$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc34181c-cc0c-3ca2-9545-e2dbdf223dc3.roa File: bc34181c-cc0c-3ca2-9545-e2dbdf223dc3.roa (raw, json) Hash identifier: D7+G6pj01X/+Zr1VgP6RAZsaxToflCAniqws9LjBBjI= Subject key identifier: C9:F9:05:9D:87:56:D2:59:CF:9C:88:0A:A7:67:B5:54:2D:87:BF:F8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F56C99249C7213EB76E480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc34181c-cc0c-3ca2-9545-e2dbdf223dc3.roa Signing time: Thu 01 May 2025 17:09:38 +0000 ROA not before: Thu 01 May 2025 17:09:38 +0000 ROA not after: Wed 30 Jul 2025 17:09:38 +0000 asID: 22773 IP address blocks: 68.229.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:6c:99:24:9c:72:13:eb:76:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:38 2025 GMT Not After : Jul 30 17:09:38 2025 GMT Subject: CN=160c1393-15b6-4c53-bce9-fe6cbcbd9f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:27:3b:13:9f:59:b5:71:37:eb:a1:25:22: 5b:c3:40:c1:27:28:7b:12:5d:22:0b:a8:a2:e9:89: c6:d0:30:96:2d:27:3b:e1:ef:55:93:05:8c:7b:55: 9d:b1:99:29:dc:5b:eb:25:8e:f4:4f:f7:47:1f:0d: f0:3b:07:be:3d:2f:c3:bb:0b:0f:6f:97:3d:2c:ef: 97:1a:8c:58:43:24:aa:11:ca:90:00:55:51:99:af: 38:3d:a2:4d:08:05:c8:dc:ec:98:61:82:86:6a:1a: 8b:c9:91:b2:59:62:cb:7c:22:f5:3a:af:a8:f6:02: 50:91:d1:59:9a:bc:4b:c5:bf:12:5b:3f:f8:f8:97: a9:ec:a1:16:69:3a:a3:20:8d:c0:de:b7:4e:84:91: 94:ec:3a:50:f8:3b:79:54:b4:a0:65:03:7f:c5:42: e4:4d:e1:52:fc:18:43:e6:fa:45:a9:31:22:bc:e9: 6f:a0:cd:0a:3a:60:87:a0:cb:3d:bc:05:77:c1:70: be:6c:96:27:7d:a8:28:39:f9:ed:69:98:2d:bf:06: c3:66:d1:91:eb:13:4c:55:a3:9f:57:19:da:14:31: a3:cb:c8:35:99:37:2b:31:bf:39:11:b5:df:a1:06: 48:c7:b1:ba:f0:93:94:be:4b:3e:b6:d6:cb:e7:c1: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F9:05:9D:87:56:D2:59:CF:9C:88:0A:A7:67:B5:54:2D:87:BF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bc34181c-cc0c-3ca2-9545-e2dbdf223dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:23:d5:80:7b:03:17:b1:ac:9b:14:c3:3e:08:89:25:bf: 07:3c:d8:42:9f:91:aa:13:93:5b:eb:6d:9e:a4:27:67:43:46: 8d:46:a9:bc:f7:a8:40:31:09:ca:53:31:02:c7:74:d3:71:f9: 04:bf:1d:db:49:bb:ce:62:1d:56:e3:6c:50:d2:02:47:47:29: be:46:bd:34:b8:07:c7:8a:7a:31:73:cb:ae:b4:b0:1c:4e:eb: dd:2a:ab:45:4b:c2:25:2e:6d:25:7c:49:17:2a:13:49:00:2e: f5:80:4e:80:2e:15:2a:b6:c3:c6:2f:46:0c:8d:41:27:c5:50: 5e:05:36:33:b8:ae:4b:fa:5e:e5:fa:39:10:50:51:d4:e5:e3: 68:3f:ed:ad:04:ae:f2:36:c5:46:8d:0c:11:47:0c:c1:7a:04: 2a:10:d9:e1:6e:e5:80:81:3c:a0:a9:69:2e:6e:08:b5:13:7e: 31:0e:8e:ca:ae:84:b7:32:d2:02:e0:2c:37:f3:0b:a2:ab:e7: c5:36:b9:2d:ea:85:8a:6c:82:b2:8b:b0:49:96:ad:42:f1:72: dc:b5:e8:d6:b5:3d:41:de:a1:84:65:9b:29:14:38:9a:b3:23: c0:05:6b:e5:31:51:58:19:e9:df:ad:4f:62:7c:82:00:b5:d6: 66:f2:ed:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19WyZJJxyE+t25IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkzOFoXDTI1MDczMDE3MDkzOFowLzEtMCsGA1UEAxMk MTYwYzEzOTMtMTViNi00YzUzLWJjZTktZmU2Y2JjYmQ5ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy4nOxOfWbVxN+uhJSJbw0DBJyh7El0iC6ii 6YnG0DCWLSc74e9VkwWMe1WdsZkp3FvrJY70T/dHHw3wOwe+PS/DuwsPb5c9LO+X GoxYQySqEcqQAFVRma84PaJNCAXI3OyYYYKGahqLyZGyWWLLfCL1Oq+o9gJQkdFZ mrxLxb8SWz/4+Jep7KEWaTqjII3A3rdOhJGU7DpQ+Dt5VLSgZQN/xULkTeFS/BhD 5vpFqTEivOlvoM0KOmCHoMs9vAV3wXC+bJYnfagoOfntaZgtvwbDZtGR6xNMVaOf VxnaFDGjy8g1mTcrMb85EbXfoQZIx7G68JOUvks+ttbL58EtjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMn5BZ2HVtJZz5yICqdntVQth7/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmMzNDE4MWMtY2MwYy0z Y2EyLTk1NDUtZTJkYmRmMjIzZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmJI9WAewMXsaybFMM+CIklvwc82EKfkaoTk1vrbZ6kJ2dDRo1Gqbz3 qEAxCcpTMQLHdNNx+QS/HdtJu85iHVbjbFDSAkdHKb5GvTS4B8eKejFzy660sBxO 690qq0VLwiUubSV8SRcqE0kALvWAToAuFSq2w8YvRgyNQSfFUF4FNjO4rkv6XuX6 ORBQUdTl42g/7a0ErvI2xUaNDBFHDMF6BCoQ2eFu5YCBPKCpaS5uCLUTfjEOjsqu hLcy0gLgLDfzC6Kr58U2uS3qhYpsgrKLsEmWrULxcty16Na1PUHeoYRlmykUOJqz I8AFa+UxUVgZ6d+tT2J8ggC11mby7fM= -----END CERTIFICATE-----Generated at Sun May 11 14:53:26 2025 by rpki-client