$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa File: 4756cdf9-dbdb-316f-9804-46d9feac8da1.roa (raw, json) Hash identifier: giXmLZiZZa0igN8fdWuyGal3qrOmBcIjq7zFNn7iyIc= Subject key identifier: BF:4A:FA:E3:39:DC:94:1F:66:07:CD:BE:77:22:6D:86:70:9B:32:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCEC460344C86DB6201E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa Signing time: Thu 01 May 2025 17:24:45 +0000 ROA not before: Thu 01 May 2025 17:24:45 +0000 ROA not after: Wed 30 Jul 2025 17:24:45 +0000 asID: 22773 IP address blocks: 68.7.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:ec:46:03:44:c8:6d:b6:20:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:45 2025 GMT Not After : Jul 30 17:24:45 2025 GMT Subject: CN=04e8cde4-e0eb-46e0-9da5-d0833ed58587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:ce:8d:2a:d8:b7:c1:dd:90:d5:8f:b6:f4: ea:f6:96:8c:19:72:e9:20:a1:8f:38:d9:90:60:a3: 57:79:fc:04:8d:73:8b:67:4a:09:cc:01:f1:ac:4d: 7b:b0:aa:0f:e2:6d:76:b1:c2:42:f0:b8:de:d8:12: 37:11:10:a1:65:53:96:3e:7f:60:10:3d:88:42:da: 70:0e:f7:21:0c:73:e2:3f:ce:33:3b:2c:d5:59:62: 76:de:44:e7:61:a9:36:fa:bb:55:ff:94:f4:dc:c9: 02:0e:12:94:bf:2b:4d:98:63:f6:82:67:b2:14:06: 45:b5:b6:5e:46:58:58:33:35:90:59:f9:42:fe:cf: a1:a4:7d:6a:9e:b9:da:50:a5:f9:03:4a:e8:b0:08: 14:08:43:59:9c:7c:6d:bd:16:8b:66:50:34:2a:07: 0b:dd:ff:0d:34:7f:bc:3b:14:af:ea:ae:83:ff:02: 5d:8c:54:ad:5d:04:39:58:11:17:22:ff:f1:61:2e: 0c:58:e7:c9:77:e1:db:88:5e:74:d3:c9:57:ef:8a: b4:37:e6:56:d0:ce:f6:86:84:b3:96:c8:90:b4:0c: 27:a7:55:e6:55:7b:cb:7e:ec:90:a0:a0:f3:94:9f: 08:8e:b3:01:3d:8b:32:69:a4:8f:95:d1:a1:33:11: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4A:FA:E3:39:DC:94:1F:66:07:CD:BE:77:22:6D:86:70:9B:32:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4756cdf9-dbdb-316f-9804-46d9feac8da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:22:d6:74:25:df:88:5d:0c:2a:3c:a1:9b:5e:50:73:78:5d: b9:7a:1b:c2:ea:1a:e8:c1:6e:e7:6f:05:5a:19:1a:72:1a:5a: fc:9d:d5:25:49:dd:f8:36:ad:34:c2:bb:27:b4:06:89:cb:c6: fe:f2:cd:8d:8a:25:b1:7f:31:f0:60:1f:67:a3:c6:19:bb:54: e2:26:28:79:8b:ce:51:be:c3:18:0a:fe:62:f1:45:8d:25:d2: cb:19:70:01:78:f9:87:cb:c8:b1:87:9c:cd:a7:89:ed:4b:e7: 2f:8c:c8:75:89:cc:67:23:d5:e7:84:b8:c1:11:2e:76:dd:11: b1:b3:ce:40:14:4c:4e:cc:a1:63:a6:3f:d4:f0:34:1a:25:08: e3:02:a3:a1:0d:9c:21:c5:75:64:e4:99:73:3f:aa:9e:96:c9: 91:59:25:0c:71:aa:82:e8:e1:e4:05:f4:0e:ba:c9:72:a6:ed: 50:1c:77:b1:03:7a:fe:46:15:fe:5a:d4:2f:f9:c4:9e:32:e2: bd:8e:3e:0a:e9:cf:1b:05:ea:32:c3:32:72:e5:38:77:da:3e: 42:26:ea:44:89:84:db:dd:de:22:92:df:44:5d:f8:25:78:27: 3d:eb:f8:1c:4f:da:b3:19:73:45:e5:81:4d:85:e6:6e:16:cc: f3:49:a6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/OxGA0TIbbYgHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ0NVoXDTI1MDczMDE3MjQ0NVowLzEtMCsGA1UEAxMk MDRlOGNkZTQtZTBlYi00NmUwLTlkYTUtZDA4MzNlZDU4NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo3OjSrYt8HdkNWPtvTq9paMGXLpIKGPONmQ YKNXefwEjXOLZ0oJzAHxrE17sKoP4m12scJC8Lje2BI3ERChZVOWPn9gED2IQtpw DvchDHPiP84zOyzVWWJ23kTnYak2+rtV/5T03MkCDhKUvytNmGP2gmeyFAZFtbZe RlhYMzWQWflC/s+hpH1qnrnaUKX5A0rosAgUCENZnHxtvRaLZlA0KgcL3f8NNH+8 OxSv6q6D/wJdjFStXQQ5WBEXIv/xYS4MWOfJd+HbiF5008lX74q0N+ZW0M72hoSz lsiQtAwnp1XmVXvLfuyQoKDzlJ8IjrMBPYsyaaSPldGhMxGRHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9K+uM53JQfZgfNvncibYZwmzIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc1NmNkZjktZGJkYi0z MTZmLTk4MDQtNDZkOWZlYWM4ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMi1nQl34hdDCo8oZteUHN4Xbl6G8LqGujBbudvBVoZGnIaWvyd1SVJ 3fg2rTTCuye0BonLxv7yzY2KJbF/MfBgH2ejxhm7VOImKHmLzlG+wxgK/mLxRY0l 0ssZcAF4+YfLyLGHnM2nie1L5y+MyHWJzGcj1eeEuMERLnbdEbGzzkAUTE7MoWOm P9TwNBolCOMCo6ENnCHFdWTkmXM/qp6WyZFZJQxxqoLo4eQF9A66yXKm7VAcd7ED ev5GFf5a1C/5xJ4y4r2OPgrpzxsF6jLDMnLlOHfaPkIm6kSJhNvd3iKS30Rd+CV4 Jz3r+BxP2rMZc0XlgU2F5m4WzPNJpjc= -----END CERTIFICATE-----Generated at Mon Jun 16 05:30:03 2025 by rpki-client