$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cd94011-69d4-319d-bda0-968c3a34bcc2.roa File: 8cd94011-69d4-319d-bda0-968c3a34bcc2.roa (raw, json) Hash identifier: IMECPZE5J6fbZ/IK+vJLxGQMIno1mjjlcL+LnsoStSU= Subject key identifier: 3C:51:98:45:F7:FC:A7:43:8E:15:44:48:BD:34:A0:96:D7:96:FA:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F546238044E0A9706C4A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cd94011-69d4-319d-bda0-968c3a34bcc2.roa Signing time: Thu 01 May 2025 17:09:20 +0000 ROA not before: Thu 01 May 2025 17:09:20 +0000 ROA not after: Wed 30 Jul 2025 17:09:20 +0000 asID: 22773 IP address blocks: 68.14.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:46:23:80:44:e0:a9:70:6c:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:20 2025 GMT Not After : Jul 30 17:09:20 2025 GMT Subject: CN=c233c90c-184b-4085-8fec-601847227847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:01:14:9e:bd:ce:39:61:04:db:a5:ea:7c: 48:a9:28:af:30:77:6c:75:1d:13:d1:31:b8:81:e0: d0:58:31:23:d1:c0:f5:0c:bc:64:d8:9d:f5:2f:d6: 23:df:05:74:87:a9:2b:65:9e:3b:c4:64:5d:a7:82: 7b:80:98:9b:a9:29:60:86:51:ea:ca:b7:80:4f:df: 82:47:e9:21:21:1a:75:ff:2b:11:17:2e:fc:9d:0c: 7f:23:0f:4a:cd:53:b2:61:9c:1e:a0:43:44:8d:1d: eb:7b:0d:82:4d:2e:2a:3b:31:47:4a:94:e5:6b:7c: 55:6e:05:93:ad:32:b1:47:97:14:3f:1c:67:83:1f: f0:58:34:6b:a4:05:d3:ac:89:1a:01:33:56:20:e0: 59:b3:67:46:4b:1a:88:ee:99:96:02:66:4d:da:2a: ff:37:79:a9:32:c2:9c:90:c8:d9:41:49:94:84:a1: 4a:b3:75:d3:59:03:f0:0c:02:b8:a0:a1:d6:90:e6: 15:c7:f1:cc:fa:c4:94:8f:5f:7f:bd:ea:ed:61:4d: dc:c1:df:43:49:09:ee:e0:25:0a:f2:ae:60:94:73: 43:96:15:fb:ed:b9:b9:76:ec:9f:50:60:2f:3b:3e: 85:76:11:0f:44:da:f6:34:32:dc:00:28:5f:91:0c: 73:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:51:98:45:F7:FC:A7:43:8E:15:44:48:BD:34:A0:96:D7:96:FA:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cd94011-69d4-319d-bda0-968c3a34bcc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:ab:7b:3c:bc:53:e1:0e:77:30:3f:fb:97:0f:87:8c:b2: 62:50:06:af:7b:7f:4c:8f:2a:b6:3b:30:29:b9:14:b1:be:ed: 90:50:7f:f9:73:53:89:70:a4:2d:03:04:48:e3:8d:9c:18:27: 50:88:ec:8f:67:1a:92:ba:5e:56:1b:5e:5b:30:08:2b:ed:6c: 2a:a5:75:c5:3d:63:7e:9c:09:78:51:7c:27:59:f8:31:1d:4f: f1:b3:89:5b:bd:88:f9:a2:88:a9:c9:c5:53:d1:0e:91:1f:56: 86:9d:f0:16:74:90:36:86:16:13:ba:ea:21:cd:c0:d4:ec:94: 30:15:ec:f1:81:de:3b:dd:de:74:b5:4d:55:b7:f9:0f:66:6d: c8:cb:da:0a:73:06:14:a8:d1:79:a5:27:64:ad:4d:5b:3b:7c: 7f:3a:79:c9:ff:d6:c1:19:36:b8:bd:e1:35:4b:da:ba:4e:59: 1c:51:79:31:f8:09:66:7a:90:f5:90:8f:32:e9:1d:d0:b2:9c: 67:c0:d3:b0:29:50:92:11:45:dd:76:c3:1a:6e:63:62:50:af: f3:a1:0a:2a:09:71:a5:c3:3c:c0:bc:65:05:a1:d3:e5:3f:1b: a3:3c:a9:53:e3:b3:79:9c:21:33:a4:b5:9d:26:0a:d1:b4:8c: 39:dc:c7:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19UYjgETgqXBsSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkyMFoXDTI1MDczMDE3MDkyMFowLzEtMCsGA1UEAxMk YzIzM2M5MGMtMTg0Yi00MDg1LThmZWMtNjAxODQ3MjI3ODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP4BFJ69zjlhBNul6nxIqSivMHdsdR0T0TG4 geDQWDEj0cD1DLxk2J31L9Yj3wV0h6krZZ47xGRdp4J7gJibqSlghlHqyreAT9+C R+khIRp1/ysRFy78nQx/Iw9KzVOyYZweoENEjR3rew2CTS4qOzFHSpTla3xVbgWT rTKxR5cUPxxngx/wWDRrpAXTrIkaATNWIOBZs2dGSxqI7pmWAmZN2ir/N3mpMsKc kMjZQUmUhKFKs3XTWQPwDAK4oKHWkOYVx/HM+sSUj19/vertYU3cwd9DSQnu4CUK 8q5glHNDlhX77bm5duyfUGAvOz6FdhEPRNr2NDLcAChfkQxzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxRmEX3/KdDjhVESL00oJbXlvqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNkOTQwMTEtNjlkNC0z MTlkLWJkYTAtOTY4YzNhMzRiY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRA5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpwq3s8vFPhDncwP/uXD4eMsmJQBq97f0yPKrY7MCm5FLG+7ZBQf/lz U4lwpC0DBEjjjZwYJ1CI7I9nGpK6XlYbXlswCCvtbCqldcU9Y36cCXhRfCdZ+DEd T/GziVu9iPmiiKnJxVPRDpEfVoad8BZ0kDaGFhO66iHNwNTslDAV7PGB3jvd3nS1 TVW3+Q9mbcjL2gpzBhSo0XmlJ2StTVs7fH86ecn/1sEZNri94TVL2rpOWRxReTH4 CWZ6kPWQjzLpHdCynGfA07ApUJIRRd12wxpuY2JQr/OhCioJcaXDPMC8ZQWh0+U/ G6M8qVPjs3mcITOktZ0mCtG0jDncxyc= -----END CERTIFICATE-----Generated at Sun May 11 19:10:18 2025 by rpki-client