$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5580d62-57fb-3d67-80fe-1712e9fe48a8.roa File: b5580d62-57fb-3d67-80fe-1712e9fe48a8.roa (raw, json) Hash identifier: IRDQswz5g1Mc4XBD/+1SMyaN7xd1d51rcU5tMBkvdvg= Subject key identifier: EF:17:6A:4B:C4:2B:B1:40:2D:A9:80:18:F7:A7:DE:08:0E:60:01:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCED66EEBB313B2099AD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5580d62-57fb-3d67-80fe-1712e9fe48a8.roa Signing time: Thu 01 May 2025 17:24:45 +0000 ROA not before: Thu 01 May 2025 17:24:45 +0000 ROA not after: Wed 30 Jul 2025 17:24:45 +0000 asID: 22773 IP address blocks: 68.7.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:ed:66:ee:bb:31:3b:20:99:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:45 2025 GMT Not After : Jul 30 17:24:45 2025 GMT Subject: CN=8bb8942b-653a-4163-9689-94658f9b68e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:19:52:a2:fb:e2:21:83:0a:29:ca:97:74: 6e:a6:89:27:3e:a3:9f:35:3b:1e:20:f0:bd:05:65: 3d:3b:55:36:cc:dd:64:96:46:6b:2c:4a:1f:bb:74: 40:b2:a8:78:8d:7f:05:9f:6b:c3:a7:6a:f2:40:0c: 2b:34:26:31:f5:26:22:30:a1:be:4e:fa:01:09:d6: 9a:a1:b7:dc:2e:df:8a:8d:f0:19:dc:5b:3e:af:a6: 60:2a:95:58:8a:ec:e3:d0:1a:de:67:2a:7d:c9:11: 80:e8:66:74:43:32:e1:26:47:cf:42:41:37:1b:14: 64:b5:13:5f:3f:67:e7:49:ee:06:5b:42:3a:9e:88: 72:a6:03:d9:78:26:77:e3:3d:e9:68:77:dc:53:d8: 1c:38:6e:56:f8:fe:a3:1c:5c:7d:9f:6b:4e:a4:cd: bc:82:2b:a0:c7:05:66:9c:fa:52:09:61:ea:86:de: 48:00:92:b1:90:fd:0d:f3:52:ba:20:ad:cb:03:33: 23:7d:c6:0a:6a:d1:f6:38:23:fc:8a:3c:0f:8b:9b: 28:f5:b5:e8:59:57:ee:41:7f:32:51:af:2a:f1:a9: da:5b:15:f1:3c:5f:dd:fb:6e:9b:ae:26:2e:ab:c4: 7a:c2:8d:03:60:c6:e6:3a:7d:db:89:12:6f:d0:bf: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:17:6A:4B:C4:2B:B1:40:2D:A9:80:18:F7:A7:DE:08:0E:60:01:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5580d62-57fb-3d67-80fe-1712e9fe48a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:35:2d:ab:81:ff:c7:82:da:20:ea:c0:18:0d:1f:c0:ac:db: 98:76:52:2a:41:ff:6e:fa:f8:df:e5:33:ac:b3:cd:9b:13:83: 26:32:0d:b0:2f:a6:63:e5:29:8e:58:6a:85:5d:6a:57:93:cf: af:5f:3f:f8:1e:a1:5e:2c:ff:66:d7:04:37:ca:1b:42:bb:13: 32:3f:32:2e:d0:e9:62:5d:a7:ca:9f:d0:3f:59:9b:13:ca:2a: 05:f7:5e:2c:2b:73:32:b9:c2:0d:10:47:be:22:76:42:31:25: 8e:13:fd:c3:d6:e1:59:92:8e:2f:23:a7:22:0a:49:5e:87:15: 79:5a:1b:45:a6:11:90:73:1d:09:81:c0:d5:81:34:01:03:7e: ca:05:e1:4b:7d:28:f0:cd:17:7a:b3:6a:24:95:75:83:fe:84: e1:36:77:04:9b:30:fd:45:7e:91:80:38:49:ed:0e:de:29:85: 36:3a:33:f3:e9:d7:6f:db:14:5e:3a:56:33:a3:ac:ac:46:d1: 64:f2:88:ab:6b:33:24:55:9b:22:b7:66:43:5d:4c:64:6e:6c: 37:89:7c:0c:48:c5:d0:43:b4:37:c9:f6:d0:a2:b9:87:4b:42: 7b:b9:f5:bf:94:27:6c:d8:99:a9:34:cd:4f:64:bf:ba:4e:36: 2f:02:2e:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/O1m7rsxOyCZrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0NVoXDTI1MDczMDE3MjQ0NVowLzEtMCsGA1UEAxMk OGJiODk0MmItNjUzYS00MTYzLTk2ODktOTQ2NThmOWI2OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwIZUqL74iGDCinKl3RupoknPqOfNTseIPC9 BWU9O1U2zN1klkZrLEofu3RAsqh4jX8Fn2vDp2ryQAwrNCYx9SYiMKG+TvoBCdaa obfcLt+KjfAZ3Fs+r6ZgKpVYiuzj0BreZyp9yRGA6GZ0QzLhJkfPQkE3GxRktRNf P2fnSe4GW0I6nohypgPZeCZ34z3paHfcU9gcOG5W+P6jHFx9n2tOpM28giugxwVm nPpSCWHqht5IAJKxkP0N81K6IK3LAzMjfcYKatH2OCP8ijwPi5so9bXoWVfuQX8y Ua8q8anaWxXxPF/d+26briYuq8R6wo0DYMbmOn3biRJv0L+ixwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8XakvEK7FALamAGPen3ggOYAGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjU1ODBkNjItNTdmYi0z ZDY3LTgwZmUtMTcxMmU5ZmU0OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC41LauB/8eC2iDqwBgNH8Cs25h2UipB/276+N/lM6yzzZsTgyYyDbAv pmPlKY5YaoVdaleTz69fP/geoV4s/2bXBDfKG0K7EzI/Mi7Q6WJdp8qf0D9ZmxPK KgX3XiwrczK5wg0QR74idkIxJY4T/cPW4VmSji8jpyIKSV6HFXlaG0WmEZBzHQmB wNWBNAEDfsoF4Ut9KPDNF3qzaiSVdYP+hOE2dwSbMP1FfpGAOEntDt4phTY6M/Pp 12/bFF46VjOjrKxG0WTyiKtrMyRVmyK3ZkNdTGRubDeJfAxIxdBDtDfJ9tCiuYdL Qnu59b+UJ2zYmak0zU9kv7pONi8CLr4= -----END CERTIFICATE-----Generated at Sat May 10 07:27:28 2025 by rpki-client