$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35e4ccd-96b0-337b-8f62-58a19da0ffc4.roa File: a35e4ccd-96b0-337b-8f62-58a19da0ffc4.roa (raw, json) Hash identifier: JoBi356Y6+kV6czKEF7I3qlJ6xc8J4gQ5qTVxKceFwQ= Subject key identifier: 83:CC:9B:94:0F:31:64:F0:03:AF:67:24:8E:4D:BA:7A:B0:A1:04:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD364A9801BB7413BC4F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35e4ccd-96b0-337b-8f62-58a19da0ffc4.roa Signing time: Thu 01 May 2025 17:25:20 +0000 ROA not before: Thu 01 May 2025 17:25:20 +0000 ROA not after: Wed 30 Jul 2025 17:25:20 +0000 asID: 22773 IP address blocks: 68.107.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:36:4a:98:01:bb:74:13:bc:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:20 2025 GMT Not After : Jul 30 17:25:20 2025 GMT Subject: CN=f969f71c-cc1d-41bb-8611-40e53f2cb68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:a6:df:1a:0a:4c:f2:0f:e2:ac:52:01:5f: c5:47:91:88:3d:63:09:4b:b8:86:ca:c4:35:cd:66: 9f:37:00:6f:d9:09:94:b5:8a:89:ea:86:52:03:e4: e3:90:77:0a:fb:fd:00:2e:a7:66:40:e4:c3:d2:8b: e2:fa:52:9d:8e:00:0c:8b:85:e2:3e:16:b3:85:2d: a6:80:30:f9:b7:0d:70:21:e6:f2:45:a8:99:10:70: 5f:d1:66:29:8d:63:79:6a:85:fa:e6:02:bc:a8:6c: 25:9e:71:3a:e6:2e:c3:e3:42:d7:79:4e:27:4c:e1: c9:0a:38:4a:c0:4c:7f:bb:f5:bc:15:07:f5:d1:ac: 46:06:6d:f8:3b:02:9e:e9:a1:80:c0:db:63:36:7e: 48:12:37:9f:24:4b:8c:c5:ff:28:e4:c9:78:3b:35: e3:1d:9c:9d:8a:c9:a0:64:1d:6c:0e:1e:62:57:bb: 11:07:1a:d6:02:ff:c8:09:48:1f:4c:00:41:6d:37: d5:0e:d0:75:13:a1:a4:6d:cc:af:1e:71:db:33:ea: de:6a:03:01:91:df:aa:a2:4a:d6:16:ed:00:14:e1: 58:4c:54:6d:4c:2d:8e:12:3d:14:99:7d:21:50:76: 0f:7f:18:a5:ac:5a:41:1e:f7:22:45:c6:d4:d8:e3: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:9B:94:0F:31:64:F0:03:AF:67:24:8E:4D:BA:7A:B0:A1:04:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a35e4ccd-96b0-337b-8f62-58a19da0ffc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a8:09:b5:44:18:49:88:55:aa:04:63:c2:73:fd:29:94:d5: bb:de:1f:49:a6:bf:46:01:a2:b3:5d:b4:d9:92:ce:d0:b9:fa: a0:d3:d0:70:b7:ce:ee:75:da:39:17:ea:24:c8:d9:9b:f7:7e: e1:c2:ac:11:85:cf:cb:37:04:aa:ef:ac:ca:31:94:08:74:45: b4:a6:98:51:31:de:52:85:99:c5:31:b0:db:10:c1:c8:27:bb: ea:75:61:89:d1:2a:b6:9b:4b:a5:72:65:df:26:16:8f:cb:8c: 85:57:15:02:5b:41:2b:51:41:6e:53:a3:85:1d:b0:81:a4:c8: cc:2e:3f:08:c0:cf:d9:b1:ea:30:11:54:7b:0c:e0:70:7a:dd: 49:c1:9c:de:d7:93:e6:23:b4:c4:7c:2d:18:23:09:54:8c:e3: dd:ee:05:6f:8f:f1:7c:89:28:e1:ba:3f:b2:62:43:48:7d:91: bb:db:24:fd:0e:87:6b:1e:f6:ac:73:a3:8c:db:e5:9d:8c:02: b9:3d:28:39:38:25:36:5e:d3:55:2b:50:a6:2f:4b:da:97:dc: e6:4d:a3:15:ea:eb:8e:b0:79:45:75:a8:38:d4:0b:40:c9:c8: 79:e4:5c:f4:ec:38:69:09:a1:0c:e8:bf:b7:57:17:75:19:1f: 4e:14:f9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/TZKmAG7dBO8T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUyMFoXDTI1MDczMDE3MjUyMFowLzEtMCsGA1UEAxMk Zjk2OWY3MWMtY2MxZC00MWJiLTg2MTEtNDBlNTNmMmNiNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPOm3xoKTPIP4qxSAV/FR5GIPWMJS7iGysQ1 zWafNwBv2QmUtYqJ6oZSA+TjkHcK+/0ALqdmQOTD0ovi+lKdjgAMi4XiPhazhS2m gDD5tw1wIebyRaiZEHBf0WYpjWN5aoX65gK8qGwlnnE65i7D40LXeU4nTOHJCjhK wEx/u/W8FQf10axGBm34OwKe6aGAwNtjNn5IEjefJEuMxf8o5Ml4OzXjHZydismg ZB1sDh5iV7sRBxrWAv/ICUgfTABBbTfVDtB1E6GkbcyvHnHbM+reagMBkd+qokrW Fu0AFOFYTFRtTC2OEj0UmX0hUHYPfxilrFpBHvciRcbU2ON2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPMm5QPMWTwA69nJI5NunqwoQRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTM1ZTRjY2QtOTZiMC0z MzdiLThmNjItNThhMTlkYTBmZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6oCbVEGEmIVaoEY8Jz/SmU1bveH0mmv0YBorNdtNmSztC5+qDT0HC3 zu512jkX6iTI2Zv3fuHCrBGFz8s3BKrvrMoxlAh0RbSmmFEx3lKFmcUxsNsQwcgn u+p1YYnRKrabS6VyZd8mFo/LjIVXFQJbQStRQW5To4UdsIGkyMwuPwjAz9mx6jAR VHsM4HB63UnBnN7Xk+YjtMR8LRgjCVSM493uBW+P8XyJKOG6P7JiQ0h9kbvbJP0O h2se9qxzo4zb5Z2MArk9KDk4JTZe01UrUKYvS9qX3OZNoxXq646weUV1qDjUC0DJ yHnkXPTsOGkJoQzov7dXF3UZH04U+YY= -----END CERTIFICATE-----Generated at Sun May 11 04:16:05 2025 by rpki-client