$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa File: d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa (raw, json) Hash identifier: H1ftjvWvAs0VGY7qKWRJNynmfMJ5pVdjV/VAZrWGnJg= Subject key identifier: 2E:E5:B3:99:E9:6C:0E:93:6E:2C:50:7E:29:71:01:2F:77:66:2F:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848EC96AF64718C926DDA470A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 23000 IP address blocks: 68.15.153.80/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:af:64:71:8c:92:6d:da:47:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=4db24967-1878-42ef-b1d4-d07470431b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fc:1c:df:98:99:40:14:6d:9d:09:fd:e1:d0: 4b:23:a3:62:89:ed:0c:c0:3d:ff:83:1a:10:c4:f5: c4:c8:53:ce:20:f4:15:d7:e2:14:26:d6:58:6d:cf: 0b:19:5e:3f:5a:58:45:07:79:f5:79:61:d8:e1:21: 97:bb:4d:56:20:33:0d:f0:ea:b2:a0:15:5e:4a:7e: 4e:35:9c:fa:84:c5:81:2e:b7:e8:41:63:ca:d4:15: f0:27:52:15:1f:d8:95:3d:cb:30:dc:f9:6b:b8:6d: 9f:98:b4:ff:36:3d:1b:1a:b3:1e:e2:9f:46:87:8f: a0:6d:14:c8:8f:dd:73:73:fb:66:b1:77:9f:37:0b: 93:1a:d0:2d:ea:d6:f7:fe:16:a2:48:c2:13:d8:5a: c2:da:ff:80:9c:6d:2d:60:0f:ff:be:5e:3f:ab:00: 8b:cd:bd:eb:ed:38:11:4a:20:9c:15:82:1d:b9:17: 0f:25:45:27:bb:4c:e8:40:f1:42:c4:56:16:7c:9d: 9a:02:07:1d:b3:1e:74:67:80:8c:0b:c2:35:65:fe: 69:3f:31:3c:a5:be:6e:af:7a:84:12:32:bf:b8:0d: cc:2e:ff:da:68:53:b8:79:ec:ae:67:96:45:21:94: 20:63:18:9f:95:cc:71:89:63:17:cd:06:f9:c0:52: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:B3:99:E9:6C:0E:93:6E:2C:50:7E:29:71:01:2F:77:66:2F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d548e5f1-c39f-32ae-8a1a-3609ee83df27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.153.80/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b6:91:f7:fc:1b:91:aa:a0:ef:b2:b9:19:c5:27:c0:1a:7b: ba:72:52:ca:98:82:19:48:70:f9:c5:b2:df:7a:8c:c2:65:4f: 37:19:01:d7:b0:61:88:93:0a:24:b0:72:8a:35:af:a2:4b:7c: a9:b7:9e:00:bf:da:78:67:50:fd:7b:83:9c:bc:04:1e:09:b6: a0:6c:05:81:f4:4b:85:09:25:17:5e:97:e3:35:27:bd:30:de: bd:f3:5b:38:00:34:6a:30:a6:aa:bf:c4:27:85:6f:b0:43:f0: 81:cd:ae:35:b8:df:25:99:73:95:de:1d:10:a0:49:8a:d7:c2: 21:23:01:c4:c4:a2:da:00:ab:c6:61:eb:5d:7e:8a:c6:ec:dc: 3b:9c:ff:45:cc:e6:41:9e:f3:40:df:64:e1:fb:e1:f7:c3:a9: 63:4c:52:24:ec:2a:dd:b9:d9:4a:ad:af:83:1e:52:87:9f:b2: 9c:e4:59:dd:f3:76:8a:5f:14:e7:f8:4d:5d:42:af:5d:8c:91: 64:b7:74:42:b7:0c:74:c0:12:ba:2d:33:b4:11:0f:92:03:b3: a3:a2:4d:fc:a3:f6:be:1f:7f:e1:9e:17:1e:46:4a:5a:19:71: da:43:d7:a1:4f:d3:93:1a:bd:de:a1:dd:4d:c5:25:a1:06:ef: f3:35:e6:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjslq9kcYySbdpHCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NGRiMjQ5NjctMTg3OC00MmVmLWIxZDQtZDA3NDcwNDMxYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfwc35iZQBRtnQn94dBLI6Niie0MwD3/gxoQ xPXEyFPOIPQV1+IUJtZYbc8LGV4/WlhFB3n1eWHY4SGXu01WIDMN8OqyoBVeSn5O NZz6hMWBLrfoQWPK1BXwJ1IVH9iVPcsw3PlruG2fmLT/Nj0bGrMe4p9Gh4+gbRTI j91zc/tmsXefNwuTGtAt6tb3/haiSMIT2FrC2v+AnG0tYA//vl4/qwCLzb3r7TgR SiCcFYIduRcPJUUnu0zoQPFCxFYWfJ2aAgcdsx50Z4CMC8I1Zf5pPzE8pb5ur3qE EjK/uA3MLv/aaFO4eeyuZ5ZFIZQgYxiflcxxiWMXzQb5wFIXuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC7ls5npbA6TbixQfilxAS93Zi8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDU0OGU1ZjEtYzM5Zi0z MmFlLThhMWEtMzYwOWVlODNkZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDRA+ZUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBLtpH3/BuRqqDvsrkZxSfAGnu6clLKmIIZSHD5xbLfeozCZU83GQHX sGGIkwoksHKKNa+iS3ypt54Av9p4Z1D9e4OcvAQeCbagbAWB9EuFCSUXXpfjNSe9 MN6981s4ADRqMKaqv8QnhW+wQ/CBza41uN8lmXOV3h0QoEmK18IhIwHExKLaAKvG YetdforG7Nw7nP9FzOZBnvNA32Th++H3w6ljTFIk7CrdudlKra+DHlKHn7Kc5Fnd 83aKXxTn+E1dQq9djJFkt3RCtwx0wBK6LTO0EQ+SA7Ojok38o/a+H3/hnhceRkpa GXHaQ9ehT9OTGr3eod1NxSWhBu/zNear -----END CERTIFICATE-----Generated at Sun Apr 6 17:50:24 2025 by rpki-client