$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b75a8769-6d51-3a8d-b8e8-2299cde59e94.roa File: b75a8769-6d51-3a8d-b8e8-2299cde59e94.roa (raw, json) Hash identifier: ps3sJVYxfx+FbDmHb0/PFGQF/BUDSJngKqUvvaA/CWs= Subject key identifier: 00:8B:8F:C4:04:42:44:C3:32:68:50:67:EC:80:98:20:F0:1D:71:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F542225C5942FB50194100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b75a8769-6d51-3a8d-b8e8-2299cde59e94.roa Signing time: Thu 01 May 2025 17:09:18 +0000 ROA not before: Thu 01 May 2025 17:09:18 +0000 ROA not after: Wed 30 Jul 2025 17:09:18 +0000 asID: 22773 IP address blocks: 68.14.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:42:22:5c:59:42:fb:50:19:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:18 2025 GMT Not After : Jul 30 17:09:18 2025 GMT Subject: CN=1a7d3b4a-7391-4b6a-8c31-1e2956b98371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:6e:6b:44:09:f3:4c:04:b1:af:0e:27:3b: 14:82:5d:46:33:30:08:9f:c2:e3:d5:25:23:04:81: d1:fe:96:33:b8:6b:31:30:d4:c0:c2:3a:65:da:7b: 48:ef:b9:cc:83:5a:7e:be:50:21:11:de:b1:c6:88: 78:3f:db:39:bd:af:11:92:87:fb:19:d3:af:5c:94: da:b7:f3:32:13:b0:7f:b2:ab:30:57:29:10:e9:dd: 7b:75:b4:75:7e:21:3e:9e:96:0f:e2:5c:e2:bd:fa: 04:ea:e2:07:71:6f:ca:ce:7a:e0:66:a5:ae:3c:e2: 50:a0:a2:8d:6c:a7:c8:20:59:09:c6:f4:25:e7:60: bd:2c:29:c5:f7:71:b9:77:96:26:f2:d8:e0:d2:4f: c0:a6:66:4f:b4:76:d4:79:bc:a9:23:73:a9:e7:f2: 82:73:c5:c1:cb:92:1a:d5:2a:c7:1f:bb:11:3e:74: 1f:01:fd:b4:9a:b5:36:e1:d8:6c:9b:16:75:18:55: 4a:26:ce:60:62:dd:7a:40:4d:99:a0:b3:72:b5:ed: 72:fb:0d:6f:64:b1:51:27:19:17:0d:ab:55:fd:e8: b8:5b:f4:07:72:bb:f4:fc:cb:8e:a4:77:ad:19:1d: a5:7e:10:c3:df:92:65:b7:a9:c8:9f:c6:fb:3c:8f: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8B:8F:C4:04:42:44:C3:32:68:50:67:EC:80:98:20:F0:1D:71:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b75a8769-6d51-3a8d-b8e8-2299cde59e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6f:cb:57:e2:b3:d4:4d:44:ca:ea:64:90:ca:45:d1:bb:71: 93:4c:b0:21:f0:38:08:09:05:94:64:b9:fc:20:3b:57:ab:7c: d3:71:b7:39:91:c2:7a:85:e0:d6:78:84:41:43:30:e6:7a:e3: fc:6e:0e:73:c1:b8:71:ef:bc:d6:6f:70:18:4d:60:ed:f0:be: 99:c8:43:31:ed:d1:27:7c:34:19:8b:24:81:20:63:d4:55:73: 07:7a:0c:b4:f6:13:0c:24:47:54:90:57:20:27:c6:5c:7c:70: b4:25:c6:8e:09:f7:54:3a:9d:9c:f1:da:07:57:b3:88:9e:ae: 19:b7:3c:5b:80:75:7c:e2:35:30:3f:95:92:24:7a:a2:66:39: 1d:d1:1e:ea:cd:fc:37:03:1e:7f:1e:3b:45:3d:bc:67:72:eb: e8:81:70:01:43:29:4f:86:3b:0e:39:cd:54:05:52:b7:df:18: 3d:46:24:37:84:55:0a:1d:03:4c:00:78:7f:7e:c4:b3:36:81: 2f:ae:50:9b:2e:eb:96:dc:42:80:83:06:49:20:15:89:0a:90: 4c:ae:51:ac:bf:c2:a5:ca:88:0b:96:7a:82:22:3d:40:2a:13: 15:83:bb:d4:fb:c8:f8:bf:5a:82:7f:11:30:c9:f0:de:99:3b: 5e:a2:12:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19UIiXFlC+1AZQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxOFoXDTI1MDczMDE3MDkxOFowLzEtMCsGA1UEAxMk MWE3ZDNiNGEtNzM5MS00YjZhLThjMzEtMWUyOTU2Yjk4MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C9ua0QJ80wEsa8OJzsUgl1GMzAIn8Lj1SUj BIHR/pYzuGsxMNTAwjpl2ntI77nMg1p+vlAhEd6xxoh4P9s5va8Rkof7GdOvXJTa t/MyE7B/sqswVykQ6d17dbR1fiE+npYP4lzivfoE6uIHcW/KznrgZqWuPOJQoKKN bKfIIFkJxvQl52C9LCnF93G5d5Ym8tjg0k/ApmZPtHbUebypI3Op5/KCc8XBy5Ia 1SrHH7sRPnQfAf20mrU24dhsmxZ1GFVKJs5gYt16QE2ZoLNyte1y+w1vZLFRJxkX DatV/ei4W/QHcrv0/MuOpHetGR2lfhDD35Jlt6nIn8b7PI+lEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACLj8QEQkTDMmhQZ+yAmCDwHXHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjc1YTg3NjktNmQ1MS0z YThkLWI4ZTgtMjI5OWNkZTU5ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlvy1fis9RNRMrqZJDKRdG7cZNMsCHwOAgJBZRkufwgO1erfNNxtzmR wnqF4NZ4hEFDMOZ64/xuDnPBuHHvvNZvcBhNYO3wvpnIQzHt0Sd8NBmLJIEgY9RV cwd6DLT2EwwkR1SQVyAnxlx8cLQlxo4J91Q6nZzx2gdXs4ierhm3PFuAdXziNTA/ lZIkeqJmOR3RHurN/DcDHn8eO0U9vGdy6+iBcAFDKU+GOw45zVQFUrffGD1GJDeE VQodA0wAeH9+xLM2gS+uUJsu65bcQoCDBkkgFYkKkEyuUay/wqXKiAuWeoIiPUAq ExWDu9T7yPi/WoJ/ETDJ8N6ZO16iEl8= -----END CERTIFICATE-----Generated at Sat May 10 13:50:29 2025 by rpki-client