$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1efa9de-1e88-32cb-97c3-94fa7a85225d.roa File: c1efa9de-1e88-32cb-97c3-94fa7a85225d.roa (raw, json) Hash identifier: YFCH6WNT8oanFtLXo3oXONJgFvfMSAfyFLVEtj8+GWs= Subject key identifier: 14:13:7B:A3:49:28:B1:65:40:9D:B0:92:C1:D9:D1:B7:74:2D:05:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD23B48C4AB5E978CDFEC8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1efa9de-1e88-32cb-97c3-94fa7a85225d.roa Signing time: Thu 01 May 2025 17:25:11 +0000 ROA not before: Thu 01 May 2025 17:25:11 +0000 ROA not after: Wed 30 Jul 2025 17:25:11 +0000 asID: 22773 IP address blocks: 68.101.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:23:b4:8c:4a:b5:e9:78:cd:fe:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:11 2025 GMT Not After : Jul 30 17:25:11 2025 GMT Subject: CN=0a2f5646-7c57-4a79-a630-c40741967646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:07:51:d5:bf:19:93:5e:1e:b1:84:3d:92: 50:df:10:7b:ad:f7:c5:1a:b5:fa:fd:ea:67:3d:2c: 8c:d8:34:65:b6:9a:e8:d3:06:7f:9f:2d:50:06:f9: 7f:eb:55:25:dd:be:a7:68:17:00:1d:43:e1:49:c7: 01:8d:8c:9d:f8:0a:43:86:53:78:5d:9a:73:3f:1b: c1:76:28:62:f4:58:71:12:53:74:d3:ca:67:c9:fa: 40:b1:8d:d4:63:dc:17:9e:04:c5:60:4a:6b:10:f3: f2:25:59:14:db:d1:88:81:a1:b6:d5:c4:38:35:c8: cb:5a:7d:3a:d1:46:45:e4:59:65:6a:31:50:3b:26: 7d:dd:30:ff:a2:c3:a1:16:d2:e3:3d:64:80:60:fd: 1a:54:37:02:32:a5:77:ec:68:85:74:9d:5a:cb:84: f3:01:7e:5c:51:12:9a:b3:0e:24:0c:3f:9f:5a:45: fe:26:e0:b6:0b:0b:0c:a4:45:f0:3d:23:74:0c:87: 34:82:6f:73:6f:0a:77:db:9c:a1:6d:e9:a8:ff:78: 55:71:ce:d3:ce:8b:10:86:c4:02:ef:43:73:40:87: 23:5c:92:34:de:64:24:d6:6f:ef:3d:b4:1d:21:50: a4:c9:78:27:cf:9b:1f:65:ea:4a:a6:5d:da:32:f1: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:13:7B:A3:49:28:B1:65:40:9D:B0:92:C1:D9:D1:B7:74:2D:05:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1efa9de-1e88-32cb-97c3-94fa7a85225d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1d:10:e7:12:65:fd:b5:60:df:1c:de:e1:88:3c:e6:41:20: 85:77:20:18:ff:05:88:ca:36:f3:06:8d:ab:72:6e:0d:89:22: 1c:42:3e:c9:de:a9:64:f7:33:7b:f2:75:56:30:eb:97:47:7b: de:a7:39:40:59:1c:93:7e:56:04:c6:01:03:0b:11:30:de:53: 19:4f:af:f9:00:96:a0:69:67:7f:44:3d:da:9a:52:dc:65:e2: 8b:c0:0f:76:32:bc:11:7e:0f:b0:cb:76:b9:38:c0:9f:8a:da: b4:53:1a:10:42:b6:ca:92:11:d1:f8:ee:18:e3:37:99:70:90: bf:60:2b:8e:da:4e:a8:13:c3:c9:be:2f:6d:06:ec:33:2d:28: 2f:bb:e2:8c:ef:d0:73:f9:e2:bd:47:cf:ae:b9:0e:89:25:6d: 39:44:c7:95:50:61:5f:b5:36:25:71:ae:e2:7a:a8:e6:85:76: 96:e9:4d:0b:91:b7:97:39:a2:69:16:3d:43:27:59:f3:c6:1d: 8f:f7:ed:f5:19:94:0d:b3:cb:55:eb:92:75:4c:25:fb:7f:7c: b0:3b:ca:e6:c8:e4:de:d6:f1:7b:fc:e5:51:ab:4b:99:65:30: b1:7d:01:03:fd:cb:42:9d:02:27:6c:6b:a4:5f:a2:8b:7a:b0: ec:d5:9d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/SO0jEq16XjN/sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxMVoXDTI1MDczMDE3MjUxMVowLzEtMCsGA1UEAxMk MGEyZjU2NDYtN2M1Ny00YTc5LWE2MzAtYzQwNzQxOTY3NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluYHUdW/GZNeHrGEPZJQ3xB7rffFGrX6/epn PSyM2DRltpro0wZ/ny1QBvl/61Ul3b6naBcAHUPhSccBjYyd+ApDhlN4XZpzPxvB dihi9FhxElN008pnyfpAsY3UY9wXngTFYEprEPPyJVkU29GIgaG21cQ4NcjLWn06 0UZF5FllajFQOyZ93TD/osOhFtLjPWSAYP0aVDcCMqV37GiFdJ1ay4TzAX5cURKa sw4kDD+fWkX+JuC2CwsMpEXwPSN0DIc0gm9zbwp325yhbemo/3hVcc7TzosQhsQC 70NzQIcjXJI03mQk1m/vPbQdIVCkyXgnz5sfZepKpl3aMvG4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQTe6NJKLFlQJ2wksHZ0bd0LQW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFlZmE5ZGUtMWU4OC0z MmNiLTk3YzMtOTRmYTdhODUyMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcdEOcSZf21YN8c3uGIPOZBIIV3IBj/BYjKNvMGjatybg2JIhxCPsne qWT3M3vydVYw65dHe96nOUBZHJN+VgTGAQMLETDeUxlPr/kAlqBpZ39EPdqaUtxl 4ovAD3YyvBF+D7DLdrk4wJ+K2rRTGhBCtsqSEdH47hjjN5lwkL9gK47aTqgTw8m+ L20G7DMtKC+74ozv0HP54r1Hz665DoklbTlEx5VQYV+1NiVxruJ6qOaFdpbpTQuR t5c5omkWPUMnWfPGHY/37fUZlA2zy1XrknVMJft/fLA7yubI5N7W8Xv85VGrS5ll MLF9AQP9y0KdAidsa6Rfoot6sOzVnRE= -----END CERTIFICATE-----Generated at Tue Jul 1 01:11:21 2025 by rpki-client