$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ed663e-38cc-3838-8d99-3edb56dae450.roa File: 43ed663e-38cc-3838-8d99-3edb56dae450.roa (raw, json) Hash identifier: i8KRu/mF+7t39uZGLon7OFtNZt1vlFEaGiEK1lazHBc= Subject key identifier: 90:CD:24:88:C6:C1:50:AF:C8:E1:E7:B6:03:55:67:E6:98:10:99:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7D5E1C628232BF023B900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ed663e-38cc-3838-8d99-3edb56dae450.roa Signing time: Thu 01 May 2025 17:14:30 +0000 ROA not before: Thu 01 May 2025 17:14:30 +0000 ROA not after: Wed 30 Jul 2025 17:14:30 +0000 asID: 22773 IP address blocks: 68.10.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:d5:e1:c6:28:23:2b:f0:23:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:30 2025 GMT Not After : Jul 30 17:14:30 2025 GMT Subject: CN=f317f88c-6012-46c9-87f6-cc0dd60d4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:de:d6:1d:34:a4:7f:de:48:fd:d6:26:bd: d5:f4:f8:ed:18:57:fa:37:61:73:80:3f:d9:c8:28: a4:62:26:29:6d:f3:a3:a1:af:f2:d2:1f:ab:2e:23: 90:56:d1:85:7c:3d:e0:06:8c:7e:43:63:e0:49:e3: f6:0f:76:d5:38:b9:0c:eb:4e:cd:d8:c1:51:3d:e1: 20:66:2b:b5:1a:63:61:a1:11:e3:2a:6c:10:0c:fe: 9c:bd:08:e3:ce:17:99:30:f5:55:bc:55:17:92:b2: 90:ea:3a:64:bf:3c:b3:fe:56:65:93:b5:6f:61:54: 22:a6:73:a7:3e:4c:10:11:95:09:67:38:ef:0b:af: 60:a6:54:37:32:14:53:3f:d6:ce:3b:27:12:6a:60: 3c:4b:63:17:88:ce:92:dc:4c:14:dc:9a:28:1d:a9: 03:9b:4a:83:8a:b0:8a:cc:cc:d7:58:78:a8:25:80: b1:ab:79:f5:d5:e1:41:3c:62:45:8b:52:04:39:ac: db:34:6c:72:7b:01:c3:1b:a5:a8:e4:99:7c:8b:e8: 56:9c:92:85:7a:a3:26:06:f6:de:07:eb:13:92:9f: 99:b2:26:d3:bb:5b:85:db:d4:71:33:aa:0e:ae:7b: 0d:62:a3:40:11:b0:62:5a:57:79:59:96:47:2b:90: 88:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:24:88:C6:C1:50:AF:C8:E1:E7:B6:03:55:67:E6:98:10:99:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ed663e-38cc-3838-8d99-3edb56dae450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b0:d5:ca:c4:99:44:ab:31:46:cb:4e:41:b4:1a:07:0c:c0: ec:10:09:29:4c:23:2d:69:68:b7:61:9a:a5:26:89:43:86:97: 90:3e:be:6c:b3:af:b6:82:8d:8f:3d:b1:da:3a:c2:1b:7f:b2: 44:83:88:50:18:6c:94:97:22:07:9f:3f:f2:21:b1:32:05:6a: 14:9d:91:cc:1b:d1:8e:fa:e4:64:06:42:47:a2:f5:9e:72:17: 99:eb:51:65:9a:65:0d:d3:e8:b3:1e:a3:38:7b:7c:78:a3:d7: 50:32:d2:11:fd:33:a2:c6:a2:5c:c7:e4:c8:df:95:0f:c9:32: 9e:45:79:41:8b:85:27:b2:30:3e:f6:22:a0:cd:bb:8e:2b:c5: 72:0f:20:8e:ab:73:a4:5a:d2:8d:52:30:61:14:91:f7:10:b4: 5f:8a:9a:2e:cf:17:90:d6:83:1d:10:58:bc:9e:1b:8d:93:13: 70:20:b1:02:97:23:1d:90:0e:d9:46:7c:9f:8a:f1:b7:06:ec: cc:ec:7c:5d:53:8f:5f:95:16:ec:f7:4c:fb:ae:6b:8c:d5:63: 66:83:79:d4:19:38:4d:f3:84:2a:1c:03:7c:f6:98:ed:8e:51: 9a:c8:3f:bc:df:7d:7c:c9:23:19:c0:6a:33:70:fd:5a:f6:40: a0:8f:1a:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm199XhxigjK/AjuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQzMFoXDTI1MDczMDE3MTQzMFowLzEtMCsGA1UEAxMk ZjMxN2Y4OGMtNjAxMi00NmM5LTg3ZjYtY2MwZGQ2MGQ0Nzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpTe1h00pH/eSP3WJr3V9PjtGFf6N2FzgD/Z yCikYiYpbfOjoa/y0h+rLiOQVtGFfD3gBox+Q2PgSeP2D3bVOLkM607N2MFRPeEg Ziu1GmNhoRHjKmwQDP6cvQjjzheZMPVVvFUXkrKQ6jpkvzyz/lZlk7VvYVQipnOn PkwQEZUJZzjvC69gplQ3MhRTP9bOOycSamA8S2MXiM6S3EwU3JooHakDm0qDirCK zMzXWHioJYCxq3n11eFBPGJFi1IEOazbNGxyewHDG6Wo5Jl8i+hWnJKFeqMmBvbe B+sTkp+ZsibTu1uF29RxM6oOrnsNYqNAEbBiWld5WZZHK5CIHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDNJIjGwVCvyOHntgNVZ+aYEJkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNlZDY2M2UtMzhjYy0z ODM4LThkOTktM2VkYjU2ZGFlNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuw1crEmUSrMUbLTkG0GgcMwOwQCSlMIy1paLdhmqUmiUOGl5A+vmyz r7aCjY89sdo6wht/skSDiFAYbJSXIgefP/IhsTIFahSdkcwb0Y765GQGQkei9Z5y F5nrUWWaZQ3T6LMeozh7fHij11Ay0hH9M6LGolzH5MjflQ/JMp5FeUGLhSeyMD72 IqDNu44rxXIPII6rc6Ra0o1SMGEUkfcQtF+Kmi7PF5DWgx0QWLyeG42TE3AgsQKX Ix2QDtlGfJ+K8bcG7MzsfF1Tj1+VFuz3TPuua4zVY2aDedQZOE3zhCocA3z2mO2O UZrIP7zffXzJIxnAajNw/Vr2QKCPGvU= -----END CERTIFICATE-----Generated at Mon May 12 19:19:38 2025 by rpki-client