$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7f708a-9652-347e-8fb6-fea0ce9f22bd.roa File: df7f708a-9652-347e-8fb6-fea0ce9f22bd.roa (raw, json) Hash identifier: RM6/Z8QqvYALlL4I4XwVDjzHMkM1NjCOu8qs+V1Emlo= Subject key identifier: F3:7D:DA:6C:2E:00:B4:20:C8:DB:32:47:B5:D2:5D:C7:0F:57:29:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8025FDD30EEA6D2435480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7f708a-9652-347e-8fb6-fea0ce9f22bd.roa Signing time: Thu 01 May 2025 17:14:51 +0000 ROA not before: Thu 01 May 2025 17:14:51 +0000 ROA not after: Wed 30 Jul 2025 17:14:51 +0000 asID: 22773 IP address blocks: 68.107.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:02:5f:dd:30:ee:a6:d2:43:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:51 2025 GMT Not After : Jul 30 17:14:51 2025 GMT Subject: CN=0272020c-6a7e-4c41-9a16-541229655240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:4c:13:24:84:de:0f:c4:d3:94:ce:cf:39: 15:9e:51:41:61:af:8c:7e:a6:94:21:a4:06:d7:f3: 25:ea:65:0e:20:0d:52:99:78:51:cf:28:3f:05:fa: aa:0b:09:9f:a8:b8:75:0a:c0:69:37:75:d6:b9:43: 11:65:90:3f:67:5d:a1:9a:10:29:04:80:e2:2f:03: eb:05:fc:d0:63:59:f9:a9:d5:aa:f5:69:04:be:19: 3a:d4:07:cc:87:f6:2d:4f:b8:13:c3:d7:21:6b:eb: 4f:75:47:48:e3:d0:c2:f7:0e:13:7d:f7:9f:aa:77: 72:37:51:d5:30:c7:d2:ad:29:c9:2f:1c:d2:b7:b7: c9:c6:63:03:58:84:21:ef:21:5f:72:7b:71:89:b3: 0f:de:b5:5f:08:3d:5d:65:db:ca:71:c9:55:af:5f: 4d:7e:71:4b:94:86:69:39:de:94:18:42:32:a7:8e: 8f:bc:ff:04:63:a0:82:2e:47:80:75:ae:1f:57:1c: a0:25:6e:6b:57:a3:45:32:d5:dd:f3:78:f6:a1:45: d9:bf:66:9f:8e:23:29:ba:bb:e1:21:98:cb:53:e6: 9f:d4:0e:91:a4:b7:78:1f:d4:03:f3:b9:3f:41:3f: af:b9:4c:44:7d:f9:1d:c5:cc:93:0e:1c:c3:07:51: 77:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:DA:6C:2E:00:B4:20:C8:DB:32:47:B5:D2:5D:C7:0F:57:29:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7f708a-9652-347e-8fb6-fea0ce9f22bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2d:71:ba:d0:cd:3f:2f:ad:6a:0e:d8:6d:43:7c:cd:09:ef: 87:68:a3:82:b8:b0:de:0b:42:22:a0:16:aa:24:75:dc:b9:7b: a8:52:85:7d:31:ac:06:a9:f0:c5:5b:f8:83:a0:d6:35:34:2b: 50:fc:70:ec:dc:da:6f:dc:5b:58:cd:dc:64:b0:34:20:65:e2: 67:e6:89:f2:03:b4:0f:36:64:25:c3:84:e8:9a:f8:ac:87:66: 83:f9:db:4a:49:52:b3:85:08:69:c1:a1:11:e8:24:17:bf:09: 4a:c3:3f:f8:4d:a4:dc:e5:8b:4b:43:f7:14:0b:cd:2a:0e:00: 86:fe:44:69:b3:a8:54:95:62:60:ee:2e:8e:ee:1d:65:2a:78: f7:95:dc:13:6d:ad:5d:74:9b:90:2d:49:05:33:fa:93:d7:96: 6d:8c:39:f0:53:ca:b4:68:87:2b:6b:eb:c7:88:ef:e0:59:3d: 1b:32:68:b4:5a:51:fe:9f:1e:ea:4f:cc:90:38:84:5a:ff:b1: 5b:fb:05:f6:d4:5d:f0:1f:09:e4:d8:f8:51:aa:8c:37:98:84: e5:d0:c2:3c:ad:30:0d:8a:0f:b0:18:17:a6:83:58:fe:c5:71: 87:d2:83:e2:9d:47:08:9c:a3:53:71:7c:84:c3:aa:fe:74:8c: 9c:a0:4a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+AJf3TDuptJDVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ1MVoXDTI1MDczMDE3MTQ1MVowLzEtMCsGA1UEAxMk MDI3MjAyMGMtNmE3ZS00YzQxLTlhMTYtNTQxMjI5NjU1MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFlMEySE3g/E05TOzzkVnlFBYa+MfqaUIaQG 1/Ml6mUOIA1SmXhRzyg/BfqqCwmfqLh1CsBpN3XWuUMRZZA/Z12hmhApBIDiLwPr BfzQY1n5qdWq9WkEvhk61AfMh/YtT7gTw9cha+tPdUdI49DC9w4TffefqndyN1HV MMfSrSnJLxzSt7fJxmMDWIQh7yFfcntxibMP3rVfCD1dZdvKcclVr19NfnFLlIZp Od6UGEIyp46PvP8EY6CCLkeAda4fVxygJW5rV6NFMtXd83j2oUXZv2afjiMpurvh IZjLU+af1A6RpLd4H9QD87k/QT+vuUxEffkdxcyTDhzDB1F3oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN92mwuALQgyNsyR7XSXccPVynlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY3ZjcwOGEtOTY1Mi0z NDdlLThmYjYtZmVhMGNlOWYyMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRGuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0tcbrQzT8vrWoO2G1DfM0J74doo4K4sN4LQiKgFqokddy5e6hShX0x rAap8MVb+IOg1jU0K1D8cOzc2m/cW1jN3GSwNCBl4mfmifIDtA82ZCXDhOia+KyH ZoP520pJUrOFCGnBoRHoJBe/CUrDP/hNpNzli0tD9xQLzSoOAIb+RGmzqFSVYmDu Lo7uHWUqePeV3BNtrV10m5AtSQUz+pPXlm2MOfBTyrRohytr68eI7+BZPRsyaLRa Uf6fHupPzJA4hFr/sVv7BfbUXfAfCeTY+FGqjDeYhOXQwjytMA2KD7AYF6aDWP7F cYfSg+KdRwico1NxfITDqv50jJygSlM= -----END CERTIFICATE-----Generated at Sun May 11 09:08:34 2025 by rpki-client