$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa File: 123d819e-116b-3421-abc9-d6acc75274a3.roa (raw, json) Hash identifier: PHA0CahLYp7qe7kOja+Gr76erBSSLxZ61QaNBJJiAC0= Subject key identifier: 26:25:CA:00:A4:A2:C7:6D:27:74:6B:21:6F:39:8A:F3:7C:FD:16:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCDEEF48E5CAF815639E60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa Signing time: Thu 01 May 2025 17:24:38 +0000 ROA not before: Thu 01 May 2025 17:24:38 +0000 ROA not after: Wed 30 Jul 2025 17:24:38 +0000 asID: 22773 IP address blocks: 68.7.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:de:ef:48:e5:ca:f8:15:63:9e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:38 2025 GMT Not After : Jul 30 17:24:38 2025 GMT Subject: CN=858dce89-3e6d-431b-abe0-e4fd492882cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:13:3e:36:2f:95:44:3c:65:1b:06:d5:08: db:16:41:d7:98:f6:22:2c:75:03:84:93:49:6e:62: d4:29:19:70:ae:5f:5f:c1:de:bd:82:da:d8:6d:22: 56:c7:bf:fa:65:66:02:e0:f7:6e:6d:e4:12:ff:4b: 80:d5:6e:07:4e:7c:86:aa:29:73:08:b7:74:23:4b: cd:bb:7e:a6:c0:6f:af:86:bc:e1:5a:b9:83:2f:d0: df:c1:22:ef:2d:81:8b:a4:ef:5c:21:26:82:91:8e: 8d:58:6f:e2:aa:f2:e7:24:4e:2e:f5:c9:39:86:2e: 05:1a:4c:70:86:e0:ce:a7:9c:bc:44:6d:a7:01:c0: e1:e5:b6:97:d2:af:a2:9b:d9:5d:b9:46:25:12:96: 62:5a:48:1e:68:d0:36:36:21:f2:0e:1f:15:52:8b: 78:81:3a:e0:1c:4a:ac:b7:70:5c:41:3f:3d:1a:00: 02:69:56:81:c8:83:65:da:80:cc:bb:dd:f3:86:7b: e1:85:de:70:e3:28:7f:63:f7:7d:f9:51:14:16:f9: 9a:88:bb:5a:81:b9:30:f8:cd:0a:8a:a1:c3:65:78: 94:f3:01:ba:6d:fa:31:b9:3a:db:43:65:db:85:97: 75:80:86:6d:96:2c:c9:c9:77:52:28:a5:76:f6:59: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:25:CA:00:A4:A2:C7:6D:27:74:6B:21:6F:39:8A:F3:7C:FD:16:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9c:9e:f1:49:0a:78:c5:bb:f4:85:7f:6a:b0:cd:05:82:bc: 87:f4:74:cf:c8:a1:3c:6d:78:38:17:3d:4a:e4:fc:14:ed:91: 7b:c8:97:64:48:a5:ba:92:5d:da:e8:d8:a7:71:85:10:7e:ca: 5c:a6:62:b3:e2:6c:87:fe:04:fd:20:30:3a:ec:93:0a:ee:40: 29:f1:98:4c:52:19:61:ca:1c:43:83:26:b0:2d:13:8f:b8:7c: 31:a4:a3:26:f6:00:23:73:98:03:c9:ca:5e:ad:8e:3e:b7:00: f1:00:ea:8b:3e:92:6b:b4:f8:64:17:5e:34:3d:14:6d:24:5e: fe:8c:f9:fa:7b:57:76:21:16:2c:62:84:36:de:ab:cf:39:ba: 88:ed:b8:2d:d8:6d:5a:88:7a:33:c3:b2:33:4d:be:e4:eb:dd: 61:fd:e6:45:6d:e4:06:b9:7a:02:67:4d:48:f1:82:52:1c:0c: 8d:ad:72:40:f1:05:39:0a:b8:71:8c:7c:5d:9e:3f:56:29:aa: 73:d0:3e:1a:47:e4:c9:84:6a:a0:aa:6d:9d:94:1b:75:f5:97: cd:53:75:f4:a9:b9:78:cb:d0:e5:cc:c9:97:b3:f2:0c:9f:81: fa:61:59:32:1c:58:01:f2:36:4b:2b:07:d3:d7:03:69:6a:37: b9:46:17:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/N7vSOXK+BVjnmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQzOFoXDTI1MDczMDE3MjQzOFowLzEtMCsGA1UEAxMk ODU4ZGNlODktM2U2ZC00MzFiLWFiZTAtZTRmZDQ5Mjg4MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+UTPjYvlUQ8ZRsG1QjbFkHXmPYiLHUDhJNJ bmLUKRlwrl9fwd69gtrYbSJWx7/6ZWYC4PdubeQS/0uA1W4HTnyGqilzCLd0I0vN u36mwG+vhrzhWrmDL9DfwSLvLYGLpO9cISaCkY6NWG/iqvLnJE4u9ck5hi4FGkxw huDOp5y8RG2nAcDh5baX0q+im9lduUYlEpZiWkgeaNA2NiHyDh8VUot4gTrgHEqs t3BcQT89GgACaVaByINl2oDMu93zhnvhhd5w4yh/Y/d9+VEUFvmaiLtagbkw+M0K iqHDZXiU8wG6bfoxuTrbQ2XbhZd1gIZtlizJyXdSKKV29lkL5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYlygCkosdtJ3RrIW85ivN8/RYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzZDgxOWUtMTE2Yi0z NDIxLWFiYzktZDZhY2M3NTI3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqcnvFJCnjFu/SFf2qwzQWCvIf0dM/IoTxteDgXPUrk/BTtkXvIl2RI pbqSXdro2KdxhRB+ylymYrPibIf+BP0gMDrskwruQCnxmExSGWHKHEODJrAtE4+4 fDGkoyb2ACNzmAPJyl6tjj63APEA6os+kmu0+GQXXjQ9FG0kXv6M+fp7V3YhFixi hDbeq885uojtuC3YbVqIejPDsjNNvuTr3WH95kVt5Aa5egJnTUjxglIcDI2tckDx BTkKuHGMfF2eP1YpqnPQPhpH5MmEaqCqbZ2UG3X1l81TdfSpuXjL0OXMyZez8gyf gfphWTIcWAHyNksrB9PXA2lqN7lGF2c= -----END CERTIFICATE-----Generated at Sun May 11 19:57:37 2025 by rpki-client