$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa File: f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa (raw, json) Hash identifier: aoTFLUDJni9xtU7+8lroIDf/+qn36SU3e6q+38xN0kI= Subject key identifier: 85:BC:2C:8D:3E:EE:F8:BB:A6:38:B5:AD:20:17:69:C3:5F:9B:10:7C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848B6F3983C8F7919368B650B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa Signing time: Thu 30 Jan 2025 08:54:49 +0000 ROA not before: Thu 30 Jan 2025 08:54:49 +0000 ROA not after: Wed 30 Apr 2025 07:54:49 +0000 asID: 22773 IP address blocks: 68.15.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:f3:98:3c:8f:79:19:36:8b:65:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 30 08:54:49 2025 GMT Not After : Apr 30 07:54:49 2025 GMT Subject: CN=f132a28e-0d17-43d4-82ce-bdd9294d92ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:57:69:91:61:6d:d4:c6:22:8a:b8:f6:18: 57:a0:34:27:6d:c1:8a:40:63:27:c5:66:f5:e1:9f: ab:91:80:80:46:e8:a4:cf:66:b0:00:21:c9:42:9a: f0:4f:7b:b8:86:a3:48:c5:13:03:b2:5d:4f:1a:63: 44:22:b2:8a:b1:18:bb:42:b4:ee:bb:ba:fd:3c:ec: 0b:bb:5f:96:63:c8:76:89:18:da:e0:30:66:d2:33: c0:fb:56:97:a9:21:93:ff:a3:ef:2d:1c:f7:c6:60: d7:0f:21:9c:0d:bd:f3:8a:22:84:b7:12:57:4b:61: 62:ba:57:e1:81:db:14:b5:39:62:1c:65:4b:a2:5a: 8b:9d:2a:29:f7:7f:ea:b8:32:01:b0:67:89:cc:62: 46:1f:ff:62:94:bf:fa:f6:10:c7:df:54:db:91:3c: b3:e5:58:1c:02:c8:67:2a:b4:64:e1:3e:75:e5:35: 7a:bb:6b:7f:cb:6a:cb:10:6d:4d:2e:b4:a2:a6:df: 19:06:26:9f:5a:b0:e2:95:00:04:0d:91:e1:52:09: e1:55:a1:f5:e9:6a:cd:5f:b2:eb:34:e0:ae:ef:3b: 04:1b:83:0f:f6:cb:91:53:35:fc:99:ac:49:20:87: b8:40:f3:a2:bb:47:f2:29:4a:e3:b7:41:fa:c7:cf: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:2C:8D:3E:EE:F8:BB:A6:38:B5:AD:20:17:69:C3:5F:9B:10:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.15.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b5:0b:6b:cf:b5:da:d3:86:41:71:42:f3:1f:18:39:a8:95: 56:78:82:e9:34:f1:ad:9b:73:bb:ac:c5:58:a4:1f:9c:47:a2: ed:6e:01:7b:eb:b7:bd:1b:ae:e2:2b:4a:d0:27:36:93:eb:76: f9:ea:e1:0c:19:1a:b2:a2:e5:4d:56:96:53:09:d7:15:b0:8b: ad:aa:f1:b4:6e:90:78:bb:48:ad:60:5a:3c:a1:00:8e:c7:72: 48:12:7b:fe:29:22:95:56:5b:25:4b:80:0c:e5:8a:43:2a:40: 31:52:98:13:18:c3:da:76:db:68:0f:fb:ea:13:bd:01:af:61: 7c:10:dc:26:b5:cd:2f:ba:5c:d5:3e:55:81:15:1b:bb:fe:ca: e7:b3:53:28:22:15:40:a8:e7:83:0f:5c:10:b0:ca:82:ea:1e: 3d:6d:68:af:ca:cf:e1:a4:6c:db:df:5b:e3:c4:f8:f4:24:45: 0f:1d:9a:aa:13:b1:d4:8a:10:12:8e:80:fe:ac:57:2f:5e:62: 4d:67:b2:62:7e:8a:82:95:03:2e:31:a4:2b:74:a2:d8:96:8b: 47:91:c9:2b:90:43:aa:67:8a:b8:58:79:49:8e:4d:e3:b4:50: e7:8e:93:56:d9:32:29:26:87:07:67:80:e6:66:a9:61:dc:0c: 18:2f:99:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi285g8j3kZNotlCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEzMDA4NTQ0OVoXDTI1MDQzMDA3NTQ0OVowLzEtMCsGA1UEAxMk ZjEzMmEyOGUtMGQxNy00M2Q0LTgyY2UtYmRkOTI5NGQ5MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZXaZFhbdTGIoq49hhXoDQnbcGKQGMnxWb1 4Z+rkYCARuikz2awACHJQprwT3u4hqNIxRMDsl1PGmNEIrKKsRi7QrTuu7r9POwL u1+WY8h2iRja4DBm0jPA+1aXqSGT/6PvLRz3xmDXDyGcDb3ziiKEtxJXS2Fiulfh gdsUtTliHGVLolqLnSop93/quDIBsGeJzGJGH/9ilL/69hDH31TbkTyz5VgcAshn KrRk4T515TV6u2t/y2rLEG1NLrSipt8ZBiafWrDilQAEDZHhUgnhVaH16WrNX7Lr NOCu7zsEG4MP9suRUzX8maxJIIe4QPOiu0fyKUrjt0H6x8/HRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW8LI0+7vi7pji1rSAXacNfmxB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJlNDcxMjktZjcxOC0z ZGYxLWE2ZjktNDhiNmViZTMwZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRA/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq1C2vPtdrThkFxQvMfGDmolVZ4guk08a2bc7usxVikH5xHou1uAXvr t70bruIrStAnNpPrdvnq4QwZGrKi5U1WllMJ1xWwi62q8bRukHi7SK1gWjyhAI7H ckgSe/4pIpVWWyVLgAzlikMqQDFSmBMYw9p222gP++oTvQGvYXwQ3Ca1zS+6XNU+ VYEVG7v+yuezUygiFUCo54MPXBCwyoLqHj1taK/Kz+GkbNvfW+PE+PQkRQ8dmqoT sdSKEBKOgP6sVy9eYk1nsmJ+ioKVAy4xpCt0otiWi0eRySuQQ6pnirhYeUmOTeO0 UOeOk1bZMikmhwdngOZmqWHcDBgvmdQ= -----END CERTIFICATE-----Generated at Sun Apr 6 17:51:41 2025 by rpki-client