$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65163755-c773-3420-af34-0b2491e4c5e2.roa File: 65163755-c773-3420-af34-0b2491e4c5e2.roa (raw, json) Hash identifier: rzZLlA9SEuE+ggvkrLV2iRkSD7+W8Z8IVWhcjPcfrD4= Subject key identifier: FA:BA:D2:8A:BA:02:0F:3F:D2:86:F4:82:D6:14:66:1C:86:9A:85:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD0020C1835A57DBE45080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65163755-c773-3420-af34-0b2491e4c5e2.roa Signing time: Thu 01 May 2025 17:24:54 +0000 ROA not before: Thu 01 May 2025 17:24:54 +0000 ROA not after: Wed 30 Jul 2025 17:24:54 +0000 asID: 22773 IP address blocks: 68.8.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:00:20:c1:83:5a:57:db:e4:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:54 2025 GMT Not After : Jul 30 17:24:54 2025 GMT Subject: CN=6dd0e6f2-bd8b-4841-88e7-8093909c46b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:b0:1d:76:c6:5e:bc:52:cd:f6:83:36:52: dc:85:13:be:08:65:e1:e5:fb:29:81:e0:88:26:5d: 9b:09:54:35:5d:3c:f6:f0:05:fc:d5:f6:8d:54:79: 2c:40:9e:2e:34:35:2c:23:cf:0a:89:68:61:1d:11: c2:c2:56:e7:65:0a:58:69:9f:e4:b3:40:05:11:33: e7:b8:4a:31:a8:98:bd:7f:7a:48:6b:17:09:e5:e5: 90:02:55:24:8b:7c:0d:fc:94:00:b4:97:a8:d7:91: d5:37:75:53:33:77:f4:73:51:51:1b:41:78:ec:d5: 2f:25:c0:02:de:72:92:f9:e8:2d:2b:e6:5e:e8:ee: 84:43:3f:12:10:0b:2c:8e:53:0b:d9:f0:c4:a4:ae: 86:2d:0b:4b:82:4d:5f:99:1a:cc:58:25:c7:d6:49: de:6b:fd:1e:61:d2:56:6c:67:1f:e8:e4:0f:ea:1a: 44:f3:25:54:8b:e8:21:23:9b:54:44:9d:dc:10:46: 28:ce:88:5d:1a:7d:d6:8b:5c:23:a4:a6:0d:a9:0a: 86:65:a3:d3:52:a3:ab:d4:4e:58:15:ca:bf:15:13: eb:4e:9c:74:94:fd:9e:c0:62:1b:86:8b:f5:72:df: 23:c9:d0:9b:a7:2d:11:56:e5:f3:a1:c2:43:3d:1e: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BA:D2:8A:BA:02:0F:3F:D2:86:F4:82:D6:14:66:1C:86:9A:85:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65163755-c773-3420-af34-0b2491e4c5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:62:98:31:83:62:c0:b1:76:cc:9d:09:ad:a8:41:62:b8:e6: e7:46:f5:e7:e4:f8:dc:9f:b2:06:11:f8:72:0c:76:64:91:32: 3b:98:5b:1e:da:de:1c:de:e1:d9:57:2b:5c:3a:e3:d9:e1:1e: d7:c9:54:e3:96:5b:46:11:84:0f:25:ac:28:ad:46:a3:22:a0: 06:59:b1:fc:45:6b:df:d3:99:56:27:05:ac:e9:fa:53:1d:c3: 1f:13:a2:71:12:da:e8:20:5f:54:05:11:d9:54:df:f4:9f:7f: b2:3f:5c:b9:90:59:b0:16:2e:22:82:fc:f4:f2:d9:08:9a:ab: 40:13:74:cd:d5:23:7b:aa:1c:98:72:84:54:a4:14:36:33:ce: 21:5f:b9:8d:09:6d:a7:92:e2:df:64:19:b7:55:28:f2:80:a8: 5d:6e:ea:d1:fb:14:29:a8:89:d2:d6:df:ec:e3:8a:05:4e:7f: 48:57:38:0a:5e:64:fb:19:86:f7:40:3f:51:9e:0f:ca:0d:ac: 27:84:7d:a1:6f:d7:e2:77:c5:cb:f4:e4:c5:d7:fd:8d:ec:72: be:81:01:67:df:e7:c2:ea:62:5d:9f:6a:f1:dc:fd:b4:43:9b: 83:c5:60:c2:6f:af:8c:6e:07:69:74:16:c0:04:3f:95:4b:f8: 4b:cc:70:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/QAgwYNaV9vkUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1NFoXDTI1MDczMDE3MjQ1NFowLzEtMCsGA1UEAxMk NmRkMGU2ZjItYmQ4Yi00ODQxLTg4ZTctODA5MzkwOWM0NmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuESwHXbGXrxSzfaDNlLchRO+CGXh5fspgeCI Jl2bCVQ1XTz28AX81faNVHksQJ4uNDUsI88KiWhhHRHCwlbnZQpYaZ/ks0AFETPn uEoxqJi9f3pIaxcJ5eWQAlUki3wN/JQAtJeo15HVN3VTM3f0c1FRG0F47NUvJcAC 3nKS+egtK+Ze6O6EQz8SEAssjlML2fDEpK6GLQtLgk1fmRrMWCXH1knea/0eYdJW bGcf6OQP6hpE8yVUi+ghI5tURJ3cEEYozohdGn3Wi1wjpKYNqQqGZaPTUqOr1E5Y Fcq/FRPrTpx0lP2ewGIbhov1ct8jydCbpy0RVuXzocJDPR7GpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq60oq6Ag8/0ob0gtYUZhyGmoWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUxNjM3NTUtYzc3My0z NDIwLWFmMzQtMGIyNDkxZTRjNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAguMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJimDGDYsCxdsydCa2oQWK45udG9efk+NyfsgYR+HIMdmSRMjuYWx7a 3hze4dlXK1w649nhHtfJVOOWW0YRhA8lrCitRqMioAZZsfxFa9/TmVYnBazp+lMd wx8TonES2uggX1QFEdlU3/Sff7I/XLmQWbAWLiKC/PTy2Qiaq0ATdM3VI3uqHJhy hFSkFDYzziFfuY0JbaeS4t9kGbdVKPKAqF1u6tH7FCmoidLW3+zjigVOf0hXOApe ZPsZhvdAP1GeD8oNrCeEfaFv1+J3xcv05MXX/Y3scr6BAWff58LqYl2favHc/bRD m4PFYMJvr4xuB2l0FsAEP5VL+EvMcBQ= -----END CERTIFICATE-----Generated at Mon May 12 04:22:35 2025 by rpki-client