$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f5eb2-08d9-35b7-ba27-a5b6a4cfe242.roa File: cb5f5eb2-08d9-35b7-ba27-a5b6a4cfe242.roa (raw, json) Hash identifier: buKYKno1kZtB8IWnbWma0KhTE82iHM1KgbrqyXK/Se4= Subject key identifier: 87:65:51:8A:41:FD:5B:B8:21:6B:EC:88:B9:07:78:4B:44:C5:E4:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F55A8BB6515F809970B600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f5eb2-08d9-35b7-ba27-a5b6a4cfe242.roa Signing time: Thu 01 May 2025 17:09:30 +0000 ROA not before: Thu 01 May 2025 17:09:30 +0000 ROA not after: Wed 30 Jul 2025 17:09:30 +0000 asID: 22773 IP address blocks: 68.224.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:5a:8b:b6:51:5f:80:99:70:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:30 2025 GMT Not After : Jul 30 17:09:30 2025 GMT Subject: CN=c9811a49-cf23-4dbd-a17b-6ffb436f16ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:2a:12:85:c2:aa:1f:f2:a9:d0:85:bb:08: e0:7d:ca:84:14:ea:2f:c0:e8:60:a9:88:9e:8a:4e: 40:dd:27:23:5e:12:7c:ad:e4:2c:13:56:b6:bc:fb: 45:4d:31:90:10:54:e4:cc:34:99:47:f0:bc:62:33: 1f:83:27:d9:7e:d7:cd:57:3a:b8:93:3e:1d:02:38: 21:44:f3:14:57:f6:68:16:f6:44:a1:b6:8a:1c:8f: f5:e7:91:c2:07:de:ed:74:a3:b7:a8:f3:55:aa:77: 87:aa:34:7d:80:85:e3:5b:5a:ba:4e:71:d2:7f:99: cc:a5:73:a1:e0:89:b9:94:7d:57:72:07:1c:e1:72: fe:38:f4:52:f7:9e:7b:9e:e5:22:13:c9:ff:16:b9: 10:55:a6:45:53:d0:66:b9:a6:80:63:c0:87:de:3e: c0:a6:4b:d2:5c:82:11:f5:8c:02:e0:e1:6b:9d:17: 2b:8b:ed:dc:07:8c:9c:0c:ad:48:0d:b8:34:bd:a7: ba:f7:a8:9c:6d:16:2a:78:5e:68:0c:52:83:fc:12: da:c5:36:ee:15:87:20:e6:4c:76:3c:8a:6e:60:60: df:fd:7f:3f:d3:29:ff:fa:d7:f1:34:13:d0:8f:f6: c3:97:37:1a:e7:02:12:15:94:22:52:5d:2a:e6:3b: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:65:51:8A:41:FD:5B:B8:21:6B:EC:88:B9:07:78:4B:44:C5:E4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cb5f5eb2-08d9-35b7-ba27-a5b6a4cfe242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:23:65:3f:f4:bb:9d:dc:1a:14:96:7e:bd:f0:09:0a:a8:6d: 3c:11:da:99:d4:3f:44:0a:73:d1:90:8e:8f:a8:df:50:a3:22: 01:85:e6:91:33:d5:56:c5:6a:f3:94:79:a0:ab:aa:6b:26:e5: a6:56:6e:30:b5:a8:e4:38:ce:64:6f:f0:b2:59:14:b2:00:07: c3:e2:b5:ef:b3:f4:39:3e:91:d9:84:c1:42:02:0e:c3:9c:e4: 28:d7:63:ba:ce:b3:7c:eb:11:20:43:6b:b8:b4:90:8b:31:81: 06:63:50:5f:fe:73:49:54:4c:5c:be:78:f4:aa:77:58:06:d5: 95:6e:74:36:08:a4:09:5a:05:aa:81:9a:d9:61:65:3e:1c:54: cd:e3:d3:ee:83:d4:c2:70:d7:e9:e1:0b:fe:7b:83:81:31:7e: ee:f7:fc:79:2d:c9:3a:4b:cc:5f:37:e3:4a:f1:09:cd:09:9d: cd:6b:eb:31:e9:cc:62:4b:06:1d:0c:0c:2b:e0:7a:2d:ad:1c: 17:56:76:81:71:a6:19:e4:66:d7:f3:17:d3:5e:63:ea:de:af: d9:d0:81:64:f0:db:a0:83:78:b4:af:b0:bc:15:9f:49:04:4f: 18:f1:55:76:83:58:6d:76:31:be:1e:fc:84:38:5f:4d:99:7b: 5f:14:db:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19VqLtlFfgJlwtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzMFoXDTI1MDczMDE3MDkzMFowLzEtMCsGA1UEAxMk Yzk4MTFhNDktY2YyMy00ZGJkLWExN2ItNmZmYjQzNmYxNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApssqEoXCqh/yqdCFuwjgfcqEFOovwOhgqYie ik5A3ScjXhJ8reQsE1a2vPtFTTGQEFTkzDSZR/C8YjMfgyfZftfNVzq4kz4dAjgh RPMUV/ZoFvZEobaKHI/155HCB97tdKO3qPNVqneHqjR9gIXjW1q6TnHSf5nMpXOh 4Im5lH1Xcgcc4XL+OPRS9557nuUiE8n/FrkQVaZFU9BmuaaAY8CH3j7ApkvSXIIR 9YwC4OFrnRcri+3cB4ycDK1IDbg0vae696icbRYqeF5oDFKD/BLaxTbuFYcg5kx2 PIpuYGDf/X8/0yn/+tfxNBPQj/bDlzca5wISFZQiUl0q5jsCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdlUYpB/Vu4IWvsiLkHeEtExeRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2I1ZjVlYjItMDhkOS0z NWI3LWJhMjctYTViNmE0Y2ZlMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRODGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwjZT/0u53cGhSWfr3wCQqobTwR2pnUP0QKc9GQjo+o31CjIgGF5pEz 1VbFavOUeaCrqmsm5aZWbjC1qOQ4zmRv8LJZFLIAB8Pite+z9Dk+kdmEwUICDsOc 5CjXY7rOs3zrESBDa7i0kIsxgQZjUF/+c0lUTFy+ePSqd1gG1ZVudDYIpAlaBaqB mtlhZT4cVM3j0+6D1MJw1+nhC/57g4Exfu73/HktyTpLzF8340rxCc0Jnc1r6zHp zGJLBh0MDCvgei2tHBdWdoFxphnkZtfzF9NeY+rer9nQgWTw26CDeLSvsLwVn0kE TxjxVXaDWG12Mb4e/IQ4X02Ze18U22Y= -----END CERTIFICATE-----Generated at Sun May 11 10:29:15 2025 by rpki-client