$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a5f0e34-815a-334f-9b1d-72917669cf3c.roa File: 0a5f0e34-815a-334f-9b1d-72917669cf3c.roa (raw, json) Hash identifier: W1EhKUQkuKxJ39nybPBk5lOrGLqnHdCpt2GV5PEUq9Y= Subject key identifier: 97:5F:9D:D7:0D:3D:F8:45:A7:75:B9:4C:CE:93:7B:D8:DB:BD:10:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD151E8E8F0B785DE7C590 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a5f0e34-815a-334f-9b1d-72917669cf3c.roa Signing time: Thu 01 May 2025 17:25:04 +0000 ROA not before: Thu 01 May 2025 17:25:04 +0000 ROA not after: Wed 30 Jul 2025 17:25:04 +0000 asID: 22773 IP address blocks: 68.8.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:15:1e:8e:8f:0b:78:5d:e7:c5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:04 2025 GMT Not After : Jul 30 17:25:04 2025 GMT Subject: CN=af757d8d-3550-4d48-bf55-a0b96bc2618d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:5f:40:08:30:4e:5e:bf:95:e2:06:f3:26: 3a:7c:b8:8c:74:c5:e9:6e:f1:95:0c:e7:28:99:a7: 77:ca:10:96:93:fa:b1:1d:6c:f2:1d:49:20:9b:ca: 7d:80:4b:3f:f9:1a:94:ce:05:41:56:17:5a:15:67: 37:86:c2:4e:41:b4:0d:f1:ca:e0:de:4b:48:4a:57: 73:07:2e:81:18:a8:97:e6:f1:4b:3b:cc:46:5a:f8: d6:28:32:86:0c:95:27:9a:41:6f:97:9a:e6:aa:f2: d5:ec:2b:59:94:8c:e1:ee:f5:9c:8f:59:89:ec:da: 39:cb:43:ad:da:c0:91:6e:96:b9:c0:c2:7f:92:71: 7f:19:77:80:a7:75:35:89:3b:ac:eb:c7:28:58:c6: 51:81:cc:ab:b3:93:26:74:c2:9f:1f:21:4f:b7:6f: d7:f7:9c:4e:1d:f5:15:86:2c:ce:af:4a:8f:b2:42: 64:01:23:db:61:c3:32:49:d2:e7:48:28:22:c0:ec: c2:83:e3:b2:fa:de:54:2f:bb:40:78:fd:97:cb:2f: cb:c6:51:b7:3f:81:cb:ec:35:53:ee:8d:d7:52:9e: 9d:8a:b9:7e:be:dc:5e:28:54:68:f2:9f:97:49:80: 31:b2:86:fb:22:cf:78:b1:ec:eb:2b:3e:0d:6b:41: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5F:9D:D7:0D:3D:F8:45:A7:75:B9:4C:CE:93:7B:D8:DB:BD:10:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a5f0e34-815a-334f-9b1d-72917669cf3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a6:d0:4c:6b:70:96:16:53:21:0c:91:1a:54:bb:5b:55:d7: 30:f3:7c:c9:bc:b5:74:a1:79:a1:70:bc:da:93:9a:5e:e4:16: 78:b8:4e:bc:45:3e:40:6b:42:a1:85:4f:30:51:4c:2f:f1:8e: f0:2e:b6:f5:74:eb:78:04:6e:d7:45:68:15:f6:7c:76:21:56: 31:58:67:00:4d:ae:9e:73:44:34:d9:54:fa:a2:e8:c1:e8:85: 5e:e2:77:d7:00:6f:14:9d:1a:10:5a:68:da:74:2c:3b:9f:34: 28:18:be:de:c4:78:c7:30:81:39:f5:fa:84:10:0d:aa:17:9d: b7:89:42:7b:dd:c7:ee:88:1a:87:05:cd:0b:c1:c6:95:b1:1e: b4:ba:3b:eb:c2:42:68:bd:f0:d6:9e:e1:8a:32:56:f7:bc:4c: 97:92:74:d7:24:c1:b4:be:9a:78:a5:23:35:38:34:d0:d7:7b: bb:a0:a5:83:6a:38:2e:f0:15:82:da:aa:65:1c:30:8d:b3:ba: a7:fb:0f:94:6c:9c:3f:56:d3:f8:f1:9a:18:90:f7:45:42:61: 8e:d4:20:f0:fe:3d:34:3d:c6:db:a1:93:43:06:fa:62:10:02: f3:1d:d2:30:a3:0b:83:41:ef:d7:d5:ee:53:b5:b9:53:03:be: 64:22:14:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/RUejo8LeF3nxZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUwNFoXDTI1MDczMDE3MjUwNFowLzEtMCsGA1UEAxMk YWY3NTdkOGQtMzU1MC00ZDQ4LWJmNTUtYTBiOTZiYzI2MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElfQAgwTl6/leIG8yY6fLiMdMXpbvGVDOco mad3yhCWk/qxHWzyHUkgm8p9gEs/+RqUzgVBVhdaFWc3hsJOQbQN8crg3ktISldz By6BGKiX5vFLO8xGWvjWKDKGDJUnmkFvl5rmqvLV7CtZlIzh7vWcj1mJ7No5y0Ot 2sCRbpa5wMJ/knF/GXeAp3U1iTus68coWMZRgcyrs5MmdMKfHyFPt2/X95xOHfUV hizOr0qPskJkASPbYcMySdLnSCgiwOzCg+Oy+t5UL7tAeP2Xyy/LxlG3P4HL7DVT 7o3XUp6dirl+vtxeKFRo8p+XSYAxsob7Is94sezrKz4Na0G4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdfndcNPfhFp3W5TM6Te9jbvRB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE1ZjBlMzQtODE1YS0z MzRmLTliMWQtNzI5MTc2NjljZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFam0ExrcJYWUyEMkRpUu1tV1zDzfMm8tXSheaFwvNqTml7kFni4TrxF PkBrQqGFTzBRTC/xjvAutvV063gEbtdFaBX2fHYhVjFYZwBNrp5zRDTZVPqi6MHo hV7id9cAbxSdGhBaaNp0LDufNCgYvt7EeMcwgTn1+oQQDaoXnbeJQnvdx+6IGocF zQvBxpWxHrS6O+vCQmi98Nae4YoyVve8TJeSdNckwbS+mnilIzU4NNDXe7ugpYNq OC7wFYLaqmUcMI2zuqf7D5RsnD9W0/jxmhiQ90VCYY7UIPD+PTQ9xtuhk0MG+mIQ AvMd0jCjC4NB79fV7lO1uVMDvmQiFFE= -----END CERTIFICATE-----Generated at Mon May 12 07:21:22 2025 by rpki-client