$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa File: ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa (raw, json) Hash identifier: 3S79Wa5ajb9NXTFQ+xkNZvdohWBxzEIIm+HG8DFCW2s= Subject key identifier: 05:0E:9E:D9:5B:79:F5:05:F1:0F:5E:C2:DD:78:06:78:51:AC:0E:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD3D4BDCB971F8131FCA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa Signing time: Thu 01 May 2025 17:25:23 +0000 ROA not before: Thu 01 May 2025 17:25:23 +0000 ROA not after: Wed 30 Jul 2025 17:25:23 +0000 asID: 22773 IP address blocks: 68.111.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:3d:4b:dc:b9:71:f8:13:1f:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:23 2025 GMT Not After : Jul 30 17:25:23 2025 GMT Subject: CN=7b57e16f-2938-4c1c-9a49-06057512d83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:9b:fa:44:24:6e:78:64:a4:37:83:bf:26: 3f:0c:e5:a1:d3:a1:bb:b5:95:66:f3:a5:f9:5f:3e: 3c:4a:43:ca:9e:45:84:3a:71:67:0d:b4:7d:5b:41: 75:f2:50:b4:40:8d:a3:c0:02:7c:b4:b4:63:32:b5: 35:04:a9:ee:2c:91:8a:89:de:ae:c4:10:84:61:46: 8e:3d:73:8e:80:fd:fc:9d:d3:6c:65:31:73:d5:c0: 4e:54:f7:b2:d8:35:1c:bd:a3:0e:5b:76:f9:f1:ee: e2:18:31:2b:8e:49:8d:0a:6c:97:3e:26:1f:af:fc: b4:dc:ee:b9:3a:3b:42:f1:a4:5b:d2:63:c1:11:0d: 09:fc:d2:32:b1:07:0b:36:fd:b6:df:c9:3e:3c:eb: 6c:72:60:f4:78:93:c3:ae:0c:30:6c:b4:06:1b:34: f8:3f:55:95:02:cd:ac:11:79:61:d6:13:85:4d:14: ec:1f:6b:8a:9c:96:68:59:95:8a:50:f3:b8:de:65: 43:50:cf:99:0a:ca:f6:29:0d:91:ae:b6:ea:78:8c: 7a:52:4c:0a:b6:5e:d8:ea:dd:e5:33:4e:6e:6d:16: 6b:85:e0:95:b7:af:e6:29:b1:be:38:a2:5a:a4:dc: 49:ff:d0:fd:58:c1:27:67:25:de:32:f6:38:58:e9: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:9E:D9:5B:79:F5:05:F1:0F:5E:C2:DD:78:06:78:51:AC:0E:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad0720fb-1dc7-3fef-be6a-7517c59ce35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.111.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cd:8c:55:9e:70:01:4b:0b:89:37:3c:14:b0:16:7a:3f:c9: 77:ab:2e:d1:d4:6e:04:2c:63:1b:ca:20:ee:2c:30:37:36:0c: 71:e7:91:ca:99:3d:00:7e:32:dc:26:eb:65:27:6c:7a:08:b2: eb:51:7f:11:c3:6a:b3:4e:03:6f:57:0c:5a:f6:3c:d7:6f:9c: b2:9c:ce:51:f2:40:42:52:33:3a:18:2f:89:e6:c8:d5:dc:d1: d7:11:17:39:91:9c:d5:4f:5d:57:1a:f0:c3:8b:48:2a:0f:09: a6:83:6c:4b:d2:c5:c2:f7:e3:2f:67:f8:b9:a7:ef:ec:21:02: 51:a6:ef:90:41:81:01:2c:aa:2f:09:35:b6:ef:6d:d2:e2:3c: 9a:4c:82:50:46:9d:77:22:91:ee:37:9b:bf:bb:c5:bc:46:3c: 63:1e:e6:00:82:7e:56:7b:5e:ce:17:dc:2a:13:9d:e0:ff:56: 16:40:89:0e:5f:e5:80:c0:c6:00:14:03:e2:a8:e7:a8:e6:04: b8:74:99:63:7f:42:78:04:70:ca:d4:09:68:ef:06:ab:a7:f0: 99:71:f7:d8:ad:d7:21:43:5d:2c:9a:e2:0b:a0:64:81:f5:4f: 87:8a:00:1e:7d:48:da:1e:13:4a:3e:c8:e7:1d:4f:b6:81:a0: 5e:2a:60:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/T1L3Llx+BMfyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUyM1oXDTI1MDczMDE3MjUyM1owLzEtMCsGA1UEAxMk N2I1N2UxNmYtMjkzOC00YzFjLTlhNDktMDYwNTc1MTJkODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIub+kQkbnhkpDeDvyY/DOWh06G7tZVm86X5 Xz48SkPKnkWEOnFnDbR9W0F18lC0QI2jwAJ8tLRjMrU1BKnuLJGKid6uxBCEYUaO PXOOgP38ndNsZTFz1cBOVPey2DUcvaMOW3b58e7iGDErjkmNCmyXPiYfr/y03O65 OjtC8aRb0mPBEQ0J/NIysQcLNv2238k+POtscmD0eJPDrgwwbLQGGzT4P1WVAs2s EXlh1hOFTRTsH2uKnJZoWZWKUPO43mVDUM+ZCsr2KQ2RrrbqeIx6UkwKtl7Y6t3l M05ubRZrheCVt6/mKbG+OKJapNxJ/9D9WMEnZyXeMvY4WOl7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUOntlbefUF8Q9ewt14BnhRrA4DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQwNzIwZmItMWRjNy0z ZmVmLWJlNmEtNzUxN2M1OWNlMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITNjFWecAFLC4k3PBSwFno/yXerLtHUbgQsYxvKIO4sMDc2DHHnkcqZ PQB+Mtwm62UnbHoIsutRfxHDarNOA29XDFr2PNdvnLKczlHyQEJSMzoYL4nmyNXc 0dcRFzmRnNVPXVca8MOLSCoPCaaDbEvSxcL34y9n+Lmn7+whAlGm75BBgQEsqi8J NbbvbdLiPJpMglBGnXcike43m7+7xbxGPGMe5gCCflZ7Xs4X3CoTneD/VhZAiQ5f 5YDAxgAUA+Ko56jmBLh0mWN/QngEcMrUCWjvBqun8Jlx99it1yFDXSya4gugZIH1 T4eKAB59SNoeE0o+yOcdT7aBoF4qYPw= -----END CERTIFICATE-----Generated at Wed May 7 19:28:53 2025 by rpki-client