$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa File: 30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa (raw, json) Hash identifier: wP1z/By5xHPnSrE67VaQSoRl8B04oP1BonjlZhxQGL0= Subject key identifier: 20:45:C2:73:45:C9:9E:75:3B:30:E9:59:36:28:15:64:48:9E:45:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7FBA853B2FDFAF2153B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa Signing time: Thu 01 May 2025 17:14:47 +0000 ROA not before: Thu 01 May 2025 17:14:47 +0000 ROA not after: Wed 30 Jul 2025 17:14:47 +0000 asID: 22773 IP address blocks: 68.96.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:fb:a8:53:b2:fd:fa:f2:15:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:47 2025 GMT Not After : Jul 30 17:14:47 2025 GMT Subject: CN=b0f12a73-9ed1-4ee7-af70-5cd2439e5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:f3:24:c1:ff:21:02:a5:aa:3c:4b:81:b4: 8a:aa:b8:e7:f9:cd:e4:15:ee:5e:f2:a7:5a:6f:9a: ac:06:4d:d1:7d:4b:7b:02:e0:f1:df:ab:7d:19:20: 74:5f:c9:42:a1:43:3a:b3:6a:92:41:58:f9:f8:5b: 7d:b7:73:e1:85:40:8c:40:1c:ba:b2:a6:c6:76:3b: f5:60:bf:52:81:dc:0b:d8:73:cc:9e:7d:97:19:4d: f2:9c:29:1c:59:c4:be:b8:93:dc:f7:dc:c6:8c:ca: e3:52:b7:5c:a2:ff:60:9d:d3:02:5b:6e:88:56:58: 01:33:ed:a2:77:c2:37:dc:bd:fa:db:58:74:3e:87: d2:7b:65:7d:9c:af:f6:59:67:98:c5:db:64:d6:5f: c4:34:b7:db:6d:a3:7d:1b:c8:51:b1:92:1e:77:55: e5:f8:b5:ea:20:02:ec:2a:fa:d9:e9:be:11:2a:87: c3:6b:af:eb:64:52:f8:b5:b7:47:d2:4b:d4:fa:d6: 9c:f8:3f:5d:be:53:25:f9:6f:06:31:4c:6d:1b:57: ad:54:6e:c8:d9:4f:fb:13:8e:70:83:88:d0:45:37: ab:d5:c4:db:28:0c:7c:e3:90:da:97:91:a3:be:cb: 14:01:00:9f:60:9a:c8:d3:1a:cf:e9:99:f1:67:3a: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:45:C2:73:45:C9:9E:75:3B:30:E9:59:36:28:15:64:48:9E:45:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30c0ded8-ca07-3781-bc32-8fc461c7f3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:64:e3:8a:15:d5:96:c7:a3:67:25:75:1d:e2:24:c2:b8:21: bf:60:56:1d:19:c4:e1:5e:b6:ab:0f:f5:7e:4b:93:a8:ec:ab: c1:a8:91:01:cf:73:45:06:e9:b5:d9:eb:8b:4b:66:00:81:37: 34:76:b8:80:7f:75:a8:09:05:16:1f:cd:2f:c5:4c:9d:e7:f7: 11:7d:d9:87:d7:2f:62:c1:da:d4:b5:ab:69:6f:46:87:9e:bb: 85:22:c8:b7:70:62:82:7e:85:a6:86:1e:fa:5d:17:91:89:cb: 24:91:e1:33:8b:f4:59:32:13:71:16:29:27:d7:fb:4a:05:87: d4:b9:a8:22:92:c3:1d:09:34:5d:6f:f2:3c:03:9a:6d:57:ca: 9e:4f:15:9d:38:ac:1b:8d:22:f2:10:e5:50:2c:24:cc:03:27: f7:33:c7:2c:ed:3b:a4:18:e4:51:38:a8:74:9c:5b:ae:1f:50: 91:c7:73:a1:6d:33:90:fb:4d:5a:4c:36:e4:85:2d:6a:a2:c9: f7:a9:16:38:a0:c8:9e:34:36:f1:e5:ca:af:0f:34:5e:5c:99: ac:ea:f6:db:e1:97:fa:ac:39:48:e7:35:2c:5e:aa:b5:4c:82: 66:e1:09:63:64:4d:c9:e7:75:ac:88:16:8c:22:f1:a7:89:c2: 7c:c5:8e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19/uoU7L9+vIVO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ0N1oXDTI1MDczMDE3MTQ0N1owLzEtMCsGA1UEAxMk YjBmMTJhNzMtOWVkMS00ZWU3LWFmNzAtNWNkMjQzOWU1ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xXzJMH/IQKlqjxLgbSKqrjn+c3kFe5e8qda b5qsBk3RfUt7AuDx36t9GSB0X8lCoUM6s2qSQVj5+Ft9t3PhhUCMQBy6sqbGdjv1 YL9SgdwL2HPMnn2XGU3ynCkcWcS+uJPc99zGjMrjUrdcov9gndMCW26IVlgBM+2i d8I33L3621h0PofSe2V9nK/2WWeYxdtk1l/ENLfbbaN9G8hRsZIed1Xl+LXqIALs KvrZ6b4RKofDa6/rZFL4tbdH0kvU+tac+D9dvlMl+W8GMUxtG1etVG7I2U/7E45w g4jQRTer1cTbKAx845Dal5GjvssUAQCfYJrI0xrP6ZnxZzqxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBFwnNFyZ51OzDpWTYoFWRInkU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzBjMGRlZDgtY2EwNy0z NzgxLWJjMzItOGZjNDYxYzdmM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9k44oV1ZbHo2cldR3iJMK4Ib9gVh0ZxOFetqsP9X5Lk6jsq8GokQHP c0UG6bXZ64tLZgCBNzR2uIB/dagJBRYfzS/FTJ3n9xF92YfXL2LB2tS1q2lvRoee u4UiyLdwYoJ+haaGHvpdF5GJyySR4TOL9FkyE3EWKSfX+0oFh9S5qCKSwx0JNF1v 8jwDmm1Xyp5PFZ04rBuNIvIQ5VAsJMwDJ/czxyztO6QY5FE4qHScW64fUJHHc6Ft M5D7TVpMNuSFLWqiyfepFjigyJ40NvHlyq8PNF5cmazq9tvhl/qsOUjnNSxeqrVM gmbhCWNkTcnndayIFowi8aeJwnzFjlM= -----END CERTIFICATE-----Generated at Sun May 11 12:43:24 2025 by rpki-client