$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba4a439d-d0b2-3f0f-8670-513bad914b8c.roa File: ba4a439d-d0b2-3f0f-8670-513bad914b8c.roa (raw, json) Hash identifier: tALCQCuRgf8TQ+IjUjWGxGmyYFuKEpwKi8VxXS2D9EI= Subject key identifier: 52:95:58:AB:CC:7D:26:83:00:19:3F:E0:28:D2:30:DC:BC:FB:D3:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4FA4B9D80FF8796FA7700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba4a439d-d0b2-3f0f-8670-513bad914b8c.roa Signing time: Thu 01 May 2025 17:08:44 +0000 ROA not before: Thu 01 May 2025 17:08:44 +0000 ROA not after: Wed 30 Jul 2025 17:08:44 +0000 asID: 22773 IP address blocks: 68.1.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:fa:4b:9d:80:ff:87:96:fa:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:44 2025 GMT Not After : Jul 30 17:08:44 2025 GMT Subject: CN=21045ff7-d37c-4530-ae83-88427b816737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:b9:59:da:ae:54:82:f5:c9:95:d6:44:f4: ec:f8:d8:95:eb:d8:14:22:4f:aa:c1:85:57:bb:ef: e3:6e:1c:33:30:71:1b:b9:7c:8b:1e:bb:66:13:10: 93:7c:ab:5d:d0:d6:d6:0a:8a:0e:bf:f9:d0:30:20: 60:38:69:a1:b2:c3:6c:1d:6b:70:30:10:5b:38:de: be:ae:7d:f5:7b:2a:50:eb:55:b6:0e:59:90:81:60: 17:2b:2b:54:ae:b1:ab:d2:e5:fa:5d:16:6e:ca:49: cf:48:d4:2f:ed:6a:68:3c:11:8f:0c:25:ad:ec:1e: 6c:32:7a:c6:91:16:d7:3d:43:0f:b2:b9:f9:86:97: d3:e0:02:72:29:aa:2d:f9:5a:98:4d:e4:43:89:c2: f1:b6:11:f2:c4:ba:8c:aa:07:da:f3:e8:eb:b0:7e: c0:61:d0:14:ee:89:e3:98:4c:25:51:a9:91:ee:34: d6:c7:ff:af:88:81:e0:2d:28:cb:6d:ed:bd:6d:f2: 0f:3d:87:d6:03:5a:83:29:23:92:6e:79:1a:07:a3: 67:2a:8f:c9:e2:1a:e0:9a:ca:7b:1e:1f:f7:4d:82: c9:bb:50:2c:65:c3:76:5b:4e:dd:6c:07:45:30:ea: 82:eb:f3:df:6c:0a:1d:35:40:55:aa:59:d9:e1:f5: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:95:58:AB:CC:7D:26:83:00:19:3F:E0:28:D2:30:DC:BC:FB:D3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba4a439d-d0b2-3f0f-8670-513bad914b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:e6:f3:53:16:f5:a6:35:49:d3:1c:6c:40:c7:4c:b2:7a:f1: 98:34:fb:cd:d8:52:9f:1d:2c:cc:df:fa:5a:01:d9:a2:8c:d1: b5:d9:4f:6e:68:b8:04:05:5f:d8:d0:cd:cf:93:bb:b7:97:b2: 55:a8:49:0c:3a:1c:f0:67:51:00:7a:3a:87:cc:18:c0:3d:46: 6c:97:99:2e:b0:4c:24:13:4d:86:47:45:4e:14:a5:ef:89:da: 2f:b3:5d:a6:e8:5d:d5:1e:cb:82:ba:1d:27:87:4b:cb:8d:cb: 36:50:10:8d:80:98:a3:1b:47:0e:ce:25:41:81:3e:02:6a:76: fc:d2:c7:46:14:a6:44:1b:41:50:08:49:ce:db:e8:eb:84:89: 5a:47:52:f0:1f:98:86:24:b4:7d:fd:7b:4a:44:1f:60:4d:c8: d3:58:54:e2:16:79:3d:3b:a3:05:a5:1a:0a:3a:3f:2a:5f:04: 25:52:e5:20:8a:20:5e:a6:f7:5e:37:79:ec:c6:f4:bd:97:f9: c8:87:d1:89:17:df:e0:a7:e9:c0:62:32:e6:b5:7c:36:79:b5: ec:82:e4:59:29:47:e3:c4:f7:ba:26:37:8d:4a:80:52:f1:4b: ed:e3:66:05:d5:b6:e1:52:87:34:58:e7:4e:82:9e:44:03:6b: a1:64:e8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PpLnYD/h5b6dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0NFoXDTI1MDczMDE3MDg0NFowLzEtMCsGA1UEAxMk MjEwNDVmZjctZDM3Yy00NTMwLWFlODMtODg0MjdiODE2NzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTG5WdquVIL1yZXWRPTs+NiV69gUIk+qwYVX u+/jbhwzMHEbuXyLHrtmExCTfKtd0NbWCooOv/nQMCBgOGmhssNsHWtwMBBbON6+ rn31eypQ61W2DlmQgWAXKytUrrGr0uX6XRZuyknPSNQv7WpoPBGPDCWt7B5sMnrG kRbXPUMPsrn5hpfT4AJyKaot+VqYTeRDicLxthHyxLqMqgfa8+jrsH7AYdAU7onj mEwlUamR7jTWx/+viIHgLSjLbe29bfIPPYfWA1qDKSOSbnkaB6NnKo/J4hrgmsp7 Hh/3TYLJu1AsZcN2W07dbAdFMOqC6/PfbAodNUBVqlnZ4fX3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKVWKvMfSaDABk/4CjSMNy8+9O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE0YTQzOWQtZDBiMi0z ZjBmLTg2NzAtNTEzYmFkOTE0YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTm81MW9aY1SdMcbEDHTLJ68Zg0+83YUp8dLMzf+loB2aKM0bXZT25o uAQFX9jQzc+Tu7eXslWoSQw6HPBnUQB6OofMGMA9RmyXmS6wTCQTTYZHRU4Upe+J 2i+zXaboXdUey4K6HSeHS8uNyzZQEI2AmKMbRw7OJUGBPgJqdvzSx0YUpkQbQVAI Sc7b6OuEiVpHUvAfmIYktH39e0pEH2BNyNNYVOIWeT07owWlGgo6PypfBCVS5SCK IF6m9143eezG9L2X+ciH0YkX3+Cn6cBiMua1fDZ5teyC5FkpR+PE97omN41KgFLx S+3jZgXVtuFShzRY506CnkQDa6Fk6Ek= -----END CERTIFICATE-----Generated at Sat May 10 20:56:19 2025 by rpki-client