$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fe130c2-a2ae-3bb5-9d21-2cef8e5f3386.roa File: 5fe130c2-a2ae-3bb5-9d21-2cef8e5f3386.roa (raw, json) Hash identifier: pXAxGImqdWPMD5UatNPNIA8ARWg2ff5KA5hA6RhraVw= Subject key identifier: 54:75:71:EF:90:DC:B3:13:BF:50:B5:E8:18:BD:4E:FE:82:50:94:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5403CABB21D907F791B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fe130c2-a2ae-3bb5-9d21-2cef8e5f3386.roa Signing time: Thu 01 May 2025 17:09:17 +0000 ROA not before: Thu 01 May 2025 17:09:17 +0000 ROA not after: Wed 30 Jul 2025 17:09:17 +0000 asID: 22773 IP address blocks: 68.14.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:40:3c:ab:b2:1d:90:7f:79:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:17 2025 GMT Not After : Jul 30 17:09:17 2025 GMT Subject: CN=f6d42d27-b240-4e76-948d-66a73a5bcbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:8e:c4:41:55:e5:c8:6d:a6:98:e2:73:7a: 44:34:55:6d:3e:5f:b0:36:d8:06:ca:5a:c7:59:c0: f0:48:01:a2:be:f7:04:db:0e:06:ce:da:ef:5f:69: 45:c1:da:0c:cd:86:34:55:f0:36:3c:58:b7:9f:07: e1:ee:b9:15:12:d2:50:25:c8:1e:68:8c:dc:a5:26: 21:82:14:0b:bb:5a:f3:9f:9e:7b:e1:68:2b:57:38: 6b:8c:bb:de:a3:5e:2b:db:83:49:df:8a:b7:08:eb: b3:34:17:9c:b9:4d:ea:ce:f0:4c:30:d4:ce:e2:36: 6b:37:fe:78:43:9b:42:a9:c5:27:53:d4:7d:bb:6b: 36:b4:5b:33:76:12:38:f6:f7:53:e2:1f:fa:b8:8e: 64:a3:74:09:fe:96:21:54:ef:c5:50:5a:57:d4:ad: ea:eb:d5:bb:bf:49:62:a8:bc:03:74:ca:5b:0c:b3: b3:3e:37:83:42:4c:bb:ef:c7:26:a6:78:9a:52:49: c7:78:e2:1b:eb:9a:ea:ee:4e:e6:a9:7b:aa:55:0e: 4a:56:2d:b2:37:b2:25:50:52:d3:10:03:35:8e:69: fb:db:a4:0d:3f:d8:23:99:da:36:c8:7e:cf:ff:44: da:41:ff:57:fd:91:83:a1:a7:fc:00:31:29:ed:f7: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:75:71:EF:90:DC:B3:13:BF:50:B5:E8:18:BD:4E:FE:82:50:94:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5fe130c2-a2ae-3bb5-9d21-2cef8e5f3386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5a:7f:23:98:fa:6c:89:8f:eb:49:aa:e8:15:62:a1:25:07: d9:19:13:88:10:8e:e2:7e:27:cb:e3:12:43:14:54:26:b0:1f: 4c:5d:5a:71:84:6a:2a:03:e4:eb:0c:98:7e:e5:94:b8:c7:f7: 15:99:33:6d:89:a2:fd:0d:78:ac:c1:e1:60:27:d5:2c:d5:58: 22:3f:48:d7:fc:d9:48:b4:f9:87:60:be:a6:d0:97:e5:d5:30: 85:75:d8:b2:cd:d8:d1:71:0f:1e:b4:0d:e0:d3:88:51:8c:3b: f9:c2:42:95:3c:71:fc:c9:ac:58:8e:fd:68:41:44:44:a0:b9: 04:e3:01:90:b0:3e:af:87:67:29:be:21:5b:22:57:45:a5:df: 34:a8:0d:84:2d:e2:b4:57:c1:fd:bf:48:ae:60:c9:17:a2:d3: 18:df:97:92:df:64:df:53:f0:7d:7e:32:f9:54:06:40:20:10: d0:a3:68:1f:f8:73:a7:d7:0a:63:72:0f:60:e9:7b:ec:a1:76: c6:8b:bd:61:46:ed:91:eb:4f:b7:93:99:e2:1b:c5:61:39:0f: d6:a6:8a:20:36:15:d7:4f:e5:d2:9b:bb:1f:64:99:6f:2b:dd: 57:e5:fe:82:e7:30:e8:5c:da:92:6b:f8:1c:d2:b5:2e:40:d7: 53:e8:c4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19UA8q7IdkH95G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxN1oXDTI1MDczMDE3MDkxN1owLzEtMCsGA1UEAxMk ZjZkNDJkMjctYjI0MC00ZTc2LTk0OGQtNjZhNzNhNWJjYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvuOxEFV5chtppjic3pENFVtPl+wNtgGylrH WcDwSAGivvcE2w4GztrvX2lFwdoMzYY0VfA2PFi3nwfh7rkVEtJQJcgeaIzcpSYh ghQLu1rzn5574WgrVzhrjLveo14r24NJ34q3COuzNBecuU3qzvBMMNTO4jZrN/54 Q5tCqcUnU9R9u2s2tFszdhI49vdT4h/6uI5ko3QJ/pYhVO/FUFpX1K3q69W7v0li qLwDdMpbDLOzPjeDQky778cmpniaUknHeOIb65rq7k7mqXuqVQ5KVi2yN7IlUFLT EAM1jmn726QNP9gjmdo2yH7P/0TaQf9X/ZGDoaf8ADEp7ffFCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFR1ce+Q3LMTv1C16Bi9Tv6CUJRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWZlMTMwYzItYTJhZS0z YmI1LTlkMjEtMmNlZjhlNWYzMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdafyOY+myJj+tJqugVYqElB9kZE4gQjuJ+J8vjEkMUVCawH0xdWnGE aioD5OsMmH7llLjH9xWZM22Jov0NeKzB4WAn1SzVWCI/SNf82Ui0+YdgvqbQl+XV MIV12LLN2NFxDx60DeDTiFGMO/nCQpU8cfzJrFiO/WhBRESguQTjAZCwPq+HZym+ IVsiV0Wl3zSoDYQt4rRXwf2/SK5gyRei0xjfl5LfZN9T8H1+MvlUBkAgENCjaB/4 c6fXCmNyD2Dpe+yhdsaLvWFG7ZHrT7eTmeIbxWE5D9amiiA2FddP5dKbux9kmW8r 3Vfl/oLnMOhc2pJr+BzStS5A11PoxHw= -----END CERTIFICATE-----Generated at Sat May 10 19:38:26 2025 by rpki-client