$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4acf230-f86a-3744-a537-e72b18539a11.roa File: f4acf230-f86a-3744-a537-e72b18539a11.roa (raw, json) Hash identifier: 74RNF2vLE6waX+ILhfhTxM2fhl7mSw61QpxbRX7WyIs= Subject key identifier: 8E:89:0F:D9:77:3F:41:9D:86:EA:04:67:99:39:C8:60:EF:C1:1B:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4F57A4E1D0F6AD307D960 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4acf230-f86a-3744-a537-e72b18539a11.roa Signing time: Thu 01 May 2025 17:08:42 +0000 ROA not before: Thu 01 May 2025 17:08:42 +0000 ROA not after: Wed 30 Jul 2025 17:08:42 +0000 asID: 22773 IP address blocks: 68.0.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:f5:7a:4e:1d:0f:6a:d3:07:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:42 2025 GMT Not After : Jul 30 17:08:42 2025 GMT Subject: CN=5fd3f832-4977-4c18-b75f-d21da3eed2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:b7:25:fd:51:a8:10:13:74:86:0a:1c:26: c7:28:03:47:d5:b4:ab:3b:f4:a0:00:ed:5b:1b:c8: 40:87:75:75:be:ae:62:48:c9:7e:69:c1:59:7e:98: 2a:11:50:2e:4e:d7:d3:24:62:f8:6a:3f:0f:24:70: f8:8a:a0:64:eb:4f:22:94:6b:a5:20:b2:ec:06:6c: 62:cc:ce:6b:70:d5:db:4c:fe:05:60:54:b5:63:f1: 3f:77:16:90:48:8a:b7:0f:be:dd:c8:be:07:cb:84: a9:95:2e:5c:2b:c9:b2:c3:28:52:c3:53:ee:9c:12: 2f:c6:d8:8c:02:8a:01:95:59:9d:35:bd:f6:48:77: 3c:d7:df:53:3d:67:f0:be:38:fd:2f:85:0d:65:84: 2c:2d:69:20:92:a4:bf:b5:fc:4d:7c:5f:5b:95:2c: 3c:7b:b7:9c:97:19:ad:07:0b:27:80:63:db:c1:1b: df:a6:6b:40:46:fe:39:88:44:d5:61:06:85:3d:95: 84:ad:e6:dc:ea:11:24:36:bb:36:61:9d:68:14:41: c8:00:e9:12:c4:13:f8:a6:68:08:cf:c5:26:98:69: ca:00:8f:4e:ea:cc:d5:c8:2d:a2:a7:83:a3:20:00: d9:16:f2:58:09:7b:e4:0d:ed:16:f0:1c:7c:9d:32: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:89:0F:D9:77:3F:41:9D:86:EA:04:67:99:39:C8:60:EF:C1:1B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4acf230-f86a-3744-a537-e72b18539a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:42:eb:3d:04:f7:c7:9d:a4:4a:0f:b5:f2:17:73:18:2a:bd: a6:81:3b:7b:77:d8:18:6e:4f:95:e8:0b:e6:98:18:3f:f3:3d: 95:fb:db:5b:eb:2c:2d:bf:c5:2a:34:89:e4:68:0c:27:77:b8: 9e:fe:0a:eb:ee:8f:3d:9d:23:3b:92:d7:df:5e:2e:47:70:61: 2b:cd:0b:bf:50:03:c4:7c:3f:eb:32:0e:a6:51:7b:1f:fe:57: ed:6f:30:61:05:7f:df:1b:61:6b:67:17:7d:47:d8:ac:bb:df: 95:01:5a:da:ca:e7:2d:ac:4f:00:d5:2e:15:bd:96:42:6a:eb: c1:d1:1b:2c:b4:33:c0:fb:5f:65:77:e8:25:c7:a9:63:01:56: 1c:c5:86:78:f0:ec:6a:20:cf:81:64:1e:22:a0:e8:33:7f:33: 5a:2d:25:bc:1f:9e:e2:ef:18:b9:87:f5:d7:52:87:b2:4a:3c: d0:db:72:2e:9b:21:69:25:fe:5a:ac:ce:fd:8d:4b:60:5a:26: 1b:2a:9a:91:04:77:50:d4:86:e3:6e:7a:7c:b1:dd:5c:f3:cd: 8e:fb:4d:ac:0d:95:64:cc:b2:b8:29:20:c7:82:2c:ca:4a:5f: 63:a4:fb:71:ba:63:83:c8:fe:c8:4b:b9:03:6b:88:b2:7b:3f: 9a:2a:e1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PV6Th0PatMH2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0MloXDTI1MDczMDE3MDg0MlowLzEtMCsGA1UEAxMk NWZkM2Y4MzItNDk3Ny00YzE4LWI3NWYtZDIxZGEzZWVkMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreG3Jf1RqBATdIYKHCbHKANH1bSrO/SgAO1b G8hAh3V1vq5iSMl+acFZfpgqEVAuTtfTJGL4aj8PJHD4iqBk608ilGulILLsBmxi zM5rcNXbTP4FYFS1Y/E/dxaQSIq3D77dyL4Hy4SplS5cK8mywyhSw1PunBIvxtiM AooBlVmdNb32SHc8199TPWfwvjj9L4UNZYQsLWkgkqS/tfxNfF9blSw8e7eclxmt BwsngGPbwRvfpmtARv45iETVYQaFPZWErebc6hEkNrs2YZ1oFEHIAOkSxBP4pmgI z8UmmGnKAI9O6szVyC2ip4OjIADZFvJYCXvkDe0W8Bx8nTL76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6JD9l3P0GdhuoEZ5k5yGDvwRstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjRhY2YyMzAtZjg2YS0z NzQ0LWE1MzctZTcyYjE4NTM5YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRADcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdC6z0E98edpEoPtfIXcxgqvaaBO3t32BhuT5XoC+aYGD/zPZX721vr LC2/xSo0ieRoDCd3uJ7+Cuvujz2dIzuS199eLkdwYSvNC79QA8R8P+syDqZRex/+ V+1vMGEFf98bYWtnF31H2Ky735UBWtrK5y2sTwDVLhW9lkJq68HRGyy0M8D7X2V3 6CXHqWMBVhzFhnjw7Gogz4FkHiKg6DN/M1otJbwfnuLvGLmH9ddSh7JKPNDbci6b IWkl/lqszv2NS2BaJhsqmpEEd1DUhuNuenyx3VzzzY77TawNlWTMsrgpIMeCLMpK X2Ok+3G6Y4PI/shLuQNriLJ7P5oq4So= -----END CERTIFICATE-----Generated at Sun May 11 22:59:32 2025 by rpki-client