$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35cd4582-07a1-353e-97fa-23d6c9a63717.roa File: 35cd4582-07a1-353e-97fa-23d6c9a63717.roa (raw, json) Hash identifier: Z6xqwjbyKst0cbteqqCGkr05emCwLwCMXHX+GXosTbY= Subject key identifier: FD:2E:75:C6:68:8A:BB:09:1B:A4:F9:64:5B:DD:05:2F:10:61:2F:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F53FDA8A493F6963207D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35cd4582-07a1-353e-97fa-23d6c9a63717.roa Signing time: Thu 01 May 2025 17:09:17 +0000 ROA not before: Thu 01 May 2025 17:09:17 +0000 ROA not after: Wed 30 Jul 2025 17:09:17 +0000 asID: 22773 IP address blocks: 68.14.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:3f:da:8a:49:3f:69:63:20:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:17 2025 GMT Not After : Jul 30 17:09:17 2025 GMT Subject: CN=b4ce5692-475f-4503-b252-1ec7628aff34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:8a:b9:62:9d:e4:95:bf:0c:85:92:cc:22: ce:48:8c:c2:c5:ab:d4:56:8a:1e:49:c3:70:6f:65: c8:cb:71:a0:5c:2f:a0:86:e8:ee:5b:ca:2a:22:69: b2:1d:27:c5:8b:e8:ff:3a:4e:9f:5b:3d:55:52:25: 35:35:00:e2:e6:06:c1:ba:56:77:b0:37:b2:d7:5d: 99:3b:50:86:89:5e:74:7f:09:77:65:70:7e:a9:1b: 0d:5e:21:9c:5c:9c:06:d2:76:f5:ae:ca:5d:f6:22: 92:d3:77:42:57:d5:0b:d9:71:1c:ca:dd:48:d7:a0: d5:23:6d:a2:6a:a2:52:48:62:95:f9:67:76:c4:ed: e2:0e:bf:5d:6a:9b:5a:25:aa:b8:5e:c5:71:9d:13: ad:1f:54:27:6a:15:d8:9c:46:29:2c:a9:55:b0:14: 17:2f:91:67:96:b6:52:21:7c:73:6d:97:26:77:76: b8:1d:0d:88:58:98:02:1b:59:71:af:ca:a0:9e:a5: 68:6a:04:04:80:b4:f5:6a:6d:bc:bd:e1:c1:58:1d: 41:d0:71:e4:f0:11:d3:85:6e:80:a4:7c:84:76:01: 72:5a:48:1f:ce:82:22:e9:39:70:1a:10:ee:56:3a: fa:93:85:b9:50:f0:0a:50:54:94:5c:c0:fc:fb:50: de:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2E:75:C6:68:8A:BB:09:1B:A4:F9:64:5B:DD:05:2F:10:61:2F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35cd4582-07a1-353e-97fa-23d6c9a63717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:cc:fa:13:66:49:d0:b4:ca:d1:26:11:01:82:da:3c:32:fe: d7:37:d9:c1:2f:a1:48:06:47:08:5d:5a:f7:05:00:f6:f4:50: c6:84:3c:1c:11:52:3d:f0:67:8b:25:54:31:66:bc:43:78:25: 81:f0:f6:96:5a:c3:bb:cf:a8:31:f3:8e:af:08:08:5e:63:36: b2:38:ab:a9:c4:94:ed:a3:21:e8:20:8c:08:04:07:40:dd:d7: 2a:56:ee:f2:cd:47:58:79:a8:1e:88:88:53:28:14:fa:64:5f: 01:af:11:51:f7:7d:be:de:15:7b:62:98:bc:a0:be:dd:cf:d3: c1:69:16:ec:e2:a5:f4:42:5e:32:dc:6c:c5:31:d4:10:ec:cc: a6:74:0f:89:c3:59:7f:86:26:0a:83:32:ab:a1:dd:61:94:d6: 98:fc:ab:09:7c:28:02:de:97:7a:b9:5e:e9:3b:b8:90:6c:be: 87:14:64:f0:0d:84:63:7c:6a:f0:39:b9:d9:52:25:29:be:51: b3:72:80:a2:5c:f4:f2:bb:3a:40:d1:2a:b7:de:b1:97:58:ce: 86:c7:ee:30:8b:5b:40:19:4e:27:0c:5b:f2:44:7f:bb:90:71: 2f:56:a4:df:08:cd:a6:9e:3a:b5:56:bd:cc:cd:3a:80:e5:ca: da:cf:c3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19T/aikk/aWMgfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxN1oXDTI1MDczMDE3MDkxN1owLzEtMCsGA1UEAxMk YjRjZTU2OTItNDc1Zi00NTAzLWIyNTItMWVjNzYyOGFmZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsaKuWKd5JW/DIWSzCLOSIzCxavUVooeScNw b2XIy3GgXC+ghujuW8oqImmyHSfFi+j/Ok6fWz1VUiU1NQDi5gbBulZ3sDey112Z O1CGiV50fwl3ZXB+qRsNXiGcXJwG0nb1rspd9iKS03dCV9UL2XEcyt1I16DVI22i aqJSSGKV+Wd2xO3iDr9daptaJaq4XsVxnROtH1QnahXYnEYpLKlVsBQXL5FnlrZS IXxzbZcmd3a4HQ2IWJgCG1lxr8qgnqVoagQEgLT1am28veHBWB1B0HHk8BHThW6A pHyEdgFyWkgfzoIi6TlwGhDuVjr6k4W5UPAKUFSUXMD8+1DeSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0udcZoirsJG6T5ZFvdBS8QYS+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVjZDQ1ODItMDdhMS0z NTNlLTk3ZmEtMjNkNmM5YTYzNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjM+hNmSdC0ytEmEQGC2jwy/tc32cEvoUgGRwhdWvcFAPb0UMaEPBwR Uj3wZ4slVDFmvEN4JYHw9pZaw7vPqDHzjq8ICF5jNrI4q6nElO2jIeggjAgEB0Dd 1ypW7vLNR1h5qB6IiFMoFPpkXwGvEVH3fb7eFXtimLygvt3P08FpFuzipfRCXjLc bMUx1BDszKZ0D4nDWX+GJgqDMquh3WGU1pj8qwl8KALel3q5Xuk7uJBsvocUZPAN hGN8avA5udlSJSm+UbNygKJc9PK7OkDRKrfesZdYzobH7jCLW0AZTicMW/JEf7uQ cS9WpN8IzaaeOrVWvczNOoDlytrPw0E= -----END CERTIFICATE-----Generated at Sun May 11 15:57:00 2025 by rpki-client