$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fdfba39-20ca-3466-bc7a-9fc154f45f58.roa File: 8fdfba39-20ca-3466-bc7a-9fc154f45f58.roa (raw, json) Hash identifier: jtJmdMtNrlRh98AlaMe+fdjwBSkgHb/EegS/CMVZqbI= Subject key identifier: C6:E7:95:63:4A:B1:71:92:49:35:21:C4:73:99:B3:26:04:99:F2:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDFFA4CC932DED9B9F0280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fdfba39-20ca-3466-bc7a-9fc154f45f58.roa Signing time: Thu 01 May 2025 17:26:55 +0000 ROA not before: Thu 01 May 2025 17:26:55 +0000 ROA not after: Wed 30 Jul 2025 17:26:55 +0000 asID: 22773 IP address blocks: 174.68.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:ff:a4:cc:93:2d:ed:9b:9f:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:55 2025 GMT Not After : Jul 30 17:26:55 2025 GMT Subject: CN=8be9370b-2d56-4a84-957f-98799024835d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:d8:db:f9:64:11:00:e7:ab:82:db:88:27: d6:09:8d:46:d3:db:9d:de:e4:b4:fd:15:00:c1:a9: 4b:81:e8:ae:8e:bd:e0:fd:f2:2f:ac:24:6f:f8:aa: 3f:f5:07:a1:95:59:c7:55:e0:6c:fe:5f:47:58:22: 67:da:b9:e9:93:cf:21:cd:ca:23:58:79:5f:56:d5: 08:90:60:1c:67:b3:45:95:fa:30:8d:c1:e1:c6:4a: b7:8c:e6:76:08:9c:53:64:67:8a:f5:c6:e9:97:93: a4:48:3c:80:e1:fb:2d:cd:f0:42:1f:d5:de:a9:0a: a1:d4:1b:18:ad:84:43:35:72:d8:aa:e3:f1:fd:58: d5:cb:4c:7f:57:3b:9f:52:20:35:7d:28:15:52:35: 75:28:74:6f:73:a6:2e:0c:2d:a8:13:93:40:04:62: fd:35:cd:c0:6b:1f:1b:57:99:1d:be:26:1f:45:18: 52:2e:27:10:0d:a3:8b:a1:cf:0d:72:b4:24:e8:ae: 0b:76:32:ee:24:c9:b3:1c:c7:ad:cf:f8:c2:e5:d3: e8:a7:92:98:b7:bd:e9:df:d3:24:76:9d:5d:3e:64: 2a:c9:05:f0:72:83:98:b0:34:97:39:c6:75:48:ae: 7c:a3:b4:e9:24:f9:3e:7e:63:32:ab:96:59:26:39: 87:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:95:63:4A:B1:71:92:49:35:21:C4:73:99:B3:26:04:99:F2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8fdfba39-20ca-3466-bc7a-9fc154f45f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:de:41:14:21:f3:c2:16:80:a7:94:ec:cc:a6:92:03:4d:88: 75:98:32:b6:cc:bc:89:60:55:3e:49:22:c0:b8:b5:61:dd:25: bc:7a:b4:6b:55:c0:0d:08:0b:ec:cf:1f:db:7a:b5:c4:67:5b: d2:80:0d:b4:d7:40:ff:81:d8:7f:84:28:20:a6:ad:5e:48:38: 72:1d:6a:62:c0:01:1b:60:e1:cc:22:db:3d:e2:90:45:46:33: 96:d9:63:e9:79:08:34:46:14:eb:9a:b4:64:0f:78:0a:27:f6: 00:47:a9:95:5b:b1:f2:fb:0b:92:dd:81:b6:62:00:b0:d9:53: d2:1a:a2:76:e3:7e:cf:ec:d7:b0:3d:35:0a:4c:a2:36:50:2e: a8:c0:69:a3:7d:d2:99:a2:34:61:55:fe:07:9b:3a:4a:aa:6c: 75:06:0d:8a:94:a5:09:c9:58:a6:6f:c3:45:a8:40:31:13:78: 8f:8d:19:0a:50:6e:b7:f2:79:38:24:42:71:54:47:10:f1:a2: 02:f1:79:72:c1:72:dc:9e:32:43:c8:ba:5c:30:84:a1:a6:b6: 74:c5:9a:3f:91:d2:7e:f1:f0:a6:0b:69:fa:be:63:92:87:43: 25:71:89:2b:ca:85:59:55:94:a5:13:0a:26:2e:1a:4a:67:37: 5f:1b:dd:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/f+kzJMt7ZufAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY1NVoXDTI1MDczMDE3MjY1NVowLzEtMCsGA1UEAxMk OGJlOTM3MGItMmQ1Ni00YTg0LTk1N2YtOTg3OTkwMjQ4MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaXY2/lkEQDnq4LbiCfWCY1G09ud3uS0/RUA walLgeiujr3g/fIvrCRv+Ko/9QehlVnHVeBs/l9HWCJn2rnpk88hzcojWHlfVtUI kGAcZ7NFlfowjcHhxkq3jOZ2CJxTZGeK9cbpl5OkSDyA4fstzfBCH9XeqQqh1BsY rYRDNXLYquPx/VjVy0x/VzufUiA1fSgVUjV1KHRvc6YuDC2oE5NABGL9Nc3Aax8b V5kdviYfRRhSLicQDaOLoc8NcrQk6K4LdjLuJMmzHMetz/jC5dPop5KYt73p39Mk dp1dPmQqyQXwcoOYsDSXOcZ1SK58o7TpJPk+fmMyq5ZZJjmHLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbnlWNKsXGSSTUhxHOZsyYEmfJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGZkZmJhMzktMjBjYS0z NDY2LWJjN2EtOWZjMTU0ZjQ1ZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/eQRQh88IWgKeU7MymkgNNiHWYMrbMvIlgVT5JIsC4tWHdJbx6tGtV wA0IC+zPH9t6tcRnW9KADbTXQP+B2H+EKCCmrV5IOHIdamLAARtg4cwi2z3ikEVG M5bZY+l5CDRGFOuatGQPeAon9gBHqZVbsfL7C5LdgbZiALDZU9Iaonbjfs/s17A9 NQpMojZQLqjAaaN90pmiNGFV/gebOkqqbHUGDYqUpQnJWKZvw0WoQDETeI+NGQpQ brfyeTgkQnFURxDxogLxeXLBctyeMkPIulwwhKGmtnTFmj+R0n7x8KYLafq+Y5KH QyVxiSvKhVlVlKUTCiYuGkpnN18b3aQ= -----END CERTIFICATE-----Generated at Mon May 12 07:31:30 2025 by rpki-client