$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a3b6d-eef7-3978-bbc3-8c2a5ad72672.roa File: 401a3b6d-eef7-3978-bbc3-8c2a5ad72672.roa (raw, json) Hash identifier: KmcBrpmplnK4n2CFkip6KC3qu+exdxxOOVKy04ghC+4= Subject key identifier: 9C:5D:4A:3B:80:60:52:47:67:41:9D:CD:1D:7C:A5:CC:09:97:00:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F53C9EBA9CDECB1EF3C980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a3b6d-eef7-3978-bbc3-8c2a5ad72672.roa Signing time: Thu 01 May 2025 17:09:15 +0000 ROA not before: Thu 01 May 2025 17:09:15 +0000 ROA not after: Wed 30 Jul 2025 17:09:15 +0000 asID: 22773 IP address blocks: 68.14.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:3c:9e:ba:9c:de:cb:1e:f3:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:15 2025 GMT Not After : Jul 30 17:09:15 2025 GMT Subject: CN=304050a2-e938-4508-8f5c-86ee3c123a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:f4:61:b4:6b:76:a7:d3:bc:a1:49:ba:96: 05:57:ec:ca:a8:10:0d:63:0b:18:35:60:88:a7:bb: 9b:a0:2e:4d:e5:00:c9:e1:29:25:44:ac:b4:1a:4b: 81:79:9c:d8:b1:10:ae:09:99:d6:1f:d3:00:0e:05: b8:85:32:2b:5d:0c:54:a0:43:ad:a7:b4:b1:58:21: f7:61:b7:a4:49:bc:b1:ce:f2:b6:8c:67:ae:2e:f1: 38:1a:ba:a4:19:37:39:02:f4:56:0b:0f:56:2e:2e: 69:78:0c:6c:58:d2:22:eb:53:96:08:02:f0:da:57: 71:c3:64:4e:8a:39:74:8e:ae:6a:67:39:57:7e:55: ec:8f:59:20:d8:a0:85:ec:16:ad:9d:d9:23:9d:87: 2c:b6:ed:03:ab:05:49:15:af:3b:0d:55:2a:57:17: a2:46:a8:05:77:4b:11:68:11:27:55:1d:35:4c:e9: cf:82:03:e7:de:6d:e0:c9:23:04:7a:8d:9b:bf:35: 03:78:c8:90:e2:9d:a2:ea:c1:58:5b:f8:24:a2:d1: d7:b0:00:73:3f:96:6e:f5:82:c9:51:b2:54:d8:37: 7e:b1:24:36:3a:9c:4a:bf:1a:c1:44:5f:7b:72:06: 76:c6:a7:ae:c6:2e:f8:4a:75:1f:a9:aa:2e:4b:f3: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5D:4A:3B:80:60:52:47:67:41:9D:CD:1D:7C:A5:CC:09:97:00:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/401a3b6d-eef7-3978-bbc3-8c2a5ad72672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:00:e1:07:25:09:5c:3d:b9:e8:ce:46:e0:ba:f2:8e:41:a6: b8:25:b6:2d:7c:c3:e0:74:38:d2:ac:33:38:31:6c:a9:b5:98: 54:24:80:db:e9:74:f6:b7:f5:5e:fd:a7:0d:09:ff:46:be:ec: 1f:89:89:6d:bd:d7:0e:69:9a:e4:a4:11:f6:d1:c8:3f:4a:a5: 70:17:60:7e:dd:75:a0:03:b9:da:72:d3:96:f3:12:56:8c:fa: b5:4d:dc:9e:30:f3:70:65:4a:19:89:d1:7f:d1:8e:91:c9:be: 3e:cc:03:a8:f9:da:aa:1b:ce:55:a4:fe:93:9b:5b:de:96:a4: 96:30:8a:5f:89:ee:2c:d5:af:55:26:4d:c3:d0:ed:f2:df:ee: 9f:a1:a2:24:32:fd:f4:94:f9:5b:2a:7b:8c:20:1d:35:97:c6: be:26:2a:28:70:bd:66:13:25:75:8c:dd:ea:8a:73:3a:8a:8d: 30:27:90:9f:2f:96:98:ea:81:0c:d1:a6:6b:31:8b:95:a3:8d: 66:ea:d1:6b:98:79:40:c1:e8:90:3d:94:d1:37:de:e6:59:c0: aa:4b:a2:7e:92:10:7d:56:96:6b:6d:86:52:20:4d:2e:15:f4: 04:47:cb:d2:c7:f7:d8:0f:5e:c4:a1:bf:30:dd:0a:bd:35:92: c6:68:31:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Tyeupzeyx7zyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxNVoXDTI1MDczMDE3MDkxNVowLzEtMCsGA1UEAxMk MzA0MDUwYTItZTkzOC00NTA4LThmNWMtODZlZTNjMTIzYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqr0YbRrdqfTvKFJupYFV+zKqBANYwsYNWCI p7uboC5N5QDJ4SklRKy0GkuBeZzYsRCuCZnWH9MADgW4hTIrXQxUoEOtp7SxWCH3 YbekSbyxzvK2jGeuLvE4GrqkGTc5AvRWCw9WLi5peAxsWNIi61OWCALw2ldxw2RO ijl0jq5qZzlXflXsj1kg2KCF7BatndkjnYcstu0DqwVJFa87DVUqVxeiRqgFd0sR aBEnVR01TOnPggPn3m3gySMEeo2bvzUDeMiQ4p2i6sFYW/gkotHXsABzP5Zu9YLJ UbJU2Dd+sSQ2OpxKvxrBRF97cgZ2xqeuxi74SnUfqaouS/MVawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxdSjuAYFJHZ0GdzR18pcwJlwD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAxYTNiNmQtZWVmNy0z OTc4LWJiYzMtOGMyYTVhZDcyNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgA4QclCVw9uejORuC68o5Bprglti18w+B0ONKsMzgxbKm1mFQkgNvp dPa39V79pw0J/0a+7B+JiW291w5pmuSkEfbRyD9KpXAXYH7ddaADudpy05bzElaM +rVN3J4w83BlShmJ0X/RjpHJvj7MA6j52qobzlWk/pObW96WpJYwil+J7izVr1Um TcPQ7fLf7p+hoiQy/fSU+Vsqe4wgHTWXxr4mKihwvWYTJXWM3eqKczqKjTAnkJ8v lpjqgQzRpmsxi5WjjWbq0WuYeUDB6JA9lNE33uZZwKpLon6SEH1WlmtthlIgTS4V 9ARHy9LH99gPXsShvzDdCr01ksZoMRc= -----END CERTIFICATE-----Generated at Sun May 11 19:15:48 2025 by rpki-client