$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa File: 828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa (raw, json) Hash identifier: AE3TGLXtCmAaOlPmfTW2tO6HZSMy8BETTJsRT2+hTmM= Subject key identifier: 46:19:7E:37:38:BA:35:40:35:2C:C9:B3:FF:F0:E0:82:61:7E:94:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCD7EF20114FE2CDDCE380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa Signing time: Thu 01 May 2025 17:24:35 +0000 ROA not before: Thu 01 May 2025 17:24:35 +0000 ROA not after: Wed 30 Jul 2025 17:24:35 +0000 asID: 22773 IP address blocks: 68.6.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:d7:ef:20:11:4f:e2:cd:dc:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:35 2025 GMT Not After : Jul 30 17:24:35 2025 GMT Subject: CN=864e177c-160e-4cf5-9065-1a6fb6edd53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:36:65:f9:10:df:51:42:7c:fb:5d:c4:03: 18:0c:ac:d3:1e:79:f4:ed:46:e2:59:5a:68:d9:df: c3:e7:b0:cc:12:27:7c:56:66:d7:c4:b6:71:23:42: ea:f2:60:b2:fd:01:4d:95:44:2e:db:aa:a0:7a:7b: 35:69:a1:49:2f:3f:5d:1e:9e:f4:c3:61:04:e9:35: 47:a0:41:3a:7f:29:a4:43:1a:0c:0e:2e:87:96:16: 62:52:df:f7:b0:13:1e:bd:1c:0b:26:f3:ec:3c:82: d8:bf:2f:2e:54:60:12:a8:aa:31:c7:01:f4:6d:2b: d4:38:48:d4:b5:d8:53:02:96:fd:85:7b:b0:63:fc: 36:92:a2:12:11:c5:20:d7:ff:d1:ca:40:3f:9b:97: 15:79:4a:6f:9f:a4:d3:46:81:eb:77:14:a8:25:23: 34:d1:9b:b4:c8:91:c1:34:8c:78:55:9a:fe:cc:d1: 6c:1b:41:35:97:6d:0e:26:0f:63:93:4f:1b:c5:7f: 2f:90:f7:b7:dc:5c:36:e9:be:eb:0c:71:6d:ff:22: 2d:a7:b8:87:e6:ac:f7:d9:29:f4:5a:87:ee:5f:2a: a6:be:c7:53:48:95:cd:5b:d6:98:d8:c8:82:2d:16: 83:e9:c6:0a:cf:6c:3d:f1:4f:c8:bd:5c:3f:78:e3: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:19:7E:37:38:BA:35:40:35:2C:C9:B3:FF:F0:E0:82:61:7E:94:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/828b9d80-bcc4-3ff1-a6cc-e64bb42e6016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.6.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d8:20:b3:b2:43:56:63:ed:ae:42:c1:ab:b2:1b:ec:fa:d2: 44:44:df:07:b7:84:b3:4f:fc:45:ae:54:24:0e:1e:bd:eb:87: c3:5d:f6:c0:ee:a9:fc:a9:3d:f1:6d:6c:57:18:df:78:6a:cc: 72:6f:7d:b8:04:0d:3c:2c:8f:86:86:92:97:36:df:2b:bb:ef: 97:dc:c3:26:d5:79:72:5d:0a:9b:11:20:a3:e2:e0:43:b0:2a: 65:bf:a3:f6:0c:c6:54:62:05:a5:cd:33:de:8e:cb:cc:ec:d4: 78:6b:3f:87:ca:76:e3:59:4e:9b:73:c3:6f:f7:a0:5e:83:08: 43:c9:d2:cf:be:3d:1c:09:b8:15:6a:62:f9:32:51:43:2e:54: 58:0f:32:90:d3:7a:ad:b0:8b:76:fa:78:a5:73:62:c2:ca:bc: d0:92:ae:30:d2:9b:16:79:1a:fd:ce:b0:bc:98:35:bb:b5:ff: 52:61:80:07:be:ce:db:f4:c3:72:aa:86:16:c7:9d:31:c1:ba: 4e:f5:2d:c0:84:c0:c8:e4:ba:00:58:35:7d:62:59:4b:09:a1: b2:67:94:5d:6b:c5:b3:5a:c0:f6:8b:7d:68:09:f3:ee:a8:9c: 3b:55:c0:08:70:03:af:34:a2:30:c7:1f:9c:ac:b2:24:cd:ff: a4:e1:ce:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/NfvIBFP4s3c44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQzNVoXDTI1MDczMDE3MjQzNVowLzEtMCsGA1UEAxMk ODY0ZTE3N2MtMTYwZS00Y2Y1LTkwNjUtMWE2ZmI2ZWRkNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1k2ZfkQ31FCfPtdxAMYDKzTHnn07UbiWVpo 2d/D57DMEid8VmbXxLZxI0Lq8mCy/QFNlUQu26qgens1aaFJLz9dHp70w2EE6TVH oEE6fymkQxoMDi6HlhZiUt/3sBMevRwLJvPsPILYvy8uVGASqKoxxwH0bSvUOEjU tdhTApb9hXuwY/w2kqISEcUg1//RykA/m5cVeUpvn6TTRoHrdxSoJSM00Zu0yJHB NIx4VZr+zNFsG0E1l20OJg9jk08bxX8vkPe33Fw26b7rDHFt/yItp7iH5qz32Sn0 WofuXyqmvsdTSJXNW9aY2MiCLRaD6cYKz2w98U/IvVw/eON1nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYZfjc4ujVANSzJs//w4IJhfpSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODI4YjlkODAtYmNjNC0z ZmYxLWE2Y2MtZTY0YmI0MmU2MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAbZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjYILOyQ1Zj7a5CwauyG+z60kRE3we3hLNP/EWuVCQOHr3rh8Nd9sDu qfypPfFtbFcY33hqzHJvfbgEDTwsj4aGkpc23yu775fcwybVeXJdCpsRIKPi4EOw KmW/o/YMxlRiBaXNM96Oy8zs1HhrP4fKduNZTptzw2/3oF6DCEPJ0s++PRwJuBVq YvkyUUMuVFgPMpDTeq2wi3b6eKVzYsLKvNCSrjDSmxZ5Gv3OsLyYNbu1/1JhgAe+ ztv0w3KqhhbHnTHBuk71LcCEwMjkugBYNX1iWUsJobJnlF1rxbNawPaLfWgJ8+6o nDtVwAhwA680ojDHH5yssiTN/6Thzpk= -----END CERTIFICATE-----Generated at Thu May 8 07:57:00 2025 by rpki-client