$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab587c5-b5ce-3bbd-98d9-25575c870ea8.roa File: eab587c5-b5ce-3bbd-98d9-25575c870ea8.roa (raw, json) Hash identifier: YLMvMyJjJ8clNTXQJAbyvrNs0nJfwAdtlvHNyW5Y4lA= Subject key identifier: 51:3A:0D:12:90:4E:86:37:73:5E:C1:1C:E7:97:C7:20:A1:5A:9C:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD22F7E5066F3CCAA92A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab587c5-b5ce-3bbd-98d9-25575c870ea8.roa Signing time: Thu 01 May 2025 17:25:10 +0000 ROA not before: Thu 01 May 2025 17:25:10 +0000 ROA not after: Wed 30 Jul 2025 17:25:10 +0000 asID: 22773 IP address blocks: 68.101.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:22:f7:e5:06:6f:3c:ca:a9:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:10 2025 GMT Not After : Jul 30 17:25:10 2025 GMT Subject: CN=add0bba6-1730-4a7f-9880-a427595c0a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:41:a5:ca:12:a3:1b:62:79:5b:59:f3:3b:1a: 20:f7:a4:ae:82:55:f3:c9:ba:94:8c:95:0f:28:34: 15:3f:e0:13:72:69:16:43:74:2e:cf:f7:ff:c7:39: 6a:89:9a:7f:a1:d8:da:2f:45:ec:de:81:27:bb:78: e1:1a:3f:ce:23:2b:2a:7a:66:9f:f4:5f:11:88:28: d1:55:64:e6:a7:cb:c6:f1:81:65:78:87:b8:04:aa: d0:f5:ab:69:cb:40:48:ff:69:eb:b8:0c:ca:95:3c: 8e:27:45:3a:70:41:6a:70:10:61:c9:1a:5a:71:37: 40:34:8a:6c:22:c7:28:e9:57:e7:af:f7:af:b8:a1: 33:26:d0:ed:cd:0c:4c:2d:77:60:38:c8:06:66:60: 46:a7:26:4f:3b:c0:88:a2:a2:93:cb:57:b8:19:e1: 46:80:3d:4f:2e:d7:46:39:21:97:ff:63:ea:b8:cb: 38:58:be:a7:f5:0d:ed:59:e3:55:c3:c5:35:8c:80: 75:05:25:88:bd:1c:90:f8:c4:91:cd:41:a0:7a:66: fa:f1:85:a3:8f:9d:47:85:2f:c0:61:b2:5f:74:1e: 18:4b:6b:f9:a9:d1:a3:35:dc:3f:cf:a3:26:42:ae: 2d:a7:09:b7:c6:80:28:12:c6:be:ad:51:aa:5d:31: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3A:0D:12:90:4E:86:37:73:5E:C1:1C:E7:97:C7:20:A1:5A:9C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab587c5-b5ce-3bbd-98d9-25575c870ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:63:a0:22:0c:d6:1f:e5:69:4d:9b:87:38:3f:94:5d:0c:81: 93:45:0a:34:6b:31:b6:3f:63:0d:84:2f:1b:47:99:25:d9:1c: 06:26:0f:f3:c2:71:23:48:d4:6a:c6:db:22:a0:cf:a7:77:e4: 26:53:9f:64:4b:f5:be:f4:b9:28:11:50:0c:7e:85:ea:ec:30: c6:e5:f9:b0:71:59:4c:f9:e4:75:bc:b6:67:49:0b:6d:85:41: 7e:44:0e:ce:26:6c:71:23:47:1b:5f:01:1f:15:28:63:02:c3: ca:39:aa:2b:3e:80:05:4d:09:ba:17:70:4b:01:75:d8:55:b2: 18:e4:b1:2c:0e:6d:f3:69:29:07:0f:29:16:f6:3c:ab:c1:30: 5d:aa:35:26:7c:9d:a5:2f:6f:54:97:1d:f3:a9:1a:a8:47:0f: 30:22:d2:ac:14:87:c3:75:f7:d6:f3:c1:a3:8d:a7:f9:a6:28: 32:1a:a1:f3:51:9c:03:02:aa:a0:52:9c:06:46:fb:8f:4d:5c: 44:07:6d:d2:c1:6e:63:9c:11:43:aa:b8:12:7a:b7:fe:6e:4e: 9d:fe:da:e1:4c:bf:49:79:74:09:bd:2d:28:8d:b8:94:44:8f: 2c:61:20:2f:62:bd:e1:5d:64:72:cd:b1:29:da:2b:d0:f9:b8: 9e:f3:fb:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/SL35QZvPMqpKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxMFoXDTI1MDczMDE3MjUxMFowLzEtMCsGA1UEAxMk YWRkMGJiYTYtMTczMC00YTdmLTk4ODAtYTQyNzU5NWMwYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikGlyhKjG2J5W1nzOxog96SuglXzybqUjJUP KDQVP+ATcmkWQ3Quz/f/xzlqiZp/odjaL0Xs3oEnu3jhGj/OIysqemaf9F8RiCjR VWTmp8vG8YFleIe4BKrQ9atpy0BI/2nruAzKlTyOJ0U6cEFqcBBhyRpacTdANIps Isco6Vfnr/evuKEzJtDtzQxMLXdgOMgGZmBGpyZPO8CIoqKTy1e4GeFGgD1PLtdG OSGX/2PquMs4WL6n9Q3tWeNVw8U1jIB1BSWIvRyQ+MSRzUGgemb68YWjj51HhS/A YbJfdB4YS2v5qdGjNdw/z6MmQq4tpwm3xoAoEsa+rVGqXTHjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE6DRKQToY3c17BHOeXxyChWpwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFiNTg3YzUtYjVjZS0z YmJkLTk4ZDktMjU1NzVjODcwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpjoCIM1h/laU2bhzg/lF0MgZNFCjRrMbY/Yw2ELxtHmSXZHAYmD/PC cSNI1GrG2yKgz6d35CZTn2RL9b70uSgRUAx+hersMMbl+bBxWUz55HW8tmdJC22F QX5EDs4mbHEjRxtfAR8VKGMCw8o5qis+gAVNCboXcEsBddhVshjksSwObfNpKQcP KRb2PKvBMF2qNSZ8naUvb1SXHfOpGqhHDzAi0qwUh8N199bzwaONp/mmKDIaofNR nAMCqqBSnAZG+49NXEQHbdLBbmOcEUOquBJ6t/5uTp3+2uFMv0l5dAm9LSiNuJRE jyxhIC9iveFdZHLNsSnaK9D5uJ7z+4E= -----END CERTIFICATE-----Generated at Mon May 12 07:04:12 2025 by rpki-client