$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a111ad41-4b81-32b8-8e4c-28647a2090d3.roa File: a111ad41-4b81-32b8-8e4c-28647a2090d3.roa (raw, json) Hash identifier: XY4f4nkxD01wrHv5lYwRQsl8dvytsJY4DXNrcXZFLPo= Subject key identifier: D9:1F:AF:96:C8:27:89:2F:E9:59:0E:9B:0E:38:FC:06:3D:73:ED:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCDD6BB6BADAE428093600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a111ad41-4b81-32b8-8e4c-28647a2090d3.roa Signing time: Thu 01 May 2025 17:24:38 +0000 ROA not before: Thu 01 May 2025 17:24:38 +0000 ROA not after: Wed 30 Jul 2025 17:24:38 +0000 asID: 22773 IP address blocks: 68.7.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:dd:6b:b6:ba:da:e4:28:09:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:38 2025 GMT Not After : Jul 30 17:24:38 2025 GMT Subject: CN=c9df276e-399d-4878-80b6-57d553f5be1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:b1:d0:a8:6d:bd:dc:1c:42:58:2b:f8:f0: 70:53:b1:18:7b:25:59:7b:08:ab:87:34:17:5e:84: 24:4e:0b:d8:e6:9d:d0:6d:6b:3b:f0:7f:e1:a1:a7: 76:30:93:c1:aa:20:5a:ab:08:04:97:d6:5f:1f:29: 84:e2:04:79:27:b8:93:f7:4a:66:a7:0e:d2:3a:02: e6:6b:7a:73:7f:61:91:80:b1:97:d0:f4:2e:73:11: 3f:94:d6:53:64:a9:84:8a:93:6b:25:13:f7:ef:06: eb:9c:aa:0a:c3:85:1b:02:5c:ad:65:36:8a:7d:1e: fe:2d:a2:8d:32:cc:6b:1b:bf:ba:c2:e8:dd:2b:9e: 56:24:3e:3f:cb:62:c1:bb:9a:9b:dd:af:02:7a:14: fd:32:42:fa:ab:ff:58:3e:d2:ec:19:f6:25:81:37: 81:cc:1c:97:1d:92:11:d9:14:3f:93:b2:95:47:c6: cd:5c:e9:44:fb:1f:45:49:c8:fa:51:1a:bf:ac:d8: 85:f2:07:fa:55:54:ce:1d:62:2b:fb:c6:8c:30:9d: 17:99:44:3d:9b:3f:f6:0e:a5:5b:ab:d0:70:0b:ff: 6e:50:2b:a8:21:71:2e:59:f4:8e:c8:35:38:86:41: ef:73:3c:7e:47:38:05:63:91:fd:4a:2e:fd:1f:e1: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1F:AF:96:C8:27:89:2F:E9:59:0E:9B:0E:38:FC:06:3D:73:ED:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a111ad41-4b81-32b8-8e4c-28647a2090d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fc:a9:c1:9e:78:e9:b7:38:ba:20:bf:8d:45:51:ab:e5:45: 5c:29:0b:31:1f:07:c3:9c:29:4a:53:c3:40:71:a6:8e:ca:4c: 49:df:15:c6:56:e9:12:56:ce:f8:be:c4:67:c7:0b:db:bb:a8: 67:7b:a7:49:5b:bd:0c:ef:d3:53:ac:67:65:4a:c2:8d:ee:65: a7:d6:f3:c0:df:f3:40:bd:6a:a9:f1:c3:08:88:2a:08:ee:c7: 72:fe:52:78:32:e4:71:dc:ec:4f:c5:40:0c:c1:30:b2:67:fd: c3:fb:7b:ff:ad:5d:3e:4f:68:6d:cc:2a:b2:41:bf:8e:2a:5e: 94:d7:5d:5f:d8:14:43:4b:0d:29:6d:6f:3e:ed:10:29:10:9e: b7:7e:0e:f8:c6:69:09:a8:fa:76:c3:cb:fd:c5:b9:42:d2:3c: 77:dd:d8:bc:0b:0c:f0:56:b7:f0:9e:fb:e4:c3:a1:2c:a4:0a: 19:b2:07:d4:85:ac:f0:c6:fc:4b:56:51:26:04:b4:a4:c1:72: 6f:73:45:a0:00:f2:5a:07:e0:3f:9b:66:52:5d:22:02:2e:61: 58:26:ca:5c:3d:64:4a:b5:d1:7d:c8:fa:db:74:fc:bd:7c:c6: bd:46:f8:7e:72:bd:5a:57:d9:e7:6b:87:82:ce:63:f4:ef:b2: 1e:c9:52:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/N1rtrra5CgJNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQzOFoXDTI1MDczMDE3MjQzOFowLzEtMCsGA1UEAxMk YzlkZjI3NmUtMzk5ZC00ODc4LTgwYjYtNTdkNTUzZjViZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopCx0KhtvdwcQlgr+PBwU7EYeyVZewirhzQX XoQkTgvY5p3QbWs78H/hoad2MJPBqiBaqwgEl9ZfHymE4gR5J7iT90pmpw7SOgLm a3pzf2GRgLGX0PQucxE/lNZTZKmEipNrJRP37wbrnKoKw4UbAlytZTaKfR7+LaKN MsxrG7+6wujdK55WJD4/y2LBu5qb3a8CehT9MkL6q/9YPtLsGfYlgTeBzByXHZIR 2RQ/k7KVR8bNXOlE+x9FScj6URq/rNiF8gf6VVTOHWIr+8aMMJ0XmUQ9mz/2DqVb q9BwC/9uUCuoIXEuWfSOyDU4hkHvczx+RzgFY5H9Si79H+E4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkfr5bIJ4kv6VkOmw44/AY9c+0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTExMWFkNDEtNGI4MS0z MmI4LThlNGMtMjg2NDdhMjA5MGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH8qcGeeOm3OLogv41FUavlRVwpCzEfB8OcKUpTw0Bxpo7KTEnfFcZW 6RJWzvi+xGfHC9u7qGd7p0lbvQzv01OsZ2VKwo3uZafW88Df80C9aqnxwwiIKgju x3L+Ungy5HHc7E/FQAzBMLJn/cP7e/+tXT5PaG3MKrJBv44qXpTXXV/YFENLDSlt bz7tECkQnrd+DvjGaQmo+nbDy/3FuULSPHfd2LwLDPBWt/Ce++TDoSykChmyB9SF rPDG/EtWUSYEtKTBcm9zRaAA8loH4D+bZlJdIgIuYVgmylw9ZEq10X3I+tt0/L18 xr1G+H5yvVpX2edrh4LOY/Tvsh7JUoQ= -----END CERTIFICATE-----Generated at Sun May 11 09:14:49 2025 by rpki-client