$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa File: 28f48885-1529-3cc6-99f5-c11c8192cce8.roa (raw, json) Hash identifier: p4X4PUQV3KM1oqIlBQ2Iw3rNyFKsusvx0XU1DhxUc1M= Subject key identifier: 59:10:63:C8:27:93:BD:D7:FA:62:E5:27:1D:73:91:31:E2:1E:03:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB176DBEB09B317DCC50700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 68.230.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:76:db:eb:09:b3:17:dc:c5:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=85d9c87d-951c-442f-90f9-e667553002ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:f8:f8:30:75:de:33:58:a3:55:ad:4d:ad: 62:ab:da:13:9f:d7:b9:7e:89:81:06:15:24:34:1c: 13:ee:b0:f6:49:57:cb:03:a5:df:ef:2c:0b:65:e5: 95:0b:a1:c7:98:6e:df:ec:fe:39:8e:94:54:eb:a6: d6:7d:d5:4f:1f:6b:4e:3a:24:ac:30:d7:b4:43:21: 04:89:3e:47:67:67:f2:8a:9a:80:8b:e1:7a:96:fa: 0d:48:cc:67:b4:20:78:22:45:72:55:d5:38:6e:34: 27:5d:f8:88:8b:80:8f:ed:92:30:f9:ae:9e:fd:c8: c0:55:00:70:c5:54:12:f7:75:50:ed:79:43:32:a9: b9:d2:6e:ab:26:26:7f:ba:53:45:fb:25:b3:f7:8e: 24:8d:b2:a1:7f:80:4f:9a:5f:3e:15:7a:c1:cf:17: 28:97:0e:27:27:db:6c:ae:93:db:e2:94:31:34:66: b7:06:77:b1:a5:f9:bc:c0:31:4d:ec:63:c6:eb:31: 4c:e9:2d:e9:77:58:41:b2:bf:27:65:94:55:64:3c: 2b:56:4a:63:4f:7f:dc:f1:95:67:e4:ed:84:17:1d: 3c:25:8a:60:b6:35:dc:86:bf:4c:74:62:6d:dd:4f: 4f:bc:5e:6d:14:80:ed:1a:b9:25:9d:61:fd:72:38: dc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:63:C8:27:93:BD:D7:FA:62:E5:27:1D:73:91:31:E2:1E:03:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28f48885-1529-3cc6-99f5-c11c8192cce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:93:84:b6:2e:c0:9d:ee:b4:d2:7e:ba:6d:50:e7:3c:33:4b: 1b:14:b1:35:d9:e7:b3:7c:07:b2:e3:1c:7d:07:81:88:7c:73: b7:7c:0e:b3:ac:e0:08:cd:a6:b3:4d:9f:40:17:a4:d6:9c:71: fb:59:ba:50:3a:e3:74:ce:08:34:5c:c7:3f:90:cc:f5:86:96: 6a:06:9e:49:2f:43:c3:ca:8f:ad:bb:f9:6b:d4:d6:0e:7e:68: 9f:03:96:33:60:23:f4:5c:9e:0f:03:b9:2e:a6:b0:6a:36:c7: 57:bb:6d:88:f4:3e:9f:47:06:35:7b:4a:34:01:17:e7:54:de: 10:29:ee:b7:a7:23:c8:bb:cf:bb:8b:b2:94:dd:55:0d:47:7a: b9:65:89:b7:b7:11:1c:ca:ce:b4:b4:9c:d7:0e:41:95:dc:31: 49:76:90:9e:9f:99:c0:3f:b8:76:ed:35:72:04:8e:fb:48:9e: c9:8f:f6:34:60:29:7c:87:79:98:26:b8:28:12:a2:1d:8b:fb: c6:fb:6d:3a:4d:07:dd:b9:72:47:ae:c7:58:e2:25:68:d9:20: d0:cc:a9:4c:9d:fe:97:4d:70:d1:2f:7b:cc:69:ba:c7:5a:c8: 0e:5f:ff:4b:36:6d:ec:83:39:aa:e6:84:37:2b:f1:8b:5b:7a: b2:71:92:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXbb6wmzF9zFBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ODVkOWM4N2QtOTUxYy00NDJmLTkwZjktZTY2NzU1MzAwMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcL4+DB13jNYo1WtTa1iq9oTn9e5fomBBhUk NBwT7rD2SVfLA6Xf7ywLZeWVC6HHmG7f7P45jpRU66bWfdVPH2tOOiSsMNe0QyEE iT5HZ2fyipqAi+F6lvoNSMxntCB4IkVyVdU4bjQnXfiIi4CP7ZIw+a6e/cjAVQBw xVQS93VQ7XlDMqm50m6rJiZ/ulNF+yWz944kjbKhf4BPml8+FXrBzxcolw4nJ9ts rpPb4pQxNGa3Bnexpfm8wDFN7GPG6zFM6S3pd1hBsr8nZZRVZDwrVkpjT3/c8ZVn 5O2EFx08JYpgtjXchr9MdGJt3U9PvF5tFIDtGrklnWH9cjjcsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkQY8gnk73X+mLlJx1zkTHiHgMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhmNDg4ODUtMTUyOS0z Y2M2LTk5ZjUtYzExYzgxOTJjY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2ThLYuwJ3utNJ+um1Q5zwzSxsUsTXZ57N8B7LjHH0HgYh8c7d8DrOs 4AjNprNNn0AXpNaccftZulA643TOCDRcxz+QzPWGlmoGnkkvQ8PKj627+WvU1g5+ aJ8DljNgI/Rcng8DuS6msGo2x1e7bYj0Pp9HBjV7SjQBF+dU3hAp7renI8i7z7uL spTdVQ1Herllibe3ERzKzrS0nNcOQZXcMUl2kJ6fmcA/uHbtNXIEjvtInsmP9jRg KXyHeZgmuCgSoh2L+8b7bTpNB925ckeux1jiJWjZINDMqUyd/pdNcNEve8xpusda yA5f/0s2beyDOarmhDcr8YtberJxkqo= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:24 2025 by rpki-client