$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc8438b0-3b8f-3f4e-802e-e77b74267bf8.roa File: dc8438b0-3b8f-3f4e-802e-e77b74267bf8.roa (raw, json) Hash identifier: /QVL6Hiw0Lxzv0whVPfL0NEkKGXy9XU+V0uth1OH//0= Subject key identifier: E5:0F:E1:F4:88:9A:AA:6C:B9:C0:71:32:90:E1:2A:8B:97:95:3A:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848A1361E716506FA54893A8680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc8438b0-3b8f-3f4e-802e-e77b74267bf8.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 22773 IP address blocks: 68.106.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1e:71:65:06:fa:54:89:3a:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=ea1ed50e-a527-423f-bd2e-72b047e54019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c3:5d:1c:ba:3f:91:5b:e4:17:85:30:c7:c7: f5:97:b6:e6:36:e9:68:92:dc:78:45:37:11:7d:2c: 7a:87:c8:bb:b8:06:6f:93:48:55:a8:95:6c:f6:50: b4:a1:10:08:5d:23:a8:f7:37:66:fb:08:ed:9b:85: 25:c7:95:d2:3f:c2:7a:d1:df:43:0f:86:3c:3a:0e: 26:06:6c:e0:c2:a0:22:04:82:45:87:1b:c8:dc:eb: d5:21:38:02:52:96:47:83:06:91:ae:13:cf:66:7f: 55:49:73:cf:f7:8b:f8:3f:41:76:2e:28:2f:43:d7: 11:fd:69:bc:72:9f:52:ce:a4:e1:50:25:36:b6:ea: 1a:dc:49:25:5c:84:80:04:1d:35:32:4a:eb:9c:ad: 66:53:56:1d:b6:01:98:7b:c2:b9:29:91:1e:95:a2: 86:2c:4b:c0:b6:56:f9:b0:9b:40:0b:e3:67:df:51: 08:ba:cc:87:39:e8:df:0b:c9:e2:35:e8:b3:d2:ca: 19:f6:35:8c:ac:fb:18:25:5d:1e:f6:75:e6:c2:2f: bc:48:27:21:7b:6a:a2:30:f9:5f:b7:3d:5b:a4:28: d1:51:57:f1:6b:d4:84:d2:21:87:64:2f:f2:9d:c8: 66:8c:24:6f:34:e3:be:5c:c1:24:67:11:3a:d5:94: 31:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:E1:F4:88:9A:AA:6C:B9:C0:71:32:90:E1:2A:8B:97:95:3A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dc8438b0-3b8f-3f4e-802e-e77b74267bf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8f:a5:2c:b6:34:a0:70:53:39:b5:fd:87:b9:85:62:c3:f6: f0:a2:2c:02:df:7c:f0:dd:cd:74:4c:db:69:dc:94:83:fb:52: 7d:3e:b5:35:1f:35:eb:8a:5a:be:36:ed:2f:11:b3:59:f6:0f: 0f:2e:44:c0:64:fe:88:63:5d:d2:b7:9c:ee:2b:c7:91:0a:36: 54:04:a4:45:2e:0e:ab:22:17:b4:3c:f6:a5:d1:bd:c7:a3:71: 9e:ab:9a:d2:04:46:a3:91:8a:6b:8e:ce:49:86:a6:43:5c:34: ed:46:eb:13:75:0a:74:c9:53:70:2e:08:0f:68:1b:5b:f7:be: 19:1a:ac:a6:86:d3:ab:e4:89:25:59:37:85:5d:a1:d7:43:dc: d7:d1:ae:cd:5b:d4:1a:8b:db:ad:5f:0c:6e:f6:53:81:90:a5: 13:75:69:47:4c:ec:f2:79:b8:eb:e0:d0:cd:e2:b3:08:93:74: 0d:0f:19:39:0e:52:33:22:2f:9b:c4:67:e1:b4:15:4a:89:d1: 6f:85:d4:15:14:98:7e:3d:6c:63:3c:fc:c0:62:e5:5e:f5:cb: a2:56:f8:41:88:26:70:1f:46:f8:cf:a2:3b:a0:74:f4:a4:e7: dd:f0:17:e8:8b:ac:1c:78:8c:a1:92:0a:49:d9:4a:7b:44:d4: ed:0c:5a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh5xZQb6VIk6hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZWExZWQ1MGUtYTUyNy00MjNmLWJkMmUtNzJiMDQ3ZTU0MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sNdHLo/kVvkF4Uwx8f1l7bmNuloktx4RTcR fSx6h8i7uAZvk0hVqJVs9lC0oRAIXSOo9zdm+wjtm4Ulx5XSP8J60d9DD4Y8Og4m BmzgwqAiBIJFhxvI3OvVITgCUpZHgwaRrhPPZn9VSXPP94v4P0F2LigvQ9cR/Wm8 cp9SzqThUCU2tuoa3EklXISABB01MkrrnK1mU1YdtgGYe8K5KZEelaKGLEvAtlb5 sJtAC+Nn31EIusyHOejfC8niNeiz0soZ9jWMrPsYJV0e9nXmwi+8SCche2qiMPlf tz1bpCjRUVfxa9SE0iGHZC/ynchmjCRvNOO+XMEkZxE61ZQx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUP4fSImqpsucBxMpDhKouXlTo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGM4NDM4YjAtM2I4Zi0z ZjRlLTgwMmUtZTc3Yjc0MjY3YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGqcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+PpSy2NKBwUzm1/Ye5hWLD9vCiLALffPDdzXRM22nclIP7Un0+tTUf NeuKWr427S8Rs1n2Dw8uRMBk/ohjXdK3nO4rx5EKNlQEpEUuDqsiF7Q89qXRvcej cZ6rmtIERqORimuOzkmGpkNcNO1G6xN1CnTJU3AuCA9oG1v3vhkarKaG06vkiSVZ N4VdoddD3NfRrs1b1BqL261fDG72U4GQpRN1aUdM7PJ5uOvg0M3iswiTdA0PGTkO UjMiL5vEZ+G0FUqJ0W+F1BUUmH49bGM8/MBi5V71y6JW+EGIJnAfRvjPojugdPSk 593wF+iLrBx4jKGSCknZSntE1O0MWhQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:46 2025 by rpki-client