$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa File: 033b8e68-defb-3ac2-baed-354476cf1a1a.roa (raw, json) Hash identifier: T6Qqsywep9od9kGt9KcOmibs/IZ6NPBaJO6lh/xL3c4= Subject key identifier: 96:FA:F3:E5:85:73:54:72:EA:B6:47:46:58:31:CF:DB:81:5A:4B:B4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7D37B0ADD9E4FDAC46400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa Signing time: Thu 01 May 2025 17:14:28 +0000 ROA not before: Thu 01 May 2025 17:14:28 +0000 ROA not after: Wed 30 Jul 2025 17:14:28 +0000 asID: 22773 IP address blocks: 68.10.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:d3:7b:0a:dd:9e:4f:da:c4:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:28 2025 GMT Not After : Jul 30 17:14:28 2025 GMT Subject: CN=7b1a1826-0282-4073-8302-6bc482628259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b9:63:99:40:b0:58:84:cf:09:6b:a3:19:18: 35:58:46:a3:31:0b:6e:84:d8:53:cd:ed:63:be:76: c0:fd:ef:51:b3:a2:bd:d7:b5:ed:22:ad:4c:66:52: 1b:7a:ec:07:cf:c0:0f:de:34:9e:c1:56:0d:9a:a9: 93:3a:51:bb:b4:7c:c4:1c:53:d1:97:e9:ef:bc:3b: 18:ff:69:75:01:c0:8b:b0:77:c5:6e:9d:55:c3:ab: 63:93:64:98:35:6a:2c:d4:6b:47:c3:f5:2b:2e:62: e7:db:ab:9b:d7:57:f6:ef:2a:d7:6c:b7:3c:16:6e: 35:8e:08:0e:f3:89:2d:ed:ad:a8:99:9f:6e:cf:b9: e3:9d:b7:d0:75:2f:a2:74:21:db:fc:50:c9:52:04: f0:b4:f2:77:39:3f:8a:a2:25:92:6b:8e:95:d5:96: 47:1b:8c:21:bd:a7:37:f1:5d:25:a8:bf:00:78:2e: 1f:7b:fa:02:37:01:2e:7e:7a:4c:57:d1:f5:99:e7: 4f:e2:fb:08:0d:f8:1f:8f:3b:eb:7b:8d:06:b7:21: e8:72:77:14:a0:11:6a:62:2d:07:d7:e5:37:bf:2f: 5f:94:22:ea:78:f9:81:a3:ee:ad:ea:35:94:5f:8d: e9:4c:02:7b:cd:42:a0:61:5a:7e:dd:32:15:c1:3e: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FA:F3:E5:85:73:54:72:EA:B6:47:46:58:31:CF:DB:81:5A:4B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/033b8e68-defb-3ac2-baed-354476cf1a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:75:32:69:40:b5:ea:d4:67:19:41:a3:02:1b:23:d9:e2:2a: 3b:b1:4a:2b:b7:d9:1e:d0:f3:78:4e:90:22:54:06:7c:1d:88: 8d:ac:89:1b:2f:4f:0f:d0:f4:ea:d7:86:1b:fd:f9:d8:0b:49: 5d:ed:92:6a:a8:69:dc:97:69:8c:fc:28:36:ff:be:b8:5f:17: 56:27:e9:3b:79:9c:2d:3a:92:be:4c:75:c5:28:ac:ff:b9:b1: e7:54:7e:ed:75:a0:96:8e:10:4a:98:fe:6c:17:c9:9e:bb:8d: 3f:ef:ff:f6:06:5a:db:f2:ce:04:ce:44:b0:95:4d:4a:12:6a: 7c:5c:48:16:67:e4:22:6d:40:7c:d7:9c:2e:58:0a:fc:25:3c: ff:b5:16:6c:68:5f:54:c6:fc:3b:96:c4:75:52:aa:cb:2b:ba: e1:28:ed:4f:de:13:98:4b:2b:16:1b:2d:d5:2c:48:2d:c3:8e: be:c0:35:fe:b7:21:fd:e4:2b:aa:cc:70:c2:fa:bb:30:96:ab: f3:67:a0:ce:c0:1d:48:fd:00:03:5a:57:2b:11:8c:53:26:2a: ee:38:1a:0e:44:85:56:8c:ef:57:76:a5:62:03:b3:4c:f1:c2: d4:64:c0:92:13:35:62:21:43:72:76:ff:d0:67:ab:79:ca:a8: 06:fd:f7:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm199N7Ct2eT9rEZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyOFoXDTI1MDczMDE3MTQyOFowLzEtMCsGA1UEAxMk N2IxYTE4MjYtMDI4Mi00MDczLTgzMDItNmJjNDgyNjI4MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLljmUCwWITPCWujGRg1WEajMQtuhNhTze1j vnbA/e9Rs6K917XtIq1MZlIbeuwHz8AP3jSewVYNmqmTOlG7tHzEHFPRl+nvvDsY /2l1AcCLsHfFbp1Vw6tjk2SYNWos1GtHw/UrLmLn26ub11f27yrXbLc8Fm41jggO 84kt7a2omZ9uz7njnbfQdS+idCHb/FDJUgTwtPJ3OT+KoiWSa46V1ZZHG4whvac3 8V0lqL8AeC4fe/oCNwEufnpMV9H1medP4vsIDfgfjzvre40GtyHocncUoBFqYi0H 1+U3vy9flCLqePmBo+6t6jWUX43pTAJ7zUKgYVp+3TIVwT48MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb68+WFc1Ry6rZHRlgxz9uBWku0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDMzYjhlNjgtZGVmYi0z YWMyLWJhZWQtMzU0NDc2Y2YxYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAoEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD11MmlAterUZxlBowIbI9niKjuxSiu32R7Q83hOkCJUBnwdiI2siRsv Tw/Q9OrXhhv9+dgLSV3tkmqoadyXaYz8KDb/vrhfF1Yn6Tt5nC06kr5MdcUorP+5 sedUfu11oJaOEEqY/mwXyZ67jT/v//YGWtvyzgTORLCVTUoSanxcSBZn5CJtQHzX nC5YCvwlPP+1FmxoX1TG/DuWxHVSqssruuEo7U/eE5hLKxYbLdUsSC3Djr7ANf63 If3kK6rMcML6uzCWq/NnoM7AHUj9AANaVysRjFMmKu44Gg5EhVaM71d2pWIDs0zx wtRkwJITNWIhQ3J2/9Bnq3nKqAb991s= -----END CERTIFICATE-----Generated at Sun May 11 22:19:39 2025 by rpki-client