$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaee8179-75a1-3e6a-b96f-359fbe7ab377.roa File: aaee8179-75a1-3e6a-b96f-359fbe7ab377.roa (raw, json) Hash identifier: RVm0WlSWhDfhuxpaD3D/CbZ2Tf+1/c9Kty9+FYSX5A8= Subject key identifier: 8A:59:73:61:3F:62:E2:EE:FC:25:D8:9E:AC:22:CF:63:92:4F:65:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F570EB0A65C1D94186B000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaee8179-75a1-3e6a-b96f-359fbe7ab377.roa Signing time: Thu 01 May 2025 17:09:40 +0000 ROA not before: Thu 01 May 2025 17:09:40 +0000 ROA not after: Wed 30 Jul 2025 17:09:40 +0000 asID: 22773 IP address blocks: 68.230.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:70:eb:0a:65:c1:d9:41:86:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:40 2025 GMT Not After : Jul 30 17:09:40 2025 GMT Subject: CN=fa7cbd09-0028-4841-acea-e3d31c7ff09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:68:d7:34:42:63:9d:9e:64:62:54:16:8e: 33:27:c3:4a:19:aa:9f:dc:47:d5:aa:aa:c4:6d:47: 6c:cc:3a:a0:89:55:3a:df:5f:2a:41:81:d3:e9:46: 62:7a:db:26:dd:1f:3c:e2:9f:31:87:d7:f8:08:b8: aa:80:68:22:cc:c3:d4:12:64:f6:66:8c:01:da:d6: 02:0b:3e:c5:e8:2b:60:8c:53:e1:e2:bc:f9:ea:c1: f7:07:cb:2a:e3:1f:de:2a:04:1f:0e:4b:f2:81:ca: c0:5e:b6:0a:39:aa:0d:60:e9:d5:f4:b3:28:20:1f: 88:26:dd:6b:cf:e2:12:d1:cc:66:c4:93:fc:23:2b: 92:f0:72:50:2e:79:c5:f5:71:b5:0e:90:d0:cf:6d: 19:51:83:a9:87:e9:ee:88:d1:4b:44:0a:c5:15:ca: 9d:d3:c2:8e:d9:43:9e:6b:38:a5:f1:c5:56:16:ce: c8:fe:b4:55:c1:93:0f:1a:13:86:dc:9d:8f:b8:05: af:4c:4a:36:73:33:f2:5a:b4:d0:0e:4a:56:6a:f4: 6c:ae:f4:ac:97:62:1e:d8:4f:b9:cb:e4:14:56:df: c5:59:f3:d7:3d:c2:b1:6e:43:7a:50:cf:a3:b8:fc: d6:49:b5:2f:65:a1:62:cf:41:1e:db:52:af:96:b9: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:73:61:3F:62:E2:EE:FC:25:D8:9E:AC:22:CF:63:92:4F:65:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaee8179-75a1-3e6a-b96f-359fbe7ab377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:9b:20:ae:2b:1e:6a:90:d0:bd:2c:51:d6:ac:8e:e7:46:fa: ef:08:a2:0a:1e:b6:36:ac:e2:23:b6:25:08:07:d3:65:4a:c1: cd:c5:8d:61:58:e3:59:70:f1:bc:27:62:b5:26:3c:d5:33:6e: 51:ea:e0:13:e4:e2:ed:7f:4a:a3:54:2f:b2:32:9b:d5:4f:15: cd:1e:ed:88:d4:e6:85:ae:fb:2b:5e:b7:e8:8e:fc:90:2e:06: 60:48:68:f2:07:c4:b1:39:14:5b:c1:bd:34:75:3c:17:4e:26: 71:5d:a9:8a:1f:48:21:00:ab:0e:63:8d:99:c5:f8:d8:20:d7: 84:a2:24:f4:f6:42:41:99:76:98:cc:8e:25:2b:dc:17:d5:b8: 33:2e:e4:fc:11:1f:db:92:0a:b2:7c:b0:41:4e:31:3c:8c:5f: 28:d7:f0:1e:54:5e:34:d2:6b:0e:14:6b:3a:f9:6c:af:d3:27: c2:5c:e9:d8:c0:97:da:a1:f8:03:bb:21:ff:61:99:c9:8b:60: 6d:bb:bb:53:91:01:4e:a8:d8:9a:6f:43:b0:f4:58:43:ae:15: d5:79:43:a8:23:f7:fa:2f:00:6e:ca:d7:52:07:47:2d:07:cb: 58:43:9d:fb:02:18:04:73:87:71:1e:67:51:c0:45:13:10:05: d9:da:3c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XDrCmXB2UGGsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0MFoXDTI1MDczMDE3MDk0MFowLzEtMCsGA1UEAxMk ZmE3Y2JkMDktMDAyOC00ODQxLWFjZWEtZTNkMzFjN2ZmMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFRo1zRCY52eZGJUFo4zJ8NKGaqf3EfVqqrE bUdszDqgiVU6318qQYHT6UZietsm3R884p8xh9f4CLiqgGgizMPUEmT2ZowB2tYC Cz7F6CtgjFPh4rz56sH3B8sq4x/eKgQfDkvygcrAXrYKOaoNYOnV9LMoIB+IJt1r z+IS0cxmxJP8IyuS8HJQLnnF9XG1DpDQz20ZUYOph+nuiNFLRArFFcqd08KO2UOe azil8cVWFs7I/rRVwZMPGhOG3J2PuAWvTEo2czPyWrTQDkpWavRsrvSsl2Ie2E+5 y+QUVt/FWfPXPcKxbkN6UM+juPzWSbUvZaFiz0Ee21KvlrkiZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpZc2E/YuLu/CXYnqwiz2OST2WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFlZTgxNzktNzVhMS0z ZTZhLWI5NmYtMzU5ZmJlN2FiMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+bIK4rHmqQ0L0sUdasjudG+u8Iogoetjas4iO2JQgH02VKwc3FjWFY 41lw8bwnYrUmPNUzblHq4BPk4u1/SqNUL7Iym9VPFc0e7YjU5oWu+ytet+iO/JAu BmBIaPIHxLE5FFvBvTR1PBdOJnFdqYofSCEAqw5jjZnF+Ngg14SiJPT2QkGZdpjM jiUr3BfVuDMu5PwRH9uSCrJ8sEFOMTyMXyjX8B5UXjTSaw4Uazr5bK/TJ8Jc6djA l9qh+AO7If9hmcmLYG27u1ORAU6o2JpvQ7D0WEOuFdV5Q6gj9/ovAG7K11IHRy0H y1hDnfsCGARzh3EeZ1HARRMQBdnaPD0= -----END CERTIFICATE-----Generated at Mon May 12 19:26:15 2025 by rpki-client