$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cad3d31-47be-3395-a73a-9cd30248fa39.roa File: 6cad3d31-47be-3395-a73a-9cd30248fa39.roa (raw, json) Hash identifier: xllDG07HLILvOVfS7O8Jc6NdYYJ4R+F/6yCoaEVYH7k= Subject key identifier: 97:72:3B:D2:2B:69:5C:D5:78:53:8B:93:50:E1:EF:A6:86:18:A5:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD3469BBCCFDDA1BBB3280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cad3d31-47be-3395-a73a-9cd30248fa39.roa Signing time: Thu 01 May 2025 17:25:19 +0000 ROA not before: Thu 01 May 2025 17:25:19 +0000 ROA not after: Wed 30 Jul 2025 17:25:19 +0000 asID: 22773 IP address blocks: 68.107.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:34:69:bb:cc:fd:da:1b:bb:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:19 2025 GMT Not After : Jul 30 17:25:19 2025 GMT Subject: CN=207b3efd-b300-47c0-a19b-9eb64cea7e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:f9:35:07:7a:e7:49:30:64:4f:59:76:6f: 26:50:53:13:36:15:16:b5:a6:78:3a:68:72:de:fb: 55:83:a0:c3:f3:b3:b6:65:de:a2:25:3d:32:bf:de: 7d:97:9d:07:46:be:e7:26:14:a5:de:5c:0f:43:ad: 17:dc:9e:37:16:43:11:79:0b:42:28:dc:85:6a:40: 81:e4:e2:e6:21:d3:98:21:36:80:0e:35:28:63:e6: 5d:e0:3e:85:79:29:4f:94:21:72:b5:e7:c5:41:2f: a5:e0:4f:70:09:f2:c2:0c:b8:ce:8f:07:bb:de:61: c2:b9:70:b6:8a:71:ce:45:7a:4a:33:3e:d0:cd:de: a0:d8:0c:64:22:f1:ed:56:9b:56:0e:10:46:f8:c2: 79:a1:2b:29:29:85:a7:78:68:02:ee:56:a1:ad:b7: b5:07:5f:7c:ad:64:98:20:c2:21:95:8b:47:38:e3: ec:a1:1d:9a:10:86:84:ea:0e:61:b0:65:42:ca:ba: a0:10:9f:b6:9c:1c:53:40:b5:cc:fb:75:66:d4:53: 19:a7:0f:72:39:f7:6f:b0:36:9b:0a:98:02:a9:a7: 5b:f9:c1:c8:41:54:c4:f0:ef:f2:b9:43:4d:f2:df: dd:0d:6e:25:ba:31:9f:6c:d6:34:42:21:44:20:1c: b7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:72:3B:D2:2B:69:5C:D5:78:53:8B:93:50:E1:EF:A6:86:18:A5:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6cad3d31-47be-3395-a73a-9cd30248fa39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ef:37:53:61:10:49:5e:83:f9:55:81:49:92:8a:cb:10:c2: 87:22:56:ea:e3:0b:5e:64:ee:39:43:26:76:0d:6d:c0:67:dc: 2d:ca:8a:5f:f7:9b:4f:a2:8b:5d:eb:39:bd:c5:fa:32:48:9f: fe:04:10:49:f5:b5:b2:3a:24:bc:4f:57:b1:8a:66:fd:70:39: 02:51:e4:80:15:df:b6:b3:ed:d1:88:c5:5a:4e:00:84:aa:91: f8:a6:d8:1d:c0:5d:a9:02:dd:47:53:8a:db:69:7d:e9:b4:ac: 08:4a:76:56:26:37:a3:1d:0d:15:cb:53:72:1a:85:c3:f7:0a: 16:f7:a7:be:8d:91:72:ec:62:ec:d7:08:ed:a4:24:06:f8:50: cc:9c:7f:e3:56:da:1f:e3:fa:f2:48:89:87:21:ad:68:49:2b: aa:75:43:e6:72:d8:67:25:81:38:83:d0:01:db:d7:d3:7d:25: 78:14:78:44:ee:57:2d:41:b7:54:0c:b0:22:90:2e:7f:48:ee: 83:97:89:b8:df:37:55:8f:c5:74:5b:44:d4:ae:96:96:b5:c3: b2:6d:2e:18:28:a3:d3:e5:c8:cd:21:8f:b5:0d:1d:bb:11:e5: 80:d1:02:d3:eb:4d:59:20:4e:ad:4d:b6:4f:91:8f:ed:35:09: 6a:29:4c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/TRpu8z92hu7MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxOVoXDTI1MDczMDE3MjUxOVowLzEtMCsGA1UEAxMk MjA3YjNlZmQtYjMwMC00N2MwLWExOWItOWViNjRjZWE3ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLn5NQd650kwZE9Zdm8mUFMTNhUWtaZ4Omhy 3vtVg6DD87O2Zd6iJT0yv959l50HRr7nJhSl3lwPQ60X3J43FkMReQtCKNyFakCB 5OLmIdOYITaADjUoY+Zd4D6FeSlPlCFytefFQS+l4E9wCfLCDLjOjwe73mHCuXC2 inHORXpKMz7Qzd6g2AxkIvHtVptWDhBG+MJ5oSspKYWneGgC7lahrbe1B198rWSY IMIhlYtHOOPsoR2aEIaE6g5hsGVCyrqgEJ+2nBxTQLXM+3Vm1FMZpw9yOfdvsDab CpgCqadb+cHIQVTE8O/yuUNN8t/dDW4lujGfbNY0QiFEIBy3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdyO9IraVzVeFOLk1Dh76aGGKW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmNhZDNkMzEtNDdiZS0z Mzk1LWE3M2EtOWNkMzAyNDhmYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrvN1NhEEleg/lVgUmSissQwociVurjC15k7jlDJnYNbcBn3C3Kil/3 m0+ii13rOb3F+jJIn/4EEEn1tbI6JLxPV7GKZv1wOQJR5IAV37az7dGIxVpOAISq kfim2B3AXakC3UdTittpfem0rAhKdlYmN6MdDRXLU3IahcP3Chb3p76NkXLsYuzX CO2kJAb4UMycf+NW2h/j+vJIiYchrWhJK6p1Q+Zy2GclgTiD0AHb19N9JXgUeETu Vy1Bt1QMsCKQLn9I7oOXibjfN1WPxXRbRNSulpa1w7JtLhgoo9PlyM0hj7UNHbsR 5YDRAtPrTVkgTq1Ntk+Rj+01CWopTBc= -----END CERTIFICATE-----Generated at Tue May 13 07:58:57 2025 by rpki-client