$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa File: c39668ce-0b15-33e0-95de-a15f5cde3544.roa (raw, json) Hash identifier: dgmRcs3L5yel7wV3BXWtUDR6MFRq1jrSLKPKAOIsKuE= Subject key identifier: 43:C1:43:38:F2:E6:27:44:1B:E9:0D:B7:96:3D:CD:C0:BC:18:E1:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F56B816AB7E0638E5B8C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa Signing time: Thu 01 May 2025 17:09:38 +0000 ROA not before: Thu 01 May 2025 17:09:38 +0000 ROA not after: Wed 30 Jul 2025 17:09:38 +0000 asID: 22773 IP address blocks: 68.229.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:6b:81:6a:b7:e0:63:8e:5b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:38 2025 GMT Not After : Jul 30 17:09:38 2025 GMT Subject: CN=c119b480-6a7a-433a-9ed9-c5fa0ef6df22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:69:63:62:bb:0f:e9:8b:fc:f9:82:65:3c: 93:f5:2c:ab:af:a2:34:cb:95:a5:0d:49:a3:1e:16: 1e:30:c6:ea:b9:5b:c9:72:65:02:98:45:3a:e3:ac: bc:5e:f9:47:1a:bf:1e:ab:8d:07:29:de:41:74:af: 08:36:da:df:a1:60:08:8d:b8:40:98:d7:5f:18:ec: a8:f9:30:89:e9:73:25:9f:d4:5a:e4:b0:ba:a0:e2: 7f:ca:4a:a3:83:64:3b:b5:3f:9e:05:3f:bd:52:bd: 82:bd:83:ae:24:90:f2:9e:86:2d:b3:28:a4:b8:5b: 71:e4:36:31:f5:f6:1f:d2:5a:3e:ed:3a:00:bb:c5: 89:0f:2b:e7:1e:f7:58:9d:63:d4:ff:73:20:a2:e1: 1e:f9:9d:60:e0:e2:4e:42:24:49:c7:fd:ec:d8:73: 27:2f:3f:ce:b5:e0:85:39:ac:81:fb:35:d7:34:19: 24:50:fb:ca:4f:30:4a:ce:af:1b:d5:85:b0:aa:c5: a0:6e:b6:ef:fd:73:77:66:b1:bd:9b:39:42:0a:4b: 25:18:67:96:29:c3:6d:ad:c1:97:b0:2c:56:d0:a6: 17:12:75:7a:d2:8d:71:da:86:d7:4a:0b:2c:93:2d: 89:3b:e4:28:98:ef:50:b6:76:33:17:34:58:95:fc: f8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:43:38:F2:E6:27:44:1B:E9:0D:B7:96:3D:CD:C0:BC:18:E1:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c39668ce-0b15-33e0-95de-a15f5cde3544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:48:b6:a7:1c:70:63:08:6a:f6:fe:85:7a:93:09:ce:88:4c: 4a:68:94:04:fc:3b:a7:07:41:95:b7:8d:57:c0:ed:f6:01:53: 52:9a:71:7e:39:c8:ab:ff:a8:24:e0:0b:e4:9f:96:d0:36:9b: 49:68:9c:6a:ab:9b:18:0a:5a:48:12:61:73:80:78:dc:ec:5d: d7:be:03:ee:c0:c0:ae:77:a1:0a:ef:fb:f7:e2:39:8a:01:f0: 05:1f:79:41:2b:98:e5:28:47:4f:07:a7:fe:82:aa:b4:76:7c: b6:bd:2c:bc:de:be:77:86:f2:20:01:7f:b2:23:6b:d1:b5:cc: 64:dc:e1:ca:22:98:87:80:69:be:ac:1f:7e:df:3a:44:39:7f: 1e:6e:52:bf:86:19:7d:de:df:07:88:45:b7:32:e3:db:42:15: 95:01:95:38:13:7c:fd:67:2b:88:b2:97:d5:6a:5f:c1:24:4f: 8c:55:22:69:64:67:e1:49:69:8b:eb:0e:0a:0f:ed:b6:b8:a2: 68:89:7c:f6:ec:f8:27:93:04:f5:82:2c:91:0b:fd:c4:1b:92: 8a:8c:9b:e7:5e:68:a3:18:e1:38:07:aa:bb:ab:78:b1:c9:22: bf:22:fe:7d:ce:0c:d6:5b:14:d0:dc:0a:6b:a9:3a:65:d0:e4: bf:d7:ee:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19WuBarfgY45bjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzOFoXDTI1MDczMDE3MDkzOFowLzEtMCsGA1UEAxMk YzExOWI0ODAtNmE3YS00MzNhLTllZDktYzVmYTBlZjZkZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBpY2K7D+mL/PmCZTyT9Syrr6I0y5WlDUmj HhYeMMbquVvJcmUCmEU646y8XvlHGr8eq40HKd5BdK8INtrfoWAIjbhAmNdfGOyo +TCJ6XMln9Ra5LC6oOJ/ykqjg2Q7tT+eBT+9Ur2CvYOuJJDynoYtsyikuFtx5DYx 9fYf0lo+7ToAu8WJDyvnHvdYnWPU/3MgouEe+Z1g4OJOQiRJx/3s2HMnLz/OteCF OayB+zXXNBkkUPvKTzBKzq8b1YWwqsWgbrbv/XN3ZrG9mzlCCkslGGeWKcNtrcGX sCxW0KYXEnV60o1x2obXSgssky2JO+QomO9QtnYzFzRYlfz4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPBQzjy5idEG+kNt5Y9zcC8GOE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM5NjY4Y2UtMGIxNS0z M2UwLTk1ZGUtYTE1ZjVjZGUzNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJItqcccGMIavb+hXqTCc6ITEpolAT8O6cHQZW3jVfA7fYBU1KacX45 yKv/qCTgC+SfltA2m0lonGqrmxgKWkgSYXOAeNzsXde+A+7AwK53oQrv+/fiOYoB 8AUfeUErmOUoR08Hp/6CqrR2fLa9LLzevneG8iABf7Ija9G1zGTc4coimIeAab6s H37fOkQ5fx5uUr+GGX3e3weIRbcy49tCFZUBlTgTfP1nK4iyl9VqX8EkT4xVImlk Z+FJaYvrDgoP7ba4omiJfPbs+CeTBPWCLJEL/cQbkoqMm+deaKMY4TgHqrureLHJ Ir8i/n3ODNZbFNDcCmupOmXQ5L/X7q4= -----END CERTIFICATE-----Generated at Sun May 11 13:51:07 2025 by rpki-client