$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddb25f2-00c7-3174-ae0b-8a073f4b157b.roa File: 4ddb25f2-00c7-3174-ae0b-8a073f4b157b.roa (raw, json) Hash identifier: rCbvna71OXWwi8hLknJGIOiCNjiq/q2auWz2NlYb4Xg= Subject key identifier: 78:B3:F6:77:86:78:07:8D:F9:7C:89:7C:86:49:23:3B:D5:94:47:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848EF61495F0F443DE29DD91B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddb25f2-00c7-3174-ae0b-8a073f4b157b.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 22773 IP address blocks: 68.225.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:49:5f:0f:44:3d:e2:9d:d9:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c161ed0e-9013-492d-8ca7-04cc5c165810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:b0:94:ba:d0:6b:b7:13:ad:0d:f8:c2:97: e9:75:05:d8:41:27:e7:77:b1:ac:c9:33:d2:4a:54: 2e:90:a6:46:54:e7:71:9a:80:42:7d:f3:51:47:76: 4c:ab:94:b7:2e:37:34:6c:04:fe:fe:1d:21:15:6f: 78:77:81:79:ed:0f:26:3e:db:83:5e:83:32:01:a8: e2:57:b5:0e:bb:1d:d6:75:b8:db:34:ad:34:5d:06: e0:ba:26:bb:3e:89:0c:0a:76:10:96:52:82:65:b7: 7d:da:bb:61:79:cf:fa:a8:7e:8c:d5:40:ea:05:0a: cc:b5:bd:22:4f:84:3a:6f:4d:20:85:06:fb:47:91: c8:fd:54:1b:ba:1e:56:07:d6:e7:18:fb:d1:86:1b: 49:af:31:06:15:c5:3a:91:f5:59:c8:73:b9:64:b5: f4:1b:ae:0f:9b:67:16:18:72:2f:4d:50:77:16:3e: 62:ae:bd:7e:e3:b2:8e:0e:cf:53:c6:ab:e5:47:b9: ec:d2:d5:f7:a8:e2:09:1a:13:49:55:a2:0f:56:7e: b4:fd:26:b9:8e:cd:32:02:3b:ac:80:3d:08:ed:e0: 85:33:0d:83:98:45:92:f5:4d:69:33:37:26:16:57: 28:e9:83:42:db:b4:15:bd:24:22:70:b6:74:44:84: 25:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B3:F6:77:86:78:07:8D:F9:7C:89:7C:86:49:23:3B:D5:94:47:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddb25f2-00c7-3174-ae0b-8a073f4b157b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:90:24:da:95:b1:e5:f7:ac:68:39:92:d6:43:07:8d:e5:29: aa:f3:b0:99:8d:6d:a1:5d:86:e3:fb:97:1b:ee:b4:57:54:a1: b9:f1:23:97:45:ef:5c:87:1d:bb:fb:7a:49:d5:ef:21:5c:5b: bd:cf:51:1c:8b:3a:75:2a:cb:9b:db:61:db:c1:bb:29:90:52: e3:80:bf:9c:26:54:8b:f9:1c:db:00:f8:7a:ea:bf:30:a8:56: da:73:4d:88:fa:03:c4:96:66:9d:71:c2:8f:35:fe:9c:26:f5: e3:92:23:0c:22:98:cc:fc:4e:78:e9:c2:09:9a:b9:be:1b:56: 3a:cc:2c:5d:3e:74:a0:12:16:bb:b5:e8:f6:da:fc:c4:1f:4d: fa:25:8d:f5:9a:81:83:47:0a:d4:48:40:b4:21:92:3c:e2:00: b9:cb:39:fc:39:c7:c4:36:9d:66:a8:b1:c4:8f:26:ca:a2:a0: 6b:13:1e:da:6a:f4:a4:f1:be:6e:ec:39:ac:d2:0c:9d:68:1f: c7:4d:3e:e3:a9:74:92:e5:fe:b7:a0:63:25:e8:7f:33:a4:6c: fc:84:3b:b2:5a:a4:c0:31:5d:5a:a2:c1:88:89:46:ff:e2:ef: 92:ab:19:11:0a:a4:ae:b1:aa:42:23:28:42:0e:80:89:01:78: c2:86:12:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUlfD0Q94p3ZG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzE2MWVkMGUtOTAxMy00OTJkLThjYTctMDRjYzVjMTY1ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCywlLrQa7cTrQ34wpfpdQXYQSfnd7GsyTPS SlQukKZGVOdxmoBCffNRR3ZMq5S3Ljc0bAT+/h0hFW94d4F57Q8mPtuDXoMyAaji V7UOux3WdbjbNK00XQbguia7PokMCnYQllKCZbd92rthec/6qH6M1UDqBQrMtb0i T4Q6b00ghQb7R5HI/VQbuh5WB9bnGPvRhhtJrzEGFcU6kfVZyHO5ZLX0G64Pm2cW GHIvTVB3Fj5irr1+47KODs9TxqvlR7ns0tX3qOIJGhNJVaIPVn60/Sa5js0yAjus gD0I7eCFMw2DmEWS9U1pMzcmFlco6YNC27QVvSQicLZ0RIQlAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiz9neGeAeN+XyJfIZJIzvVlEeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRkYjI1ZjItMDBjNy0z MTc0LWFlMGItOGEwNzNmNGIxNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmQJNqVseX3rGg5ktZDB43lKarzsJmNbaFdhuP7lxvutFdUobnxI5dF 71yHHbv7eknV7yFcW73PURyLOnUqy5vbYdvBuymQUuOAv5wmVIv5HNsA+HrqvzCo VtpzTYj6A8SWZp1xwo81/pwm9eOSIwwimMz8Tnjpwgmaub4bVjrMLF0+dKASFru1 6Pba/MQfTfoljfWagYNHCtRIQLQhkjziALnLOfw5x8Q2nWaoscSPJsqioGsTHtpq 9KTxvm7sOazSDJ1oH8dNPuOpdJLl/regYyXofzOkbPyEO7JapMAxXVqiwYiJRv/i 75KrGREKpK6xqkIjKEIOgIkBeMKGEjI= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:52 2025 by rpki-client