$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5608a195-a2a3-3ec6-ac32-588dcaa60b40.roa File: 5608a195-a2a3-3ec6-ac32-588dcaa60b40.roa (raw, json) Hash identifier: 8YXjg82ZDAtRDt75GnPbVenHk93kMdM/xnThUBI+ScI= Subject key identifier: C0:D5:D1:E7:4D:CA:44:E6:47:C9:63:9E:C7:C3:BC:57:B5:C6:34:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7EC374875D08A18F10EF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5608a195-a2a3-3ec6-ac32-588dcaa60b40.roa Signing time: Thu 01 May 2025 17:14:40 +0000 ROA not before: Thu 01 May 2025 17:14:40 +0000 ROA not after: Wed 30 Jul 2025 17:14:40 +0000 asID: 22773 IP address blocks: 68.10.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:ec:37:48:75:d0:8a:18:f1:0e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:40 2025 GMT Not After : Jul 30 17:14:40 2025 GMT Subject: CN=67ade5e2-e3d4-474f-b9f8-82a0aa107096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:6b:2e:73:f8:84:88:f5:a2:ff:67:4b:e1: 71:07:8e:f3:3d:05:3a:61:91:28:b3:c1:6c:1f:a7: 84:e8:7a:99:3d:41:f8:be:fb:a6:0c:e7:b9:13:51: 45:26:a0:b3:7a:db:02:b2:57:ac:aa:45:a5:9e:b6: e8:6d:72:0b:58:cd:0f:ee:65:18:f8:1b:6a:99:52: 83:ca:46:86:76:f5:e6:06:b2:b4:78:a6:49:65:79: 29:05:42:72:f2:ff:68:2a:50:c3:36:8a:5b:74:93: 84:5f:3f:de:82:b8:c9:a8:ef:56:31:09:f1:de:af: 2d:ab:e1:b4:25:b1:d2:23:10:ba:dd:92:a0:84:58: 40:30:d5:c5:3e:71:77:03:7d:c3:3e:ff:65:af:e5: be:6e:e1:bc:55:44:42:63:85:d0:cf:9d:4d:2c:d7: 49:30:c1:61:83:82:1f:ed:c6:64:33:b1:26:83:4d: a1:df:9b:9d:dc:57:4f:eb:93:76:98:4e:10:23:e7: c3:5e:96:9b:66:77:1b:21:e0:a1:79:57:e7:e5:31: 47:b4:d4:0e:93:5b:20:6b:63:3e:ee:8f:0c:29:33: 86:f7:d5:78:6f:49:b7:f3:14:7d:02:c6:ef:87:40: 2f:4a:3a:a5:e4:81:5d:3c:a7:70:d2:0f:4a:78:9f: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D5:D1:E7:4D:CA:44:E6:47:C9:63:9E:C7:C3:BC:57:B5:C6:34:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5608a195-a2a3-3ec6-ac32-588dcaa60b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d4:79:ec:72:e7:42:20:02:a0:fb:2a:51:c8:19:a3:5d:02: fb:70:0f:a3:c3:2a:94:0b:02:b0:9b:84:78:cf:9d:01:17:6e: b8:59:3c:2f:ad:ba:93:2f:88:d7:0a:b9:d1:2c:c8:db:cc:b7: 14:d7:df:1f:8d:74:f3:c4:82:a3:95:6e:dc:1c:3d:e8:1a:65: bc:42:e9:0c:35:f2:e6:2c:f5:ed:47:bc:e1:1c:36:a2:5f:8e: 89:0f:fe:4f:0a:9a:e9:9f:7f:c7:3e:c7:3c:5b:8b:b6:f6:f1: 50:d2:cd:6b:fc:ef:20:56:6c:36:1d:ef:5d:50:b2:9f:f5:a1: 2c:20:23:a1:0d:49:7f:5d:3e:ac:ef:a5:66:6e:04:0c:8a:31: a2:fa:0a:25:7f:87:9e:91:5b:0c:03:91:5c:32:29:9f:85:08: a3:a6:c0:d7:60:fc:c7:1d:a1:05:4b:3f:86:85:6d:e9:8e:a9: 58:b1:9a:a2:bf:89:1c:d6:0d:9e:01:00:d4:9a:69:81:00:4d: 37:e4:b8:60:6d:b1:f2:64:87:4a:ef:e9:dd:92:9e:ef:45:95: 82:4d:51:22:a0:ae:46:bb:1c:da:00:5d:a2:6d:67:76:e3:6d: ae:52:8d:5d:b1:a2:06:94:6f:17:96:b6:8e:67:46:60:73:84: 18:dc:6d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19+w3SHXQihjxDvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQ0MFoXDTI1MDczMDE3MTQ0MFowLzEtMCsGA1UEAxMk NjdhZGU1ZTItZTNkNC00NzRmLWI5ZjgtODJhMGFhMTA3MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf1rLnP4hIj1ov9nS+FxB47zPQU6YZEos8Fs H6eE6HqZPUH4vvumDOe5E1FFJqCzetsCslesqkWlnrbobXILWM0P7mUY+BtqmVKD ykaGdvXmBrK0eKZJZXkpBUJy8v9oKlDDNopbdJOEXz/egrjJqO9WMQnx3q8tq+G0 JbHSIxC63ZKghFhAMNXFPnF3A33DPv9lr+W+buG8VURCY4XQz51NLNdJMMFhg4If 7cZkM7Emg02h35ud3FdP65N2mE4QI+fDXpabZncbIeCheVfn5TFHtNQOk1sga2M+ 7o8MKTOG99V4b0m38xR9Asbvh0AvSjql5IFdPKdw0g9KeJ8alQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDV0edNykTmR8ljnsfDvFe1xjSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTYwOGExOTUtYTJhMy0z ZWM2LWFjMzItNTg4ZGNhYTYwYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRArUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvUeexy50IgAqD7KlHIGaNdAvtwD6PDKpQLArCbhHjPnQEXbrhZPC+t upMviNcKudEsyNvMtxTX3x+NdPPEgqOVbtwcPegaZbxC6Qw18uYs9e1HvOEcNqJf jokP/k8Kmumff8c+xzxbi7b28VDSzWv87yBWbDYd711Qsp/1oSwgI6ENSX9dPqzv pWZuBAyKMaL6CiV/h56RWwwDkVwyKZ+FCKOmwNdg/McdoQVLP4aFbemOqVixmqK/ iRzWDZ4BANSaaYEATTfkuGBtsfJkh0rv6d2Snu9FlYJNUSKgrka7HNoAXaJtZ3bj ba5SjV2xogaUbxeWto5nRmBzhBjcbaU= -----END CERTIFICATE-----Generated at Sun May 11 04:19:00 2025 by rpki-client