$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa File: d856f05f-168c-3b0f-90d1-5c341d3c2501.roa (raw, json) Hash identifier: Yxtf8oC6FgM5A2PtKByYFYxIXDX19mtN8DOUNWXy69k= Subject key identifier: 12:45:55:F6:62:8C:3A:E8:0B:72:A8:0B:CF:01:43:3B:86:8A:20:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B2AF6522107DB7028149A180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa Signing time: Wed 30 Apr 2025 13:01:02 +0000 ROA not before: Wed 30 Apr 2025 13:01:02 +0000 ROA not after: Tue 29 Jul 2025 13:01:02 +0000 asID: 22773 IP address blocks: 68.15.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:af:65:22:10:7d:b7:02:81:49:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 30 13:01:02 2025 GMT Not After : Jul 29 13:01:02 2025 GMT Subject: CN=152a724c-9e84-4724-b07d-5034381adf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:29:ba:09:8c:a1:f6:26:88:0f:8d:7b:d0: 44:43:4f:b7:ec:81:40:33:4b:40:aa:66:5d:54:e5: e9:73:3c:5b:27:18:ca:13:41:35:7c:c7:33:0c:89: 6d:a1:41:66:9d:a5:2d:03:7f:a8:0f:e8:e5:2e:7a: 1e:97:a5:cf:1d:9b:d4:c2:ee:98:44:e8:e3:1b:a9: 9f:30:7b:86:ba:ed:19:04:c3:ad:bb:73:63:d3:bb: fc:c4:6c:af:0e:17:5e:6d:e2:6f:16:2f:1f:4c:38: 33:03:d3:6c:a8:6a:10:e0:b7:c9:bb:ca:2a:a0:23: 57:2e:c5:25:cb:04:6e:ec:3d:01:9e:90:28:04:a5: cc:3f:62:e9:1d:4b:56:b1:88:f3:23:b3:ad:ab:de: 61:39:99:91:6a:ba:93:43:30:42:1a:9e:a5:34:41: 91:70:02:65:77:5a:86:78:29:e3:00:28:31:a5:e0: fd:80:28:2d:f7:99:6a:82:23:a5:73:82:07:d8:e4: 60:e4:2f:bb:f7:87:59:9c:f2:7a:9a:f7:36:33:ed: 27:dc:bb:3c:48:7f:44:f3:f1:d0:d1:2b:a5:16:34: a0:fd:cb:34:d8:98:49:0c:fc:3a:6d:9c:6d:08:c8: 7e:40:27:00:4d:63:82:dd:6f:f7:f2:f4:db:66:ea: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:45:55:F6:62:8C:3A:E8:0B:72:A8:0B:CF:01:43:3B:86:8A:20:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d856f05f-168c-3b0f-90d1-5c341d3c2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a2:f3:05:dd:b5:d5:90:ff:50:25:dd:e5:0d:00:af:45:5f: 67:59:21:16:a4:b8:61:70:6c:2c:f1:83:28:97:14:36:45:0b: 3a:f9:c5:2d:84:e7:7f:b7:94:8a:6f:5e:58:0d:02:84:da:fa: 2c:c4:0d:c3:d3:b0:24:cd:e5:04:2c:4a:31:cc:a7:02:74:e4: a8:c3:a9:4b:8f:e2:ed:41:f5:37:4c:9f:5d:b9:94:09:03:74: f7:6e:4b:83:40:b2:b4:51:ba:9a:93:57:68:7c:02:ce:be:a4: 42:9e:67:38:54:40:b0:2a:98:9d:e9:c3:a6:0a:7e:dc:be:74: c9:13:2d:3c:96:7a:1c:90:34:76:5c:b3:b7:e4:58:e5:03:f7: a1:3d:b2:a7:b4:e5:d1:ca:79:ae:ab:ee:23:81:7c:4c:fc:d7: 90:76:cf:73:02:8d:40:48:9b:e4:c3:04:22:63:09:73:bd:32: eb:90:f2:ba:b3:c3:3e:97:ff:da:b3:b5:bd:f2:5d:f9:48:c2: 41:f4:41:d4:a1:72:8c:d4:29:06:b8:cc:b0:31:de:4e:02:a4: 3e:49:26:b8:48:79:90:1e:1a:24:89:27:cd:fd:21:e8:e7:fe: 11:17:d8:75:9b:ac:44:00:8f:5d:1c:0e:95:79:bd:6c:a2:86: c4:8f:35:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2UiEH23AoFJoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk MTUyYTcyNGMtOWU4NC00NzI0LWIwN2QtNTAzNDM4MWFkZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvApugmMofYmiA+Ne9BEQ0+37IFAM0tAqmZd VOXpczxbJxjKE0E1fMczDIltoUFmnaUtA3+oD+jlLnoel6XPHZvUwu6YROjjG6mf MHuGuu0ZBMOtu3Nj07v8xGyvDhdebeJvFi8fTDgzA9NsqGoQ4LfJu8oqoCNXLsUl ywRu7D0BnpAoBKXMP2LpHUtWsYjzI7Otq95hOZmRarqTQzBCGp6lNEGRcAJld1qG eCnjACgxpeD9gCgt95lqgiOlc4IH2ORg5C+794dZnPJ6mvc2M+0n3Ls8SH9E8/HQ 0SulFjSg/cs02JhJDPw6bZxtCMh+QCcATWOC3W/38vTbZup8cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJFVfZijDroC3KoC88BQzuGiiDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDg1NmYwNWYtMTY4Yy0z YjBmLTkwZDEtNWMzNDFkM2MyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERA+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICi8wXdtdWQ/1Al3eUNAK9FX2dZIRakuGFwbCzxgyiXFDZFCzr5xS2E 53+3lIpvXlgNAoTa+izEDcPTsCTN5QQsSjHMpwJ05KjDqUuP4u1B9TdMn125lAkD dPduS4NAsrRRupqTV2h8As6+pEKeZzhUQLAqmJ3pw6YKfty+dMkTLTyWehyQNHZc s7fkWOUD96E9sqe05dHKea6r7iOBfEz815B2z3MCjUBIm+TDBCJjCXO9MuuQ8rqz wz6X/9qztb3yXflIwkH0QdShcozUKQa4zLAx3k4CpD5JJrhIeZAeGiSJJ839Iejn /hEX2HWbrEQAj10cDpV5vWyihsSPNZ4= -----END CERTIFICATE-----Generated at Sun May 11 09:10:01 2025 by rpki-client