$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa File: 1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa (raw, json) Hash identifier: BXvJr7tESOiA5+fiBMs2dqNwv/cCbxxbY8BbeCTbQUE= Subject key identifier: E7:14:F2:BB:DA:54:79:92:1E:22:76:C7:8B:27:C0:F9:3F:70:06:C9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F50611B2A8FC6893488500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa Signing time: Thu 01 May 2025 17:08:50 +0000 ROA not before: Thu 01 May 2025 17:08:50 +0000 ROA not after: Wed 30 Jul 2025 17:08:50 +0000 asID: 22773 IP address blocks: 68.9.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:06:11:b2:a8:fc:68:93:48:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:50 2025 GMT Not After : Jul 30 17:08:50 2025 GMT Subject: CN=a5ab1465-445c-4484-a602-7a96e6293c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:e3:20:1f:84:6e:f9:64:80:22:0c:c1:08: 37:39:fe:bc:bf:66:cc:47:c7:08:ee:76:66:bd:d8: 61:4d:ac:2f:1e:c7:4f:25:7a:2d:1e:f9:7b:d9:e7: 64:b6:8c:f4:19:51:34:4b:ef:86:91:b6:b1:a0:85: 66:73:27:07:a8:1d:27:1c:3f:4f:c9:8f:c0:67:0b: 69:02:f4:89:80:7e:56:6b:c0:c8:67:6f:42:0c:a7: 0a:60:a1:6b:cf:03:17:d7:eb:a6:c6:0f:a0:7e:e6: d8:80:c2:e3:de:f6:98:58:99:08:1b:ec:6e:6e:80: 2d:83:a1:63:00:55:a4:33:61:49:59:69:82:e2:19: 07:7a:bc:57:d9:ea:9b:c8:e1:8f:b2:1c:c3:97:ca: 34:43:21:c8:4e:36:b4:f8:bf:32:ef:e7:0a:42:05: ac:15:ef:3c:ab:0e:bc:5a:4d:de:0d:45:ee:aa:4f: 5f:a8:0f:45:cf:bb:2b:03:e1:bc:b9:5c:c0:e8:3b: 08:65:86:27:05:39:e0:c1:f8:3d:1e:f0:95:b4:8e: cd:40:48:83:97:1e:14:6b:35:d6:e4:25:c8:e6:98: 1c:a1:33:cb:74:1d:87:fb:33:45:80:79:0f:06:75: 06:30:22:60:eb:b3:54:03:7e:8c:5e:e3:07:55:99: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:14:F2:BB:DA:54:79:92:1E:22:76:C7:8B:27:C0:F9:3F:70:06:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ff4a11e-2985-302f-9d99-7a9fd4b75f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d8:ac:ec:a5:c6:75:d6:e7:30:a4:10:8f:5c:7d:3a:64:ce: cc:9a:e7:a1:a8:8f:55:a6:ac:c8:ba:9e:29:c8:dc:89:7e:eb: e0:b8:65:9c:ad:a0:63:d3:8d:7d:75:7d:f3:1d:cf:73:32:2c: e8:5e:de:95:19:3c:1e:07:4c:56:ad:f3:12:bf:eb:18:38:31: ce:fd:65:fa:46:9d:e7:d2:91:57:bd:a1:7c:d4:cd:db:45:b5: 7c:34:8e:9b:b4:c1:f3:5e:21:1e:95:e8:25:a5:f4:82:3b:f1: d3:80:cf:bb:09:e2:b7:41:95:23:c5:8b:04:a0:c2:39:99:da: 99:10:72:4f:ed:32:48:68:dd:a8:7a:da:b4:88:84:7e:66:17: d4:c2:92:a1:4e:95:84:cf:a9:14:1b:c3:86:0c:60:f1:34:ac: d7:2a:95:64:50:8b:67:a9:64:14:a0:b1:a9:5b:fe:ce:9c:5c: 62:b7:24:7b:1a:99:7e:bb:88:db:71:0a:64:99:2f:0a:b6:b7: 5e:ae:03:d9:d0:3d:07:47:0d:94:b1:66:22:71:09:5b:6d:7f: 58:b2:62:49:01:60:ac:e5:c3:98:eb:b1:55:06:43:13:da:a1: ab:4f:8e:ea:16:eb:4c:cd:73:38:98:94:49:3e:42:5e:10:e9: b4:5f:8a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19QYRsqj8aJNIhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1MFoXDTI1MDczMDE3MDg1MFowLzEtMCsGA1UEAxMk YTVhYjE0NjUtNDQ1Yy00NDg0LWE2MDItN2E5NmU2MjkzYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi53jIB+EbvlkgCIMwQg3Of68v2bMR8cI7nZm vdhhTawvHsdPJXotHvl72edktoz0GVE0S++GkbaxoIVmcycHqB0nHD9PyY/AZwtp AvSJgH5Wa8DIZ29CDKcKYKFrzwMX1+umxg+gfubYgMLj3vaYWJkIG+xuboAtg6Fj AFWkM2FJWWmC4hkHerxX2eqbyOGPshzDl8o0QyHITja0+L8y7+cKQgWsFe88qw68 Wk3eDUXuqk9fqA9Fz7srA+G8uVzA6DsIZYYnBTngwfg9HvCVtI7NQEiDlx4UazXW 5CXI5pgcoTPLdB2H+zNFgHkPBnUGMCJg67NUA36MXuMHVZmyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcU8rvaVHmSHiJ2x4snwPk/cAbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWZmNGExMWUtMjk4NS0z MDJmLTlkOTktN2E5ZmQ0Yjc1Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnYrOylxnXW5zCkEI9cfTpkzsya56Goj1WmrMi6ninI3Il+6+C4ZZyt oGPTjX11ffMdz3MyLOhe3pUZPB4HTFat8xK/6xg4Mc79ZfpGnefSkVe9oXzUzdtF tXw0jpu0wfNeIR6V6CWl9II78dOAz7sJ4rdBlSPFiwSgwjmZ2pkQck/tMkho3ah6 2rSIhH5mF9TCkqFOlYTPqRQbw4YMYPE0rNcqlWRQi2epZBSgsalb/s6cXGK3JHsa mX67iNtxCmSZLwq2t16uA9nQPQdHDZSxZiJxCVttf1iyYkkBYKzlw5jrsVUGQxPa oatPjuoW60zNcziYlEk+Ql4Q6bRfihk= -----END CERTIFICATE-----Generated at Sun May 11 19:32:38 2025 by rpki-client