$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09db95be-396c-3698-a3ff-348d88766b09.roa File: 09db95be-396c-3698-a3ff-348d88766b09.roa (raw, json) Hash identifier: RLtaYKjJijiglm5oBr1qvIEs+n8T4Yqyd5mtTQ1EkU4= Subject key identifier: D3:9B:B1:2B:7D:9D:DF:38:FA:86:24:0A:63:3A:0C:C8:DE:52:5C:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0DB6DC9230B76989B300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09db95be-396c-3698-a3ff-348d88766b09.roa Signing time: Thu 01 May 2025 17:25:00 +0000 ROA not before: Thu 01 May 2025 17:25:00 +0000 ROA not after: Wed 30 Jul 2025 17:25:00 +0000 asID: 22773 IP address blocks: 68.8.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:0d:b6:dc:92:30:b7:69:89:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:00 2025 GMT Not After : Jul 30 17:25:00 2025 GMT Subject: CN=74238f5d-83f9-4653-baf2-2b368146454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:62:f2:5e:16:49:c8:ea:44:8e:f1:fb:15: 18:29:bb:28:8a:64:aa:aa:0b:ee:e9:1f:74:56:6b: 5c:db:c4:bf:5f:a0:31:0c:42:c6:c0:a8:4e:81:c6: de:c1:29:85:ed:72:51:41:a5:97:01:d4:73:dc:35: 1f:47:70:38:5b:33:66:aa:dc:f2:c9:47:5b:eb:64: 31:f7:a9:57:d0:37:c1:32:63:6e:ae:8f:75:6f:7a: fe:38:d2:e6:48:17:bb:b1:20:a4:5a:63:1f:16:e2: 5e:12:75:13:a2:b7:ba:79:c9:d9:0b:2f:da:5c:e9: e2:97:fc:ff:d4:42:33:6c:2a:7a:75:ac:a9:dd:28: 28:f0:9c:37:9b:d6:62:71:28:92:0d:42:1d:01:db: 69:bb:4b:a3:50:04:ab:ac:fc:7e:6f:e8:01:12:55: 27:3d:66:0a:ca:b7:d9:29:95:99:d5:5e:cd:fb:8a: e0:a3:e1:98:dd:7a:77:3c:cd:39:c8:28:c1:03:14: 92:7b:d3:6d:8e:a1:71:f7:a0:64:f9:d2:03:ca:6f: c4:11:11:10:d9:50:7f:f2:90:02:6f:7f:36:f1:25: 3c:5f:3a:98:87:b1:1c:08:2f:7c:2e:48:c0:68:64: be:1e:b4:ab:4e:55:1e:a6:55:92:13:0c:82:1b:9b: dc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9B:B1:2B:7D:9D:DF:38:FA:86:24:0A:63:3A:0C:C8:DE:52:5C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/09db95be-396c-3698-a3ff-348d88766b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c0:d7:86:6d:29:b0:b6:78:19:c2:16:58:4a:10:aa:89:7f: 74:bd:f2:1a:44:c0:c0:83:69:b1:e5:d4:12:28:33:84:4d:25: 05:03:a5:2a:ae:73:13:93:10:ee:71:8f:7a:47:15:41:db:91: 9c:3b:87:e7:df:27:30:85:2a:00:c7:ae:9a:8c:11:7e:f4:5b: 5a:64:8c:71:f8:b1:26:1d:21:cc:70:a1:87:14:4e:11:0c:33: 5b:65:7a:0b:bd:10:b6:64:7e:7d:af:12:16:13:f3:18:cc:07: a3:eb:b1:d1:ce:ea:77:47:0d:e5:59:47:d2:a2:81:d8:3a:05: d5:5f:30:57:b6:99:4e:79:f3:8a:02:01:0e:10:8d:43:6d:a4: f9:38:e9:7d:8f:aa:e0:35:d9:a8:e6:ac:e3:86:fd:0a:1e:ae: 3d:a4:9a:34:bf:3a:83:23:03:1d:75:5c:1c:9e:54:0e:02:b1: e2:d9:14:04:39:ed:0c:4a:a5:12:ae:93:7c:71:45:97:0b:30: 1c:be:42:92:55:fc:14:81:02:d6:d2:77:f8:0a:bd:8e:51:4f: e3:f2:9d:27:49:0e:4c:ce:50:ac:c0:77:54:ec:aa:ba:46:ac: 47:d7:ae:57:7c:93:91:c1:40:f7:d6:3f:58:88:94:16:0a:18: 6b:2a:b4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/Q223JIwt2mJswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwMFoXDTI1MDczMDE3MjUwMFowLzEtMCsGA1UEAxMk NzQyMzhmNWQtODNmOS00NjUzLWJhZjItMmIzNjgxNDY0NTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVti8l4WScjqRI7x+xUYKbsoimSqqgvu6R90 Vmtc28S/X6AxDELGwKhOgcbewSmF7XJRQaWXAdRz3DUfR3A4WzNmqtzyyUdb62Qx 96lX0DfBMmNuro91b3r+ONLmSBe7sSCkWmMfFuJeEnUTore6ecnZCy/aXOnil/z/ 1EIzbCp6dayp3Sgo8Jw3m9ZicSiSDUIdAdtpu0ujUASrrPx+b+gBElUnPWYKyrfZ KZWZ1V7N+4rgo+GY3Xp3PM05yCjBAxSSe9NtjqFx96Bk+dIDym/EEREQ2VB/8pAC b3828SU8XzqYh7EcCC98LkjAaGS+HrSrTlUeplWSEwyCG5vcnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNObsSt9nd84+oYkCmM6DMjeUlwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDlkYjk1YmUtMzk2Yy0z Njk4LWEzZmYtMzQ4ZDg4NzY2YjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDA14ZtKbC2eBnCFlhKEKqJf3S98hpEwMCDabHl1BIoM4RNJQUDpSqu cxOTEO5xj3pHFUHbkZw7h+ffJzCFKgDHrpqMEX70W1pkjHH4sSYdIcxwoYcUThEM M1tlegu9ELZkfn2vEhYT8xjMB6PrsdHO6ndHDeVZR9Kigdg6BdVfMFe2mU5584oC AQ4QjUNtpPk46X2PquA12ajmrOOG/Qoerj2kmjS/OoMjAx11XByeVA4CseLZFAQ5 7QxKpRKuk3xxRZcLMBy+QpJV/BSBAtbSd/gKvY5RT+PynSdJDkzOUKzAd1TsqrpG rEfXrld8k5HBQPfWP1iIlBYKGGsqtCQ= -----END CERTIFICATE-----Generated at Sun May 11 18:50:57 2025 by rpki-client