$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa File: a9e9f418-93e9-3eeb-b336-c509d8583262.roa (raw, json) Hash identifier: hkEZMI1IZJnAN1dAvtj3nHwkbac36s/Nc1Jo2YeHuFw= Subject key identifier: 5D:95:E5:6E:BE:FC:77:85:5A:72:6B:C8:84:63:52:2A:33:60:7D:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7FFD100E815FF53591A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa Signing time: Thu 01 May 2025 17:14:49 +0000 ROA not before: Thu 01 May 2025 17:14:49 +0000 ROA not after: Wed 30 Jul 2025 17:14:49 +0000 asID: 22773 IP address blocks: 68.99.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:ff:d1:00:e8:15:ff:53:59:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:49 2025 GMT Not After : Jul 30 17:14:49 2025 GMT Subject: CN=d8082140-e6fc-4780-90c0-3dc6017707aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:26:8a:9e:af:ad:c4:f7:2a:32:89:c3:c5: 85:a3:03:fb:7f:09:e5:2c:48:58:20:4e:1f:98:09: ad:e6:55:54:05:df:9e:cb:28:9d:14:49:ba:22:5a: 24:ce:15:ae:48:61:42:19:da:57:52:fe:d7:06:c1: 70:81:ae:74:c3:b4:b5:36:2d:a4:58:fb:20:89:a0: a9:d0:55:98:9a:9c:a4:c6:d5:f0:e6:5d:f5:e8:c9: ef:76:16:91:c1:be:94:47:33:19:a4:af:11:2d:87: 1b:8c:38:f8:a0:1e:86:1c:96:a6:ff:74:26:02:3c: 55:ee:4f:ce:0c:1d:fc:45:82:d7:cc:ad:cb:10:df: 01:64:56:13:d6:2a:d2:2b:63:7d:cf:3b:cc:23:0b: fa:7d:d2:c5:31:1a:33:a2:68:d0:3a:6b:ad:e6:5e: bf:98:d4:6c:dc:ea:9a:f3:13:77:7d:ba:6c:6f:bb: 87:7a:41:6e:93:0f:c7:84:21:52:52:52:16:a0:5c: 3a:a7:92:3d:a6:c7:e3:64:ae:81:0b:ea:67:54:47: 5a:b8:4b:ac:13:4d:51:d7:93:56:b1:0b:66:35:bc: 8d:12:89:03:60:44:54:ca:a6:45:32:93:96:74:a5: 22:57:5d:b4:7d:24:25:c9:7f:d1:fd:6a:ed:e3:0d: e9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:95:E5:6E:BE:FC:77:85:5A:72:6B:C8:84:63:52:2A:33:60:7D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9e9f418-93e9-3eeb-b336-c509d8583262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c2:29:a4:ab:a0:85:a2:e9:0c:55:87:3a:fb:1b:9e:8f:d4: 22:59:77:02:0d:d7:c7:80:17:a1:5a:63:be:fa:9b:49:93:03: c8:e3:7a:90:63:94:b2:c3:41:4f:12:14:54:bf:5d:ff:3a:e4: a7:d8:45:6a:42:6b:f7:68:bb:1a:f2:9a:b3:8d:f7:e2:11:55: 34:ed:9d:8e:2f:9c:1a:58:b5:6c:a9:01:a4:19:34:6d:ce:3a: 14:25:cf:4a:e0:03:67:81:3c:1e:14:46:ab:47:f8:c5:59:cc: 00:d9:8c:f8:1b:57:ed:14:fd:63:c9:e0:fd:6e:58:78:db:09: 05:3f:41:2f:fa:56:b8:b2:b0:0e:b3:d7:86:df:4e:b1:35:f9: 7d:08:5c:b1:22:da:53:a7:90:b1:54:13:1e:8d:77:29:1f:dd: 68:be:60:78:f4:0c:4c:ca:47:86:cd:2b:8b:1a:ec:31:1c:a8: 93:9a:7c:e6:9d:d6:06:b8:81:bd:bc:29:a8:81:68:8c:05:82: a2:a0:77:81:5d:28:57:79:9d:39:ea:12:b7:69:b8:7f:fd:2c: ca:00:af:4d:da:ff:8e:43:f8:ba:1f:a1:a1:9e:8d:76:87:66: 3d:f5:f6:95:ef:a7:20:1d:5c:36:09:fc:e6:ee:2d:64:9e:b3: 31:82:38:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19//RAOgV/1NZGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ0OVoXDTI1MDczMDE3MTQ0OVowLzEtMCsGA1UEAxMk ZDgwODIxNDAtZTZmYy00NzgwLTkwYzAtM2RjNjAxNzcwN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMUmip6vrcT3KjKJw8WFowP7fwnlLEhYIE4f mAmt5lVUBd+eyyidFEm6IlokzhWuSGFCGdpXUv7XBsFwga50w7S1Ni2kWPsgiaCp 0FWYmpykxtXw5l316MnvdhaRwb6URzMZpK8RLYcbjDj4oB6GHJam/3QmAjxV7k/O DB38RYLXzK3LEN8BZFYT1irSK2N9zzvMIwv6fdLFMRozomjQOmut5l6/mNRs3Oqa 8xN3fbpsb7uHekFukw/HhCFSUlIWoFw6p5I9psfjZK6BC+pnVEdauEusE01R15NW sQtmNbyNEokDYERUyqZFMpOWdKUiV120fSQlyX/R/Wrt4w3p1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2V5W6+/HeFWnJryIRjUiozYH2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTllOWY0MTgtOTNlOS0z ZWViLWIzMzYtYzUwOWQ4NTgzMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3CKaSroIWi6QxVhzr7G56P1CJZdwIN18eAF6FaY776m0mTA8jjepBj lLLDQU8SFFS/Xf865KfYRWpCa/douxrymrON9+IRVTTtnY4vnBpYtWypAaQZNG3O OhQlz0rgA2eBPB4URqtH+MVZzADZjPgbV+0U/WPJ4P1uWHjbCQU/QS/6VriysA6z 14bfTrE1+X0IXLEi2lOnkLFUEx6Ndykf3Wi+YHj0DEzKR4bNK4sa7DEcqJOafOad 1ga4gb28KaiBaIwFgqKgd4FdKFd5nTnqErdpuH/9LMoAr03a/45D+LofoaGejXaH Zj319pXvpyAdXDYJ/ObuLWSeszGCOF8= -----END CERTIFICATE-----Generated at Sun May 11 19:15:45 2025 by rpki-client