$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824b90c-2eb6-3dbf-8e01-dc745bde32b8.roa File: 8824b90c-2eb6-3dbf-8e01-dc745bde32b8.roa (raw, json) Hash identifier: wC1rcNH3CBAvEqoCat8ks1i1Ov1cB0jJ5J0+2R/wHcQ= Subject key identifier: D6:76:CC:D2:29:4F:27:B2:00:D9:E9:55:5D:42:A2:FC:91:D1:17:EC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5580471DC2C29F54B1D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824b90c-2eb6-3dbf-8e01-dc745bde32b8.roa Signing time: Thu 01 May 2025 17:09:28 +0000 ROA not before: Thu 01 May 2025 17:09:28 +0000 ROA not after: Wed 30 Jul 2025 17:09:28 +0000 asID: 22773 IP address blocks: 68.110.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:58:04:71:dc:2c:29:f5:4b:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:28 2025 GMT Not After : Jul 30 17:09:28 2025 GMT Subject: CN=e35904bd-a5d0-4376-8fc5-e55b910b2129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3c:ac:8e:b0:59:66:b1:62:a4:a3:bd:23:f9: 17:0a:45:ad:e1:ee:4b:f4:f9:eb:c0:99:1f:75:45: 05:c5:5b:e9:10:05:99:fd:53:e9:b1:15:26:45:d6: cc:78:c5:f5:ad:fd:59:a1:91:cd:24:36:9e:ac:3d: b8:7c:e5:12:b2:27:c3:38:f6:e7:78:68:82:7b:dc: bd:4b:7d:a4:4a:54:5d:ff:19:8b:e9:bf:af:96:27: 2c:cd:8d:76:cd:d0:ac:7d:54:6f:ab:8d:43:b8:ac: a2:73:4f:12:b9:5b:05:d6:8c:fd:ae:bf:b9:c0:82: a0:7e:6b:70:02:45:27:be:d5:c0:6b:9c:a0:28:a7: b1:9b:76:ba:e6:42:af:36:bb:69:52:db:70:8a:f2: a5:9b:af:e5:c5:aa:37:76:05:8a:37:43:2a:4b:e7: 3d:9f:d2:30:ef:f8:a4:73:ef:67:1b:5a:f6:0f:32: b1:e7:20:2f:f0:e1:8c:27:ab:fb:03:24:3d:ce:ba: 4b:ac:97:11:83:c9:ad:26:61:91:94:29:23:7f:bb: 6e:b4:25:4f:da:82:dc:7e:9c:d6:ff:f9:ce:0e:b0: b8:8a:42:19:2e:f8:49:d7:16:fb:75:2e:cb:83:29: 28:0f:77:f3:f2:dc:f8:c4:05:fc:76:cc:ce:0b:03: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:76:CC:D2:29:4F:27:B2:00:D9:E9:55:5D:42:A2:FC:91:D1:17:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8824b90c-2eb6-3dbf-8e01-dc745bde32b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.110.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a3:cf:04:fb:b8:cd:f0:9a:b0:37:91:30:ab:27:74:48:0c: c4:70:3b:c7:3a:54:95:b8:a0:10:4a:5d:c0:7c:6c:ed:1b:16: 54:f0:3e:af:81:78:b8:c1:20:d5:50:f7:e0:6d:6d:31:35:14: c0:9d:f1:b7:d4:23:ac:0f:b4:f9:58:35:30:d3:52:b9:c9:a6: fb:da:0c:b2:cd:a3:9e:07:33:a4:77:25:ba:70:e4:0e:a0:9b: 6a:d8:a9:e4:82:c5:0e:1d:16:82:6d:e8:0b:92:89:6b:94:3d: cf:a5:d4:8c:f9:ff:ea:a5:77:d2:7e:93:4e:e5:7a:ad:c4:c0: 17:94:b9:6d:60:a4:d8:ab:41:34:94:8f:43:a4:92:fa:6c:4d: 49:4b:70:d4:b4:70:df:d4:87:ac:ae:93:37:4d:e8:0f:63:8f: 8b:5f:8f:ee:4a:8b:dd:4e:58:2e:2e:b0:88:a9:f7:4d:82:bf: fa:9f:5d:db:d7:ae:39:e1:74:f5:49:54:86:1c:e5:3b:b0:a4: b8:21:91:bc:24:bb:d2:e7:77:42:9c:1a:95:40:c0:80:47:02: 87:46:23:a5:bd:b7:42:50:b3:df:78:b7:0a:3a:d6:32:b5:6d: e3:65:8a:3a:4e:f6:9d:dd:38:da:d6:99:25:96:ab:b3:77:6e: 0f:ff:0b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19VgEcdwsKfVLHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkyOFoXDTI1MDczMDE3MDkyOFowLzEtMCsGA1UEAxMk ZTM1OTA0YmQtYTVkMC00Mzc2LThmYzUtZTU1YjkxMGIyMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDysjrBZZrFipKO9I/kXCkWt4e5L9PnrwJkf dUUFxVvpEAWZ/VPpsRUmRdbMeMX1rf1ZoZHNJDaerD24fOUSsifDOPbneGiCe9y9 S32kSlRd/xmL6b+vlicszY12zdCsfVRvq41DuKyic08SuVsF1oz9rr+5wIKgfmtw AkUnvtXAa5ygKKexm3a65kKvNrtpUttwivKlm6/lxao3dgWKN0MqS+c9n9Iw7/ik c+9nG1r2DzKx5yAv8OGMJ6v7AyQ9zrpLrJcRg8mtJmGRlCkjf7tutCVP2oLcfpzW //nODrC4ikIZLvhJ1xb7dS7LgykoD3fz8tz4xAX8dszOCwOvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ2zNIpTyeyANnpVV1CovyR0RfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODgyNGI5MGMtMmViNi0z ZGJmLThlMDEtZGM3NDViZGUzMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARG7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGajzwT7uM3wmrA3kTCrJ3RIDMRwO8c6VJW4oBBKXcB8bO0bFlTwPq+B eLjBINVQ9+BtbTE1FMCd8bfUI6wPtPlYNTDTUrnJpvvaDLLNo54HM6R3Jbpw5A6g m2rYqeSCxQ4dFoJt6AuSiWuUPc+l1Iz5/+qld9J+k07leq3EwBeUuW1gpNirQTSU j0OkkvpsTUlLcNS0cN/Uh6yukzdN6A9jj4tfj+5Ki91OWC4usIip902Cv/qfXdvX rjnhdPVJVIYc5TuwpLghkbwku9Lnd0KcGpVAwIBHAodGI6W9t0JQs994two61jK1 beNlijpO9p3dONrWmSWWq7N3bg//Cwg= -----END CERTIFICATE-----Generated at Sun May 11 05:10:54 2025 by rpki-client