$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa File: b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa (raw, json) Hash identifier: 4VGafyS2gb3gEi45Pj4J4uhexkv4Xw9xLhI0Gc+kAys= Subject key identifier: 2C:A7:19:63:B0:2B:C8:9D:DD:4C:D8:49:F8:11:FD:0A:6A:C2:B2:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849806F2B2E8B8CBDBE753C06E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 22773 IP address blocks: 68.225.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:2b:2e:8b:8c:bd:be:75:3c:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=ab2d98cb-9a09-41a8-82fd-a0ffa8ce329f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:bf:f9:81:14:3d:ee:cf:15:e7:66:f0:74: 5b:38:9c:6a:99:a9:b0:e1:fa:54:1d:c8:1b:8b:70: d6:f9:3f:f9:82:da:fb:4e:12:2c:f4:6f:88:7d:ad: 41:67:0e:a9:c0:dd:cb:7b:08:b7:de:82:d9:60:62: 09:64:87:97:28:3c:c3:81:6c:6b:e2:ed:19:93:56: 7a:ee:d8:ce:3a:48:d8:24:75:55:b3:b1:3b:ef:be: 72:1c:ff:fe:68:5c:31:75:11:03:50:3f:e6:cb:e3: 63:b2:bc:65:88:e2:bc:b2:0d:20:f2:5b:99:db:6b: da:46:c0:73:c8:d2:ef:17:9a:86:ee:5f:5a:96:e0: 86:ca:34:94:72:8c:2c:e6:45:dd:0a:5f:54:f5:2d: 86:7c:22:f3:d9:d9:be:f3:64:00:91:46:22:fd:1e: f9:53:aa:37:f0:e6:7a:70:31:aa:cf:58:36:e9:46: 8f:fa:ef:c1:ef:36:33:dd:80:01:89:75:da:d5:8a: 93:73:87:0c:68:f3:ec:d9:8d:e1:45:96:e5:6d:d7: 7d:6a:e9:16:2e:01:98:53:bd:d2:d3:cc:83:e3:69: 0e:46:44:50:0f:8b:e6:e2:0a:d8:b1:57:2b:65:45: e3:b8:29:f7:49:c0:66:0c:1e:44:45:37:dc:48:a9: 53:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A7:19:63:B0:2B:C8:9D:DD:4C:D8:49:F8:11:FD:0A:6A:C2:B2:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5d83e20-23a0-3ae3-a0ba-e1443199afe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:40:7b:f6:a2:d0:ef:64:0c:75:9a:12:ba:9b:5c:19:5f:b7: c8:62:ca:e3:68:82:47:70:16:7c:11:94:29:df:ba:20:4a:7f: 70:5d:c0:88:cf:a0:59:7b:6b:cb:e4:62:b7:7b:9b:36:1c:a9: 2d:0b:db:b2:56:d1:9b:5b:64:e8:92:a1:78:ea:ec:f4:62:44: 17:09:5e:30:7c:66:f0:60:d6:22:eb:ee:ca:b9:60:db:97:1e: 68:e3:51:11:18:27:d3:2f:c1:e6:44:ab:d2:41:71:cb:15:9b: 86:f3:e1:a2:cd:21:3f:50:12:7c:79:3a:03:bc:2d:b2:9d:d2: 9a:f2:65:86:5b:23:c1:7f:72:97:93:ef:61:8f:3c:43:ea:a1: 5f:a8:57:6c:e5:2f:0a:34:7b:5e:8c:93:67:d1:9b:b0:8a:fa: e5:d1:c5:ae:36:c2:51:c9:29:06:92:c4:47:e5:e4:ce:62:c9: 87:b5:b8:2e:7a:ff:74:56:91:98:bf:5a:c6:fa:e7:98:7e:b2: 8d:5a:43:71:b0:9e:4a:ab:3b:31:78:9c:ee:97:ee:2b:f3:50: 56:17:fb:0a:67:c0:cb:c6:4e:41:0f:1f:3d:d5:b0:f6:ef:70: b9:81:91:cd:6f:55:8c:a8:c6:f1:e8:43:9c:7d:34:8c:7b:6d: 94:e6:f0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbysui4y9vnU8BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YWIyZDk4Y2ItOWEwOS00MWE4LTgyZmQtYTBmZmE4Y2UzMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/y/+YEUPe7PFedm8HRbOJxqmamw4fpUHcgb i3DW+T/5gtr7ThIs9G+Ifa1BZw6pwN3Lewi33oLZYGIJZIeXKDzDgWxr4u0Zk1Z6 7tjOOkjYJHVVs7E7775yHP/+aFwxdREDUD/my+NjsrxliOK8sg0g8luZ22vaRsBz yNLvF5qG7l9aluCGyjSUcows5kXdCl9U9S2GfCLz2dm+82QAkUYi/R75U6o38OZ6 cDGqz1g26UaP+u/B7zYz3YABiXXa1YqTc4cMaPPs2Y3hRZblbdd9aukWLgGYU73S 08yD42kORkRQD4vm4grYsVcrZUXjuCn3ScBmDB5ERTfcSKlT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCynGWOwK8id3UzYSfgR/QpqwrJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjVkODNlMjAtMjNhMC0z YWUzLWEwYmEtZTE0NDMxOTlhZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABAe/ai0O9kDHWaErqbXBlft8hiyuNogkdwFnwRlCnfuiBKf3BdwIjP oFl7a8vkYrd7mzYcqS0L27JW0ZtbZOiSoXjq7PRiRBcJXjB8ZvBg1iLr7sq5YNuX HmjjUREYJ9MvweZEq9JBccsVm4bz4aLNIT9QEnx5OgO8LbKd0pryZYZbI8F/cpeT 72GPPEPqoV+oV2zlLwo0e16Mk2fRm7CK+uXRxa42wlHJKQaSxEfl5M5iyYe1uC56 /3RWkZi/Wsb655h+so1aQ3GwnkqrOzF4nO6X7ivzUFYX+wpnwMvGTkEPHz3VsPbv cLmBkc1vVYyoxvHoQ5x9NIx7bZTm8Lo= -----END CERTIFICATE-----Generated at Sat Apr 26 21:31:44 2025 by rpki-client