$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9fb6553-7771-33e7-95e0-cce1266e3ecc.roa File: b9fb6553-7771-33e7-95e0-cce1266e3ecc.roa (raw, json) Hash identifier: f1HF2eln1qUmC/8M1QcuKvygFsZB5qkyXYA2rmfHAc0= Subject key identifier: B9:D5:A0:28:61:48:53:F0:6C:B4:C1:8B:39:84:F1:8F:16:EA:5B:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F53BEA3CBE7BDB4C0C6D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9fb6553-7771-33e7-95e0-cce1266e3ecc.roa Signing time: Thu 01 May 2025 17:09:15 +0000 ROA not before: Thu 01 May 2025 17:09:15 +0000 ROA not after: Wed 30 Jul 2025 17:09:15 +0000 asID: 22773 IP address blocks: 68.14.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:3b:ea:3c:be:7b:db:4c:0c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:15 2025 GMT Not After : Jul 30 17:09:15 2025 GMT Subject: CN=8adaac45-4315-45e6-b590-497e03c289db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:e4:12:b3:92:c1:87:99:6a:58:60:01:7d: 79:85:73:34:dd:f6:20:1f:13:f3:4d:c7:73:e8:e6: 71:92:19:b2:cb:f3:f3:af:45:20:69:6e:09:8f:0c: 35:cd:a0:4a:be:bb:12:3a:32:68:99:84:89:95:b4: 4d:a8:ef:4b:97:e6:68:8d:fe:1a:d7:b0:f5:e4:56: c4:19:9b:1c:fa:86:50:5b:1f:59:ef:4c:a0:5f:92: 60:39:21:a6:06:c0:88:ce:7e:14:7f:69:02:51:3e: fe:aa:f3:6b:f2:d2:bc:ae:33:38:a8:de:7e:15:46: 73:a9:af:de:3b:8e:1a:d8:7f:64:0e:04:e4:de:f3: eb:90:0b:76:b7:2d:41:40:32:b8:0b:75:53:30:73: 72:ec:63:b3:64:e4:60:bf:7f:a1:1e:b0:de:40:1b: af:85:78:a9:ca:e7:61:29:2c:ce:46:66:eb:f6:32: 22:f9:81:48:aa:5c:36:4a:45:20:2d:fb:d9:9e:4e: e4:fa:ce:71:53:9c:b3:9c:cd:78:7e:6a:a8:55:0d: 91:4d:01:77:ea:09:4c:ee:88:d8:40:5d:14:a4:f0: cd:95:76:03:7d:92:36:f1:8b:35:45:db:6d:3e:a2: 8c:59:26:4b:a2:7d:37:97:f2:f0:c5:47:31:ca:5d: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:A0:28:61:48:53:F0:6C:B4:C1:8B:39:84:F1:8F:16:EA:5B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b9fb6553-7771-33e7-95e0-cce1266e3ecc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a4:fc:d8:8a:5b:7a:5a:55:fe:48:77:52:1c:7f:f9:00:e8: 82:31:d6:a3:e1:0c:1f:34:39:2d:a5:88:e1:d1:fe:35:53:69: f5:8c:ba:63:c5:7a:ef:ae:19:ee:c1:91:b0:0f:05:f4:fc:3a: e1:af:71:84:74:3c:92:47:39:cc:12:2a:a5:8e:7d:c7:45:09: d6:75:f5:32:d6:f1:03:75:bb:ec:01:a1:4b:70:d9:5a:f4:08: ae:5c:41:d5:36:99:b3:72:be:1e:62:ff:ff:8d:39:dd:95:93: 43:bb:86:a8:b5:79:c7:bc:a6:f5:17:95:47:2d:39:f3:f3:6c: 40:b6:8d:01:f9:2d:77:07:3a:21:cc:81:6e:73:df:19:62:dc: ad:b0:be:dd:06:37:06:5c:46:c5:19:80:f7:f3:8c:8b:e8:bb: 7d:99:9c:da:64:c9:50:ff:14:8c:7a:fb:3d:1e:b0:a7:71:12: 1b:ec:5e:e9:62:76:e3:61:e5:4c:5b:a3:e1:7a:6a:19:30:c9: 0e:1c:63:3c:b2:17:e3:6a:31:af:16:cd:ae:df:46:ff:23:02: 1c:3f:9b:70:14:43:3a:05:79:69:26:23:51:dc:34:f1:8f:08: d4:07:dc:12:a6:2b:01:32:36:dc:a8:a6:da:3c:01:cd:63:85: 50:47:de:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TvqPL5720wMbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxNVoXDTI1MDczMDE3MDkxNVowLzEtMCsGA1UEAxMk OGFkYWFjNDUtNDMxNS00NWU2LWI1OTAtNDk3ZTAzYzI4OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodfkErOSwYeZalhgAX15hXM03fYgHxPzTcdz 6OZxkhmyy/Pzr0UgaW4Jjww1zaBKvrsSOjJomYSJlbRNqO9Ll+Zojf4a17D15FbE GZsc+oZQWx9Z70ygX5JgOSGmBsCIzn4Uf2kCUT7+qvNr8tK8rjM4qN5+FUZzqa/e O44a2H9kDgTk3vPrkAt2ty1BQDK4C3VTMHNy7GOzZORgv3+hHrDeQBuvhXipyudh KSzORmbr9jIi+YFIqlw2SkUgLfvZnk7k+s5xU5yznM14fmqoVQ2RTQF36glM7ojY QF0UpPDNlXYDfZI28Ys1RdttPqKMWSZLon03l/LwxUcxyl3xgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnVoChhSFPwbLTBizmE8Y8W6lvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjlmYjY1NTMtNzc3MS0z M2U3LTk1ZTAtY2NlMTI2NmUzZWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIak/NiKW3paVf5Id1Icf/kA6IIx1qPhDB80OS2liOHR/jVTafWMumPF eu+uGe7BkbAPBfT8OuGvcYR0PJJHOcwSKqWOfcdFCdZ19TLW8QN1u+wBoUtw2Vr0 CK5cQdU2mbNyvh5i//+NOd2Vk0O7hqi1ece8pvUXlUctOfPzbEC2jQH5LXcHOiHM gW5z3xli3K2wvt0GNwZcRsUZgPfzjIvou32ZnNpkyVD/FIx6+z0esKdxEhvsXuli duNh5Uxbo+F6ahkwyQ4cYzyyF+NqMa8Wza7fRv8jAhw/m3AUQzoFeWkmI1HcNPGP CNQH3BKmKwEyNtyopto8Ac1jhVBH3mQ= -----END CERTIFICATE-----Generated at Sun May 11 10:30:05 2025 by rpki-client