$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe80d573-011d-3597-a785-e68b87af69ab.roa File: fe80d573-011d-3597-a785-e68b87af69ab.roa (raw, json) Hash identifier: y6+eCZWwcOYQRskYSneTlwODA5UJtSeUlTyRycI8uY8= Subject key identifier: 6B:FD:57:10:44:68:CB:A1:58:6B:F4:69:3B:C9:EE:8B:15:09:A4:FE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD300D05386EFA9A0D6580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe80d573-011d-3597-a785-e68b87af69ab.roa Signing time: Thu 01 May 2025 17:25:17 +0000 ROA not before: Thu 01 May 2025 17:25:17 +0000 ROA not after: Wed 30 Jul 2025 17:25:17 +0000 asID: 22773 IP address blocks: 68.107.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:30:0d:05:38:6e:fa:9a:0d:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:17 2025 GMT Not After : Jul 30 17:25:17 2025 GMT Subject: CN=ff3a624b-7172-4e96-b65a-b098729e6d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:8f:8f:a2:d1:c5:82:43:16:f2:f2:d5:61: d4:31:2d:dc:f1:cb:78:74:67:92:5a:f1:2b:1d:4e: 5d:60:9c:7f:1f:4e:d3:df:cb:da:37:fc:33:00:a9: 00:eb:f4:81:d9:48:7f:69:5d:ac:bc:5b:b1:3d:f3: 28:84:cf:43:0c:9f:ca:e5:26:0a:10:a6:a2:8b:27: fe:8c:28:d4:03:b9:fd:fb:80:5b:87:d4:ed:6e:73: 69:a3:77:2a:0e:68:f0:25:bc:fc:e8:21:be:ff:b8: 5f:b1:e9:a1:60:8c:8d:2c:e9:2a:f3:dd:de:a2:fe: 3f:75:11:ad:29:2c:47:37:1c:98:97:e0:cf:85:85: 78:df:44:2f:ba:c7:5d:44:8c:d0:ba:5b:39:5d:15: 08:e5:f9:dc:5a:8d:32:ad:60:a7:77:42:20:79:60: 7e:be:86:eb:74:7d:44:38:cb:4d:20:d8:d5:41:92: 9f:41:f5:b9:c7:ae:34:e6:fa:98:bf:63:f2:a0:b6: 7c:d9:a5:7b:9a:d5:33:ed:fc:98:70:17:99:0f:c9: b3:e7:5b:12:88:56:6c:eb:15:6f:b5:26:4f:d5:c2: f3:c9:0b:58:ac:9e:d1:df:27:26:66:1f:f9:ce:27: cd:16:5a:c5:4f:e7:3a:ea:7c:c9:63:e2:85:5a:a8: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FD:57:10:44:68:CB:A1:58:6B:F4:69:3B:C9:EE:8B:15:09:A4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fe80d573-011d-3597-a785-e68b87af69ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3e:02:cc:5e:05:26:e8:5f:ce:9f:ee:d6:1c:16:f5:05:27: 3c:ce:cb:e2:f8:8f:5f:2c:d7:48:53:4f:45:d1:c2:9b:91:4a: 8c:f8:09:61:32:b3:44:bb:de:df:46:3c:78:ea:fc:2b:02:c0: 08:c9:8c:53:fa:e5:be:da:67:6b:4e:a5:18:8c:59:7d:23:88: 30:f4:a7:fd:9f:66:9b:20:3f:dd:f6:32:dc:12:af:b7:aa:99: 28:f9:f1:63:bb:4b:5d:58:12:f2:6b:27:cf:51:93:fe:df:49: 66:12:bf:51:b3:f8:17:34:c2:80:5f:31:e0:17:79:af:6a:ee: 5c:71:2a:05:50:4b:b0:55:89:ab:4b:be:cc:c4:f7:0f:9b:7b: 7b:e2:7e:c1:75:4f:60:52:91:5b:12:ac:ef:50:39:d6:3b:7d: 8e:7f:36:ff:90:80:bc:a7:9e:83:39:bf:d8:58:a1:d2:01:63: 22:10:d0:28:fa:82:a4:7b:24:ac:a5:d2:9d:ae:b4:89:22:25: cd:87:29:b3:b4:36:6a:ad:f7:17:65:62:b5:ed:5b:0d:df:67: 6b:71:ee:04:95:df:68:13:c6:89:5f:cf:83:09:bc:76:72:8e: f8:0c:b2:0e:bb:b9:75:a0:52:04:a9:f7:67:a0:71:92:2c:fa: b1:f7:0a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/TANBThu+poNZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxN1oXDTI1MDczMDE3MjUxN1owLzEtMCsGA1UEAxMk ZmYzYTYyNGItNzE3Mi00ZTk2LWI2NWEtYjA5ODcyOWU2ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MSPj6LRxYJDFvLy1WHUMS3c8ct4dGeSWvEr HU5dYJx/H07T38vaN/wzAKkA6/SB2Uh/aV2svFuxPfMohM9DDJ/K5SYKEKaiiyf+ jCjUA7n9+4Bbh9TtbnNpo3cqDmjwJbz86CG+/7hfsemhYIyNLOkq893eov4/dRGt KSxHNxyYl+DPhYV430QvusddRIzQuls5XRUI5fncWo0yrWCnd0IgeWB+vobrdH1E OMtNINjVQZKfQfW5x6405vqYv2PyoLZ82aV7mtUz7fyYcBeZD8mz51sSiFZs6xVv tSZP1cLzyQtYrJ7R3ycmZh/5zifNFlrFT+c66nzJY+KFWqiy5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv9VxBEaMuhWGv0aTvJ7osVCaT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmU4MGQ1NzMtMDExZC0z NTk3LWE3ODUtZTY4Yjg3YWY2OWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8+AsxeBSboX86f7tYcFvUFJzzOy+L4j18s10hTT0XRwpuRSoz4CWEy s0S73t9GPHjq/CsCwAjJjFP65b7aZ2tOpRiMWX0jiDD0p/2fZpsgP932MtwSr7eq mSj58WO7S11YEvJrJ89Rk/7fSWYSv1Gz+Bc0woBfMeAXea9q7lxxKgVQS7BViatL vszE9w+be3vifsF1T2BSkVsSrO9QOdY7fY5/Nv+QgLynnoM5v9hYodIBYyIQ0Cj6 gqR7JKyl0p2utIkiJc2HKbO0Nmqt9xdlYrXtWw3fZ2tx7gSV32gTxolfz4MJvHZy jvgMsg67uXWgUgSp92egcZIs+rH3CvE= -----END CERTIFICATE-----Generated at Sun May 11 22:41:43 2025 by rpki-client