$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb403fc3-8435-3e72-ae8d-4a5a528f7b67.roa File: fb403fc3-8435-3e72-ae8d-4a5a528f7b67.roa (raw, json) Hash identifier: ue45HtNj/SPnUYCVjD9HlqG2Sl/Zq88fc7PtwFsbjZw= Subject key identifier: 19:1C:1B:64:D5:49:64:BE:C0:EB:D1:AD:91:97:D0:F8:D2:4A:A3:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD1B4788C70E9C6C7568A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb403fc3-8435-3e72-ae8d-4a5a528f7b67.roa Signing time: Thu 01 May 2025 17:25:07 +0000 ROA not before: Thu 01 May 2025 17:25:07 +0000 ROA not after: Wed 30 Jul 2025 17:25:07 +0000 asID: 22773 IP address blocks: 68.101.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:1b:47:88:c7:0e:9c:6c:75:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:07 2025 GMT Not After : Jul 30 17:25:07 2025 GMT Subject: CN=b637653e-cc8a-46a8-ab67-0bcd57e3b2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:15:81:68:bb:fe:c3:f4:4f:28:0d:a8:7d: 7b:0f:49:1e:27:40:a8:ea:f2:04:2d:86:23:da:29: be:97:06:14:92:1c:2b:71:b5:2c:a8:4e:6c:12:6b: 38:3c:16:33:30:5a:d6:0a:83:68:42:a9:5f:7a:c8: db:86:90:a0:50:e3:99:be:f7:dc:97:25:76:d1:f7: 61:c4:31:63:8d:6f:4f:10:80:5a:0b:54:16:2f:2e: 21:a8:2b:e3:02:66:84:54:bb:73:37:23:ad:35:f1: ed:bc:d2:be:70:1e:7e:37:e3:d7:aa:8c:8d:7b:3d: 9d:fb:6c:1f:8e:e0:74:a9:ad:37:b2:c0:42:6f:61: f5:02:2d:de:c0:f8:2f:75:34:f2:ce:ff:1a:69:72: 03:8b:90:50:cc:73:2f:39:ab:7c:c7:f1:f5:1d:74: 59:8c:b5:30:a9:82:c5:98:3b:9a:2e:82:95:66:96: db:f8:09:17:e1:b5:47:be:22:cc:89:7f:f4:73:1b: 40:e7:60:3e:9b:84:d0:74:8c:7c:f5:ba:ea:01:17: c0:42:98:9c:8b:71:f1:46:e2:85:b6:40:5a:89:98: 8a:d1:82:78:06:b4:8b:07:92:88:98:c9:b3:14:3e: e8:e1:3e:e6:83:91:17:30:92:02:77:05:96:fc:a3: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:1B:64:D5:49:64:BE:C0:EB:D1:AD:91:97:D0:F8:D2:4A:A3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fb403fc3-8435-3e72-ae8d-4a5a528f7b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0f:e2:20:be:15:14:19:8d:8a:0f:93:2a:19:cf:12:e4:29: 35:40:8c:37:0b:9d:ba:4a:38:9d:1f:2f:03:64:6c:b0:48:a4: b3:c3:14:60:fa:9d:e6:1f:85:9d:07:21:8a:35:24:9e:f4:c6: 79:70:96:a8:01:74:ad:71:e5:01:69:c6:04:8e:f7:1f:f3:b0: 5f:82:68:73:3d:de:b4:78:70:7c:f0:73:d6:79:23:7a:ef:30: d9:95:24:5a:67:d1:41:d8:de:35:10:f8:7b:a8:a4:3b:b2:d1: 54:21:3a:cf:fe:a8:88:45:5c:96:a9:6c:b3:3f:36:f5:10:73: dc:a2:51:e6:b6:0d:33:1e:43:a0:33:95:41:62:5c:e6:51:b5: 7e:b7:4b:50:04:f7:09:92:c1:1a:61:2f:1a:bb:7d:36:06:69: c4:cc:d0:c3:fc:24:60:ec:d5:fa:e0:65:84:3a:78:b6:77:39: d3:38:86:36:b2:0d:f1:b1:ba:56:12:21:05:57:2b:c0:56:fa: f1:de:8e:fe:9f:c5:72:71:fd:17:a9:16:b6:ef:63:c4:aa:de: ca:0f:88:59:89:b5:2c:58:50:1b:79:5a:c4:cf:c1:34:5b:92: 0d:3f:53:a6:8e:98:38:45:34:2d:32:80:99:0a:26:91:13:91: b4:7d:d7:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RtHiMcOnGx1aKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwN1oXDTI1MDczMDE3MjUwN1owLzEtMCsGA1UEAxMk YjYzNzY1M2UtY2M4YS00NmE4LWFiNjctMGJjZDU3ZTNiMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3AVgWi7/sP0TygNqH17D0keJ0Co6vIELYYj 2im+lwYUkhwrcbUsqE5sEms4PBYzMFrWCoNoQqlfesjbhpCgUOOZvvfclyV20fdh xDFjjW9PEIBaC1QWLy4hqCvjAmaEVLtzNyOtNfHtvNK+cB5+N+PXqoyNez2d+2wf juB0qa03ssBCb2H1Ai3ewPgvdTTyzv8aaXIDi5BQzHMvOat8x/H1HXRZjLUwqYLF mDuaLoKVZpbb+AkX4bVHviLMiX/0cxtA52A+m4TQdIx89brqARfAQpici3HxRuKF tkBaiZiK0YJ4BrSLB5KImMmzFD7o4T7mg5EXMJICdwWW/KP4jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkcG2TVSWS+wOvRrZGX0PjSSqM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmI0MDNmYzMtODQzNS0z ZTcyLWFlOGQtNGE1YTUyOGY3YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwP4iC+FRQZjYoPkyoZzxLkKTVAjDcLnbpKOJ0fLwNkbLBIpLPDFGD6 neYfhZ0HIYo1JJ70xnlwlqgBdK1x5QFpxgSO9x/zsF+CaHM93rR4cHzwc9Z5I3rv MNmVJFpn0UHY3jUQ+HuopDuy0VQhOs/+qIhFXJapbLM/NvUQc9yiUea2DTMeQ6Az lUFiXOZRtX63S1AE9wmSwRphLxq7fTYGacTM0MP8JGDs1frgZYQ6eLZ3OdM4hjay DfGxulYSIQVXK8BW+vHejv6fxXJx/RepFrbvY8Sq3soPiFmJtSxYUBt5WsTPwTRb kg0/U6aOmDhFNC0ygJkKJpETkbR919U= -----END CERTIFICATE-----Generated at Mon May 12 23:16:29 2025 by rpki-client