$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa File: 8e9f630f-0301-3cd4-bac4-8604170e4171.roa (raw, json) Hash identifier: KgM84s1IlzHbhVdxRozUVOiWnsSBy6aVxFCV8a3qJ+E= Subject key identifier: C7:92:43:95:F3:A8:DF:F2:18:A4:7A:4C:5B:7F:D1:13:1C:ED:17:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0FA42C48B112F020D200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa Signing time: Thu 01 May 2025 17:25:01 +0000 ROA not before: Thu 01 May 2025 17:25:01 +0000 ROA not after: Wed 30 Jul 2025 17:25:01 +0000 asID: 22773 IP address blocks: 68.8.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0f:a4:2c:48:b1:12:f0:20:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:01 2025 GMT Not After : Jul 30 17:25:01 2025 GMT Subject: CN=a59a3d7f-ec61-41e5-beb1-797098d8e31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:89:c2:ce:5a:b0:4b:5b:8c:de:99:4d:13: da:61:4d:16:78:c5:92:83:ad:42:a9:79:07:08:77: 14:31:b5:3e:1d:5e:58:d3:47:dc:e6:d7:43:8a:48: c5:72:e6:42:50:6f:3f:a8:7d:25:35:96:ae:a0:ac: b8:40:46:27:70:52:70:6b:4d:eb:39:28:a7:b0:36: b2:7f:b4:39:86:c1:ae:90:68:f3:b0:ca:1d:b3:2d: 03:f1:0a:55:9b:aa:c9:ae:df:71:8b:61:e6:9a:78: 27:b1:72:48:af:f6:7f:3a:81:75:8e:a1:99:90:51: e5:9a:29:2d:a6:c7:59:e4:02:b2:5f:72:91:ca:14: 6d:ac:02:13:6f:be:ae:65:c5:d9:80:4e:3e:62:20: 51:d4:45:e7:33:43:65:c5:a1:b8:18:83:cc:75:e1: b0:bb:68:74:01:9e:02:01:c2:cd:dc:d1:3e:f6:10: 3c:08:a8:4b:f3:0b:cd:b4:08:0e:d4:09:d3:41:9b: c4:4e:63:e7:47:23:7f:1b:d2:fe:b3:98:22:a8:56: 05:aa:0f:b6:b3:61:c3:53:04:d2:93:58:52:4c:da: 10:38:e2:fb:8c:e3:68:a4:c9:03:77:8e:ba:02:9d: 1d:b6:9f:8e:a3:37:a1:ad:06:fc:49:25:80:70:b4: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:43:95:F3:A8:DF:F2:18:A4:7A:4C:5B:7F:D1:13:1C:ED:17:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e9f630f-0301-3cd4-bac4-8604170e4171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:68:48:a3:4e:c6:0e:11:59:b6:3f:b7:60:d0:4f:8a:e4:3f: 14:3f:c6:a7:28:35:b9:32:9e:7a:a6:7b:c7:0e:14:67:e0:78: 16:8a:30:86:ae:3d:f0:01:31:88:3a:f9:1b:07:1b:ac:6a:17: f3:26:4e:c0:27:35:25:1f:7e:3d:d0:ef:0e:4d:9f:21:9b:4c: 4e:e9:7d:09:df:34:ad:df:7b:7b:17:b8:f5:7c:ef:b5:dc:0a: 19:b3:15:4a:e9:f8:45:cf:81:74:eb:15:8f:25:13:9a:c3:27: 2e:5b:44:62:06:98:6d:8d:a7:e8:2b:80:f9:58:d3:56:b0:f8: 13:76:58:0a:61:5e:ee:9f:20:b2:24:38:67:d3:fc:94:da:11: 0b:2a:64:ec:75:5a:64:02:fb:87:85:7d:bb:13:0f:03:ce:ae: 06:27:28:41:19:10:ad:0f:83:39:39:0a:f4:2e:c7:89:eb:de: ef:6f:f9:70:65:ff:87:e1:13:a3:ab:f9:cd:93:b0:e7:f3:03: ea:05:5a:41:da:08:cc:05:4b:62:6e:b0:42:31:33:fa:35:ef: 92:22:63:77:ee:63:7b:73:8d:1b:dd:48:65:f6:68:d2:49:93: 86:61:8f:74:3a:14:0a:20:a5:fc:b4:94:56:15:5b:aa:70:83: 54:10:ba:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Q+kLEixEvAg0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMVoXDTI1MDczMDE3MjUwMVowLzEtMCsGA1UEAxMk YTU5YTNkN2YtZWM2MS00MWU1LWJlYjEtNzk3MDk4ZDhlMzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudiJws5asEtbjN6ZTRPaYU0WeMWSg61CqXkH CHcUMbU+HV5Y00fc5tdDikjFcuZCUG8/qH0lNZauoKy4QEYncFJwa03rOSinsDay f7Q5hsGukGjzsModsy0D8QpVm6rJrt9xi2HmmngnsXJIr/Z/OoF1jqGZkFHlmikt psdZ5AKyX3KRyhRtrAITb76uZcXZgE4+YiBR1EXnM0NlxaG4GIPMdeGwu2h0AZ4C AcLN3NE+9hA8CKhL8wvNtAgO1AnTQZvETmPnRyN/G9L+s5giqFYFqg+2s2HDUwTS k1hSTNoQOOL7jONopMkDd466Ap0dtp+OozehrQb8SSWAcLQOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeSQ5XzqN/yGKR6TFt/0RMc7RdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGU5ZjYzMGYtMDMwMS0z Y2Q0LWJhYzQtODYwNDE3MGU0MTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxoSKNOxg4RWbY/t2DQT4rkPxQ/xqcoNbkynnqme8cOFGfgeBaKMIau PfABMYg6+RsHG6xqF/MmTsAnNSUffj3Q7w5NnyGbTE7pfQnfNK3fe3sXuPV877Xc ChmzFUrp+EXPgXTrFY8lE5rDJy5bRGIGmG2Np+grgPlY01aw+BN2WAphXu6fILIk OGfT/JTaEQsqZOx1WmQC+4eFfbsTDwPOrgYnKEEZEK0Pgzk5CvQux4nr3u9v+XBl /4fhE6Or+c2TsOfzA+oFWkHaCMwFS2JusEIxM/o175IiY3fuY3tzjRvdSGX2aNJJ k4Zhj3Q6FAogpfy0lFYVW6pwg1QQuvc= -----END CERTIFICATE-----Generated at Mon May 12 07:26:41 2025 by rpki-client