$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa File: 7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa (raw, json) Hash identifier: C5eGdlgMIMiBqXqO5rkBg7WpBg5rSgVM/OXW0Fla2Zc= Subject key identifier: 30:AA:8F:67:F4:8B:23:7C:8C:D5:40:5E:DB:EF:BC:D9:3F:59:86:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5364A64E408F35F352560 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa Signing time: Thu 01 May 2025 17:09:12 +0000 ROA not before: Thu 01 May 2025 17:09:12 +0000 ROA not after: Wed 30 Jul 2025 17:09:12 +0000 asID: 22773 IP address blocks: 68.14.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:36:4a:64:e4:08:f3:5f:35:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:12 2025 GMT Not After : Jul 30 17:09:12 2025 GMT Subject: CN=96b1f2ef-5a0b-428f-9256-3518aab473ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:4d:4b:d0:3f:30:14:92:24:37:27:37:55: 21:ae:33:d5:08:9a:8c:5d:a4:5f:0b:0d:97:78:dd: ad:9e:f3:3a:28:57:2b:fc:0c:05:e5:b5:38:ed:72: 3d:4f:01:ae:31:4c:fa:5d:8d:c9:6d:7b:37:81:f9: f1:6b:52:46:e8:9f:3c:f7:02:0c:5a:51:50:fd:04: fb:1b:a9:7f:47:7e:f0:0a:0e:7e:23:86:36:04:29: f9:6c:93:71:da:f5:c0:71:f0:e0:e6:9e:96:13:1e: cc:49:8e:e3:cd:33:6c:c4:41:de:af:45:07:e5:fb: 39:f8:bf:f8:ba:a6:76:5b:69:62:1f:9f:49:28:ba: ed:e1:e2:fd:14:67:f2:02:1f:93:24:0a:00:cc:91: f5:55:a0:51:eb:e8:b1:04:6c:54:f2:9b:7a:d8:03: 81:9c:ac:a9:f4:7a:e8:9a:49:53:cd:12:94:79:45: 08:59:5c:f6:68:c9:4c:88:5e:0b:19:cb:4e:04:ee: 94:08:83:0e:76:a7:33:28:a2:e8:ca:b4:98:c1:83: cc:1b:b2:26:c5:8b:1f:16:93:1a:2b:8a:89:a6:ae: 7e:60:80:68:7a:0a:dc:c7:1a:10:fc:dd:31:16:8c: b1:3e:4e:46:89:1c:19:d4:66:73:eb:d1:2a:55:05: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AA:8F:67:F4:8B:23:7C:8C:D5:40:5E:DB:EF:BC:D9:3F:59:86:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7c64f052-1c26-3de5-9bb5-ab8c4a6b1e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4e:6e:46:8b:73:e7:22:76:b8:4e:aa:5d:bf:f5:8c:68:f0: 01:fd:c1:d2:be:49:d6:34:d2:1d:45:a5:eb:e1:96:10:2f:43: 94:e7:6c:05:02:78:35:7c:50:7c:5d:e2:2b:a4:7a:73:53:ea: b1:f9:2b:b8:8a:09:2f:18:c2:ad:fa:ae:eb:13:7c:7a:7d:10: 64:93:3b:6a:e3:90:50:49:0b:68:46:e4:27:d1:5f:cb:e6:e4: cd:b4:d4:c4:fa:88:19:7e:92:7f:86:1c:15:b2:b5:41:67:8e: 28:81:2e:c1:87:d9:5a:f8:b7:a0:f3:9c:9f:df:61:ea:e3:17: 47:c6:84:55:3e:d0:62:17:f0:61:22:ad:c4:97:43:46:9b:57: 5d:7b:cc:54:f2:23:11:67:ab:cd:04:e1:1c:69:87:d2:c9:ee: 97:1a:4b:ab:39:53:0f:26:86:0e:b6:5f:2a:ea:ce:b0:90:d5: 23:03:26:65:8d:a0:e2:07:66:dd:c0:7c:89:28:d8:ad:e4:8b: 80:73:14:15:22:71:a4:06:11:a1:e7:12:a1:ba:95:5f:28:3c: 85:2c:ea:c6:98:69:65:c1:b3:83:78:fb:70:a0:86:c1:d6:29: 68:aa:b9:73:95:e8:10:18:ff:55:59:65:f5:d7:ef:74:4d:fc: e6:c6:e6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TZKZOQI8181JWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxMloXDTI1MDczMDE3MDkxMlowLzEtMCsGA1UEAxMk OTZiMWYyZWYtNWEwYi00MjhmLTkyNTYtMzUxOGFhYjQ3M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm1NS9A/MBSSJDcnN1UhrjPVCJqMXaRfCw2X eN2tnvM6KFcr/AwF5bU47XI9TwGuMUz6XY3JbXs3gfnxa1JG6J889wIMWlFQ/QT7 G6l/R37wCg5+I4Y2BCn5bJNx2vXAcfDg5p6WEx7MSY7jzTNsxEHer0UH5fs5+L/4 uqZ2W2liH59JKLrt4eL9FGfyAh+TJAoAzJH1VaBR6+ixBGxU8pt62AOBnKyp9Hro mklTzRKUeUUIWVz2aMlMiF4LGctOBO6UCIMOdqczKKLoyrSYwYPMG7ImxYsfFpMa K4qJpq5+YIBoegrcxxoQ/N0xFoyxPk5GiRwZ1GZz69EqVQVtsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCqj2f0iyN8jNVAXtvvvNk/WYZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2M2NGYwNTItMWMyNi0z ZGU1LTliYjUtYWI4YzRhNmIxZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdObkaLc+cidrhOql2/9Yxo8AH9wdK+SdY00h1FpevhlhAvQ5TnbAUC eDV8UHxd4iukenNT6rH5K7iKCS8Ywq36rusTfHp9EGSTO2rjkFBJC2hG5CfRX8vm 5M201MT6iBl+kn+GHBWytUFnjiiBLsGH2Vr4t6DznJ/fYerjF0fGhFU+0GIX8GEi rcSXQ0abV117zFTyIxFnq80E4Rxph9LJ7pcaS6s5Uw8mhg62XyrqzrCQ1SMDJmWN oOIHZt3AfIko2K3ki4BzFBUicaQGEaHnEqG6lV8oPIUs6saYaWXBs4N4+3CghsHW KWiquXOV6BAY/1VZZfXX73RN/ObG5o4= -----END CERTIFICATE-----Generated at Sat May 10 10:10:18 2025 by rpki-client