$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2c52a50-4719-3a3b-869c-b03276ccbddf.roa File: a2c52a50-4719-3a3b-869c-b03276ccbddf.roa (raw, json) Hash identifier: DfpGKShrEfMgHcrvgTKYeKCdHKVQkuWnRrTbkrgQiPw= Subject key identifier: 3A:E1:C7:EA:20:BE:D0:1A:11:83:0F:B7:FE:F6:F9:E1:EC:D0:96:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5142E445265F83BD0E100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2c52a50-4719-3a3b-869c-b03276ccbddf.roa Signing time: Thu 01 May 2025 17:08:56 +0000 ROA not before: Thu 01 May 2025 17:08:56 +0000 ROA not after: Wed 30 Jul 2025 17:08:56 +0000 asID: 22773 IP address blocks: 68.9.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:14:2e:44:52:65:f8:3b:d0:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:56 2025 GMT Not After : Jul 30 17:08:56 2025 GMT Subject: CN=9f700494-e1d0-44e9-be45-74c61b686d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:ba:3d:2b:05:e6:66:d3:9d:50:eb:59:85: 17:4b:22:33:eb:81:d8:9d:ef:28:2a:11:56:50:bf: 14:45:27:b0:4e:61:f9:c3:e7:9b:36:b7:46:7a:ce: ed:f3:cf:c5:5d:d9:ea:ab:1e:da:44:46:67:9f:43: b5:ac:eb:d2:10:b9:7e:68:5e:56:91:ac:bc:97:3e: 64:21:42:1e:4d:cc:ea:eb:52:53:8e:b9:da:b9:a4: 36:a3:11:b3:1b:a1:51:1b:66:9c:b7:c4:03:cb:43: d2:89:9a:52:6b:46:dd:be:ad:22:0d:97:57:bb:ea: c1:52:c4:d4:5d:f1:00:b6:7f:47:b4:57:7e:cb:fc: 18:1a:d4:8e:84:a1:a4:77:3d:24:e8:02:2e:c1:71: d7:96:ae:12:e5:d0:e7:c8:23:b2:ae:e5:8d:50:d0: 1a:ba:17:92:80:76:e8:4b:1a:39:fe:34:fe:98:e4: 8e:ae:77:4b:5d:81:b2:09:8e:85:f7:c4:50:5e:d9: 26:6b:c2:ae:34:e9:8e:dd:10:9d:fa:49:26:d3:47: 66:4f:f9:30:c9:dd:6c:7f:61:e3:39:f4:22:e1:3f: 4e:c5:64:1b:62:db:3a:1c:f2:aa:d0:11:0e:16:21: d9:22:25:ab:60:29:b4:fa:1c:d0:f2:c4:63:f5:52: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E1:C7:EA:20:BE:D0:1A:11:83:0F:B7:FE:F6:F9:E1:EC:D0:96:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2c52a50-4719-3a3b-869c-b03276ccbddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ba:dd:7d:e6:be:d1:26:87:2e:d7:21:a5:ac:7a:9c:28:c1: 0c:ae:4f:a0:1c:ba:cc:95:75:34:ff:8d:41:9b:ad:36:e9:06: a2:ad:25:86:4c:e7:6c:d8:63:3b:d3:da:b2:04:63:84:51:fb: 20:b5:6a:a1:b7:30:c8:c7:9f:ee:8d:a4:37:0f:a2:46:31:62: 23:8c:b6:35:e8:dd:02:5f:46:f3:e3:7a:d5:70:dd:5c:f3:e4: d4:2f:41:42:7e:7b:23:cc:02:a7:62:fc:dd:de:5d:83:c7:3c: cc:eb:84:64:e0:2f:8c:b1:7f:b0:9e:93:12:d2:a2:d8:34:8b: 35:56:ce:8b:25:82:41:58:9b:99:07:a5:a8:80:40:e0:8a:f2: 3b:36:96:a9:fa:a6:d6:b4:d4:6e:8c:44:d5:d7:a4:1e:c3:e3: e7:bd:30:88:50:99:21:69:81:1c:55:fa:5d:dc:f2:c0:bb:ca: 92:11:c6:38:cc:9f:52:b5:a6:b0:55:27:74:c9:ba:0b:f2:1a: c2:81:6f:04:80:60:a3:a7:c2:3b:3e:2e:aa:1c:70:a7:c3:cb: 8b:68:b0:23:f5:0e:e0:37:16:db:5e:97:08:b3:9f:b4:2d:ab: ed:81:7d:59:66:b3:9e:f6:72:59:28:1a:38:fa:a6:83:50:6a: c9:9a:e0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19RQuRFJl+DvQ4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1NloXDTI1MDczMDE3MDg1NlowLzEtMCsGA1UEAxMk OWY3MDA0OTQtZTFkMC00NGU5LWJlNDUtNzRjNjFiNjg2ZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbi6PSsF5mbTnVDrWYUXSyIz64HYne8oKhFW UL8URSewTmH5w+ebNrdGes7t88/FXdnqqx7aREZnn0O1rOvSELl+aF5Wkay8lz5k IUIeTczq61JTjrnauaQ2oxGzG6FRG2act8QDy0PSiZpSa0bdvq0iDZdXu+rBUsTU XfEAtn9HtFd+y/wYGtSOhKGkdz0k6AIuwXHXlq4S5dDnyCOyruWNUNAauheSgHbo Sxo5/jT+mOSOrndLXYGyCY6F98RQXtkma8KuNOmO3RCd+kkm00dmT/kwyd1sf2Hj OfQi4T9OxWQbYts6HPKq0BEOFiHZIiWrYCm0+hzQ8sRj9VIMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrhx+ogvtAaEYMPt/72+eHs0JbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJjNTJhNTAtNDcxOS0z YTNiLTg2OWMtYjAzMjc2Y2NiZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe63X3mvtEmhy7XIaWsepwowQyuT6AcusyVdTT/jUGbrTbpBqKtJYZM 52zYYzvT2rIEY4RR+yC1aqG3MMjHn+6NpDcPokYxYiOMtjXo3QJfRvPjetVw3Vzz 5NQvQUJ+eyPMAqdi/N3eXYPHPMzrhGTgL4yxf7CekxLSotg0izVWzoslgkFYm5kH paiAQOCK8js2lqn6pta01G6MRNXXpB7D4+e9MIhQmSFpgRxV+l3c8sC7ypIRxjjM n1K1prBVJ3TJugvyGsKBbwSAYKOnwjs+LqoccKfDy4tosCP1DuA3Fttelwizn7Qt q+2BfVlms572clkoGjj6poNQasma4Ow= -----END CERTIFICATE-----Generated at Sun May 11 14:47:47 2025 by rpki-client