$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa File: cef4f778-e1a3-377a-adcf-2947f257161d.roa (raw, json) Hash identifier: AOQekHKkTgXzoTd8ZSexcnVfzijenQV/UfRWthk5lTA= Subject key identifier: F9:D2:B5:7B:5B:97:D9:AF:31:A4:05:D4:88:2F:15:B1:5C:44:F2:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5E504DC1300319A74E20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 68.225.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:5e:50:4d:c1:30:03:19:a7:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=b5de40db-6ce2-48b8-bf1d-c96715b19198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0f:d7:62:5c:47:90:33:35:44:85:46:c6:24: d2:02:02:38:a7:5b:a7:13:59:fc:24:3d:92:e8:72: eb:38:49:77:46:e2:e9:c9:cd:19:f5:e9:e3:8a:3d: 65:33:5e:e8:32:c0:12:e4:c8:79:2b:2b:ca:0c:e1: e9:1f:f6:15:66:20:d9:ed:3a:2d:99:40:11:1e:eb: 53:de:d5:fc:a3:cf:f8:9d:9b:f4:ee:24:2e:da:6b: b4:db:90:59:ed:f1:fc:e7:47:96:2e:a2:f4:0e:2c: 24:0f:6b:fe:d1:7b:8c:8f:e4:1d:f0:cb:04:e7:a5: c6:e6:d2:b4:33:1a:04:4c:f0:25:a4:4d:59:87:67: a4:82:e4:20:12:72:b4:d0:1b:0a:ed:22:d1:06:4e: d8:f2:9d:d8:4d:45:ea:e1:4b:f7:0d:8d:0b:27:1e: 8e:95:94:8d:33:ba:2d:ed:b3:dd:41:a2:f9:d3:87: ff:ee:f5:a9:35:15:28:31:d1:c2:33:13:71:b8:96: 3a:da:76:37:55:15:5f:e0:65:4a:85:2e:00:f0:4d: 7b:44:41:f7:4f:9b:bc:a6:6f:b4:20:3a:ff:36:df: c3:96:b7:a5:b4:c2:51:4c:0e:8e:d0:6a:2a:c4:4a: f5:b7:10:70:84:43:dd:bc:1a:b3:c7:3c:a2:02:1e: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:B5:7B:5B:97:D9:AF:31:A4:05:D4:88:2F:15:B1:5C:44:F2:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cef4f778-e1a3-377a-adcf-2947f257161d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:83:88:34:1b:b6:f2:8c:92:42:ef:bf:38:98:8a:c1:6b:a1: 3f:eb:90:ca:ef:c5:3c:76:ae:55:49:f8:9b:0d:ee:f1:11:ad: 22:6b:c3:89:49:8e:c5:7f:e5:00:47:48:ab:fd:76:57:88:ff: a2:7d:e0:a8:a8:b2:59:42:c5:99:82:48:93:68:da:42:23:8a: d4:a1:3e:53:0a:e0:08:3d:5c:01:0b:68:96:cd:fb:d6:08:d9: 94:c9:51:d7:26:db:65:4c:8a:f5:52:0e:f9:5e:0d:30:d5:fd: ee:ac:21:a5:68:ea:ed:89:ac:34:d2:1f:08:1b:68:f4:6b:77: 8f:56:2e:a0:45:ba:76:c7:56:53:e9:86:a3:4b:8f:44:cc:5d: 70:ed:18:82:38:83:fb:4d:a7:b1:7a:92:e2:89:86:ed:e6:64: 07:bd:98:2b:3a:a9:5a:1f:ee:fc:42:d8:35:21:04:ff:2e:6d: 58:00:e1:ae:0e:7f:7b:42:3f:d9:ad:f0:85:ec:bb:71:6b:19: 25:13:dc:83:40:89:a1:6b:97:c9:6f:00:a7:1e:65:b4:09:d3: a3:cc:04:85:ea:48:01:fc:a3:55:8b:33:88:66:5d:3d:10:51: 58:01:b8:68:20:ec:84:df:2d:a7:be:0a:a7:6a:b2:20:3c:8f: 20:52:76:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6l5QTcEwAxmnTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk YjVkZTQwZGItNmNlMi00OGI4LWJmMWQtYzk2NzE1YjE5MTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA/XYlxHkDM1RIVGxiTSAgI4p1unE1n8JD2S 6HLrOEl3RuLpyc0Z9enjij1lM17oMsAS5Mh5KyvKDOHpH/YVZiDZ7TotmUARHutT 3tX8o8/4nZv07iQu2mu025BZ7fH850eWLqL0DiwkD2v+0XuMj+Qd8MsE56XG5tK0 MxoETPAlpE1Zh2ekguQgEnK00BsK7SLRBk7Y8p3YTUXq4Uv3DY0LJx6OlZSNM7ot 7bPdQaL504f/7vWpNRUoMdHCMxNxuJY62nY3VRVf4GVKhS4A8E17REH3T5u8pm+0 IDr/Nt/DlreltMJRTA6O0GoqxEr1txBwhEPdvBqzxzyiAh5Z9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnStXtbl9mvMaQF1IgvFbFcRPJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2VmNGY3NzgtZTFhMy0z NzdhLWFkY2YtMjk0N2YyNTcxNjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyDiDQbtvKMkkLvvziYisFroT/rkMrvxTx2rlVJ+JsN7vERrSJrw4lJ jsV/5QBHSKv9dleI/6J94KiosllCxZmCSJNo2kIjitShPlMK4Ag9XAELaJbN+9YI 2ZTJUdcm22VMivVSDvleDTDV/e6sIaVo6u2JrDTSHwgbaPRrd49WLqBFunbHVlPp hqNLj0TMXXDtGII4g/tNp7F6kuKJhu3mZAe9mCs6qVof7vxC2DUhBP8ubVgA4a4O f3tCP9mt8IXsu3FrGSUT3INAiaFrl8lvAKceZbQJ06PMBIXqSAH8o1WLM4hmXT0Q UVgBuGgg7ITfLae+CqdqsiA8jyBSdoQ= -----END CERTIFICATE-----Generated at Tue Jun 17 20:18:54 2025 by rpki-client