$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e01e8c3-df46-35a7-a816-2f60160b93c8.roa File: 5e01e8c3-df46-35a7-a816-2f60160b93c8.roa (raw, json) Hash identifier: 6DEDFNQPNQzm/iyaBbe7ACvebgETiyROS8uBxHZM2k8= Subject key identifier: 8A:0F:A5:E3:77:1B:AB:EC:E5:67:D2:2E:EA:F3:70:C1:58:AB:F3:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F50BE01F79FD8BACD2CE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e01e8c3-df46-35a7-a816-2f60160b93c8.roa Signing time: Thu 01 May 2025 17:08:52 +0000 ROA not before: Thu 01 May 2025 17:08:52 +0000 ROA not after: Wed 30 Jul 2025 17:08:52 +0000 asID: 22773 IP address blocks: 68.9.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:0b:e0:1f:79:fd:8b:ac:d2:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:52 2025 GMT Not After : Jul 30 17:08:52 2025 GMT Subject: CN=8d8d098c-8f91-40ac-9a40-71f3d2d9ce04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:78:48:31:5f:b9:3e:46:25:7b:a3:59:9c: e0:ff:7c:1e:b8:a1:db:9d:40:f9:73:2e:03:5c:f6: 2d:49:4f:1c:7f:93:e5:a8:a1:04:43:8b:25:7d:7b: d2:6f:8d:06:2e:03:c0:7c:fd:51:ab:b9:72:d5:e1: 84:f5:8f:15:dd:b3:c4:54:e1:c1:2a:86:57:70:0f: 6b:c6:ab:92:b6:f4:b1:39:af:37:24:ab:8c:12:62: 90:7f:9d:d1:e6:90:55:a3:aa:e0:45:23:50:ac:ed: 7a:e3:07:bd:43:87:84:70:83:66:3c:df:af:6e:cf: 78:79:87:ac:03:bf:88:1d:18:55:a1:18:cc:d4:e5: 03:7d:5e:f9:15:e7:a4:9e:59:5a:70:b6:2b:40:dc: 6a:bd:1e:7b:fe:d3:d5:d8:31:35:40:24:1c:4e:c8: b4:ee:1b:e8:2f:0a:25:0d:35:79:93:a8:38:79:f8: 20:80:1f:8c:93:a3:56:92:a8:a9:34:68:74:0f:bf: 53:67:2c:ca:cc:f6:41:99:bf:67:55:7f:fc:8e:6b: b0:da:46:1b:15:a7:9d:b6:2c:60:3e:7a:5b:fe:01: 21:8c:a0:e9:b0:b0:c4:35:d6:55:b6:30:1b:0f:d1: 18:c5:8c:f9:68:c2:8f:bf:ad:64:dd:e0:3e:b8:b2: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:A5:E3:77:1B:AB:EC:E5:67:D2:2E:EA:F3:70:C1:58:AB:F3:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e01e8c3-df46-35a7-a816-2f60160b93c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9f:5b:3b:c6:a1:c8:a6:64:f4:68:d4:e0:3e:23:3c:8c:05: 3e:79:f4:58:df:ee:8f:84:8e:f3:99:ff:54:bf:f3:7d:0f:1b: 0a:14:c4:ab:c1:3d:e3:94:cc:d1:70:3f:30:80:31:59:08:31: bc:e9:f6:35:63:f3:d7:89:7e:82:8e:a1:30:61:ed:da:c2:0e: 2f:4e:3c:4c:db:5f:51:55:8d:92:3a:47:e8:3b:29:6a:90:95: 3f:1e:53:5a:cb:f8:4f:32:ff:dd:26:b4:e5:b4:57:96:9b:47: 5b:0e:d6:6d:6b:e6:94:9b:40:b8:01:16:ab:97:d8:a0:d3:18: 16:38:a2:07:e2:c2:f3:9f:4b:aa:47:af:b4:57:13:63:0d:b6: 1c:18:19:a2:ee:48:f7:63:58:e1:49:33:1f:d0:6d:9f:54:20: 83:c8:4b:2f:59:c2:54:34:9f:15:a8:e6:2c:a8:ab:7b:a8:34: df:7c:52:55:a4:6f:28:0c:a2:5e:2b:15:89:21:22:13:15:e3: fd:d3:1f:ff:6a:75:a8:c2:f7:e9:3c:2a:1e:f4:d4:28:37:cd: 2b:e3:00:a8:01:12:7e:6b:b1:7a:dc:7a:cc:a5:fc:32:46:65: eb:da:5b:ed:f1:bf:bb:c0:d0:d4:52:f6:6a:15:2a:1a:d0:96: b3:23:5e:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19QvgH3n9i6zSzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1MloXDTI1MDczMDE3MDg1MlowLzEtMCsGA1UEAxMk OGQ4ZDA5OGMtOGY5MS00MGFjLTlhNDAtNzFmM2QyZDljZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RB4SDFfuT5GJXujWZzg/3weuKHbnUD5cy4D XPYtSU8cf5PlqKEEQ4slfXvSb40GLgPAfP1Rq7ly1eGE9Y8V3bPEVOHBKoZXcA9r xquStvSxOa83JKuMEmKQf53R5pBVo6rgRSNQrO164we9Q4eEcINmPN+vbs94eYes A7+IHRhVoRjM1OUDfV75FeeknllacLYrQNxqvR57/tPV2DE1QCQcTsi07hvoLwol DTV5k6g4efgggB+Mk6NWkqipNGh0D79TZyzKzPZBmb9nVX/8jmuw2kYbFaedtixg Pnpb/gEhjKDpsLDENdZVtjAbD9EYxYz5aMKPv61k3eA+uLLguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoPpeN3G6vs5WfSLurzcMFYq/NzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWUwMWU4YzMtZGY0Ni0z NWE3LWE4MTYtMmY2MDE2MGI5M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAlMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHifWzvGocimZPRo1OA+IzyMBT559Fjf7o+EjvOZ/1S/830PGwoUxKvB PeOUzNFwPzCAMVkIMbzp9jVj89eJfoKOoTBh7drCDi9OPEzbX1FVjZI6R+g7KWqQ lT8eU1rL+E8y/90mtOW0V5abR1sO1m1r5pSbQLgBFquX2KDTGBY4ogfiwvOfS6pH r7RXE2MNthwYGaLuSPdjWOFJMx/QbZ9UIIPISy9ZwlQ0nxWo5iyoq3uoNN98UlWk bygMol4rFYkhIhMV4/3TH/9qdajC9+k8Kh701Cg3zSvjAKgBEn5rsXrcesyl/DJG ZevaW+3xv7vA0NRS9moVKhrQlrMjXtc= -----END CERTIFICATE-----Generated at Sat May 10 04:54:42 2025 by rpki-client