$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa File: f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa (raw, json) Hash identifier: TcPhXxN7Cm8cGG92F8rTQr20ymUrm87XYiLb4rQ4e5E= Subject key identifier: 1E:7D:A1:A8:0A:ED:C7:C5:D1:B9:67:F0:D4:D3:69:BC:44:ED:29:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858498CFF299BFF5123CF21F77700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 22773 IP address blocks: 68.227.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:29:9b:ff:51:23:cf:21:f7:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=896c18a3-fa1e-4267-bf47-7bea668cd6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:07:b1:e5:0d:43:02:b9:97:b8:56:17:3b: 23:99:70:8b:17:69:4e:ec:8c:22:29:9e:ee:07:78: ed:88:91:0a:1b:f5:a1:9f:97:cb:47:80:1f:96:ff: 92:0b:44:0e:a6:41:a0:87:06:de:00:0d:a3:cb:5d: a2:0f:f5:bd:7a:bc:32:83:14:36:a9:7e:dc:f5:0b: bb:dc:76:61:60:1c:e7:92:88:73:e8:a1:01:5b:91: b5:a7:6b:90:e0:a7:2c:be:f3:90:da:54:ff:a5:4c: cf:c4:34:68:c1:71:a8:d1:3a:06:04:7e:8d:83:06: d3:e1:d0:94:a4:b7:a9:a4:aa:d5:9f:c9:5d:63:01: 81:16:1f:f5:be:9f:74:ab:c0:49:f3:b7:36:05:d0: ef:f5:d1:4e:d1:58:e7:df:43:46:7a:9e:da:fa:11: b0:e6:77:c8:4c:e4:95:4a:ec:cc:d9:41:b7:c5:ee: cd:16:b9:2d:96:a6:6e:18:e9:f4:cc:44:24:dc:84: 1c:6f:7b:e4:36:ff:27:18:79:21:08:78:74:6d:4d: 4c:eb:92:da:f8:91:4c:b0:cd:14:ac:47:58:7c:01: 66:7a:f9:e1:4f:01:d9:1a:80:3a:0b:6c:7d:53:34: 12:b3:7f:22:a9:6e:bd:34:45:c5:81:f8:18:21:bd: 99:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:A1:A8:0A:ED:C7:C5:D1:B9:67:F0:D4:D3:69:BC:44:ED:29:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e7d6e6-2ecc-35ad-b21c-9b7d2e9d179a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f8:88:25:5f:bb:30:7f:b0:8c:86:61:4d:4e:ac:95:5b:ec: fd:85:bb:e8:22:8c:26:12:74:77:36:0e:bd:97:d4:f8:62:07: e5:3d:eb:43:ca:61:a9:6b:04:3e:36:06:1d:e7:f4:53:70:83: 0f:35:47:ba:59:a1:d4:4b:4b:b1:3b:92:67:d7:a9:eb:0d:7e: 78:7a:94:4c:f0:7e:91:30:a4:47:0b:99:c8:e7:9e:d4:12:b7: 90:f9:ec:62:1c:67:38:1f:d6:ca:5e:e1:35:16:6e:7a:da:38: c9:1b:f4:ee:da:80:9f:b0:18:d9:f3:79:e2:45:47:59:82:c3: 3d:7b:84:1e:31:d6:c1:73:86:3a:18:9c:af:a5:9f:a5:2a:80: df:6f:9f:9a:dc:7c:b5:a8:4c:2d:73:65:2e:f0:5c:ee:ca:06: cb:2e:2b:fc:48:be:9b:8b:fb:f2:a8:7c:15:0e:84:8f:9c:c9: 12:76:c9:92:3a:56:2f:3d:92:99:a5:c3:dd:e0:ad:99:a6:c0: ce:95:a8:4b:c2:7a:c9:5d:39:e5:41:67:03:ad:a0:09:24:99: 79:11:23:21:22:bf:b9:9a:65:ae:11:7f:dd:31:8c:47:fc:b4: 2f:63:0d:9a:d9:1c:65:5d:87:fb:a0:6e:85:41:bb:1b:f7:95: 0b:af:4e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/ymb/1EjzyH3dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ODk2YzE4YTMtZmExZS00MjY3LWJmNDctN2JlYTY2OGNkNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgscHseUNQwK5l7hWFzsjmXCLF2lO7IwiKZ7u B3jtiJEKG/Whn5fLR4Aflv+SC0QOpkGghwbeAA2jy12iD/W9erwygxQ2qX7c9Qu7 3HZhYBznkohz6KEBW5G1p2uQ4KcsvvOQ2lT/pUzPxDRowXGo0ToGBH6NgwbT4dCU pLeppKrVn8ldYwGBFh/1vp90q8BJ87c2BdDv9dFO0Vjn30NGep7a+hGw5nfITOSV SuzM2UG3xe7NFrktlqZuGOn0zEQk3IQcb3vkNv8nGHkhCHh0bU1M65La+JFMsM0U rEdYfAFmevnhTwHZGoA6C2x9UzQSs38iqW69NEXFgfgYIb2Z/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB59oagK7cfF0bln8NTTabxE7Sk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjllN2Q2ZTYtMmVjYy0z NWFkLWIyMWMtOWI3ZDJlOWQxNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH4iCVfuzB/sIyGYU1OrJVb7P2Fu+gijCYSdHc2Dr2X1PhiB+U960PK YalrBD42Bh3n9FNwgw81R7pZodRLS7E7kmfXqesNfnh6lEzwfpEwpEcLmcjnntQS t5D57GIcZzgf1spe4TUWbnraOMkb9O7agJ+wGNnzeeJFR1mCwz17hB4x1sFzhjoY nK+ln6UqgN9vn5rcfLWoTC1zZS7wXO7KBssuK/xIvpuL+/KofBUOhI+cyRJ2yZI6 Vi89kpmlw93grZmmwM6VqEvCesldOeVBZwOtoAkkmXkRIyEiv7maZa4Rf90xjEf8 tC9jDZrZHGVdh/ugboVBuxv3lQuvTmg= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:33 2025 by rpki-client