$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71ed9530-1578-3b05-94da-e0e058e25f37.roa File: 71ed9530-1578-3b05-94da-e0e058e25f37.roa (raw, json) Hash identifier: M4dhpxCImHb2UHpGs5lJbSlF91vGMx9HU4rvDfEvlOA= Subject key identifier: 99:01:CE:0D:B3:64:9C:93:7E:EC:53:58:27:09:62:74:FB:27:47:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F4FC855488F05A24B64820 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71ed9530-1578-3b05-94da-e0e058e25f37.roa Signing time: Thu 01 May 2025 17:08:45 +0000 ROA not before: Thu 01 May 2025 17:08:45 +0000 ROA not after: Wed 30 Jul 2025 17:08:45 +0000 asID: 22773 IP address blocks: 68.1.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f4:fc:85:54:88:f0:5a:24:b6:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:45 2025 GMT Not After : Jul 30 17:08:45 2025 GMT Subject: CN=7a73e3c9-d53d-4181-9c50-29754c87401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:08:58:51:1d:d5:4a:c6:de:f3:57:a5:41: 71:45:eb:a9:ec:22:16:65:93:39:a0:b6:90:3a:5d: e7:2c:f8:b2:73:e5:93:96:f5:69:33:55:bf:fe:f0: 44:c3:90:c2:4d:b0:6d:de:e9:21:40:12:ac:d9:27: ba:03:7e:75:a1:45:ab:f9:f9:b1:0c:94:38:e7:76: 7c:1f:1f:77:06:07:18:24:d7:82:27:01:6f:bb:02: 77:e5:79:2e:c3:78:73:ec:c7:10:b8:d2:6a:24:89: a2:c7:db:7c:83:ee:ee:08:0e:3e:66:89:70:c9:6c: 92:b4:69:c7:82:33:b9:f4:e9:62:19:63:17:32:d8: 4c:88:9b:29:2a:ac:99:64:c4:b7:27:81:50:a3:0e: e6:b9:8a:33:4b:0c:4d:5f:ef:5f:ae:bc:62:c8:13: 72:65:f2:69:66:08:65:d9:94:f6:14:a9:a6:cd:cd: 35:16:7b:53:37:7e:68:88:a8:23:e7:11:8b:9d:29: 1c:46:65:68:73:25:30:83:56:57:cc:68:4e:d8:60: ab:5a:63:a5:fd:d7:5a:35:c0:d8:a6:1a:19:a5:fb: d9:5b:94:f2:6f:da:80:a2:d1:44:99:50:19:7f:58: 49:bd:b6:ff:fb:2d:da:6e:90:d6:85:a9:3a:b3:33: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:01:CE:0D:B3:64:9C:93:7E:EC:53:58:27:09:62:74:FB:27:47:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71ed9530-1578-3b05-94da-e0e058e25f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.1.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b8:92:75:6f:1a:d7:8d:c9:8e:cf:11:a2:83:c3:32:fe:48: a2:eb:24:d6:19:24:d6:1e:92:71:59:26:12:54:22:2c:a6:98: 18:c8:f4:66:f3:c5:57:db:61:9f:6a:04:2e:34:cc:79:f2:1e: 5c:29:28:80:76:a3:51:cc:9b:e9:6a:58:eb:61:b1:5e:f5:24: 13:f4:08:3f:7e:7e:72:48:3d:c0:c5:ce:cf:84:0c:3e:90:6a: f7:9b:00:a5:24:90:f0:61:6a:e6:74:76:f3:b4:90:a1:79:af: a4:9e:c8:55:db:c9:b8:13:8a:6c:4c:2b:db:55:59:5c:a9:7a: 91:9b:83:74:36:80:61:58:0a:2c:38:c2:08:3b:a8:15:45:c8: 72:2a:42:9d:ce:52:c2:2b:3f:af:a6:96:60:2b:cd:81:1d:85: eb:bd:7b:4d:b8:44:99:2a:67:59:8b:b0:6c:e5:3d:a1:cc:d1: 67:5a:17:6d:1d:a6:d3:af:b7:33:e2:2f:3d:76:0d:34:f8:84: 0e:4e:36:08:2b:bf:e0:0e:e3:e6:78:4e:cf:41:d7:d2:82:c8: 9b:de:1a:60:83:d4:52:51:32:22:ed:cf:a6:51:87:12:02:1a: b8:cd:7e:96:df:65:b6:3a:0d:01:e4:ff:08:19:e7:59:63:71: 9f:7b:9e:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19PyFVIjwWiS2SCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg0NVoXDTI1MDczMDE3MDg0NVowLzEtMCsGA1UEAxMk N2E3M2UzYzktZDUzZC00MTgxLTljNTAtMjk3NTRjODc0MDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEsIWFEd1UrG3vNXpUFxReup7CIWZZM5oLaQ Ol3nLPiyc+WTlvVpM1W//vBEw5DCTbBt3ukhQBKs2Se6A351oUWr+fmxDJQ453Z8 Hx93BgcYJNeCJwFvuwJ35Xkuw3hz7McQuNJqJImix9t8g+7uCA4+ZolwyWyStGnH gjO59OliGWMXMthMiJspKqyZZMS3J4FQow7muYozSwxNX+9frrxiyBNyZfJpZghl 2ZT2FKmmzc01FntTN35oiKgj5xGLnSkcRmVocyUwg1ZXzGhO2GCrWmOl/ddaNcDY phoZpfvZW5Tyb9qAotFEmVAZf1hJvbb/+y3abpDWhak6szOSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkBzg2zZJyTfuxTWCcJYnT7J0diMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzFlZDk1MzAtMTU3OC0z YjA1LTk0ZGEtZTBlMDU4ZTI1ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO4knVvGteNyY7PEaKDwzL+SKLrJNYZJNYeknFZJhJUIiymmBjI9Gbz xVfbYZ9qBC40zHnyHlwpKIB2o1HMm+lqWOthsV71JBP0CD9+fnJIPcDFzs+EDD6Q avebAKUkkPBhauZ0dvO0kKF5r6SeyFXbybgTimxMK9tVWVypepGbg3Q2gGFYCiw4 wgg7qBVFyHIqQp3OUsIrP6+mlmArzYEdheu9e024RJkqZ1mLsGzlPaHM0WdaF20d ptOvtzPiLz12DTT4hA5ONggrv+AO4+Z4Ts9B19KCyJveGmCD1FJRMiLtz6ZRhxIC GrjNfpbfZbY6DQHk/wgZ51ljcZ97ngU= -----END CERTIFICATE-----Generated at Sun May 11 16:48:30 2025 by rpki-client