$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61951b91-961d-3e46-8de8-e43682b0c3f0.roa File: 61951b91-961d-3e46-8de8-e43682b0c3f0.roa (raw, json) Hash identifier: bUi5I74ZEFrfdyFOXoLgN/XdXCSCbx3gbKewfKDHY0Y= Subject key identifier: B7:1B:97:87:F9:FE:B9:68:22:D2:58:54:2C:FA:4A:36:04:47:A9:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F525E3DA1A8D7345F43200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61951b91-961d-3e46-8de8-e43682b0c3f0.roa Signing time: Thu 01 May 2025 17:09:05 +0000 ROA not before: Thu 01 May 2025 17:09:05 +0000 ROA not after: Wed 30 Jul 2025 17:09:05 +0000 asID: 22773 IP address blocks: 68.9.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:25:e3:da:1a:8d:73:45:f4:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:05 2025 GMT Not After : Jul 30 17:09:05 2025 GMT Subject: CN=3bb0ba5e-ab36-40f9-8707-1f78d43ce1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:16:0b:86:a2:c9:62:eb:c3:a0:8a:27:56: c2:c3:ba:f2:9a:62:2c:3d:a9:57:38:f6:ff:2b:bb: 8a:88:11:b2:46:b7:37:77:93:74:2b:bd:7d:c0:ea: 9a:0e:d8:f3:34:52:db:3b:1e:ce:5a:2a:eb:2e:48: b4:aa:5b:b3:b7:ef:26:d3:d9:3f:61:81:f3:4b:c9: 34:63:4d:4c:07:cb:c2:9b:08:99:f9:1c:7a:a4:aa: 9b:f0:a3:b4:74:4a:41:47:02:9e:24:a8:f4:78:a6: 3c:d0:2d:10:4a:f5:c3:29:af:98:57:c3:b1:a0:b7: 34:1d:ee:e1:36:f7:dc:d9:81:fe:f8:f2:cd:d8:d1: 93:a2:a3:45:2f:35:bf:ec:8e:16:7f:10:8e:cd:27: d9:83:0a:05:d8:e0:fc:b8:6a:b3:b0:46:74:68:06: 52:1b:e2:d6:33:89:4c:0a:d1:92:d8:4c:d5:47:1f: 60:63:4a:d6:37:60:82:7a:44:e6:19:62:de:d6:99: 64:19:7c:65:e4:34:73:59:91:e8:71:63:01:4e:71: e1:74:3a:64:6e:c9:37:2c:6f:c3:d9:9b:96:f6:25: f2:f7:28:ab:3e:ae:71:55:6d:8e:cf:bc:ac:14:27: 69:7d:eb:33:b6:f2:b6:3f:33:c9:66:c1:07:da:68: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1B:97:87:F9:FE:B9:68:22:D2:58:54:2C:FA:4A:36:04:47:A9:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61951b91-961d-3e46-8de8-e43682b0c3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6d:9d:5b:ca:e3:42:47:34:7d:c1:c4:27:66:52:22:c2:c9: 8b:90:c0:60:48:d9:93:7e:38:68:1b:8d:a0:4e:42:e0:c2:c0: 84:ce:28:c8:5a:9e:1e:e4:26:73:83:7f:a3:06:66:e6:b5:ea: bb:2c:81:56:23:01:60:8d:88:95:31:72:a3:b9:68:62:ad:c8: e8:91:ff:ff:e2:d6:fd:2f:13:3a:ed:78:c6:de:04:e8:db:76: 00:91:3b:66:a9:75:83:ef:e3:49:f3:dc:61:bc:a2:08:51:83: 7a:20:71:e1:a3:8b:67:e8:f8:ae:9b:87:94:72:0a:a5:47:a2: 9f:4c:2e:65:c1:f0:1e:b8:e7:a9:bb:8e:0c:07:48:23:9f:b5: 0c:13:e4:c8:96:f0:e1:47:0e:41:79:dc:37:26:58:37:91:bf: d9:a2:a1:b0:57:75:a2:f4:a8:49:59:f4:33:11:22:7d:1b:6c: 42:c2:54:1b:c2:35:8e:18:cf:51:1e:5d:d2:1d:83:6f:b4:16: ba:88:5d:bf:5d:89:86:fb:02:e6:c7:0d:75:90:41:68:e0:4d: 63:27:a8:10:7f:94:45:31:44:ee:a5:01:59:9e:e6:a6:25:46: 9f:32:e8:63:54:65:3e:8b:f5:3c:68:5a:cf:df:1e:b1:e0:d5: 41:bd:58:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19SXj2hqNc0X0MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkwNVoXDTI1MDczMDE3MDkwNVowLzEtMCsGA1UEAxMk M2JiMGJhNWUtYWIzNi00MGY5LTg3MDctMWY3OGQ0M2NlMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovUWC4aiyWLrw6CKJ1bCw7rymmIsPalXOPb/ K7uKiBGyRrc3d5N0K719wOqaDtjzNFLbOx7OWirrLki0qluzt+8m09k/YYHzS8k0 Y01MB8vCmwiZ+Rx6pKqb8KO0dEpBRwKeJKj0eKY80C0QSvXDKa+YV8OxoLc0He7h Nvfc2YH++PLN2NGToqNFLzW/7I4WfxCOzSfZgwoF2OD8uGqzsEZ0aAZSG+LWM4lM CtGS2EzVRx9gY0rWN2CCekTmGWLe1plkGXxl5DRzWZHocWMBTnHhdDpkbsk3LG/D 2ZuW9iXy9yirPq5xVW2Oz7ysFCdpfesztvK2PzPJZsEH2mhfAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcbl4f5/rloItJYVCz6SjYER6moMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE5NTFiOTEtOTYxZC0z ZTQ2LThkZTgtZTQzNjgyYjBjM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJtnVvK40JHNH3BxCdmUiLCyYuQwGBI2ZN+OGgbjaBOQuDCwITOKMha nh7kJnODf6MGZua16rssgVYjAWCNiJUxcqO5aGKtyOiR///i1v0vEzrteMbeBOjb dgCRO2apdYPv40nz3GG8oghRg3ogceGji2fo+K6bh5RyCqVHop9MLmXB8B6456m7 jgwHSCOftQwT5MiW8OFHDkF53DcmWDeRv9miobBXdaL0qElZ9DMRIn0bbELCVBvC NY4Yz1EeXdIdg2+0FrqIXb9diYb7AubHDXWQQWjgTWMnqBB/lEUxRO6lAVme5qYl Rp8y6GNUZT6L9TxoWs/fHrHg1UG9WNk= -----END CERTIFICATE-----Generated at Sun May 11 22:59:41 2025 by rpki-client