$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa File: 09c0f2fa-effc-332b-959a-2460899c51dc.roa (raw, json) Hash identifier: gI5MN1vZ854mjpQ52zpoD32RLZWez7w10kiU4NFEG30= Subject key identifier: FB:C6:13:E2:EA:E2:30:90:76:32:FC:55:00:42:F5:37:60:07:B2:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57147B93161E8951BE000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa Signing time: Thu 01 May 2025 17:09:40 +0000 ROA not before: Thu 01 May 2025 17:09:40 +0000 ROA not after: Wed 30 Jul 2025 17:09:40 +0000 asID: 22773 IP address blocks: 68.230.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:71:47:b9:31:61:e8:95:1b:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:40 2025 GMT Not After : Jul 30 17:09:40 2025 GMT Subject: CN=2b0ca135-b5b9-48be-a465-02ef7ad2d3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:b3:bc:c3:42:8c:30:90:b8:f0:31:a5:a2: 5a:e4:f4:7d:89:4a:ee:e0:7d:83:59:9e:b7:22:98: b8:08:7f:be:e8:0d:75:a7:08:2a:4f:d1:d9:d1:bc: 82:18:e9:61:0e:d5:fd:f4:cc:d3:5f:2e:f5:07:ed: da:5a:f3:6f:08:1c:bc:76:05:e2:c0:f7:a1:67:e5: 1d:d8:c0:89:a1:b9:2f:f6:7b:3a:fc:03:b0:7d:3e: a2:06:3b:6e:0a:a7:06:2b:96:fc:1e:29:ff:2b:00: 93:38:7e:59:4c:a9:1d:7e:10:58:f9:36:7b:5c:7a: a4:51:17:9f:3f:35:ca:57:8e:72:df:eb:2c:0e:00: 7b:d3:6e:5a:10:4f:ba:a6:36:df:0f:75:f2:6b:0c: e6:75:14:b7:97:b8:36:08:93:99:69:7f:33:b6:25: 51:d4:fd:7c:1a:ff:fe:fb:d9:f5:6a:56:2d:5d:7c: 3a:db:51:d6:17:34:db:aa:b7:dc:d6:c1:1d:22:ce: 25:e2:9a:77:ab:cb:52:ac:81:ee:8f:ef:2d:46:33: 57:ea:95:52:11:ce:09:9a:ba:88:77:86:a0:81:1c: ad:3a:19:85:00:94:39:e7:33:d5:0e:5b:f2:7d:49: 30:1b:b6:3f:79:b7:d0:2a:e9:94:f3:ca:25:d9:3f: 14:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C6:13:E2:EA:E2:30:90:76:32:FC:55:00:42:F5:37:60:07:B2:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09c0f2fa-effc-332b-959a-2460899c51dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.230.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:47:15:17:da:d2:c3:22:6b:ca:51:c8:5e:18:18:c5:d0:0a: 3a:2f:1a:56:f6:3f:f3:2d:71:45:da:d2:0c:b3:55:81:23:91: 01:9f:95:86:45:df:b6:c2:2f:51:76:51:b9:74:5b:2f:bb:e2: da:ba:5f:db:25:05:10:b0:5e:dd:a9:4b:ee:e4:49:33:3f:df: ad:af:13:dc:bc:65:b8:a3:30:14:2f:66:cd:ec:97:48:fe:26: 7b:84:72:41:94:8f:e2:66:f8:87:16:ab:a8:e2:84:9f:97:3f: 9d:62:7f:01:81:be:85:8b:e4:4b:58:d1:bc:0c:73:3e:3a:b8: 29:79:6c:6b:32:c4:f1:ef:cd:c0:77:4b:53:87:a5:4e:03:77: 4d:a6:64:dc:b2:7c:59:85:1a:f9:ca:bd:55:28:de:20:91:04: d2:a8:9b:e5:90:b5:be:cd:22:7d:d0:19:ce:f7:ec:73:87:d6: 49:12:80:ff:67:80:f4:9b:ff:3c:25:3b:bd:57:fc:d5:c9:77: c7:79:a7:20:8f:de:51:9e:bd:18:a8:da:23:8a:c4:7c:d1:2d: 91:87:46:78:ad:b7:48:74:00:63:da:45:b9:b3:e2:c4:62:23: 7b:74:98:aa:66:e7:e7:22:0e:74:c6:3c:45:9f:6e:93:8e:df: 5c:18:49:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XFHuTFh6JUb4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0MFoXDTI1MDczMDE3MDk0MFowLzEtMCsGA1UEAxMk MmIwY2ExMzUtYjViOS00OGJlLWE0NjUtMDJlZjdhZDJkM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5uzvMNCjDCQuPAxpaJa5PR9iUru4H2DWZ63 Ipi4CH++6A11pwgqT9HZ0byCGOlhDtX99MzTXy71B+3aWvNvCBy8dgXiwPehZ+Ud 2MCJobkv9ns6/AOwfT6iBjtuCqcGK5b8Hin/KwCTOH5ZTKkdfhBY+TZ7XHqkURef PzXKV45y3+ssDgB7025aEE+6pjbfD3XyawzmdRS3l7g2CJOZaX8ztiVR1P18Gv/+ +9n1alYtXXw621HWFzTbqrfc1sEdIs4l4pp3q8tSrIHuj+8tRjNX6pVSEc4JmrqI d4aggRytOhmFAJQ55zPVDlvyfUkwG7Y/ebfQKumU88ol2T8UCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvGE+Lq4jCQdjL8VQBC9TdgB7IqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDljMGYyZmEtZWZmYy0z MzJiLTk1OWEtMjQ2MDg5OWM1MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpHFRfa0sMia8pRyF4YGMXQCjovGlb2P/MtcUXa0gyzVYEjkQGflYZF 37bCL1F2Ubl0Wy+74tq6X9slBRCwXt2pS+7kSTM/362vE9y8ZbijMBQvZs3sl0j+ JnuEckGUj+Jm+IcWq6jihJ+XP51ifwGBvoWL5EtY0bwMcz46uCl5bGsyxPHvzcB3 S1OHpU4Dd02mZNyyfFmFGvnKvVUo3iCRBNKom+WQtb7NIn3QGc737HOH1kkSgP9n gPSb/zwlO71X/NXJd8d5pyCP3lGevRio2iOKxHzRLZGHRnitt0h0AGPaRbmz4sRi I3t0mKpm5+ciDnTGPEWfbpOO31wYSVA= -----END CERTIFICATE-----Generated at Sun May 11 15:13:51 2025 by rpki-client