$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1bc92fb-676a-3ee2-9d3c-e36a919453a7.roa File: d1bc92fb-676a-3ee2-9d3c-e36a919453a7.roa (raw, json) Hash identifier: K38JaGltqrfzTHlJxkdFxaPDsSXfSUn60WtHoHRx9Qk= Subject key identifier: A0:52:B0:97:84:68:CC:B3:F4:77:5B:0F:76:FE:00:2D:F4:47:9A:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCF576B2B683B7E1E19C40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1bc92fb-676a-3ee2-9d3c-e36a919453a7.roa Signing time: Thu 01 May 2025 17:24:49 +0000 ROA not before: Thu 01 May 2025 17:24:49 +0000 ROA not after: Wed 30 Jul 2025 17:24:49 +0000 asID: 22773 IP address blocks: 68.7.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:f5:76:b2:b6:83:b7:e1:e1:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:49 2025 GMT Not After : Jul 30 17:24:49 2025 GMT Subject: CN=eb4cc470-520c-4987-a37e-8a58aa352eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:d8:27:cb:b8:df:70:18:f9:52:bc:d9:08: ce:2e:bb:11:16:02:cc:12:fa:05:39:2b:84:f3:9c: 33:f0:30:6d:ae:0d:7c:53:57:b3:f3:bb:8e:59:93: e8:5d:9b:f9:43:13:54:ab:dc:07:66:ea:70:0c:76: b1:1f:eb:53:3c:f6:68:e9:25:62:e6:0c:7c:7d:33: 28:65:58:f9:f8:70:98:3b:5c:7c:c7:55:29:1d:ec: 0c:56:3d:91:98:62:ed:db:9b:5f:7b:64:fe:4e:96: a6:42:af:13:6f:40:e3:af:0e:96:3c:90:18:df:ae: 3f:f2:c2:a2:11:74:65:40:63:97:ff:b4:f8:4f:ea: 75:be:8a:a1:b4:0b:f7:4a:13:03:49:a3:15:8a:52: 6f:41:ed:00:c9:54:be:b7:40:1f:13:27:b7:23:a4: 54:7f:0d:06:e7:48:ec:f6:ae:10:af:8e:ce:1b:41: 2d:bf:bb:df:fb:97:6e:4f:d7:5a:96:15:4d:25:52: 10:76:6a:6e:98:41:9e:52:5e:67:e5:94:3d:7a:66: 3d:a4:ae:c6:54:8b:2d:55:62:48:a4:8a:d9:1d:2c: 19:de:bc:0d:9f:16:57:ba:d8:19:ec:e3:f6:da:72: ad:ca:63:6a:b8:46:17:3f:04:93:cd:20:46:be:11: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:52:B0:97:84:68:CC:B3:F4:77:5B:0F:76:FE:00:2D:F4:47:9A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1bc92fb-676a-3ee2-9d3c-e36a919453a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:aa:a1:7b:38:9f:99:1b:ca:ee:43:fe:ad:02:4c:55:10:63: 38:37:55:76:67:bf:4e:b3:58:65:b8:14:91:ca:da:f1:2c:ea: 89:6b:66:93:db:a4:dd:f1:39:1a:c4:0b:bf:aa:2c:b4:48:f6: 6e:4b:92:60:cc:ef:d8:cf:d9:8d:0f:14:57:1f:7e:15:b8:1d: 8f:d6:a6:ec:69:62:80:4d:71:1b:e6:04:2a:25:1d:d8:08:98: cf:57:c9:41:e3:0a:41:83:b1:89:cd:df:07:29:38:49:6b:1b: 0d:30:60:5f:75:80:7d:92:18:83:d1:72:2e:3c:2e:57:61:70: bd:2b:f8:16:7a:14:b9:33:b9:98:f4:68:ae:b4:28:09:69:f9: 59:d6:49:55:1b:83:d0:e2:37:96:1d:5c:25:ea:d9:22:af:bb: 3a:e9:1d:0e:01:e5:7e:cb:89:c9:8b:be:21:6a:0c:42:76:45: 96:c0:3b:ca:4a:0d:b2:97:af:c1:fb:c0:33:1b:6a:71:ed:1f: 96:fb:0b:71:2d:8f:83:39:23:39:40:76:68:78:b8:87:b1:be: 67:07:12:02:fa:a9:cc:54:d0:7a:62:06:1b:b6:c0:6a:55:c4: cc:b7:bf:35:d9:53:b3:d7:5c:7d:54:3f:9c:74:dd:0d:c1:53: e5:5d:de:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/PV2sraDt+HhnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0OVoXDTI1MDczMDE3MjQ0OVowLzEtMCsGA1UEAxMk ZWI0Y2M0NzAtNTIwYy00OTg3LWEzN2UtOGE1OGFhMzUyZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVzYJ8u433AY+VK82QjOLrsRFgLMEvoFOSuE 85wz8DBtrg18U1ez87uOWZPoXZv5QxNUq9wHZupwDHaxH+tTPPZo6SVi5gx8fTMo ZVj5+HCYO1x8x1UpHewMVj2RmGLt25tfe2T+TpamQq8Tb0Djrw6WPJAY364/8sKi EXRlQGOX/7T4T+p1voqhtAv3ShMDSaMVilJvQe0AyVS+t0AfEye3I6RUfw0G50js 9q4Qr47OG0Etv7vf+5duT9dalhVNJVIQdmpumEGeUl5n5ZQ9emY9pK7GVIstVWJI pIrZHSwZ3rwNnxZXutgZ7OP22nKtymNquEYXPwSTzSBGvhGgDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBSsJeEaMyz9HdbD3b+AC30R5p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFiYzkyZmItNjc2YS0z ZWUyLTlkM2MtZTM2YTkxOTQ1M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISqoXs4n5kbyu5D/q0CTFUQYzg3VXZnv06zWGW4FJHK2vEs6olrZpPb pN3xORrEC7+qLLRI9m5LkmDM79jP2Y0PFFcffhW4HY/WpuxpYoBNcRvmBColHdgI mM9XyUHjCkGDsYnN3wcpOElrGw0wYF91gH2SGIPRci48LldhcL0r+BZ6FLkzuZj0 aK60KAlp+VnWSVUbg9DiN5YdXCXq2SKvuzrpHQ4B5X7LicmLviFqDEJ2RZbAO8pK DbKXr8H7wDMbanHtH5b7C3Etj4M5IzlAdmh4uIexvmcHEgL6qcxU0HpiBhu2wGpV xMy3vzXZU7PXXH1UP5x03Q3BU+Vd3jM= -----END CERTIFICATE-----Generated at Wed May 7 21:58:17 2025 by rpki-client