$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab5a382-d59e-3be1-b5f1-736a22989c80.roa File: eab5a382-d59e-3be1-b5f1-736a22989c80.roa (raw, json) Hash identifier: d7c26QknoJCezC7YuFNqJTs+crGLmRalwU/UTY6y1M8= Subject key identifier: BD:82:FC:9D:19:6E:55:F9:7F:CE:86:BB:6F:00:DF:07:27:9B:C7:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F562E5C2B286C4A9750AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab5a382-d59e-3be1-b5f1-736a22989c80.roa Signing time: Thu 01 May 2025 17:09:34 +0000 ROA not before: Thu 01 May 2025 17:09:34 +0000 ROA not after: Wed 30 Jul 2025 17:09:34 +0000 asID: 22773 IP address blocks: 68.227.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:62:e5:c2:b2:86:c4:a9:75:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:34 2025 GMT Not After : Jul 30 17:09:34 2025 GMT Subject: CN=7e336ff2-75c1-49be-bbcf-62311b409e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:90:37:29:8e:ee:18:14:11:33:a7:cc:44: b9:ab:01:a5:f1:2d:4e:0e:4f:da:31:c0:2e:58:41: 88:19:43:77:7a:c5:e9:e0:92:2a:1a:ed:d4:fa:d4: 17:b0:b4:f8:34:9f:69:9d:df:dd:9c:4e:3e:ff:f8: a6:42:3b:60:54:2d:d9:b6:f6:fe:c3:04:64:d7:11: cd:6d:a6:5b:0f:50:66:30:2d:08:fb:14:20:96:b2: eb:53:73:72:89:4a:6e:29:df:0a:60:bf:7a:cf:d8: 92:af:fd:e6:80:42:ee:40:bf:6f:54:47:d2:4a:67: f6:1e:88:ed:50:ed:9d:e3:61:65:68:22:f3:a6:0c: 69:e1:71:e9:fd:8f:bc:0d:33:8f:48:45:68:c3:51: b8:9a:6e:0a:b9:3d:8a:02:48:26:b8:59:d5:a3:79: 19:c8:d9:d5:4e:de:29:13:77:83:2a:b1:e8:eb:4f: 81:28:9f:71:68:c3:3e:8b:67:85:c0:5f:6e:35:79: c4:cf:d7:c6:2e:d2:93:e1:5c:5d:b5:87:e1:ba:a5: e5:6b:b6:cb:f6:3f:ed:f5:2d:91:b0:94:3b:4a:08: 3c:c3:f1:7a:d6:9a:e4:80:76:f7:00:15:20:ab:34: 0c:06:0a:e6:1f:6b:29:f8:99:dc:e8:cd:f5:72:d5: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:82:FC:9D:19:6E:55:F9:7F:CE:86:BB:6F:00:DF:07:27:9B:C7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/eab5a382-d59e-3be1-b5f1-736a22989c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d4:4e:f0:92:a9:38:cf:52:1a:c2:e0:f6:12:58:a0:4b:4d: 28:76:d0:9b:dd:9a:01:24:85:b0:83:c2:0a:58:e0:3d:d1:6e: da:cf:51:02:7c:08:21:9b:80:27:f8:1a:f6:04:f3:07:96:df: d2:84:79:cd:97:f3:c0:00:81:11:ab:a8:aa:9e:3c:87:1a:be: 57:b2:d8:73:61:6f:ff:e3:76:db:63:63:c1:60:06:c6:77:d9: ba:6b:76:a8:e2:8d:65:27:c1:9e:3c:89:9f:e1:76:51:bd:a1: 41:f8:fe:5f:41:9c:3a:6d:b4:32:6e:a9:51:55:39:d3:8c:62: ed:96:86:d3:20:b8:46:ec:4e:22:b0:bb:47:74:a1:cf:40:a1: 79:91:07:c1:5d:2b:b8:2e:29:85:57:5f:e5:bb:92:f8:19:2b: 8d:4d:bc:30:6b:41:d5:df:d6:13:9b:b1:86:c4:36:46:32:25: ea:64:df:df:b7:09:0b:4d:08:e5:4c:58:57:cc:1a:81:6e:fd: b0:c0:66:2a:c6:92:fb:c1:b8:c9:66:55:fd:63:e8:cc:93:5c: 57:89:1c:58:aa:3a:36:30:ef:ad:7c:00:d6:b9:19:12:28:84: 0d:0e:ac:93:79:8d:8e:cf:75:40:10:68:39:b6:9a:c1:47:2a: fd:9f:63:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19WLlwrKGxKl1CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzNFoXDTI1MDczMDE3MDkzNFowLzEtMCsGA1UEAxMk N2UzMzZmZjItNzVjMS00OWJlLWJiY2YtNjIzMTFiNDA5ZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOmQNymO7hgUETOnzES5qwGl8S1ODk/aMcAu WEGIGUN3esXp4JIqGu3U+tQXsLT4NJ9pnd/dnE4+//imQjtgVC3Ztvb+wwRk1xHN baZbD1BmMC0I+xQglrLrU3NyiUpuKd8KYL96z9iSr/3mgELuQL9vVEfSSmf2Hojt UO2d42FlaCLzpgxp4XHp/Y+8DTOPSEVow1G4mm4KuT2KAkgmuFnVo3kZyNnVTt4p E3eDKrHo60+BKJ9xaMM+i2eFwF9uNXnEz9fGLtKT4VxdtYfhuqXla7bL9j/t9S2R sJQ7Sgg8w/F61prkgHb3ABUgqzQMBgrmH2sp+Jnc6M31ctWZyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2C/J0ZblX5f86Gu28A3wcnm8cAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFiNWEzODItZDU5ZS0z YmUxLWI1ZjEtNzM2YTIyOTg5YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPUTvCSqTjPUhrC4PYSWKBLTSh20JvdmgEkhbCDwgpY4D3RbtrPUQJ8 CCGbgCf4GvYE8weW39KEec2X88AAgRGrqKqePIcavley2HNhb//jdttjY8FgBsZ3 2bprdqjijWUnwZ48iZ/hdlG9oUH4/l9BnDpttDJuqVFVOdOMYu2WhtMguEbsTiKw u0d0oc9AoXmRB8FdK7guKYVXX+W7kvgZK41NvDBrQdXf1hObsYbENkYyJepk39+3 CQtNCOVMWFfMGoFu/bDAZirGkvvBuMlmVf1j6MyTXFeJHFiqOjYw7618ANa5GRIo hA0OrJN5jY7PdUAQaDm2msFHKv2fY9Q= -----END CERTIFICATE-----Generated at Sun May 11 14:45:06 2025 by rpki-client