$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa File: 2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa (raw, json) Hash identifier: HcN1ktPDY6neSJGnO6s6a83P+LHyTyH6ismmtUJLiOs= Subject key identifier: 05:3D:36:25:37:48:68:11:06:CD:F6:DE:89:A2:BB:6F:71:E7:41:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB176B79131DEAC266C3E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 68.225.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:76:b7:91:31:de:ac:26:6c:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=4a3ccb26-c247-434d-a3e1-c1c572bf1999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:ab:9a:6c:6e:4c:bd:d9:8d:e3:d7:42:96: 69:bb:03:d2:f5:bc:66:84:6d:7b:dc:38:9e:36:53: d9:84:75:27:57:6b:52:4c:fc:1e:5a:27:8a:e4:a7: 4c:07:68:14:e1:3f:f6:3e:08:00:61:fb:62:33:b9: 95:7d:3c:e7:65:21:ec:cf:da:a8:9f:87:49:c0:8f: 90:ed:37:cd:1c:0a:fe:f0:f7:5c:f2:55:a1:8d:bd: 5d:3d:23:69:ed:84:ec:3d:cf:9c:ad:d0:20:4a:f2: 12:48:48:d2:ee:89:7e:b2:ac:bd:38:8a:64:ac:24: b8:3b:dc:23:e5:de:c6:a6:e1:cd:87:74:d4:75:1d: 02:14:23:55:66:6d:d3:95:83:c4:b1:1f:98:0f:20: e7:9b:fe:fe:8a:07:61:90:13:8f:52:48:5a:e9:a8: 40:03:5a:0c:09:44:cd:af:be:11:00:09:8d:8a:b2: 4e:52:66:94:51:8f:95:86:96:55:52:76:37:23:51: c5:51:e6:e0:54:95:38:cf:8b:55:27:3b:82:fd:4d: f9:20:e0:5b:4f:ff:e0:b5:82:eb:d8:1a:dd:00:b3: 83:1a:22:d4:28:29:9a:a3:30:a7:f3:cd:34:ef:9d: cb:5c:6f:bc:89:ff:af:8f:1a:50:f4:27:23:55:4b: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3D:36:25:37:48:68:11:06:CD:F6:DE:89:A2:BB:6F:71:E7:41:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e159aa8-b6f7-370a-8b9f-96a37a4d2e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a4:2d:9b:21:31:d2:01:4c:19:74:c1:cb:d2:fb:aa:36:c6: dc:cf:1a:c9:45:15:be:0a:36:26:dd:82:93:82:a8:10:4b:ac: 14:46:8c:6f:cd:e1:15:4b:9c:e9:03:d6:c9:d9:4f:e7:d1:01: 7b:c6:96:a2:e5:60:a3:c4:86:ff:cc:b8:3d:eb:49:20:98:db: 59:f5:cc:77:66:53:78:11:a6:71:b7:47:4e:79:25:a1:7c:64: 3c:03:ed:53:33:f4:3d:53:a1:c3:34:14:07:a2:55:7e:0b:5d: 62:4d:b0:be:bc:2f:5e:52:8f:69:b6:8e:1f:92:4f:a5:42:b9: 9c:d2:3a:99:f1:f4:1d:0e:fb:87:50:de:28:fc:46:ff:10:6b: 52:22:70:3a:f2:0b:af:b1:97:2b:a7:71:60:e8:2b:60:be:3a: b5:a7:3b:6a:d7:ae:f6:61:a3:a0:33:04:fa:9b:13:e2:2c:27: 98:e4:4d:65:41:b8:28:66:74:cf:60:35:c9:dc:14:db:aa:fb: c5:5e:0b:47:f7:f5:05:3f:81:8e:fe:c3:a6:d0:9a:b9:0a:03: ad:9f:6e:ae:a3:88:20:6a:df:70:fb:44:d5:7e:96:af:fc:d5: bb:8b:e7:a9:48:ad:4f:c0:f4:2f:85:44:c0:a7:51:aa:9d:37: 4d:fe:b4:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXa3kTHerCZsPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NGEzY2NiMjYtYzI0Ny00MzRkLWEzZTEtYzFjNTcyYmYxOTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmGrmmxuTL3ZjePXQpZpuwPS9bxmhG173Die NlPZhHUnV2tSTPweWieK5KdMB2gU4T/2PggAYftiM7mVfTznZSHsz9qon4dJwI+Q 7TfNHAr+8Pdc8lWhjb1dPSNp7YTsPc+crdAgSvISSEjS7ol+sqy9OIpkrCS4O9wj 5d7GpuHNh3TUdR0CFCNVZm3TlYPEsR+YDyDnm/7+igdhkBOPUkha6ahAA1oMCUTN r74RAAmNirJOUmaUUY+VhpZVUnY3I1HFUebgVJU4z4tVJzuC/U35IOBbT//gtYLr 2BrdALODGiLUKCmaozCn8800753LXG+8if+vjxpQ9CcjVUvgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU9NiU3SGgRBs323omiu29x50EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmUxNTlhYTgtYjZmNy0z NzBhLThiOWYtOTZhMzdhNGQyZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACakLZshMdIBTBl0wcvS+6o2xtzPGslFFb4KNibdgpOCqBBLrBRGjG/N 4RVLnOkD1snZT+fRAXvGlqLlYKPEhv/MuD3rSSCY21n1zHdmU3gRpnG3R055JaF8 ZDwD7VMz9D1TocM0FAeiVX4LXWJNsL68L15Sj2m2jh+ST6VCuZzSOpnx9B0O+4dQ 3ij8Rv8Qa1IicDryC6+xlyuncWDoK2C+OrWnO2rXrvZho6AzBPqbE+IsJ5jkTWVB uChmdM9gNcncFNuq+8VeC0f39QU/gY7+w6bQmrkKA62fbq6jiCBq33D7RNV+lq/8 1buL56lIrU/A9C+FRMCnUaqdN03+tCE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:26:57 2025 by rpki-client