$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa File: 4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa (raw, json) Hash identifier: 2vp66wEyJM7iOWBiDPTHb8WBVvcBUOydTdbdTAgrjnI= Subject key identifier: A2:C8:00:74:52:87:05:F5:AF:20:B3:6A:70:D2:8B:FF:BD:3D:2E:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848F4F81E912086B745FE626640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 22773 IP address blocks: 68.107.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:1e:91:20:86:b7:45:fe:62:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=21c5863b-a6d9-48b3-846c-c38d3f09ce36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b0:9d:ba:a4:55:ae:fa:01:fc:89:2a:08:6b: 6d:97:3d:16:30:9c:62:f8:8c:8c:68:08:86:a8:a8: e1:05:07:a5:66:1d:3a:fd:4c:97:e4:f9:f9:32:61: c9:aa:53:7b:65:40:93:ed:ea:32:c7:9d:18:5b:78: 3f:c9:20:cb:ad:af:ef:c8:b6:15:4d:76:d0:df:a5: 83:a1:31:13:4b:2e:7c:19:af:47:a4:79:67:5b:51: 02:be:e4:10:d3:12:ab:b1:f9:20:41:a6:40:a5:6a: 38:b4:13:57:c7:ca:cf:f0:b1:3d:cc:f0:6c:59:6c: e8:37:7e:bd:74:e1:fc:fa:3a:33:65:9e:ec:3f:4f: d5:3e:2d:05:7b:29:2c:a4:a0:ba:0c:b0:39:2c:fd: 5b:77:09:8f:9e:43:8a:e7:24:69:bf:00:01:4a:8a: b0:cb:23:e3:4a:fd:ee:70:24:01:aa:5c:13:d8:a3: 57:74:05:ec:a1:1c:85:1c:cc:b6:6d:62:6c:cb:d8: 6e:94:79:3f:a3:02:aa:5a:9a:23:15:39:26:32:69: 43:a2:5c:b4:1f:50:0b:72:bf:c5:9f:0d:5b:20:13: bf:0d:87:f9:db:93:da:f3:05:17:6d:6b:a6:39:89: c3:83:7a:85:cf:e8:0c:d9:ce:78:88:2a:be:2c:05: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:00:74:52:87:05:F5:AF:20:B3:6A:70:D2:8B:FF:BD:3D:2E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fb:6b:a0:92:d5:b7:80:05:bc:54:91:f5:ca:d0:96:53:ab: 27:c0:ed:30:a9:fd:f2:80:16:04:ea:ca:4d:f6:1b:86:3a:b1: f3:88:85:93:3c:c4:33:ac:84:2f:aa:eb:d0:10:0b:3c:82:23: de:d0:ab:14:2c:53:e8:b1:6d:18:71:d7:9f:a8:1a:12:2f:83: 70:db:fe:fe:6d:70:a0:ac:bd:55:2a:c9:74:ad:63:a7:d8:a7: d3:ea:09:a3:99:c9:40:64:57:25:54:bd:39:db:c7:1b:1a:61: d0:7a:aa:ca:71:b3:a3:94:09:28:39:09:30:7b:c8:b0:e0:57: 62:ea:34:ff:4c:46:38:09:c8:75:61:a8:48:c8:b0:ce:db:6e: 8a:6f:3f:b9:e7:f4:39:2f:52:a3:e5:b1:fd:5e:7b:6e:e0:f6: bf:0a:bc:1c:14:9c:94:ad:2e:fb:40:ff:9c:8e:fe:75:0d:d0: 41:62:8a:f0:da:ee:bc:c9:8a:72:12:77:63:00:21:65:5b:a0: 4c:09:0e:fb:61:09:36:a3:0b:9a:39:de:80:e0:e1:48:48:0b: c9:99:bf:25:7b:80:30:43:3d:d8:86:3c:20:f4:b6:cf:dd:d4: 08:e4:96:8f:a8:33:53:46:96:71:d4:c2:b9:5b:1a:1f:a6:ac: 60:12:48:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+B6RIIa3Rf5iZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjFjNTg2M2ItYTZkOS00OGIzLTg0NmMtYzM4ZDNmMDljZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7CduqRVrvoB/IkqCGttlz0WMJxi+IyMaAiG qKjhBQelZh06/UyX5Pn5MmHJqlN7ZUCT7eoyx50YW3g/ySDLra/vyLYVTXbQ36WD oTETSy58Ga9HpHlnW1ECvuQQ0xKrsfkgQaZApWo4tBNXx8rP8LE9zPBsWWzoN369 dOH8+jozZZ7sP0/VPi0FeykspKC6DLA5LP1bdwmPnkOK5yRpvwABSoqwyyPjSv3u cCQBqlwT2KNXdAXsoRyFHMy2bWJsy9hulHk/owKqWpojFTkmMmlDoly0H1ALcr/F nw1bIBO/DYf525Pa8wUXbWumOYnDg3qFz+gM2c54iCq+LAUlSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLIAHRShwX1ryCzanDSi/+9PS6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGNjYTllNmYtYjY1MS0z MzdhLWE4NTMtNmFlNGEzZGUxZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz7a6CS1beABbxUkfXK0JZTqyfA7TCp/fKAFgTqyk32G4Y6sfOIhZM8 xDOshC+q69AQCzyCI97QqxQsU+ixbRhx15+oGhIvg3Db/v5tcKCsvVUqyXStY6fY p9PqCaOZyUBkVyVUvTnbxxsaYdB6qspxs6OUCSg5CTB7yLDgV2LqNP9MRjgJyHVh qEjIsM7bbopvP7nn9DkvUqPlsf1ee27g9r8KvBwUnJStLvtA/5yO/nUN0EFiivDa 7rzJinISd2MAIWVboEwJDvthCTajC5o53oDg4UhIC8mZvyV7gDBDPdiGPCD0ts/d 1Ajklo+oM1NGlnHUwrlbGh+mrGASSBQ= -----END CERTIFICATE-----Generated at Sun Apr 6 16:00:17 2025 by rpki-client