$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b838c1-c2d4-3e1c-85b5-026d34c27f2b.roa File: f2b838c1-c2d4-3e1c-85b5-026d34c27f2b.roa (raw, json) Hash identifier: Dcyw/1l+ULkbZ0SCED2HqV2+fbef+d3A6BzYCYnGTTQ= Subject key identifier: 19:86:43:51:6E:E4:F2:D9:E4:56:EC:23:B7:66:56:D5:8B:B6:79:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCF452840BE2AE054B8E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b838c1-c2d4-3e1c-85b5-026d34c27f2b.roa Signing time: Thu 01 May 2025 17:24:48 +0000 ROA not before: Thu 01 May 2025 17:24:48 +0000 ROA not after: Wed 30 Jul 2025 17:24:48 +0000 asID: 22773 IP address blocks: 68.7.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:f4:52:84:0b:e2:ae:05:4b:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:48 2025 GMT Not After : Jul 30 17:24:48 2025 GMT Subject: CN=f26a5599-c131-4acb-b6ac-f876041c08b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:90:95:7d:ba:af:d9:75:ef:e9:f8:dd:53: 3f:b5:94:95:d4:02:77:62:96:2e:2c:14:09:f6:9c: 5a:9a:69:69:45:65:bd:19:6e:9f:c7:d9:8d:ee:b6: b5:ef:61:05:b2:57:1b:db:cd:b6:47:e5:f8:7f:e5: 81:c0:8a:21:7a:86:25:e0:cf:5f:be:18:ce:5f:c7: 73:13:a1:5f:2e:2d:eb:10:ad:84:d5:76:6b:08:8e: 47:1f:0a:9b:5c:5c:12:e7:45:0f:56:e4:7a:26:0c: 50:16:bf:00:a6:01:e8:87:ee:b0:2a:ac:79:e1:11: 20:89:43:a9:8d:b5:9d:47:54:3f:ce:9c:c6:f7:88: 73:5f:f9:66:36:3d:0d:35:c7:ff:f3:2a:25:a8:66: 57:e4:b8:0b:e8:29:71:ba:6e:a3:38:40:0d:7d:ec: 2d:55:f2:96:05:a7:3b:33:b7:58:06:68:d5:04:ac: ac:c8:62:14:88:c7:72:1e:81:4b:48:29:d3:5c:83: d5:de:55:17:70:41:f9:44:75:f4:32:99:41:c4:db: be:9b:15:11:a5:87:a0:84:32:f8:a0:77:5b:31:9f: 88:b4:04:3e:7f:d3:c7:61:5e:49:61:d5:3e:0b:56: c4:dd:ef:f9:18:1c:34:19:0e:8e:b3:83:c8:2b:86: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:43:51:6E:E4:F2:D9:E4:56:EC:23:B7:66:56:D5:8B:B6:79:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2b838c1-c2d4-3e1c-85b5-026d34c27f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7c:af:f8:85:a7:2d:1c:dc:8c:59:89:77:e5:25:3a:9f:89: e9:eb:44:5c:4f:fb:5d:19:c1:f5:7b:b7:0d:34:7f:73:18:d6: f4:bb:7a:f2:2e:a4:9c:82:82:16:66:d3:40:4d:c9:99:33:4d: 48:19:cd:ac:c0:38:ab:35:bf:39:dd:10:85:37:b2:44:a6:b6: e8:c3:57:d5:74:af:2c:b6:93:d7:7b:db:6b:c3:47:7c:ac:ec: b0:5c:71:fa:37:d5:bb:42:70:07:42:23:19:d7:7a:b3:70:d4: ea:3f:3a:cd:7d:15:50:3f:8f:29:3e:41:3d:0c:52:b2:2b:6c: 4f:f7:75:d6:ae:dc:8f:64:55:47:fc:ce:94:c4:61:94:aa:7f: 8e:35:28:15:c4:fc:84:84:19:f8:95:a6:d3:c7:92:47:da:04: 3e:9d:f1:8e:98:54:33:ec:64:fc:24:5a:2b:54:75:26:39:ba: 17:9e:9a:9d:f9:d6:d6:6d:93:e8:2e:51:b3:0d:77:b0:98:f2: 81:f1:dd:a1:90:a7:64:f2:d2:fe:16:25:7c:c1:e9:cc:13:49: 5c:a5:a0:80:62:48:4d:2b:c6:86:d0:ca:66:0f:fe:75:ec:5d: 6c:8e:01:a7:7d:16:f7:de:e2:8b:4e:b8:12:74:a8:3d:37:06: a5:fa:23:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/PRShAvirgVLjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0OFoXDTI1MDczMDE3MjQ0OFowLzEtMCsGA1UEAxMk ZjI2YTU1OTktYzEzMS00YWNiLWI2YWMtZjg3NjA0MWMwOGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hGQlX26r9l17+n43VM/tZSV1AJ3YpYuLBQJ 9pxammlpRWW9GW6fx9mN7ra172EFslcb2822R+X4f+WBwIoheoYl4M9fvhjOX8dz E6FfLi3rEK2E1XZrCI5HHwqbXFwS50UPVuR6JgxQFr8ApgHoh+6wKqx54REgiUOp jbWdR1Q/zpzG94hzX/lmNj0NNcf/8yolqGZX5LgL6Clxum6jOEANfewtVfKWBac7 M7dYBmjVBKysyGIUiMdyHoFLSCnTXIPV3lUXcEH5RHX0MplBxNu+mxURpYeghDL4 oHdbMZ+ItAQ+f9PHYV5JYdU+C1bE3e/5GBw0GQ6Os4PIK4bVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmGQ1Fu5PLZ5FbsI7dmVtWLtnnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJiODM4YzEtYzJkNC0z ZTFjLTg1YjUtMDI2ZDM0YzI3ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD18r/iFpy0c3IxZiXflJTqfienrRFxP+10ZwfV7tw00f3MY1vS7evIu pJyCghZm00BNyZkzTUgZzazAOKs1vzndEIU3skSmtujDV9V0ryy2k9d722vDR3ys 7LBccfo31btCcAdCIxnXerNw1Oo/Os19FVA/jyk+QT0MUrIrbE/3ddau3I9kVUf8 zpTEYZSqf441KBXE/ISEGfiVptPHkkfaBD6d8Y6YVDPsZPwkWitUdSY5uheemp35 1tZtk+guUbMNd7CY8oHx3aGQp2Ty0v4WJXzB6cwTSVyloIBiSE0rxobQymYP/nXs XWyOAad9Fvfe4otOuBJ0qD03BqX6I/s= -----END CERTIFICATE-----Generated at Tue May 6 13:33:25 2025 by rpki-client