$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4e27fe4-2ce7-3f67-8092-1775f65ec6c2.roa File: a4e27fe4-2ce7-3f67-8092-1775f65ec6c2.roa (raw, json) Hash identifier: pogzYuUhKFIqMxR5cQvVM8Y5VQGEwejj8CJq5/kvcgM= Subject key identifier: 2A:8A:FF:90:5C:F9:9C:53:16:5B:5A:97:7A:D2:77:CD:E6:7C:09:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD39480C4AB4BBECB16180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4e27fe4-2ce7-3f67-8092-1775f65ec6c2.roa Signing time: Thu 01 May 2025 17:25:21 +0000 ROA not before: Thu 01 May 2025 17:25:21 +0000 ROA not after: Wed 30 Jul 2025 17:25:21 +0000 asID: 22773 IP address blocks: 68.111.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:39:48:0c:4a:b4:bb:ec:b1:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:21 2025 GMT Not After : Jul 30 17:25:21 2025 GMT Subject: CN=6282dcb0-e1a2-44d8-b2f4-3496272db147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:5c:48:d0:35:5c:a1:07:50:d4:cd:5a:92: 44:e2:90:81:18:8a:46:6c:1f:46:82:2c:06:26:66: 9d:18:71:cf:69:3e:72:ff:61:29:0f:a6:33:92:5e: e9:a7:2a:1a:81:3a:43:67:b7:4c:36:16:a9:0d:65: fd:6a:c7:8f:cb:21:f6:5b:57:70:e3:b3:1a:d6:f8: 35:ec:ba:35:ba:03:1a:d5:fb:c2:94:a7:71:c0:5d: 51:14:77:e7:53:82:13:7c:ec:9e:ad:7f:fc:e7:56: 26:68:5e:74:f9:eb:2c:1f:6b:6a:cf:0b:98:09:ce: b0:69:c5:91:77:9f:19:a7:ba:57:b1:be:c5:1f:ee: 02:9c:96:07:a9:03:f4:b8:4e:8e:9f:4e:4f:5f:1b: 0a:5b:e6:4a:28:41:3f:40:61:4f:e5:f9:46:b0:74: 6f:4d:0c:33:9b:8d:22:9e:58:fc:25:95:6d:51:e0: 7b:72:12:f9:95:0c:c3:78:e7:2e:2a:54:cb:05:44: e2:55:69:8f:52:ff:24:f8:dd:50:53:79:47:de:29: a0:d8:76:f8:4e:76:7a:e4:e7:4b:42:d6:5d:22:67: f7:a3:22:e7:14:1f:4e:8e:de:7c:32:a1:0e:f2:78: 32:f2:b8:b5:e2:29:8b:0b:53:6f:11:4d:94:df:e1: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:FF:90:5C:F9:9C:53:16:5B:5A:97:7A:D2:77:CD:E6:7C:09:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4e27fe4-2ce7-3f67-8092-1775f65ec6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e0:7e:4d:1a:98:a4:35:df:88:82:f7:df:26:69:55:56:87: 94:89:09:52:f1:e6:a6:32:b7:3d:47:60:43:c4:e8:b9:21:80: bf:01:88:18:1c:9a:c0:82:af:13:23:82:06:91:bc:b6:25:e5: 21:2a:cf:ea:c1:75:1e:6b:87:af:f4:b3:66:e8:47:5b:45:6f: cd:7c:bf:6e:54:72:7d:f6:ee:d0:de:c7:ce:db:e6:08:f8:03: d5:12:b5:34:fb:a3:d1:44:dd:56:e8:74:08:6a:0a:b2:c1:95: 81:ac:61:2e:06:3f:da:bc:54:ca:c3:db:f0:9d:f7:9a:a7:9d: 37:f9:10:bb:b4:38:d5:8d:c7:61:61:e4:1b:01:c9:b0:f8:b5: 37:6b:a9:ee:b5:4b:e5:a9:97:14:88:97:21:1e:0a:b2:26:4b: 8b:cd:8d:cd:eb:11:89:e9:c7:61:43:f5:e6:65:30:64:89:49: 63:23:19:9f:29:e9:46:43:3c:0b:70:55:68:c3:40:b7:e0:98: 1b:0d:96:f8:f0:cd:a4:79:a5:cd:58:1a:80:6f:a5:6c:ae:de: c0:10:e3:f3:f5:e5:54:72:96:83:d5:82:aa:6a:f4:5b:42:40: 5b:5d:cf:1a:5c:0d:a9:9c:93:05:5d:94:aa:bb:01:8b:ca:89: 04:61:e9:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/TlIDEq0u+yxYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUyMVoXDTI1MDczMDE3MjUyMVowLzEtMCsGA1UEAxMk NjI4MmRjYjAtZTFhMi00NGQ4LWIyZjQtMzQ5NjI3MmRiMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB5cSNA1XKEHUNTNWpJE4pCBGIpGbB9GgiwG JmadGHHPaT5y/2EpD6Yzkl7ppyoagTpDZ7dMNhapDWX9asePyyH2W1dw47Ma1vg1 7Lo1ugMa1fvClKdxwF1RFHfnU4ITfOyerX/851YmaF50+essH2tqzwuYCc6wacWR d58Zp7pXsb7FH+4CnJYHqQP0uE6On05PXxsKW+ZKKEE/QGFP5flGsHRvTQwzm40i nlj8JZVtUeB7chL5lQzDeOcuKlTLBUTiVWmPUv8k+N1QU3lH3img2Hb4TnZ65OdL QtZdImf3oyLnFB9Ojt58MqEO8ngy8ri14imLC1NvEU2U3+H6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqK/5Bc+ZxTFltal3rSd83mfAnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTRlMjdmZTQtMmNlNy0z ZjY3LTgwOTItMTc3NWY2NWVjNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3gfk0amKQ134iC998maVVWh5SJCVLx5qYytz1HYEPE6LkhgL8BiBgc msCCrxMjggaRvLYl5SEqz+rBdR5rh6/0s2boR1tFb818v25Ucn327tDex87b5gj4 A9UStTT7o9FE3VbodAhqCrLBlYGsYS4GP9q8VMrD2/Cd95qnnTf5ELu0ONWNx2Fh 5BsBybD4tTdrqe61S+WplxSIlyEeCrImS4vNjc3rEYnpx2FD9eZlMGSJSWMjGZ8p 6UZDPAtwVWjDQLfgmBsNlvjwzaR5pc1YGoBvpWyu3sAQ4/P15VRyloPVgqpq9FtC QFtdzxpcDamckwVdlKq7AYvKiQRh6dc= -----END CERTIFICATE-----Generated at Sat May 10 22:25:13 2025 by rpki-client