$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a352942-9a80-315d-8776-a71ec7a4cfaa.roa File: 7a352942-9a80-315d-8776-a71ec7a4cfaa.roa (raw, json) Hash identifier: X4SOFLwTe1Qm7AoaQXGUdx/cW9tvYMTvO/QlU/iqmMg= Subject key identifier: 17:C9:9E:28:B5:FA:0D:FB:82:20:FB:B1:A2:F0:AE:DA:BD:CD:EA:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F52D9DEF2F28207B155C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a352942-9a80-315d-8776-a71ec7a4cfaa.roa Signing time: Thu 01 May 2025 17:09:08 +0000 ROA not before: Thu 01 May 2025 17:09:08 +0000 ROA not after: Wed 30 Jul 2025 17:09:08 +0000 asID: 22773 IP address blocks: 68.9.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:2d:9d:ef:2f:28:20:7b:15:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:08 2025 GMT Not After : Jul 30 17:09:08 2025 GMT Subject: CN=273306b3-aaf9-4230-99a5-666d7e2b517b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:e0:f6:0e:ef:db:49:04:0c:58:b0:c7:ea: 42:a1:b4:b9:c5:46:48:38:92:a8:7b:4b:5d:66:98: 06:d1:c2:ae:8f:7e:33:d5:33:a7:3b:47:e0:7a:c7: 16:98:b9:11:8e:c0:ff:db:58:1c:68:7e:cb:f4:70: f0:3d:d7:a5:ff:73:d8:7c:ad:f3:9e:0a:ab:b0:c4: 9e:86:60:01:bb:02:37:b5:93:9f:9a:4f:b1:92:16: 25:54:fd:d3:7d:57:0a:40:95:14:3d:1a:f5:ea:78: b0:fd:93:dd:d6:dc:cf:ff:f0:cd:9a:0d:17:3d:a0: fa:11:3f:c1:a1:27:44:98:4a:47:1c:b0:d0:64:15: d1:de:b7:25:c8:26:6b:c6:bc:f2:e4:7b:72:56:c2: 03:74:40:76:b2:cf:8b:fb:e1:4c:d1:e4:63:d8:eb: 85:1c:d2:61:4f:8a:4f:be:0a:4f:df:94:73:06:55: 27:12:71:07:4c:3e:65:95:10:67:35:56:58:91:a1: b6:9e:df:2d:d1:08:3f:15:69:6d:9f:43:55:66:41: c5:3e:53:b3:9f:0c:54:a3:c3:f6:8b:20:96:0c:54: 3f:d3:e9:5a:3d:e5:8e:e6:d4:4b:71:a5:98:72:cf: 4f:18:c1:02:7a:c0:6e:85:69:6e:4e:87:85:76:a5: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:9E:28:B5:FA:0D:FB:82:20:FB:B1:A2:F0:AE:DA:BD:CD:EA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a352942-9a80-315d-8776-a71ec7a4cfaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:1e:49:bf:b5:fd:a1:06:b8:e5:b8:c6:de:3b:61:c0:d4:6a: 1e:b4:44:e1:6f:66:ed:d5:9d:8a:43:e5:07:ed:6c:dc:71:31: ff:4c:9d:1f:85:2b:75:06:c4:e3:3a:09:a3:16:f5:1f:b2:b1: 76:1c:c4:e3:09:96:ba:db:44:e4:cd:6f:58:53:c8:24:6f:64: 15:ac:e0:52:65:9e:14:d6:cf:b7:e7:4f:2e:89:da:fa:21:1f: d3:05:06:f3:87:fa:e2:2c:b9:d8:12:30:67:4b:98:e4:e3:72: e8:30:42:1e:01:be:8a:33:b5:33:8d:d6:b3:9a:f6:89:38:53: a6:0c:14:7b:76:df:50:0e:8f:07:41:cf:55:00:1c:47:07:2b: 4c:e6:05:ac:b9:f9:40:7c:73:73:49:6f:73:e0:47:4f:a7:73: ef:3d:18:c7:07:2a:d6:fb:cf:9c:f9:51:93:ef:9f:92:e2:0d: 8e:7b:ce:98:d8:93:5d:05:0d:7c:0c:8b:0c:4c:80:cf:09:73: f7:47:ef:8b:9a:00:8c:85:6c:26:01:fb:aa:a4:92:47:6b:ad: f8:b5:d2:12:df:ec:13:c9:5a:f2:6c:90:70:bf:34:60:7d:34: 75:b8:87:d5:b5:01:d7:79:94:13:44:a1:23:19:7b:e4:67:fe: ce:d9:b5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19S2d7y8oIHsVXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkwOFoXDTI1MDczMDE3MDkwOFowLzEtMCsGA1UEAxMk MjczMzA2YjMtYWFmOS00MjMwLTk5YTUtNjY2ZDdlMmI1MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBHg9g7v20kEDFiwx+pCobS5xUZIOJKoe0td ZpgG0cKuj34z1TOnO0fgescWmLkRjsD/21gcaH7L9HDwPdel/3PYfK3zngqrsMSe hmABuwI3tZOfmk+xkhYlVP3TfVcKQJUUPRr16niw/ZPd1tzP//DNmg0XPaD6ET/B oSdEmEpHHLDQZBXR3rclyCZrxrzy5HtyVsIDdEB2ss+L++FM0eRj2OuFHNJhT4pP vgpP35RzBlUnEnEHTD5llRBnNVZYkaG2nt8t0Qg/FWltn0NVZkHFPlOznwxUo8P2 iyCWDFQ/0+laPeWO5tRLcaWYcs9PGMECesBuhWluToeFdqWZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfJnii1+g37giD7saLwrtq9zepWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2EzNTI5NDItOWE4MC0z MTVkLTg3NzYtYTcxZWM3YTRjZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAn2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAeSb+1/aEGuOW4xt47YcDUah60ROFvZu3VnYpD5QftbNxxMf9MnR+F K3UGxOM6CaMW9R+ysXYcxOMJlrrbROTNb1hTyCRvZBWs4FJlnhTWz7fnTy6J2voh H9MFBvOH+uIsudgSMGdLmOTjcugwQh4BvooztTON1rOa9ok4U6YMFHt231AOjwdB z1UAHEcHK0zmBay5+UB8c3NJb3PgR0+nc+89GMcHKtb7z5z5UZPvn5LiDY57zpjY k10FDXwMiwxMgM8Jc/dH74uaAIyFbCYB+6qkkkdrrfi10hLf7BPJWvJskHC/NGB9 NHW4h9W1Add5lBNEoSMZe+Rn/s7ZtT8= -----END CERTIFICATE-----Generated at Mon May 12 19:31:27 2025 by rpki-client