$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa File: d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa (raw, json) Hash identifier: WBhxFdUZ89t/yLNjhbM3W5loLc3h1DGNJYygB7mERDU= Subject key identifier: 31:2B:F5:03:26:D3:BA:B2:5F:B7:D5:29:FC:B0:04:D2:A5:28:29:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5596FA7CCECFB9F08DA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa Signing time: Thu 01 May 2025 17:09:29 +0000 ROA not before: Thu 01 May 2025 17:09:29 +0000 ROA not after: Wed 30 Jul 2025 17:09:29 +0000 asID: 22773 IP address blocks: 68.224.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:59:6f:a7:cc:ec:fb:9f:08:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:29 2025 GMT Not After : Jul 30 17:09:29 2025 GMT Subject: CN=6e0ed696-fa38-4276-88e7-b2ea3d0c4506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b2:59:74:4a:53:2b:a3:f9:32:55:2d:34:a0: c6:19:34:f5:d9:cd:0d:26:3c:ab:11:2c:4b:b5:90: ac:23:05:da:67:ba:12:bd:95:56:b4:b5:4b:6c:c4: a3:d6:b0:c9:16:e8:5b:87:b4:0f:f1:a9:9a:58:11: c2:78:58:a6:fb:43:2b:fa:24:4c:d6:ae:8b:05:b7: fc:79:0b:97:ec:15:8c:c1:93:13:85:d3:ec:a3:ef: 2b:ae:49:4b:0c:4f:af:99:ef:59:cb:a6:c4:fd:2e: 49:53:4c:54:96:07:ca:e8:d0:44:68:90:c0:34:c6: 29:cc:8d:3a:32:06:0c:06:62:e1:72:ad:9f:ea:77: c9:cb:1a:a8:73:3f:da:28:df:12:40:12:cd:7f:9a: 2c:aa:d2:cb:76:c0:d4:a9:b5:20:9d:2d:ac:27:c3: 34:3e:ec:56:ed:c1:af:c6:5c:65:b7:d6:e3:f8:6e: 1b:f3:ff:69:87:53:f1:75:31:e2:a6:49:aa:3d:ea: 88:21:68:ee:c8:19:94:d5:b2:6f:6d:b0:ee:d9:3d: 05:a8:43:2e:2d:2e:f2:da:fd:66:16:ba:51:35:b6: 43:10:60:9a:dc:a7:09:24:cd:67:40:8d:14:d9:6f: 6a:e5:9d:a3:5f:5e:b2:39:84:41:2b:3f:c6:1e:03: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2B:F5:03:26:D3:BA:B2:5F:B7:D5:29:FC:B0:04:D2:A5:28:29:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d1c478cc-8e70-3dbe-aed8-cc1158111da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:56:37:2e:94:4d:cf:f6:47:3f:de:b2:49:db:3b:5f:ec:68: 6f:a1:b3:e1:4f:ba:40:66:a7:7c:fa:45:75:cb:7d:05:41:3c: ef:cf:84:51:ab:bf:cb:7a:ba:b7:14:7c:4d:04:c2:f5:03:15: 2a:73:48:8e:7c:ac:46:a3:c9:4a:2b:a7:d8:2d:8a:9d:a6:29: c0:5e:c4:33:b9:59:f9:19:f8:bb:1e:0c:56:61:a5:a9:9e:c9: 6a:df:f2:36:1e:44:87:a2:2b:6a:d2:76:54:da:2f:54:7b:fa: 0a:b9:23:56:31:35:d4:99:e0:d0:14:52:43:a0:c8:8c:b7:6b: f9:df:39:c0:5d:30:a2:31:b6:fb:e9:44:f7:4f:b6:0c:59:9e: af:73:e7:17:be:33:43:4e:9e:40:fa:48:f5:53:ea:cb:76:16: b9:11:03:e9:df:e5:74:cf:d2:81:5f:1c:af:88:ab:5f:dd:80: 43:99:20:1e:93:4b:e1:a8:4d:30:b6:d7:d5:ad:e5:8b:7f:8f: c1:26:a3:e3:49:d9:39:f6:ff:ff:d4:e1:00:0b:6a:39:bb:50: 1c:eb:03:1a:12:31:2c:c6:0c:7e:74:78:fc:b0:33:45:d0:f8: e3:ee:39:b0:74:dc:15:b0:d5:be:6e:14:3c:75:5a:bb:01:2d: 59:86:65:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Vlvp8zs+58I2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkyOVoXDTI1MDczMDE3MDkyOVowLzEtMCsGA1UEAxMk NmUwZWQ2OTYtZmEzOC00Mjc2LTg4ZTctYjJlYTNkMGM0NTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLJZdEpTK6P5MlUtNKDGGTT12c0NJjyrESxL tZCsIwXaZ7oSvZVWtLVLbMSj1rDJFuhbh7QP8amaWBHCeFim+0Mr+iRM1q6LBbf8 eQuX7BWMwZMThdPso+8rrklLDE+vme9Zy6bE/S5JU0xUlgfK6NBEaJDANMYpzI06 MgYMBmLhcq2f6nfJyxqocz/aKN8SQBLNf5osqtLLdsDUqbUgnS2sJ8M0PuxW7cGv xlxlt9bj+G4b8/9ph1PxdTHipkmqPeqIIWjuyBmU1bJvbbDu2T0FqEMuLS7y2v1m FrpRNbZDEGCa3KcJJM1nQI0U2W9q5Z2jX16yOYRBKz/GHgMD4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEr9QMm07qyX7fVKfywBNKlKCnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDFjNDc4Y2MtOGU3MC0z ZGJlLWFlZDgtY2MxMTU4MTExZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtWNy6UTc/2Rz/esknbO1/saG+hs+FPukBmp3z6RXXLfQVBPO/PhFGr v8t6urcUfE0EwvUDFSpzSI58rEajyUorp9gtip2mKcBexDO5WfkZ+LseDFZhpame yWrf8jYeRIeiK2rSdlTaL1R7+gq5I1YxNdSZ4NAUUkOgyIy3a/nfOcBdMKIxtvvp RPdPtgxZnq9z5xe+M0NOnkD6SPVT6st2FrkRA+nf5XTP0oFfHK+Iq1/dgEOZIB6T S+GoTTC219Wt5Yt/j8Emo+NJ2Tn2///U4QALajm7UBzrAxoSMSzGDH50ePywM0XQ +OPuObB03BWw1b5uFDx1WrsBLVmGZbY= -----END CERTIFICATE-----Generated at Sun May 11 03:51:54 2025 by rpki-client