$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa File: f342d759-5e92-372e-bef5-c4dbf2076730.roa (raw, json) Hash identifier: MFkiZckSuh0bg18kt7mXEajJDnGS8NbsSE0qv0WAo0k= Subject key identifier: 84:D7:A2:63:D7:AF:D1:D8:65:AD:90:48:E1:B1:40:C2:8D:49:47:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584949FEA3742E91E098B9C98D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 20269 IP address blocks: 68.228.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:a3:74:2e:91:e0:98:b9:c9:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=f2296426-3be3-4e79-94e4-556fda8a2b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:c0:dd:44:77:80:5b:7e:b9:2d:8c:52:ab: cf:b9:cc:25:e9:52:b8:0f:82:d9:13:9a:8f:d4:0f: e8:44:13:bc:bb:1c:7e:f6:68:7c:cc:8e:ed:18:27: 89:23:86:c1:ac:12:60:93:33:bb:99:0d:30:8d:e5: cd:99:96:22:56:96:1f:a7:59:2a:dc:36:72:36:3e: 0c:cc:af:b0:07:3f:4b:ac:b7:7a:a5:fe:aa:9d:6b: be:a5:c5:1c:aa:11:dc:43:8f:05:b3:95:ae:df:15: ed:d9:3a:e9:7c:a3:48:30:95:63:3f:04:13:ce:ce: fd:39:0a:fa:d9:65:98:d8:31:aa:6f:69:af:b0:e9: 25:82:55:f9:fa:b7:5d:a3:34:93:f9:36:8f:f5:44: 00:a8:bd:26:79:b4:c6:16:3e:c3:73:a9:9e:f7:d0: 5f:f3:0b:79:fd:7f:63:d2:02:65:14:44:ca:cf:27: a9:01:8f:ee:7f:14:58:42:31:6d:b3:7d:e7:77:f9: 4d:f1:8e:14:ab:db:c4:1e:df:c0:9c:50:88:5b:aa: 10:29:f2:f6:f0:a9:8d:0f:ad:f9:05:30:49:47:90: 9f:16:a1:2b:70:c3:39:f0:09:63:f5:ec:81:7b:fa: 16:ad:20:44:f5:1a:19:02:60:58:9e:ac:fb:98:b1: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:A2:63:D7:AF:D1:D8:65:AD:90:48:E1:B1:40:C2:8D:49:47:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b5:26:d2:36:5a:54:ac:00:26:03:30:ac:e8:ed:df:f5:88: 2d:01:6e:ba:fe:86:da:9a:eb:24:52:ed:88:f2:23:6b:b5:2a: dc:d3:77:71:80:99:3c:0d:93:48:52:58:61:c4:75:86:01:12: c0:36:cd:11:a1:19:76:1d:c9:80:91:37:ce:65:d7:e9:16:34: b3:fc:17:d1:d3:03:23:0f:cb:e0:5e:45:b3:ae:de:22:7e:81: 02:3f:53:85:be:64:ad:37:c7:1f:c6:87:23:2d:40:ec:5e:ac: 5c:9c:9c:13:9e:61:af:65:ac:78:90:c2:32:a1:c0:0e:6a:e0: 07:24:16:66:a8:68:05:82:f6:ef:0f:c2:f5:f4:25:66:f8:89: 62:5b:c2:72:a4:7d:86:2f:9c:4f:42:70:e6:c3:c7:c8:f9:b0: df:ca:70:4f:17:30:bc:e6:c6:a6:d8:5a:bf:7e:7e:f4:99:53: cc:f9:ea:24:e8:d7:44:6d:87:59:63:f3:8c:b8:20:f7:02:f0: 14:24:ab:2d:21:75:b4:6c:55:bd:a0:3f:6c:93:ca:d0:45:32: 8c:93:8f:93:8b:d7:af:58:4d:1b:5a:5a:b8:e0:86:41:6d:2f: 96:49:bf:2d:e4:ea:6a:7f:07:ca:43:5e:27:c9:6d:0f:09:58: b2:27:8d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/qN0LpHgmLnJjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZjIyOTY0MjYtM2JlMy00ZTc5LTk0ZTQtNTU2ZmRhOGEyYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8vA3UR3gFt+uS2MUqvPucwl6VK4D4LZE5qP 1A/oRBO8uxx+9mh8zI7tGCeJI4bBrBJgkzO7mQ0wjeXNmZYiVpYfp1kq3DZyNj4M zK+wBz9LrLd6pf6qnWu+pcUcqhHcQ48Fs5Wu3xXt2TrpfKNIMJVjPwQTzs79OQr6 2WWY2DGqb2mvsOklglX5+rddozST+TaP9UQAqL0mebTGFj7Dc6me99Bf8wt5/X9j 0gJlFETKzyepAY/ufxRYQjFts33nd/lN8Y4Uq9vEHt/AnFCIW6oQKfL28KmND635 BTBJR5CfFqErcMM58Alj9eyBe/oWrSBE9RoZAmBYnqz7mLH7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITXomPXr9HYZa2QSOGxQMKNSUfoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjM0MmQ3NTktNWU5Mi0z NzJlLWJlZjUtYzRkYmYyMDc2NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARORvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe1JtI2WlSsACYDMKzo7d/1iC0Bbrr+htqa6yRS7YjyI2u1KtzTd3GA mTwNk0hSWGHEdYYBEsA2zRGhGXYdyYCRN85l1+kWNLP8F9HTAyMPy+BeRbOu3iJ+ gQI/U4W+ZK03xx/GhyMtQOxerFycnBOeYa9lrHiQwjKhwA5q4AckFmaoaAWC9u8P wvX0JWb4iWJbwnKkfYYvnE9CcObDx8j5sN/KcE8XMLzmxqbYWr9+fvSZU8z56iTo 10Rth1lj84y4IPcC8BQkqy0hdbRsVb2gP2yTytBFMoyTj5OL169YTRtaWrjghkFt L5ZJvy3k6mp/B8pDXifJbQ8JWLInjc8= -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:58 2025 by rpki-client