$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e25eda3-6861-3186-8b7b-c04163b9b758.roa File: 8e25eda3-6861-3186-8b7b-c04163b9b758.roa (raw, json) Hash identifier: zTYpLxviuhCqlZtx8laEZLH2Z1nYcEGAAN8qfaagHyo= Subject key identifier: 7A:50:B0:83:9C:A5:7A:38:E0:0D:7F:19:77:B8:29:90:40:E6:3F:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4F8633070A428FA422600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e25eda3-6861-3186-8b7b-c04163b9b758.roa Signing time: Thu 01 May 2025 17:08:43 +0000 ROA not before: Thu 01 May 2025 17:08:43 +0000 ROA not after: Wed 30 Jul 2025 17:08:43 +0000 asID: 22773 IP address blocks: 68.0.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:f8:63:30:70:a4:28:fa:42:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:43 2025 GMT Not After : Jul 30 17:08:43 2025 GMT Subject: CN=2f4a5591-8e70-4272-b370-c964e63e1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:71:4b:aa:18:d1:10:aa:84:4a:5d:47:5b: a3:97:f4:db:43:81:47:26:63:89:59:45:63:eb:61: 8a:d4:72:4b:cb:64:f4:3c:e0:f3:76:68:dc:8d:44: 09:c3:0f:f4:a5:ff:49:8a:7e:01:6c:c8:05:bc:61: d9:56:63:d0:59:a4:17:ef:0f:3e:63:fc:53:ed:96: 77:f6:98:7e:f6:50:8d:c9:a7:4f:d2:94:2a:34:92: 35:3c:11:a3:30:eb:22:2c:4b:6f:59:97:d5:1f:82: be:ba:5a:0e:ca:80:be:e8:7a:88:99:f9:3f:f5:11: 75:6e:17:a2:72:52:a3:3c:2e:95:a2:b1:09:a9:61: dd:b6:22:65:a9:e9:65:b8:59:91:d8:8f:e9:f7:14: a9:7d:dc:c2:7f:cd:b6:bd:e1:9f:09:31:b7:37:ad: 1d:74:4c:0c:93:76:73:fa:b3:eb:c8:b6:37:1d:14: f2:c5:71:70:09:93:67:ca:24:f0:32:b3:d6:6b:d1: 28:ac:e4:d3:ae:ba:34:33:6b:7e:ce:cb:f8:a0:a2: 8a:02:d1:c6:78:b1:ee:44:f6:bf:ab:15:1e:54:e0: 1a:bb:7f:aa:1e:65:5c:aa:37:41:9a:b9:5a:53:35: d4:94:ac:14:fd:7f:52:35:18:a6:39:cc:6a:5a:9f: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:50:B0:83:9C:A5:7A:38:E0:0D:7F:19:77:B8:29:90:40:E6:3F:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e25eda3-6861-3186-8b7b-c04163b9b758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:33:4f:9d:34:10:ed:bf:8e:09:e0:55:aa:43:c5:a8:f8:77: 37:7b:b4:56:71:19:1a:62:61:ba:49:71:bc:92:6e:7e:1d:6f: be:70:5f:b4:a2:e4:87:27:8a:c8:86:f3:77:b9:b7:d7:35:a2: ac:67:f5:86:83:8d:59:6a:09:6d:ff:67:f3:e6:c3:d5:02:29: 1a:59:9b:d6:26:3d:f7:55:c9:fa:bc:86:84:40:c9:64:e0:de: bb:07:5d:1a:f7:6a:52:2e:dd:57:d6:76:b5:60:57:b1:77:33: c0:62:62:20:c1:7f:b5:e9:28:56:b3:72:61:2d:31:2d:74:e5: 82:20:d0:b3:ed:56:4d:4c:55:e2:e5:b3:5c:67:32:96:1e:ba: 5f:c8:a8:ac:ee:dc:ca:cb:9f:26:9e:f0:da:38:f0:f9:54:64: d3:9a:01:7e:6d:11:be:9b:47:16:fb:14:96:53:d1:2e:a0:c1: 70:db:06:cf:af:de:43:db:0c:72:07:b7:71:81:6a:a1:0e:73: c4:18:50:f3:3a:22:ea:fc:d4:70:b7:3d:24:6d:25:02:aa:de: d8:0d:f7:7b:9b:d6:b0:44:29:5d:9a:12:07:0f:95:d7:da:ed: a5:89:f6:de:0a:77:85:73:b8:86:cf:27:ec:df:46:f9:72:4f: 4a:02:51:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PhjMHCkKPpCJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0M1oXDTI1MDczMDE3MDg0M1owLzEtMCsGA1UEAxMk MmY0YTU1OTEtOGU3MC00MjcyLWIzNzAtYzk2NGU2M2UxZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscRxS6oY0RCqhEpdR1ujl/TbQ4FHJmOJWUVj 62GK1HJLy2T0PODzdmjcjUQJww/0pf9Jin4BbMgFvGHZVmPQWaQX7w8+Y/xT7ZZ3 9ph+9lCNyadP0pQqNJI1PBGjMOsiLEtvWZfVH4K+uloOyoC+6HqImfk/9RF1bhei clKjPC6VorEJqWHdtiJlqelluFmR2I/p9xSpfdzCf822veGfCTG3N60ddEwMk3Zz +rPryLY3HRTyxXFwCZNnyiTwMrPWa9EorOTTrro0M2t+zsv4oKKKAtHGeLHuRPa/ qxUeVOAau3+qHmVcqjdBmrlaUzXUlKwU/X9SNRimOcxqWp/y9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpQsIOcpXo44A1/GXe4KZBA5j9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGUyNWVkYTMtNjg2MS0z MTg2LThiN2ItYzA0MTYzYjliNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARADyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYzT500EO2/jgngVapDxaj4dzd7tFZxGRpiYbpJcbySbn4db75wX7Si 5IcnisiG83e5t9c1oqxn9YaDjVlqCW3/Z/Pmw9UCKRpZm9YmPfdVyfq8hoRAyWTg 3rsHXRr3alIu3VfWdrVgV7F3M8BiYiDBf7XpKFazcmEtMS105YIg0LPtVk1MVeLl s1xnMpYeul/IqKzu3MrLnyae8No48PlUZNOaAX5tEb6bRxb7FJZT0S6gwXDbBs+v 3kPbDHIHt3GBaqEOc8QYUPM6Iur81HC3PSRtJQKq3tgN93ub1rBEKV2aEgcPldfa 7aWJ9t4Kd4VzuIbPJ+zfRvlyT0oCUaM= -----END CERTIFICATE-----Generated at Mon May 12 19:07:21 2025 by rpki-client