$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87319f70-e963-356c-add3-eb13394afc54.roa File: 87319f70-e963-356c-add3-eb13394afc54.roa (raw, json) Hash identifier: Jo3oJaCOUcUxvi2i9qNwPTaHCW9XWj8strMiqAlcE4A= Subject key identifier: A2:20:00:99:0B:D7:E5:ED:55:B3:13:C8:A4:72:40:12:0C:EC:14:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7D6F6C6FAC7EBFE5CF4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87319f70-e963-356c-add3-eb13394afc54.roa Signing time: Thu 01 May 2025 17:14:30 +0000 ROA not before: Thu 01 May 2025 17:14:30 +0000 ROA not after: Wed 30 Jul 2025 17:14:30 +0000 asID: 22773 IP address blocks: 68.10.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:d6:f6:c6:fa:c7:eb:fe:5c:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:30 2025 GMT Not After : Jul 30 17:14:30 2025 GMT Subject: CN=d6a5ea64-7e75-4686-af6a-740e1e2a367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:9f:be:95:e6:48:7f:68:72:c9:fb:a3:52: 04:99:d6:c3:79:e5:85:70:87:df:75:ee:cd:7b:4f: f2:7a:f4:73:4e:c9:f1:67:e2:85:78:9d:30:ed:71: 3f:e0:a4:1c:e6:3a:b7:45:f0:a8:93:15:19:4f:44: 90:e4:cd:8a:39:66:49:22:0f:8f:96:c7:6e:77:a1: 9f:d2:a5:44:ea:23:a3:49:cc:38:6e:86:27:0f:d6: 53:6c:e1:43:12:d2:c1:31:d9:2c:57:27:a4:40:31: ed:a6:72:52:51:79:f7:e2:67:92:c8:ed:7e:11:49: 49:de:2b:e5:23:dd:e7:62:67:ed:e5:05:5f:c6:69: 26:b8:b1:30:80:56:54:15:e8:b9:93:5e:21:c7:cb: 67:c0:73:e9:b9:ac:a7:3c:52:c5:34:15:62:c1:ff: 4e:d7:9f:03:4e:c2:4d:36:6f:33:a5:55:2a:12:51: b9:4a:c7:0e:cd:49:97:7f:28:8a:39:ea:bd:cf:61: 0b:5b:a5:51:04:02:89:13:e1:e8:61:15:83:1f:14: bf:9f:e8:7e:2b:f5:28:15:d2:eb:e7:5f:a5:11:6a: 90:4e:a3:7a:fa:7a:40:83:51:f1:26:af:b7:a6:69: c8:2c:94:da:bb:cf:b7:86:bf:62:b6:29:28:34:ff: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:00:99:0B:D7:E5:ED:55:B3:13:C8:A4:72:40:12:0C:EC:14:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87319f70-e963-356c-add3-eb13394afc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.10.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fe:54:44:c3:7b:ae:cd:ed:ca:11:81:78:f9:80:7e:7d:51: ae:b1:c5:b4:b3:cf:c2:dc:73:e0:b8:0d:9c:42:d0:1f:80:c2: 5b:8c:d1:5e:3c:56:8e:4e:37:60:5b:46:e5:86:11:25:d5:a2: 6d:25:32:44:4c:ff:3f:9b:08:9b:4b:1e:67:88:67:cb:a5:e3: 19:33:81:7e:89:ff:71:0c:90:53:56:73:07:3f:fd:16:b5:af: eb:82:31:9e:57:a0:14:58:3a:01:fc:bd:46:8e:eb:ac:93:75: b9:cc:73:90:56:fd:b8:27:21:54:68:55:69:94:c5:9e:5f:7d: 50:c4:6c:0e:22:bc:73:94:cf:75:f0:93:c1:fd:31:23:dd:00: d4:fb:f4:36:7f:06:20:e5:ee:36:fa:d9:c2:eb:97:f5:68:94: 57:74:e1:e5:a4:33:ef:fe:e2:a3:06:71:94:95:5d:0f:f1:29: 52:a0:5e:84:0c:43:d3:34:12:d9:d3:95:c3:55:94:74:ac:26: b7:e3:12:6d:7b:81:45:7e:3d:d1:91:51:3a:2d:6d:b9:83:ce: 2e:06:a6:29:17:f4:69:7a:5b:23:e9:4c:29:36:5a:0e:e2:cb: 08:af:10:ab:9f:53:b2:e6:e0:82:38:40:a5:b1:be:c7:31:70: 37:5c:72:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm199b2xvrH6/5c9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQzMFoXDTI1MDczMDE3MTQzMFowLzEtMCsGA1UEAxMk ZDZhNWVhNjQtN2U3NS00Njg2LWFmNmEtNzQwZTFlMmEzNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc+fvpXmSH9ocsn7o1IEmdbDeeWFcIffde7N e0/yevRzTsnxZ+KFeJ0w7XE/4KQc5jq3RfCokxUZT0SQ5M2KOWZJIg+Plsdud6Gf 0qVE6iOjScw4boYnD9ZTbOFDEtLBMdksVyekQDHtpnJSUXn34meSyO1+EUlJ3ivl I93nYmft5QVfxmkmuLEwgFZUFei5k14hx8tnwHPpuaynPFLFNBViwf9O158DTsJN Nm8zpVUqElG5SscOzUmXfyiKOeq9z2ELW6VRBAKJE+HoYRWDHxS/n+h+K/UoFdLr 51+lEWqQTqN6+npAg1HxJq+3pmnILJTau8+3hr9itikoNP8c4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIgAJkL1+XtVbMTyKRyQBIM7BR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODczMTlmNzAtZTk2My0z NTZjLWFkZDMtZWIxMzM5NGFmYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz+VETDe67N7coRgXj5gH59Ua6xxbSzz8Lcc+C4DZxC0B+AwluM0V48 Vo5ON2BbRuWGESXVom0lMkRM/z+bCJtLHmeIZ8ul4xkzgX6J/3EMkFNWcwc//Ra1 r+uCMZ5XoBRYOgH8vUaO66yTdbnMc5BW/bgnIVRoVWmUxZ5ffVDEbA4ivHOUz3Xw k8H9MSPdANT79DZ/BiDl7jb62cLrl/VolFd04eWkM+/+4qMGcZSVXQ/xKVKgXoQM Q9M0EtnTlcNVlHSsJrfjEm17gUV+PdGRUTotbbmDzi4GpikX9Gl6WyPpTCk2Wg7i ywivEKufU7Lm4II4QKWxvscxcDdccpw= -----END CERTIFICATE-----Generated at Sun May 11 09:06:30 2025 by rpki-client