$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa File: f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa (raw, json) Hash identifier: vjymm+4/aSO+vTCzYD40ekl7ewDJV1j3LkVGJZN8nc0= Subject key identifier: A3:A2:90:25:AE:A9:C3:6D:F5:43:28:64:F8:83:BF:C2:A1:3E:B3:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCE23BE14DCC7AC0DCAE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa Signing time: Thu 01 May 2025 17:24:40 +0000 ROA not before: Thu 01 May 2025 17:24:40 +0000 ROA not after: Wed 30 Jul 2025 17:24:40 +0000 asID: 22773 IP address blocks: 68.7.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:e2:3b:e1:4d:cc:7a:c0:dc:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:40 2025 GMT Not After : Jul 30 17:24:40 2025 GMT Subject: CN=401aff75-309d-4377-9c54-86a10ff63d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:74:c1:40:15:da:f7:3e:74:78:55:c2:7e: b9:93:ca:e6:1a:3d:c2:ac:2a:92:6d:97:4c:1f:3f: 5d:8a:b2:3f:cf:e2:ff:bd:0d:f7:ab:f3:a5:28:b5: fb:c2:91:26:7c:42:c3:21:3a:fe:1c:b7:7f:d9:7a: b2:41:ee:af:91:53:0a:5f:4a:93:af:bc:d8:aa:7e: 71:c3:60:9a:6c:b6:11:fd:76:20:f7:ac:8b:d3:66: a9:27:d8:6b:f3:ee:f8:ea:8d:da:c1:4f:70:f7:ba: 49:8c:2b:db:c1:95:fa:5e:20:ac:7e:eb:fa:5b:58: 6d:20:aa:03:d7:9f:88:c7:be:af:89:32:54:e8:eb: a3:a4:97:6d:10:08:68:41:6f:38:93:27:a9:61:e0: d1:42:04:c9:29:00:b4:8e:ab:61:05:af:5b:b1:0f: 8a:cb:2e:2a:96:2d:3a:3d:1b:9c:47:46:a1:e5:6f: 13:21:47:1c:15:9f:5a:13:07:b2:4a:ba:32:fc:05: 09:a2:07:ab:d8:ef:58:52:f3:75:e4:b9:21:b1:fb: 48:78:5d:ec:93:e3:94:3f:ef:d6:95:3e:01:11:86: 2f:9d:5a:3e:ba:cb:cd:81:6a:91:f3:45:86:1a:bd: 7e:35:6e:ba:52:38:7f:d9:b2:8b:b2:60:9b:f4:07: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:90:25:AE:A9:C3:6D:F5:43:28:64:F8:83:BF:C2:A1:3E:B3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2f33f75-7915-36d1-8c42-4b00747f7a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c3:7c:1f:de:58:1d:bb:54:f0:2f:a8:00:2f:6f:9c:d8:33: bc:0d:eb:26:01:25:15:d9:6b:2f:50:5e:02:fd:f7:8b:2f:7c: 4b:fc:e0:cc:6d:7e:c3:3e:6e:20:03:ce:b0:1d:c2:fb:4d:fc: 40:c3:f0:c3:09:c8:0e:3e:30:76:62:c0:c1:a8:b5:08:bb:c0: 1f:85:87:3e:2c:89:18:5f:a1:cf:56:cc:ea:d2:59:cf:99:43: 49:c7:95:e1:ce:2f:b7:d9:e7:80:f1:67:e9:97:bf:25:7a:ab: 45:4f:1e:1f:03:7b:a7:78:af:c4:ba:20:89:b9:37:73:39:60: 0f:53:d7:16:c4:75:d2:a9:c0:2e:27:b4:1d:2a:1e:de:67:0a: a0:53:81:8e:eb:25:4e:e6:55:16:64:36:ee:9d:98:c4:4d:eb: 77:be:4f:34:b9:a9:a5:c3:0c:27:91:2a:5b:75:53:4d:95:06: 35:22:8b:00:ca:cb:1f:38:40:f9:c6:7e:09:c8:55:77:47:a3: aa:94:ae:db:d2:65:19:16:0c:80:a8:6e:a0:cb:34:d3:36:32: 0f:ae:08:b0:7b:05:7a:06:38:9b:b7:cc:16:45:df:2a:1f:3c: cd:ec:8c:6a:1d:d9:86:51:6a:e8:24:59:ee:1a:4b:30:eb:2d: db:d6:88:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/OI74U3MesDcrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0MFoXDTI1MDczMDE3MjQ0MFowLzEtMCsGA1UEAxMk NDAxYWZmNzUtMzA5ZC00Mzc3LTljNTQtODZhMTBmZjYzZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PR0wUAV2vc+dHhVwn65k8rmGj3CrCqSbZdM Hz9dirI/z+L/vQ33q/OlKLX7wpEmfELDITr+HLd/2XqyQe6vkVMKX0qTr7zYqn5x w2CabLYR/XYg96yL02apJ9hr8+746o3awU9w97pJjCvbwZX6XiCsfuv6W1htIKoD 15+Ix76viTJU6OujpJdtEAhoQW84kyepYeDRQgTJKQC0jqthBa9bsQ+Kyy4qli06 PRucR0ah5W8TIUccFZ9aEweySroy/AUJoger2O9YUvN15LkhsftIeF3sk+OUP+/W lT4BEYYvnVo+usvNgWqR80WGGr1+NW66Ujh/2bKLsmCb9AeBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOikCWuqcNt9UMoZPiDv8KhPrN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJmMzNmNzUtNzkxNS0z NmQxLThjNDItNGIwMDc0N2Y3YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbDfB/eWB27VPAvqAAvb5zYM7wN6yYBJRXZay9QXgL994svfEv84Mxt fsM+biADzrAdwvtN/EDD8MMJyA4+MHZiwMGotQi7wB+Fhz4siRhfoc9WzOrSWc+Z Q0nHleHOL7fZ54DxZ+mXvyV6q0VPHh8De6d4r8S6IIm5N3M5YA9T1xbEddKpwC4n tB0qHt5nCqBTgY7rJU7mVRZkNu6dmMRN63e+TzS5qaXDDCeRKlt1U02VBjUiiwDK yx84QPnGfgnIVXdHo6qUrtvSZRkWDICobqDLNNM2Mg+uCLB7BXoGOJu3zBZF3yof PM3sjGod2YZRaugkWe4aSzDrLdvWiDQ= -----END CERTIFICATE-----Generated at Mon May 12 10:25:53 2025 by rpki-client