$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/015e5f5b-53e2-32fe-a7f6-6d4519e6fecd.roa File: 015e5f5b-53e2-32fe-a7f6-6d4519e6fecd.roa (raw, json) Hash identifier: lT3nxJqORfQctxw7kjz12Z+L09y3T36bfn19l7a31B4= Subject key identifier: F6:B7:54:73:39:16:CE:5B:55:76:2A:51:45:B1:9E:E2:50:8A:2C:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7CFA6568098A156B91E88 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/015e5f5b-53e2-32fe-a7f6-6d4519e6fecd.roa Signing time: Thu 01 May 2025 17:14:27 +0000 ROA not before: Thu 01 May 2025 17:14:27 +0000 ROA not after: Wed 30 Jul 2025 17:14:27 +0000 asID: 22773 IP address blocks: 68.0.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:cf:a6:56:80:98:a1:56:b9:1e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:27 2025 GMT Not After : Jul 30 17:14:27 2025 GMT Subject: CN=dd60f41c-e1ab-4cc5-9064-8ab5b7e9a8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:8b:dc:fa:b1:61:4b:0d:5c:a6:68:bd:fc: 66:eb:06:d3:2e:b5:ee:15:57:b5:65:93:18:a1:a8: fe:ec:f8:ce:a9:ee:21:65:1f:c5:60:df:a5:d3:8a: 4e:31:08:db:16:aa:9f:96:c0:72:92:52:0b:66:a0: 5e:ac:19:c6:65:00:87:9f:80:16:fa:5f:61:4e:b1: 94:61:bc:c5:7a:11:bc:62:56:13:89:ff:52:2a:69: f5:9b:f0:51:c4:b0:35:3e:1c:dc:a0:7a:cd:2e:6e: c6:20:10:82:57:f7:d3:45:97:9d:9d:00:0d:62:4e: c6:2f:57:86:9a:f1:0d:92:70:ea:96:e6:50:ea:ad: 33:55:3a:04:30:4c:f4:94:99:2e:f0:d4:25:d6:aa: 4d:d5:c1:01:0d:71:10:d2:ed:2a:e3:0f:ee:08:d6: b1:3a:cd:f7:0c:5c:0b:5f:2f:48:a3:a9:ac:3d:87: 6b:09:e2:17:04:89:56:e2:70:86:50:cf:07:29:b0: 8d:d8:6a:fd:57:0d:1c:96:2b:79:6a:fc:09:ef:82: 3c:44:98:f3:78:50:5f:33:03:e7:9a:83:3e:01:6e: 36:d0:59:74:c2:4a:7e:fe:54:3d:d5:d5:85:cf:1d: 9b:69:57:04:ec:7f:b6:1c:e8:0c:a2:62:4f:eb:5f: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:54:73:39:16:CE:5B:55:76:2A:51:45:B1:9E:E2:50:8A:2C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/015e5f5b-53e2-32fe-a7f6-6d4519e6fecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:20:a5:8d:7c:1c:20:2a:91:ab:e5:34:62:76:78:2f:de:0f: 96:17:38:22:d7:dd:4b:eb:53:87:4d:3e:e3:d2:d9:d8:29:03: ac:a2:c8:7d:64:9d:84:40:62:f3:a3:4c:d2:d7:96:e0:4b:81: 35:ef:d4:77:11:92:e6:7d:fd:e0:5d:f4:3b:14:b9:8d:54:c2: 1a:b8:7e:9c:f3:b3:b1:e6:1e:71:e8:96:b5:54:2f:ce:d3:d3: 5b:f5:d0:19:54:85:12:73:05:c4:f2:b1:ab:b3:ac:f1:69:aa: a4:24:e7:1f:d6:c2:30:44:72:a1:ea:41:0e:a0:c7:ab:33:dc: b5:bf:9b:e5:8b:a5:e1:20:73:6a:da:41:7d:42:45:fd:dc:3b: 52:b7:29:92:93:93:a6:bd:26:0e:9c:0d:37:6c:ad:00:fc:c8: 1e:e5:f9:d6:34:01:c4:54:62:86:d7:6f:99:fb:d9:b6:6a:47: 09:9b:18:ab:8f:3b:85:47:15:c4:c4:ef:5b:c0:2d:3a:ff:c9: c5:fd:42:ad:89:73:33:8f:82:65:33:7e:0b:3d:d5:fe:5d:e1: a2:3c:cf:89:3a:20:28:86:c0:ec:ab:8e:ea:dc:62:f4:15:cd: a6:3d:c8:09:1b:0e:be:f7:e6:9c:ad:54:9d:ab:07:6d:bd:57: 1a:be:ab:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm198+mVoCYoVa5HogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyN1oXDTI1MDczMDE3MTQyN1owLzEtMCsGA1UEAxMk ZGQ2MGY0MWMtZTFhYi00Y2M1LTkwNjQtOGFiNWI3ZTlhOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXeL3PqxYUsNXKZovfxm6wbTLrXuFVe1ZZMY oaj+7PjOqe4hZR/FYN+l04pOMQjbFqqflsByklILZqBerBnGZQCHn4AW+l9hTrGU YbzFehG8YlYTif9SKmn1m/BRxLA1PhzcoHrNLm7GIBCCV/fTRZednQANYk7GL1eG mvENknDqluZQ6q0zVToEMEz0lJku8NQl1qpN1cEBDXEQ0u0q4w/uCNaxOs33DFwL Xy9Io6msPYdrCeIXBIlW4nCGUM8HKbCN2Gr9Vw0clit5avwJ74I8RJjzeFBfMwPn moM+AW420Fl0wkp+/lQ91dWFzx2baVcE7H+2HOgMomJP61+xMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa3VHM5Fs5bVXYqUUWxnuJQiiwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDE1ZTVmNWItNTNlMi0z MmZlLWE3ZjYtNmQ0NTE5ZTZmZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8gpY18HCAqkavlNGJ2eC/eD5YXOCLX3UvrU4dNPuPS2dgpA6yiyH1k nYRAYvOjTNLXluBLgTXv1HcRkuZ9/eBd9DsUuY1Uwhq4fpzzs7HmHnHolrVUL87T 01v10BlUhRJzBcTysauzrPFpqqQk5x/WwjBEcqHqQQ6gx6sz3LW/m+WLpeEgc2ra QX1CRf3cO1K3KZKTk6a9Jg6cDTdsrQD8yB7l+dY0AcRUYobXb5n72bZqRwmbGKuP O4VHFcTE71vALTr/ycX9Qq2JczOPgmUzfgs91f5d4aI8z4k6ICiGwOyrjurcYvQV zaY9yAkbDr735pytVJ2rB229Vxq+q/c= -----END CERTIFICATE-----Generated at Wed May 7 06:27:17 2025 by rpki-client