$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa File: 42a09306-7bc1-3e80-9cfc-6a2faa288094.roa (raw, json) Hash identifier: z26iOxTvG5nmnyzEjQoGBCqEfI/2aeYQ75gC2d3lDzk= Subject key identifier: 29:B9:A5:D2:21:06:79:F2:DF:10:9F:2D:A9:65:BE:76:A5:9C:A3:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7D56B93A130AF45DEADC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa Signing time: Thu 01 May 2025 17:14:29 +0000 ROA not before: Thu 01 May 2025 17:14:29 +0000 ROA not after: Wed 30 Jul 2025 17:14:29 +0000 asID: 22773 IP address blocks: 68.10.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:d5:6b:93:a1:30:af:45:de:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:29 2025 GMT Not After : Jul 30 17:14:29 2025 GMT Subject: CN=e9cda878-0443-414a-bdaa-ae91058dd4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:9d:71:5c:2c:e2:64:8b:07:f7:10:79:93: 1c:6e:b3:c2:65:58:7b:2e:d1:d9:ab:23:28:53:66: 79:7e:0e:a0:3c:b3:7e:01:2e:7c:6a:69:05:8f:be: 21:52:e0:fa:57:29:bb:97:2b:20:ca:e4:ea:fe:6e: 14:aa:93:4b:77:42:72:3e:80:47:0c:01:bb:ea:e2: 02:90:0a:ec:e5:b7:15:10:c5:a3:16:98:99:72:55: d7:8f:6d:18:6d:a8:5f:7a:f9:96:31:1e:c2:3e:20: 6b:8d:64:e7:84:46:32:1e:66:b3:4e:9d:38:06:dd: f2:3a:3a:5f:af:ad:f4:5a:49:4d:64:d2:0b:9c:4c: 01:3e:b6:6a:87:08:46:92:10:7f:70:1d:d4:67:e3: 84:5c:36:c7:cd:54:f7:17:e3:2c:e0:92:9b:f0:38: b5:7c:14:81:f2:13:dd:41:7c:f0:03:35:b0:e5:ca: 0c:2c:58:fa:ac:27:3f:8a:27:8b:32:8a:f7:51:20: fe:93:7d:6f:3c:03:ef:5f:fa:3f:9d:ae:94:db:33: 7d:f3:5d:9d:7d:9e:8d:1d:c4:d3:41:50:0c:22:c2: cc:93:81:74:35:5f:d0:9e:95:ca:dd:38:52:99:c1: 4f:dc:ac:13:52:df:2f:0e:c1:37:b3:9e:e6:72:26: 1f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B9:A5:D2:21:06:79:F2:DF:10:9F:2D:A9:65:BE:76:A5:9C:A3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42a09306-7bc1-3e80-9cfc-6a2faa288094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:0c:b4:06:57:b1:21:c7:67:9e:e3:e9:76:59:34:92:33: 64:94:67:3a:85:f0:e1:b2:92:68:30:e5:61:7f:6a:f3:50:05: e8:39:ba:4f:b3:76:37:c3:11:92:e5:70:51:62:d5:47:6b:f8: 98:3b:77:23:26:50:84:90:24:13:92:94:80:1d:85:e8:cc:bd: 3f:68:dd:1d:96:de:d4:d5:2a:0b:c4:4e:ff:0d:4e:1d:4f:f5: 6b:56:f4:b7:5e:b9:98:23:9a:a1:3d:b5:b9:ba:8a:07:25:9d: 9e:cf:c6:4e:f9:c8:45:4c:d1:60:0b:9a:2f:43:65:76:63:ff: 91:66:88:9a:26:82:36:47:d4:89:8f:fa:be:22:e3:f9:cc:45: 68:e1:70:cd:8d:bf:1d:09:7c:7a:d1:ed:4b:2c:83:f0:e9:0d: 96:cf:9a:23:cc:fc:a8:d3:e4:a1:d4:9f:82:8b:10:a0:74:99: 9a:1b:80:18:04:7d:be:cf:9d:c8:68:2d:66:95:2e:73:73:48: 10:a3:10:c7:9d:4d:33:43:b5:64:18:75:d3:7b:d0:d2:56:f5: 55:e2:7c:51:82:f4:56:74:01:eb:18:cc:36:bb:b9:ed:69:16: 4a:e9:11:88:15:7f:b6:54:c5:0b:ec:b9:bd:87:68:f1:bb:df: 85:e7:c1:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm199Vrk6Ewr0XercAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyOVoXDTI1MDczMDE3MTQyOVowLzEtMCsGA1UEAxMk ZTljZGE4NzgtMDQ0My00MTRhLWJkYWEtYWU5MTA1OGRkNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOmdcVws4mSLB/cQeZMcbrPCZVh7LtHZqyMo U2Z5fg6gPLN+AS58amkFj74hUuD6Vym7lysgyuTq/m4UqpNLd0JyPoBHDAG76uIC kArs5bcVEMWjFpiZclXXj20YbahfevmWMR7CPiBrjWTnhEYyHmazTp04Bt3yOjpf r630WklNZNILnEwBPrZqhwhGkhB/cB3UZ+OEXDbHzVT3F+Ms4JKb8Di1fBSB8hPd QXzwAzWw5coMLFj6rCc/iieLMor3USD+k31vPAPvX/o/na6U2zN9812dfZ6NHcTT QVAMIsLMk4F0NV/QnpXK3ThSmcFP3KwTUt8vDsE3s57mciYfYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCm5pdIhBnny3xCfLallvnalnKP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJhMDkzMDYtN2JjMS0z ZTgwLTljZmMtNmEyZmFhMjg4MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ODLQGV7Ehx2ee4+l2WTSSM2SUZzqF8OGykmgw5WF/avNQBeg5uk+z djfDEZLlcFFi1Udr+Jg7dyMmUISQJBOSlIAdhejMvT9o3R2W3tTVKgvETv8NTh1P 9WtW9LdeuZgjmqE9tbm6igclnZ7Pxk75yEVM0WALmi9DZXZj/5FmiJomgjZH1ImP +r4i4/nMRWjhcM2Nvx0JfHrR7Ussg/DpDZbPmiPM/KjT5KHUn4KLEKB0mZobgBgE fb7PnchoLWaVLnNzSBCjEMedTTNDtWQYddN70NJW9VXifFGC9FZ0AesYzDa7ue1p FkrpEYgVf7ZUxQvsub2HaPG734XnwSY= -----END CERTIFICATE-----Generated at Sun May 11 19:21:18 2025 by rpki-client