$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef411d85-bf94-3366-96c4-a8249d805644.roa File: ef411d85-bf94-3366-96c4-a8249d805644.roa (raw, json) Hash identifier: rkrW7d1fSM1iOLxlutEIsRayPLnejb6SEeDLU7uTrTU= Subject key identifier: 98:71:1C:B4:CE:F9:4D:0C:F7:D7:E5:BA:4C:F4:CA:5D:ED:E5:22:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD1BF8D3386FCFF40B4A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef411d85-bf94-3366-96c4-a8249d805644.roa Signing time: Thu 01 May 2025 17:25:07 +0000 ROA not before: Thu 01 May 2025 17:25:07 +0000 ROA not after: Wed 30 Jul 2025 17:25:07 +0000 asID: 22773 IP address blocks: 68.101.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:1b:f8:d3:38:6f:cf:f4:0b:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:07 2025 GMT Not After : Jul 30 17:25:07 2025 GMT Subject: CN=e69a6caf-db07-4f42-872e-8b5c116ad882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:8c:0b:47:99:a6:40:e7:ec:4a:0e:8b:79: 54:ab:12:9a:ae:a8:f9:6e:4d:ba:84:b1:11:20:fd: 37:ac:62:5f:0a:83:e7:18:d4:ee:d0:31:be:31:52: 05:1f:9c:de:9d:41:25:96:95:bf:05:83:c6:42:52: 0a:a9:6a:9e:01:9b:af:21:d6:d7:cc:98:d3:28:75: 72:3b:04:11:99:86:4f:2c:77:7e:71:f5:47:c6:96: 78:a3:7b:cd:08:4b:2f:4c:2f:b1:32:70:50:f0:7a: 68:08:86:e9:6d:fc:73:36:33:49:da:47:cd:85:60: ec:fb:00:c3:a6:7a:f3:6b:a5:54:0d:e6:38:74:0b: 03:b3:34:3a:c9:89:94:cc:9e:e9:3d:41:59:11:8f: 14:4f:2b:17:c0:19:74:49:b1:38:21:f7:dc:ca:ed: 34:72:5f:db:58:c8:40:01:8f:97:0c:cf:6b:94:ef: 2c:1d:a9:ee:c6:ed:fa:4f:c1:da:ac:5c:77:ff:38: ca:de:c1:88:46:04:89:77:23:05:b4:38:2f:0f:48: 65:9a:c5:8c:65:97:4f:69:e8:eb:93:2e:e1:66:b2: c9:2b:35:87:ef:51:54:6b:60:b2:fb:71:44:e7:76: 06:ac:e8:2b:79:4e:80:8a:fc:9e:37:bf:83:ed:fb: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:71:1C:B4:CE:F9:4D:0C:F7:D7:E5:BA:4C:F4:CA:5D:ED:E5:22:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef411d85-bf94-3366-96c4-a8249d805644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6d:3a:81:9f:90:5b:26:30:53:65:a2:82:34:be:06:88:09: 4a:90:f0:f4:e4:17:65:c4:be:98:cd:2c:6d:b6:6d:3d:2c:a4: e6:e2:2f:2d:81:45:10:ad:73:a0:55:04:d8:4a:af:f6:55:b9: e5:a5:e7:b9:37:31:e3:00:03:61:a5:23:ba:98:dc:fc:da:2d: 33:3a:68:46:3e:a1:4e:a2:3c:37:05:e0:7e:9b:ed:47:b6:2b: fa:eb:ea:4f:40:09:eb:a1:ba:95:9b:09:31:d0:d0:c9:66:ca: f1:24:58:e7:61:7a:a8:ea:3f:4f:d4:4f:32:61:79:96:97:a7: 93:4f:54:3e:24:58:84:b1:fe:7d:44:20:e8:e4:7c:66:68:77: 3b:83:3e:f9:24:37:33:c7:02:11:d1:77:a6:8c:2e:15:59:b6: e5:e2:c8:71:36:3f:30:0a:4c:9b:d6:1e:ce:43:3b:ae:7b:35: fa:a9:93:54:c6:98:c6:e1:18:83:7b:98:78:7c:d5:22:31:57: 70:9f:ce:fe:88:d4:e4:b0:35:65:23:9c:a1:f5:34:a6:91:67: 05:f9:a5:39:db:83:36:26:9a:86:c0:17:7e:61:c6:ab:23:cd: a4:b2:20:7f:6d:43:2c:43:f6:2a:e9:64:97:17:f3:aa:d5:1d: 33:25:89:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Rv40zhvz/QLSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwN1oXDTI1MDczMDE3MjUwN1owLzEtMCsGA1UEAxMk ZTY5YTZjYWYtZGIwNy00ZjQyLTg3MmUtOGI1YzExNmFkODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7OMC0eZpkDn7EoOi3lUqxKarqj5bk26hLER IP03rGJfCoPnGNTu0DG+MVIFH5zenUEllpW/BYPGQlIKqWqeAZuvIdbXzJjTKHVy OwQRmYZPLHd+cfVHxpZ4o3vNCEsvTC+xMnBQ8HpoCIbpbfxzNjNJ2kfNhWDs+wDD pnrza6VUDeY4dAsDszQ6yYmUzJ7pPUFZEY8UTysXwBl0SbE4Iffcyu00cl/bWMhA AY+XDM9rlO8sHanuxu36T8HarFx3/zjK3sGIRgSJdyMFtDgvD0hlmsWMZZdPaejr ky7hZrLJKzWH71FUa2Cy+3FE53YGrOgreU6AivyeN7+D7fu8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhxHLTO+U0M99flukz0yl3t5SJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY0MTFkODUtYmY5NC0z MzY2LTk2YzQtYTgyNDlkODA1NjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhtOoGfkFsmMFNlooI0vgaICUqQ8PTkF2XEvpjNLG22bT0spObiLy2B RRCtc6BVBNhKr/ZVueWl57k3MeMAA2GlI7qY3PzaLTM6aEY+oU6iPDcF4H6b7Ue2 K/rr6k9ACeuhupWbCTHQ0MlmyvEkWOdheqjqP0/UTzJheZaXp5NPVD4kWISx/n1E IOjkfGZodzuDPvkkNzPHAhHRd6aMLhVZtuXiyHE2PzAKTJvWHs5DO657Nfqpk1TG mMbhGIN7mHh81SIxV3Cfzv6I1OSwNWUjnKH1NKaRZwX5pTnbgzYmmobAF35hxqsj zaSyIH9tQyxD9irpZJcX86rVHTMliTc= -----END CERTIFICATE-----Generated at Mon May 12 19:00:08 2025 by rpki-client