$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafaeac3-b7e8-31b6-bb27-2584c88d6a36.roa File: bafaeac3-b7e8-31b6-bb27-2584c88d6a36.roa (raw, json) Hash identifier: EZY80iaTbxg4vQ4bBDjVFlWQXFnV45ZSgZOmpd8fUb0= Subject key identifier: 81:01:9D:53:28:F9:EF:89:E3:B7:1F:03:DA:CA:60:21:4E:2B:61:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD1005C210F93C71FAAE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafaeac3-b7e8-31b6-bb27-2584c88d6a36.roa Signing time: Thu 01 May 2025 17:25:02 +0000 ROA not before: Thu 01 May 2025 17:25:02 +0000 ROA not after: Wed 30 Jul 2025 17:25:02 +0000 asID: 22773 IP address blocks: 68.8.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:10:05:c2:10:f9:3c:71:fa:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:02 2025 GMT Not After : Jul 30 17:25:02 2025 GMT Subject: CN=b2f021a8-b30f-49cd-96f7-6d2ff6925e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:87:da:14:b9:83:4e:59:67:2d:72:62:62: 2d:9f:2d:1d:3f:37:b8:11:8b:9b:80:b2:08:8b:bc: db:30:82:76:07:97:1f:71:d6:39:ef:f7:dd:3f:e2: 0a:2a:93:b7:c2:59:d4:dc:5b:94:00:28:52:7b:1e: 77:76:57:78:fd:c9:77:3f:5a:9a:5e:fb:fe:4b:5c: ce:d1:13:07:4b:a4:98:9a:8b:2c:ea:e5:b0:f5:9c: 71:01:7e:b2:da:5c:ec:35:90:94:97:ba:ef:69:05: 61:4b:44:ee:5e:d2:72:43:7a:c0:da:e3:4e:21:99: a2:b2:74:ba:d5:39:a4:dd:92:cf:df:cf:e1:8a:6d: 38:9f:bc:8d:cf:ca:79:35:34:ec:6d:11:24:fb:11: d3:04:44:e8:d6:54:b6:15:72:77:55:08:d2:94:14: 5c:49:40:4a:02:e8:c0:6e:ac:de:4e:92:ad:3c:ce: a9:95:0f:a4:17:b6:61:c0:ab:10:b4:e4:02:a2:37: a7:6b:79:71:8a:b8:1b:32:35:f6:84:d3:5e:1b:4d: 61:f3:37:15:6f:55:d8:fc:c0:a6:7c:65:63:44:45: bd:b0:cd:a7:83:a6:fd:9c:5e:4a:a2:20:1e:71:68: ef:16:b9:7e:75:6b:51:49:28:6f:3d:d0:04:de:87: 07:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:01:9D:53:28:F9:EF:89:E3:B7:1F:03:DA:CA:60:21:4E:2B:61:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bafaeac3-b7e8-31b6-bb27-2584c88d6a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d3:e1:d3:5e:55:f5:c8:9c:34:05:16:80:56:63:73:cd:eb: 0f:d7:95:b1:48:45:d9:c8:f7:ac:e1:08:55:da:55:b5:0e:cf: 35:76:57:4b:0e:37:68:b4:b9:62:91:8d:5d:48:35:5a:72:34: 7f:bf:75:27:a6:07:4d:7f:18:dd:96:d4:fd:51:bd:df:31:21: 99:82:58:b1:a5:0c:d6:d8:d0:25:c0:85:d3:a7:99:a9:5a:19: ec:6f:8d:fe:22:e8:52:da:7d:aa:ff:b1:91:73:21:78:a3:02: fe:b8:80:b1:6b:90:c2:04:d7:c2:47:84:51:8d:86:c5:da:42: 11:c8:f1:41:1b:2a:f5:32:88:23:5e:75:60:d4:3c:4f:62:e4: 75:1b:7b:f5:f1:a4:48:85:f8:a9:74:7d:ce:ff:66:ce:15:44: 01:4f:f9:c5:96:d6:7a:cc:b4:b8:e3:b5:68:24:39:ad:24:7b: f2:ae:d5:6b:c9:97:e0:3e:f3:1b:90:b6:4b:75:98:8a:e9:fd: a6:cc:ce:f1:55:bd:47:56:d2:6d:66:76:c1:5c:5c:5d:3f:98: 93:38:4c:1e:3b:4a:7d:4c:2e:6e:c9:ac:42:71:a3:dc:b5:33: 64:3f:eb:b4:f6:11:9d:54:ee:2a:a9:2c:60:50:27:d1:78:1f: 1f:7b:84:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RAFwhD5PHH6roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMloXDTI1MDczMDE3MjUwMlowLzEtMCsGA1UEAxMk YjJmMDIxYTgtYjMwZi00OWNkLTk2ZjctNmQyZmY2OTI1ZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28iH2hS5g05ZZy1yYmItny0dPze4EYubgLII i7zbMIJ2B5cfcdY57/fdP+IKKpO3wlnU3FuUAChSex53dld4/cl3P1qaXvv+S1zO 0RMHS6SYmoss6uWw9ZxxAX6y2lzsNZCUl7rvaQVhS0TuXtJyQ3rA2uNOIZmisnS6 1Tmk3ZLP38/him04n7yNz8p5NTTsbREk+xHTBETo1lS2FXJ3VQjSlBRcSUBKAujA bqzeTpKtPM6plQ+kF7ZhwKsQtOQCojena3lxirgbMjX2hNNeG01h8zcVb1XY/MCm fGVjREW9sM2ng6b9nF5KoiAecWjvFrl+dWtRSShvPdAE3ocHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEBnVMo+e+J47cfA9rKYCFOK2FMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFmYWVhYzMtYjdlOC0z MWI2LWJiMjctMjU4NGM4OGQ2YTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDT4dNeVfXInDQFFoBWY3PN6w/XlbFIRdnI96zhCFXaVbUOzzV2V0sO N2i0uWKRjV1INVpyNH+/dSemB01/GN2W1P1Rvd8xIZmCWLGlDNbY0CXAhdOnmala Gexvjf4i6FLafar/sZFzIXijAv64gLFrkMIE18JHhFGNhsXaQhHI8UEbKvUyiCNe dWDUPE9i5HUbe/XxpEiF+Kl0fc7/Zs4VRAFP+cWW1nrMtLjjtWgkOa0ke/Ku1WvJ l+A+8xuQtkt1mIrp/abMzvFVvUdW0m1mdsFcXF0/mJM4TB47Sn1MLm7JrEJxo9y1 M2Q/67T2EZ1U7iqpLGBQJ9F4Hx97hCU= -----END CERTIFICATE-----Generated at Sun May 11 21:58:20 2025 by rpki-client