$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b90920c-b343-3795-8a37-dbcf96e2dc38.roa File: 1b90920c-b343-3795-8a37-dbcf96e2dc38.roa (raw, json) Hash identifier: EbVk587+VhrCZ/F+APihy1sCMCY3eJnza8yXG8TI0a4= Subject key identifier: 2D:BA:D8:95:A0:36:F4:82:73:E2:59:95:BA:31:85:05:81:BD:D8:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F532915E0C8F22E66B17C8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b90920c-b343-3795-8a37-dbcf96e2dc38.roa Signing time: Thu 01 May 2025 17:09:11 +0000 ROA not before: Thu 01 May 2025 17:09:11 +0000 ROA not after: Wed 30 Jul 2025 17:09:11 +0000 asID: 22773 IP address blocks: 68.14.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:32:91:5e:0c:8f:22:e6:6b:17:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:11 2025 GMT Not After : Jul 30 17:09:11 2025 GMT Subject: CN=cd42e60c-5cdc-4d15-bf2d-9af5829e554e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:06:86:c9:83:65:8b:21:73:a4:16:5a:33: a4:a8:a4:c8:9f:5f:a1:da:f6:eb:18:3a:eb:5a:6f: a7:f5:7a:d3:28:24:ff:04:c1:90:d3:71:9e:f8:cc: 24:1c:d3:ae:b9:38:12:9b:02:48:68:fc:9d:e2:83: 0e:cc:9e:8b:c2:43:86:03:b9:36:15:7a:85:9b:1b: 96:64:6c:e7:da:b3:65:31:84:1d:49:22:42:42:5a: e4:c4:27:ea:59:46:c3:fb:6a:ee:5b:65:34:f1:66: 46:fb:2c:15:8a:a7:4b:9c:92:95:68:e6:c3:f6:2a: a3:84:58:ed:9c:1b:74:86:c7:c8:83:eb:76:f6:5e: 52:a2:8f:5f:a5:3c:13:de:74:bd:f0:ce:76:31:0e: 52:8c:f3:28:5b:e7:97:1a:eb:03:70:35:a1:16:89: 44:16:7b:33:97:83:d5:36:01:7b:1d:bc:5c:b6:fe: 89:97:7a:70:f4:91:94:f9:e0:fb:68:1d:c9:d5:b4: a3:ad:8f:b6:e4:2a:8f:0e:43:76:89:ba:56:d2:aa: 95:91:51:24:a1:65:4f:11:52:9c:06:8a:30:11:f1: a6:41:fe:46:b5:6b:44:c0:da:f4:58:6f:98:0f:c5: 19:9a:d6:f9:87:bf:be:07:4b:0a:73:c4:8b:a3:e8: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:D8:95:A0:36:F4:82:73:E2:59:95:BA:31:85:05:81:BD:D8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b90920c-b343-3795-8a37-dbcf96e2dc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ee:34:c1:b4:41:ef:ac:28:40:bc:8e:fe:e2:4c:9a:17:ca: 24:a3:68:f9:95:95:65:7d:ac:3a:d1:ac:08:f7:a9:c0:a1:15: 93:58:b4:36:0f:b5:02:80:6b:c0:b4:2d:95:61:fb:29:98:21: ec:76:65:fd:65:b4:52:0d:67:8c:08:37:92:9d:27:94:60:c1: 40:bb:47:97:0a:27:04:bc:8b:41:01:a0:56:35:08:82:42:7d: d5:fa:8f:77:63:cf:7e:df:bb:10:65:59:b0:d7:8e:67:b9:02: 78:bc:9d:3b:a5:00:f2:f9:05:2c:b9:63:7b:9b:f2:d8:af:3b: 7b:9b:27:10:0e:7d:55:dd:88:20:75:eb:4a:f9:a3:88:8f:81: cc:8e:b7:52:27:af:57:fc:4a:dd:bc:0e:90:b7:09:ea:b0:79: d4:91:c4:95:4b:4b:d1:93:d3:96:94:8d:1f:89:fe:83:f4:7a: 2b:ec:96:43:9f:01:06:43:9b:6e:bf:48:dd:98:d6:72:00:6d: 46:c6:b3:3e:d1:3a:eb:fe:5e:ac:14:86:46:09:40:c8:e7:f3: 6e:97:32:29:26:c8:09:92:43:d9:d6:53:b5:ba:8f:46:6c:80: 99:2f:e4:1e:69:82:59:4f:21:82:e4:ce:73:f3:44:99:c9:80: 4e:8e:eb:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TKRXgyPIuZrF8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxMVoXDTI1MDczMDE3MDkxMVowLzEtMCsGA1UEAxMk Y2Q0MmU2MGMtNWNkYy00ZDE1LWJmMmQtOWFmNTgyOWU1NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr38GhsmDZYshc6QWWjOkqKTIn1+h2vbrGDrr Wm+n9XrTKCT/BMGQ03Ge+MwkHNOuuTgSmwJIaPyd4oMOzJ6LwkOGA7k2FXqFmxuW ZGzn2rNlMYQdSSJCQlrkxCfqWUbD+2ruW2U08WZG+ywViqdLnJKVaObD9iqjhFjt nBt0hsfIg+t29l5Soo9fpTwT3nS98M52MQ5SjPMoW+eXGusDcDWhFolEFnszl4PV NgF7Hbxctv6Jl3pw9JGU+eD7aB3J1bSjrY+25CqPDkN2ibpW0qqVkVEkoWVPEVKc BoowEfGmQf5GtWtEwNr0WG+YD8UZmtb5h7++B0sKc8SLo+iugQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC262JWgNvSCc+JZlboxhQWBvdhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWI5MDkyMGMtYjM0My0z Nzk1LThhMzctZGJjZjk2ZTJkYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnuNMG0Qe+sKEC8jv7iTJoXyiSjaPmVlWV9rDrRrAj3qcChFZNYtDYP tQKAa8C0LZVh+ymYIex2Zf1ltFINZ4wIN5KdJ5RgwUC7R5cKJwS8i0EBoFY1CIJC fdX6j3djz37fuxBlWbDXjme5Ani8nTulAPL5BSy5Y3ub8tivO3ubJxAOfVXdiCB1 60r5o4iPgcyOt1Inr1f8St28DpC3CeqwedSRxJVLS9GT05aUjR+J/oP0eivslkOf AQZDm26/SN2Y1nIAbUbGsz7ROuv+XqwUhkYJQMjn826XMikmyAmSQ9nWU7W6j0Zs gJkv5B5pgllPIYLkznPzRJnJgE6O6xQ= -----END CERTIFICATE-----Generated at Sun May 11 17:11:49 2025 by rpki-client