiPWMnQ= Subject key identifier: 4D:F8:1D:C2:FC:82:F7:E9:05:B2:8F:BB:56:51:75:28:DA:FA:CF:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F80A2B553718133A8C8F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a6cd1e9-60ef-3a04-8194-732b7f474319.roa Signing time: Thu 01 May 2025 17:14:54 +0000 ROA not before: Thu 01 May 2025 17:14:54 +0000 ROA not after: Wed 30 Jul 2025 17:14:54 +0000 asID: 22773 IP address blocks: 68.225.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:0a:2b:55:37:18:13:3a:8c:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:54 2025 GMT Not After : Jul 30 17:14:54 2025 GMT Subject: CN=8325a5f6-529d-4a7a-a626-c6a21d7385c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:53:bd:79:95:2f:b3:24:b5:2e:00:ef:61: 87:bb:68:99:3d:53:c4:dc:91:91:34:81:4e:20:54: 7a:8b:a5:e8:68:34:28:64:46:57:47:72:fb:8e:51: 63:42:9d:fe:3a:65:75:4c:a2:c4:f7:10:40:71:52: 4f:77:4b:18:06:68:f1:40:d7:1b:2a:aa:03:ff:28: b1:d6:76:89:e9:ac:8a:db:d2:07:df:d7:1c:fd:d9: 4f:53:35:ba:4d:c6:ba:f4:2b:8c:d7:50:64:a5:3a: b8:0f:f4:5b:6c:a9:51:ca:96:bc:a5:24:d2:97:54: 57:79:19:e0:47:f7:17:91:08:6b:a0:31:fe:19:e1: 52:fe:0a:66:ac:77:ff:73:a2:d2:f5:ee:1b:82:93: 0b:8e:e5:77:29:9a:bf:b0:dc:d5:ea:90:f3:ee:db: c5:04:4c:5c:a0:c2:4a:0c:16:a3:f3:d2:0c:0b:4b: 04:86:22:cc:d7:a7:b0:88:e5:65:25:5a:07:f2:f4: 09:9a:3d:f6:39:f4:b0:28:8d:53:56:87:8f:ca:e0: 70:14:03:30:73:13:1f:28:3a:8c:8f:7c:04:70:9d: 1b:87:ca:15:4b:55:6c:41:42:24:bf:ca:86:30:d0: 35:e7:cb:52:69:90:0b:2a:94:06:66:b7:2b:85:20: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F8:1D:C2:FC:82:F7:E9:05:B2:8F:BB:56:51:75:28:DA:FA:CF:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a6cd1e9-60ef-3a04-8194-732b7f474319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a5:b1:0e:d0:96:fe:59:12:18:5c:76:43:67:9a:43:2a:78: 36:ca:c3:e7:7f:57:c7:6f:e7:2c:17:bb:90:95:ff:00:bb:ed: e5:7a:76:dd:44:9b:84:54:19:75:a3:85:8c:21:ae:87:ca:fd: 42:52:ba:e6:1b:29:0e:2e:22:40:3f:6f:ac:f9:9c:10:45:a4: b4:68:53:03:26:9a:98:d7:f1:00:84:a3:5e:08:0a:bc:64:e3: e5:8a:71:5c:2e:18:8d:36:15:a9:c5:c5:c0:2b:0f:ac:f8:ba: 61:8c:65:40:12:78:d8:56:dd:1f:4a:0d:1d:28:43:99:7a:72: 48:4c:5a:50:f0:7f:60:f2:38:9a:86:76:7f:06:72:b3:89:4f: 80:46:d4:7f:8f:38:72:ef:71:7d:72:90:e5:4f:76:34:3e:08: fb:23:e8:79:03:d9:05:05:1d:25:39:bb:e5:56:aa:98:75:71: 81:68:58:18:5f:b0:ed:27:37:03:71:92:6b:f2:a5:19:f6:f3: f6:cb:a7:b0:8d:86:34:98:e5:ca:5c:d4:3b:55:01:3e:ad:d6: 0b:16:c6:93:0e:7d:fd:6d:11:88:e1:ed:b8:ba:fd:90:3e:b9: ef:46:51:c2:19:1a:35:29:16:06:3c:16:3e:6e:5c:e9:50:4f: 70:49:99:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+AorVTcYEzqMj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1NFoXDTI1MDczMDE3MTQ1NFowLzEtMCsGA1UEAxMk ODMyNWE1ZjYtNTI5ZC00YTdhLWE2MjYtYzZhMjFkNzM4NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApklTvXmVL7MktS4A72GHu2iZPVPE3JGRNIFO IFR6i6XoaDQoZEZXR3L7jlFjQp3+OmV1TKLE9xBAcVJPd0sYBmjxQNcbKqoD/yix 1naJ6ayK29IH39cc/dlPUzW6Tca69CuM11BkpTq4D/RbbKlRypa8pSTSl1RXeRng R/cXkQhroDH+GeFS/gpmrHf/c6LS9e4bgpMLjuV3KZq/sNzV6pDz7tvFBExcoMJK DBaj89IMC0sEhiLM16ewiOVlJVoH8vQJmj32OfSwKI1TVoePyuBwFAMwcxMfKDqM j3wEcJ0bh8oVS1VsQUIkv8qGMNA158tSaZALKpQGZrcrhSAq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE34HcL8gvfpBbKPu1ZRdSja+s9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E2Y2QxZTktNjBlZi0z YTA0LTgxOTQtNzMyYjdmNDc0MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+lsQ7Qlv5ZEhhcdkNnmkMqeDbKw+d/V8dv5ywXu5CV/wC77eV6dt1E m4RUGXWjhYwhrofK/UJSuuYbKQ4uIkA/b6z5nBBFpLRoUwMmmpjX8QCEo14ICrxk 4+WKcVwuGI02FanFxcArD6z4umGMZUASeNhW3R9KDR0oQ5l6ckhMWlDwf2DyOJqG dn8GcrOJT4BG1H+POHLvcX1ykOVPdjQ+CPsj6HkD2QUFHSU5u+VWqph1cYFoWBhf sO0nNwNxkmvypRn28/bLp7CNhjSY5cpc1DtVAT6t1gsWxpMOff1tEYjh7bi6/ZA+ ue9GUcIZGjUpFgY8Fj5uXOlQT3BJmXY= -----END CERTIFICATE-----Generated at Sun May 11 12:33:15 2025 by rpki-client