$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bead4f1-3e43-30c5-8c3d-6e9583de6e76.roa File: 0bead4f1-3e43-30c5-8c3d-6e9583de6e76.roa (raw, json) Hash identifier: kPjaueTmMzpwahqIULNKRFsnbr785R66uSej3aLm8uc= Subject key identifier: BB:F8:41:9B:8F:3A:37:1A:2D:25:A8:D4:01:2C:BE:C9:FE:63:FA:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F530FA4BDB8C13106F6B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bead4f1-3e43-30c5-8c3d-6e9583de6e76.roa Signing time: Thu 01 May 2025 17:09:10 +0000 ROA not before: Thu 01 May 2025 17:09:10 +0000 ROA not after: Wed 30 Jul 2025 17:09:10 +0000 asID: 22773 IP address blocks: 68.14.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:30:fa:4b:db:8c:13:10:6f:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:10 2025 GMT Not After : Jul 30 17:09:10 2025 GMT Subject: CN=1aad4957-34ed-4efe-95f2-35e4d8164cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:05:50:a9:5a:79:da:4b:90:e5:8a:3e:85: 7d:aa:5d:39:c1:b0:e9:9e:85:d4:45:fa:ce:be:68: 9e:06:75:d1:ed:1b:88:6c:28:6f:1a:62:91:27:e1: e0:fc:48:d7:a6:f2:35:27:50:5f:79:cf:a9:e5:85: b0:53:97:fa:0b:51:9b:d8:dc:c7:8c:be:6f:5a:05: 79:8a:d2:e0:25:7e:10:0f:00:7c:76:f0:38:b2:79: d6:36:bf:49:3f:16:6c:99:d4:2b:fc:9e:9f:d6:6f: 24:fb:2d:a2:b9:8c:cb:54:ee:79:5c:4a:77:1b:40: 16:f7:63:00:9a:74:ae:65:2a:e9:58:59:fd:88:16: 46:2d:30:b6:83:90:c3:d7:5e:a9:63:1c:91:d9:39: d2:4b:bd:8e:f2:d0:4b:77:0b:00:9a:28:46:54:54: 67:18:71:dd:72:1c:cb:1d:70:ce:58:0f:6f:80:72: 05:48:96:8e:8c:69:43:69:3c:97:fa:1d:3f:1e:f1: cd:57:91:c2:36:12:c7:08:2e:28:65:59:04:b7:91: 5a:2b:c9:a4:99:53:a2:c4:28:2c:05:f0:3a:90:bf: 41:96:4b:4a:65:44:88:76:65:db:db:c5:99:e2:9d: d4:f5:53:f6:ff:40:b6:4a:52:57:1a:b5:ae:7e:5a: cf:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F8:41:9B:8F:3A:37:1A:2D:25:A8:D4:01:2C:BE:C9:FE:63:FA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bead4f1-3e43-30c5-8c3d-6e9583de6e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:29:3d:b4:8d:6d:25:42:cf:44:5c:85:4e:fa:27:da:5f:9d: 7b:82:82:75:59:75:6d:69:0f:0d:74:7f:9e:80:72:f3:df:12: 80:fb:96:3c:3b:6c:db:a0:74:95:bc:f2:33:ea:54:1e:8f:c7: dc:0d:2d:cf:da:94:dc:16:f1:75:85:f9:40:04:d4:be:8a:1b: 04:b5:42:1b:37:8f:50:bf:95:b2:ec:99:d4:c8:ac:95:0e:e6: 4e:44:49:00:23:8d:de:f1:ae:16:fa:27:37:d3:b2:de:69:8f: cb:d9:3d:53:e9:81:d5:dd:d9:44:b0:68:88:69:52:95:37:d1: 40:7e:07:55:e9:f3:a7:ad:63:61:69:1a:39:bf:06:13:a6:d6: 3f:93:69:65:21:a1:f9:a9:b0:68:a8:65:fe:40:18:32:cb:29: 76:b4:6f:68:32:91:33:28:69:87:fa:3a:1a:63:18:5e:e8:2d: 65:7a:15:2c:41:bb:ee:eb:7c:c8:4b:4a:0b:30:55:0c:84:0d: e1:5e:41:4c:12:60:7a:c6:ed:e1:68:c8:73:62:75:38:ba:43: e0:e4:05:8a:47:cb:13:c7:cc:a1:49:e7:f3:58:ec:d8:b4:b1: e7:13:ed:1a:26:99:f2:03:01:b1:9d:df:b8:b6:de:95:f5:9f: 2b:41:e9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TD6S9uMExBvawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxMFoXDTI1MDczMDE3MDkxMFowLzEtMCsGA1UEAxMk MWFhZDQ5NTctMzRlZC00ZWZlLTk1ZjItMzVlNGQ4MTY0Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgFUKlaedpLkOWKPoV9ql05wbDpnoXURfrO vmieBnXR7RuIbChvGmKRJ+Hg/EjXpvI1J1Bfec+p5YWwU5f6C1Gb2NzHjL5vWgV5 itLgJX4QDwB8dvA4snnWNr9JPxZsmdQr/J6f1m8k+y2iuYzLVO55XEp3G0AW92MA mnSuZSrpWFn9iBZGLTC2g5DD116pYxyR2TnSS72O8tBLdwsAmihGVFRnGHHdchzL HXDOWA9vgHIFSJaOjGlDaTyX+h0/HvHNV5HCNhLHCC4oZVkEt5FaK8mkmVOixCgs BfA6kL9BlktKZUSIdmXb28WZ4p3U9VP2/0C2SlJXGrWuflrPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv4QZuPOjcaLSWo1AEsvsn+Y/r9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGJlYWQ0ZjEtM2U0My0z MGM1LThjM2QtNmU5NTgzZGU2ZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwpPbSNbSVCz0RchU76J9pfnXuCgnVZdW1pDw10f56AcvPfEoD7ljw7 bNugdJW88jPqVB6Px9wNLc/alNwW8XWF+UAE1L6KGwS1Qhs3j1C/lbLsmdTIrJUO 5k5ESQAjjd7xrhb6JzfTst5pj8vZPVPpgdXd2USwaIhpUpU30UB+B1Xp86etY2Fp Gjm/BhOm1j+TaWUhofmpsGioZf5AGDLLKXa0b2gykTMoaYf6OhpjGF7oLWV6FSxB u+7rfMhLSgswVQyEDeFeQUwSYHrG7eFoyHNidTi6Q+DkBYpHyxPHzKFJ5/NY7Ni0 secT7RommfIDAbGd37i23pX1nytB6S4= -----END CERTIFICATE-----Generated at Sun May 11 13:44:58 2025 by rpki-client