$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa File: 81cfece7-8250-3276-a17b-0ae54e860039.roa (raw, json) Hash identifier: bJJLRSwmt4znxDPaieyT6jEq3E5qJmtB+ItiUKikq58= Subject key identifier: 87:DB:EC:83:B9:8F:59:68:73:36:FD:74:97:91:C8:6E:97:7A:7C:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD13595E3A9B93F2F8CDA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa Signing time: Thu 01 May 2025 17:25:03 +0000 ROA not before: Thu 01 May 2025 17:25:03 +0000 ROA not after: Wed 30 Jul 2025 17:25:03 +0000 asID: 22773 IP address blocks: 68.8.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:13:59:5e:3a:9b:93:f2:f8:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:03 2025 GMT Not After : Jul 30 17:25:03 2025 GMT Subject: CN=5fbb2b30-1821-4be5-89b7-fe217c57f080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ac:e6:f2:b9:31:d7:6f:6a:6e:b6:e7:b1:4c: 5d:eb:43:fb:5c:9d:3d:35:7a:c2:35:df:ee:61:c2: 37:64:26:c9:f8:f3:7c:55:bf:52:76:88:62:b0:c8: da:98:07:1c:35:a3:17:e1:0a:8e:89:a2:89:c4:cb: eb:5e:da:0c:7d:93:22:5e:cc:35:97:8f:7e:ae:41: 12:a4:fa:f3:08:07:08:b3:e4:07:0e:f1:a0:c0:95: 5e:6b:f0:df:8f:9d:b2:7c:10:51:72:6a:43:c8:e2: d1:2f:05:66:1c:43:95:eb:5e:86:c5:cb:8b:e2:69: 3e:93:22:7a:01:0d:6b:22:b8:3f:82:45:af:88:89: 55:61:e5:09:6b:82:5b:6a:fb:74:1d:f2:9b:4b:a4: b9:2e:80:ef:39:c2:61:80:90:4f:c8:cc:17:78:b1: ad:27:2a:9b:0a:52:42:45:30:48:84:3e:d3:b3:ce: cb:15:a7:20:52:45:45:4f:84:c4:c5:6b:82:b0:34: 7f:6c:bc:0e:92:0f:33:89:3d:46:54:e1:b6:dd:51: 6e:e8:33:3c:16:98:65:6a:98:89:bb:75:d0:3d:10: b7:3f:99:15:57:c5:67:c7:d5:e7:e4:d3:e5:bc:6b: be:da:26:7f:da:8d:e1:b0:6e:13:87:84:e9:02:c4: 2e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DB:EC:83:B9:8F:59:68:73:36:FD:74:97:91:C8:6E:97:7A:7C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81cfece7-8250-3276-a17b-0ae54e860039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c5:55:d4:22:38:de:6f:4d:b1:b8:f6:da:34:35:e9:7e:44: 9a:fa:3e:ad:d3:87:e7:4c:fd:7f:bd:68:f5:2b:d7:20:95:01: 63:98:c1:79:c9:f7:68:de:f4:6d:1d:62:bd:cb:ab:40:e6:c9: cc:9f:1b:97:64:e3:66:32:f3:1b:d3:4f:52:b0:34:5a:03:a3: 2f:48:05:6b:7f:a5:cb:80:f8:a7:9a:8d:c2:57:60:8e:c7:b2: ac:78:6c:1a:35:66:88:0c:62:ce:25:50:f9:dd:05:dc:88:fe: ae:5c:b7:15:5a:5a:f3:4f:09:db:c5:b8:f7:46:97:82:fb:d0: b8:69:3f:96:dd:9e:de:d9:0c:aa:57:33:e9:ae:d2:b8:cc:6c: 2d:49:b2:57:94:06:e1:3d:fd:b1:16:50:01:2e:0c:34:6c:c0: 18:50:2a:73:75:6b:25:08:5e:3c:dd:e3:d3:ef:98:b2:26:aa: 40:7d:c3:07:45:a6:f8:b3:44:c7:86:1f:04:f8:28:9a:ec:03: a1:6f:03:f5:87:4f:93:0c:5f:26:1b:7a:b7:48:b0:57:63:8f: 90:0b:3c:17:06:94:e5:8c:f2:e4:43:cb:e3:42:7a:cd:71:0b: c3:58:7e:36:28:1f:c2:3b:5a:59:6d:15:7e:61:23:e7:a0:b6: d5:61:00:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RNZXjqbk/L4zaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwM1oXDTI1MDczMDE3MjUwM1owLzEtMCsGA1UEAxMk NWZiYjJiMzAtMTgyMS00YmU1LTg5YjctZmUyMTdjNTdmMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKzm8rkx129qbrbnsUxd60P7XJ09NXrCNd/u YcI3ZCbJ+PN8Vb9SdohisMjamAccNaMX4QqOiaKJxMvrXtoMfZMiXsw1l49+rkES pPrzCAcIs+QHDvGgwJVea/Dfj52yfBBRcmpDyOLRLwVmHEOV616GxcuL4mk+kyJ6 AQ1rIrg/gkWviIlVYeUJa4Jbavt0HfKbS6S5LoDvOcJhgJBPyMwXeLGtJyqbClJC RTBIhD7Ts87LFacgUkVFT4TExWuCsDR/bLwOkg8ziT1GVOG23VFu6DM8FphlapiJ u3XQPRC3P5kVV8Vnx9Xn5NPlvGu+2iZ/2o3hsG4Th4TpAsQu3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfb7IO5j1loczb9dJeRyG6XenzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODFjZmVjZTctODI1MC0z Mjc2LWExN2ItMGFlNTRlODYwMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTFVdQiON5vTbG49to0Nel+RJr6Pq3Th+dM/X+9aPUr1yCVAWOYwXnJ 92je9G0dYr3Lq0DmycyfG5dk42Yy8xvTT1KwNFoDoy9IBWt/pcuA+KeajcJXYI7H sqx4bBo1ZogMYs4lUPndBdyI/q5ctxVaWvNPCdvFuPdGl4L70LhpP5bdnt7ZDKpX M+mu0rjMbC1JsleUBuE9/bEWUAEuDDRswBhQKnN1ayUIXjzd49PvmLImqkB9wwdF pvizRMeGHwT4KJrsA6FvA/WHT5MMXyYberdIsFdjj5ALPBcGlOWM8uRDy+NCes1x C8NYfjYoH8I7WlltFX5hI+egttVhABQ= -----END CERTIFICATE-----Generated at Sun May 11 18:49:49 2025 by rpki-client