$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2485b367-af35-3895-b034-7fe05c79339b.roa File: 2485b367-af35-3895-b034-7fe05c79339b.roa (raw, json) Hash identifier: bwZp91pu59VL0gTSgCRLSXa5vtT8bOmJKiFJXKKtr/A= Subject key identifier: 20:D7:E1:56:FC:F2:CE:04:DC:34:98:96:84:6A:9E:8B:17:31:8F:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848B1F64D640B8C6923368A0080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2485b367-af35-3895-b034-7fe05c79339b.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 22773 IP address blocks: 68.106.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:4d:64:0b:8c:69:23:36:8a:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=4d12436f-e03e-4321-ab67-e8723e8e6700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b4:51:4e:d4:ec:33:99:4c:e4:f4:e8:09:2a: 10:01:cf:a4:f2:68:18:83:2f:20:c1:96:6c:00:2b: 5b:04:9c:c4:20:29:7c:e6:7a:fb:d0:aa:19:dc:4e: 43:8a:c6:98:b4:46:1f:3b:40:ca:f3:a9:3e:65:4f: c0:af:57:1b:ea:3a:73:b7:04:e4:3a:f2:f2:2a:1b: d5:16:fb:f1:88:d8:e7:f2:6f:9e:62:fe:c8:54:99: f8:83:22:b4:5d:04:04:aa:ce:23:84:a7:21:76:3b: da:87:69:0c:e6:28:89:28:b8:42:58:4f:d1:f1:16: 22:5e:0f:f0:67:59:92:5f:35:18:98:81:1d:a8:34: 9d:a7:35:d3:90:55:28:03:e5:55:ab:87:0a:d3:f1: f3:91:41:43:b2:06:f4:f8:4a:04:9e:01:48:da:9f: 38:15:24:af:cc:10:6b:87:11:13:5a:03:df:fd:34: d8:db:e0:1c:9e:0e:ce:68:fd:3c:94:8f:8f:09:b2: b6:cd:f3:d2:65:84:e6:b2:30:71:2f:24:8b:00:06: e7:bf:10:8a:fb:d4:9e:b4:d7:60:6e:5e:26:fa:90: 51:0c:89:d4:db:92:15:58:db:84:01:20:71:ca:d8: e2:bd:c0:3b:a6:08:41:76:6b:95:c1:16:df:af:b7: c2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:E1:56:FC:F2:CE:04:DC:34:98:96:84:6A:9E:8B:17:31:8F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2485b367-af35-3895-b034-7fe05c79339b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:12:1b:5f:c4:14:ca:9e:dd:61:8b:8d:53:15:76:9d:ee:0a: 48:45:55:c4:f5:08:86:91:d2:52:a7:1e:77:18:de:39:f2:8c: 75:a2:ed:c5:1e:0d:e1:75:f1:5b:7e:a8:b1:d7:cb:59:95:3a: 86:0b:82:8a:48:87:09:20:e8:a5:99:03:65:a3:0c:25:0a:59: 54:01:78:cc:18:c8:c5:65:67:3f:11:db:62:aa:04:01:60:fe: 75:62:11:71:5e:f2:47:cc:19:58:3b:a6:bf:05:d4:1d:dd:1f: 17:eb:cf:bd:b5:0b:99:4d:e7:99:ba:31:03:77:c9:5f:f6:07: 6a:61:55:89:e4:1f:85:52:12:13:2d:d0:5b:a3:5e:1c:3f:26: 72:e3:ba:8f:05:87:8c:01:de:00:72:39:b7:58:2a:b3:5a:d9: f6:b0:42:4c:8f:ae:f6:8c:ca:72:3a:0b:ba:b8:57:a2:79:2a: e0:b8:38:4f:38:55:d2:c1:19:2e:b4:27:50:95:a2:a8:da:64: 91:c4:ac:27:3a:7c:b6:1e:a2:06:fa:ce:47:a4:62:e9:0b:93: 1b:c6:1f:fe:c7:df:83:43:29:f3:3e:c4:65:4e:64:00:07:91: 50:46:42:ac:13:d3:01:30:4e:68:58:02:f0:f9:28:1a:c3:c2: e6:22:44:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9k1kC4xpIzaKAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NGQxMjQzNmYtZTAzZS00MzIxLWFiNjctZTg3MjNlOGU2NzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLRRTtTsM5lM5PToCSoQAc+k8mgYgy8gwZZs ACtbBJzEICl85nr70KoZ3E5DisaYtEYfO0DK86k+ZU/Ar1cb6jpztwTkOvLyKhvV FvvxiNjn8m+eYv7IVJn4gyK0XQQEqs4jhKchdjvah2kM5iiJKLhCWE/R8RYiXg/w Z1mSXzUYmIEdqDSdpzXTkFUoA+VVq4cK0/HzkUFDsgb0+EoEngFI2p84FSSvzBBr hxETWgPf/TTY2+Acng7OaP08lI+PCbK2zfPSZYTmsjBxLySLAAbnvxCK+9SetNdg bl4m+pBRDInU25IVWNuEASBxytjivcA7pghBdmuVwRbfr7fCoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDX4Vb88s4E3DSYloRqnosXMY9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ4NWIzNjctYWYzNS0z ODk1LWIwMzQtN2ZlMDVjNzkzMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoSG1/EFMqe3WGLjVMVdp3uCkhFVcT1CIaR0lKnHncY3jnyjHWi7cUe DeF18Vt+qLHXy1mVOoYLgopIhwkg6KWZA2WjDCUKWVQBeMwYyMVlZz8R22KqBAFg /nViEXFe8kfMGVg7pr8F1B3dHxfrz721C5lN55m6MQN3yV/2B2phVYnkH4VSEhMt 0FujXhw/JnLjuo8Fh4wB3gByObdYKrNa2fawQkyPrvaMynI6C7q4V6J5KuC4OE84 VdLBGS60J1CVoqjaZJHErCc6fLYeogb6zkekYukLkxvGH/7H34NDKfM+xGVOZAAH kVBGQqwT0wEwTmhYAvD5KBrDwuYiRGA= -----END CERTIFICATE-----Generated at Mon Apr 7 04:29:29 2025 by rpki-client