$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa File: bdd4e746-d368-3608-bacd-93678159c58f.roa (raw, json) Hash identifier: /+ClkYA7NdCV7JOJwguS5zlMnhMN3iwGndYSNGIN38c= Subject key identifier: 4C:63:CF:B1:A5:9C:C2:61:EB:9E:E5:82:BB:D1:EC:EE:2D:89:3E:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F536AB7763267CB6F91C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa Signing time: Thu 01 May 2025 17:09:13 +0000 ROA not before: Thu 01 May 2025 17:09:13 +0000 ROA not after: Wed 30 Jul 2025 17:09:13 +0000 asID: 22773 IP address blocks: 68.14.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:36:ab:77:63:26:7c:b6:f9:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:13 2025 GMT Not After : Jul 30 17:09:13 2025 GMT Subject: CN=20a375f8-e865-48c8-b1a9-ed4ba155d2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:f9:44:20:3c:39:ce:ba:c5:33:20:64:30: a0:22:08:2c:93:69:bf:5e:ad:c1:5b:63:e7:1d:31: 5c:2c:f9:fa:e9:84:a2:fb:c0:56:9a:a3:1f:e7:55: 64:bd:16:df:06:88:50:48:12:63:53:1c:49:a9:ae: 1a:24:39:85:54:98:c5:df:18:8b:79:7f:3d:1c:5e: 2a:d2:da:7f:1b:7c:5e:70:bd:7c:78:98:a6:8b:ba: c5:fd:46:63:42:01:41:2a:ac:d0:10:b7:54:95:c1: 67:29:35:7d:24:5c:18:ea:b5:c7:e5:7f:f6:0f:43: c6:ce:69:19:0c:40:5f:17:f7:1a:15:bd:32:2b:ac: 16:c7:0a:44:33:35:92:35:af:12:8f:6f:e6:25:48: 12:67:d8:52:ae:0f:d4:54:bf:ca:12:03:4c:19:66: fa:e4:14:fd:bf:f3:e5:f1:1c:84:5c:7c:a4:1d:37: 1f:cf:63:3d:60:ba:f6:31:d9:3b:83:d5:04:cb:e1: 82:ca:b8:6e:d7:c1:0d:76:09:43:63:48:6e:45:0e: 43:2e:96:f5:6d:5d:19:01:20:52:d1:e5:34:02:7b: a7:71:d6:aa:7b:2a:1c:13:b5:ff:b1:17:fe:39:a6: ac:d9:80:11:d7:f8:f0:99:22:b4:81:4a:50:d7:e1: 64:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:63:CF:B1:A5:9C:C2:61:EB:9E:E5:82:BB:D1:EC:EE:2D:89:3E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f3:ad:df:c5:14:bd:16:5a:ba:6d:c5:27:4c:85:ba:d5:83: fe:19:36:a6:84:d2:f9:9b:e1:72:bf:a0:64:a4:cf:41:e1:bc: 52:6d:b2:a2:9b:1d:2e:15:71:4f:a3:13:83:51:1f:39:ce:16: 36:89:79:c4:b0:23:19:8c:14:fe:38:23:db:8b:a4:46:8f:80: 5f:4e:3b:a4:fe:99:5d:87:fe:a8:ef:7f:fa:bd:0b:f4:12:41: a5:ef:ae:da:75:ef:a3:5a:c0:4a:2e:b2:01:dd:f9:59:10:27: 6e:7c:54:a3:8b:57:1b:f1:e2:03:fd:bd:b7:93:44:ef:40:45: be:2c:5e:44:10:44:0f:6e:54:4a:98:94:05:7a:f0:92:8f:92: b8:ce:52:06:c6:4d:2f:72:f6:f8:50:94:5e:14:f6:9e:a6:3e: ce:5e:b4:4b:1e:83:3a:c5:a7:28:7b:f2:ff:54:c9:8c:65:cf: 9f:6d:2a:dd:26:0b:67:71:4a:35:a7:f5:fa:07:02:d7:c3:3a: 05:f9:1e:2a:d3:85:ef:91:d6:d0:a6:dc:84:a5:0d:e1:c1:91: 08:ee:96:92:97:53:3c:af:bb:60:41:40:7c:42:cb:4e:0e:5a: ab:49:a6:e7:10:73:36:63:db:59:ed:1b:f4:11:02:ce:28:d2: 7b:7f:3e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Tard2MmfLb5HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxM1oXDTI1MDczMDE3MDkxM1owLzEtMCsGA1UEAxMk MjBhMzc1ZjgtZTg2NS00OGM4LWIxYTktZWQ0YmExNTVkMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7j5RCA8Oc66xTMgZDCgIggsk2m/Xq3BW2Pn HTFcLPn66YSi+8BWmqMf51VkvRbfBohQSBJjUxxJqa4aJDmFVJjF3xiLeX89HF4q 0tp/G3xecL18eJimi7rF/UZjQgFBKqzQELdUlcFnKTV9JFwY6rXH5X/2D0PGzmkZ DEBfF/caFb0yK6wWxwpEMzWSNa8Sj2/mJUgSZ9hSrg/UVL/KEgNMGWb65BT9v/Pl 8RyEXHykHTcfz2M9YLr2Mdk7g9UEy+GCyrhu18ENdglDY0huRQ5DLpb1bV0ZASBS 0eU0AnuncdaqeyocE7X/sRf+Oaas2YAR1/jwmSK0gUpQ1+FkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExjz7GlnMJh657lgrvR7O4tiT7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmRkNGU3NDYtZDM2OC0z NjA4LWJhY2QtOTM2NzgxNTljNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArzrd/FFL0WWrptxSdMhbrVg/4ZNqaE0vmb4XK/oGSkz0HhvFJtsqKb HS4VcU+jE4NRHznOFjaJecSwIxmMFP44I9uLpEaPgF9OO6T+mV2H/qjvf/q9C/QS QaXvrtp176NawEousgHd+VkQJ258VKOLVxvx4gP9vbeTRO9ARb4sXkQQRA9uVEqY lAV68JKPkrjOUgbGTS9y9vhQlF4U9p6mPs5etEsegzrFpyh78v9UyYxlz59tKt0m C2dxSjWn9foHAtfDOgX5HirThe+R1tCm3ISlDeHBkQjulpKXUzyvu2BBQHxCy04O WqtJpucQczZj21ntG/QRAs4o0nt/Pq4= -----END CERTIFICATE-----Generated at Mon May 12 13:19:50 2025 by rpki-client