$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa File: c09009c5-923b-3b65-9c38-dc608e00a3d1.roa (raw, json) Hash identifier: ErvKaBsiwCz58tD7GI2ONacmpoRXboaV5SX60Tov/bM= Subject key identifier: 44:CE:97:2D:35:E3:A7:6F:EC:2E:3C:06:04:06:7C:C7:94:A0:53:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F550A565C304F51A042E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa Signing time: Thu 01 May 2025 17:09:25 +0000 ROA not before: Thu 01 May 2025 17:09:25 +0000 ROA not after: Wed 30 Jul 2025 17:09:25 +0000 asID: 22773 IP address blocks: 68.109.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:50:a5:65:c3:04:f5:1a:04:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:25 2025 GMT Not After : Jul 30 17:09:25 2025 GMT Subject: CN=948a9c73-64b4-4c07-8eba-7ec7532fa3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:6d:30:11:b1:14:fa:6d:a7:22:0d:0f:01: 9a:b2:9a:dd:1d:f7:a5:1c:ed:31:8b:3e:58:e2:17: 19:1c:6a:90:11:83:ba:9b:26:01:a2:68:64:7a:7a: 0f:df:d3:e1:24:c8:27:1c:81:ce:90:d6:53:0e:e5: 8f:d3:94:dd:69:e1:d2:28:4e:bc:47:94:8a:24:a5: ed:06:32:a8:5b:2f:97:2e:f1:7e:f6:3d:fc:70:89: ce:3e:ee:7e:6d:9c:61:06:a6:f7:db:b8:5c:59:c8: ef:87:cf:9b:cc:52:6c:5c:ee:82:b0:2a:cd:9c:0f: 2c:9d:5c:38:3f:d1:fd:84:6c:25:5e:ae:06:c1:af: ee:90:d2:79:94:93:b4:ce:34:7c:30:7f:74:b5:77: 24:33:97:05:bc:a9:38:e7:b0:22:d2:64:97:15:ba: 57:70:34:d6:54:9d:24:d6:f6:20:34:c0:55:3c:19: e0:ed:54:1a:bf:51:6a:1d:c2:97:8c:0a:79:1a:1b: 23:7b:2f:45:d5:d4:da:db:18:3c:f4:1d:a1:ac:bd: db:be:f4:cb:59:c0:fa:d7:9f:f3:b8:2d:5c:f9:6d: 07:25:b8:c2:b8:77:f6:a4:fb:a8:cc:a6:01:ab:76: fd:fb:4e:ee:30:a6:57:6d:77:ba:7a:16:ba:90:c6: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CE:97:2D:35:E3:A7:6F:EC:2E:3C:06:04:06:7C:C7:94:A0:53:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c09009c5-923b-3b65-9c38-dc608e00a3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3a:e3:3a:13:79:53:fa:ee:9d:3f:16:87:e4:49:f2:7a:e9: f4:36:04:f6:ae:0b:81:48:5c:b5:fe:53:6f:d3:5e:62:1e:8c: 60:e4:68:a5:5b:af:0e:3d:c7:ce:8f:44:7c:b5:1a:80:cd:a2: 43:65:6e:5d:e3:e1:a6:65:44:9b:c8:c0:b3:80:d6:e2:04:38: 52:2b:5c:0e:7f:be:ce:7c:9f:92:99:8a:55:d1:7f:72:a7:85: 3c:1e:9e:d6:e7:7d:f4:69:bc:f6:2c:32:f2:7a:be:a6:e7:38: 78:72:2b:55:7e:47:ba:ba:ae:b4:62:2a:c5:f2:6e:83:95:be: 22:79:6b:9a:88:59:5a:49:53:b1:41:d3:88:84:51:86:c4:fa: fb:f6:36:1d:41:6b:14:39:5b:a6:2e:3b:42:4e:93:aa:d1:e9: 7a:a1:30:5c:bc:55:54:7a:ff:98:c4:2a:dd:b8:43:f0:d4:6a: 05:21:2a:49:03:38:d8:2a:30:56:1c:73:ed:d9:d5:2b:e6:23: 28:88:37:d7:b6:fe:42:7d:70:47:4d:57:cd:b8:f9:13:4b:8b: af:e9:14:e8:73:72:42:1e:7b:e8:c9:f8:fd:30:39:c3:5d:c5: 48:87:8f:b2:02:87:e9:f4:43:bb:40:ee:e6:ea:4b:24:09:fc: b7:0e:5f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19VClZcME9RoELoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkyNVoXDTI1MDczMDE3MDkyNVowLzEtMCsGA1UEAxMk OTQ4YTljNzMtNjRiNC00YzA3LThlYmEtN2VjNzUzMmZhM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZRtMBGxFPptpyINDwGasprdHfelHO0xiz5Y 4hcZHGqQEYO6myYBomhkenoP39PhJMgnHIHOkNZTDuWP05TdaeHSKE68R5SKJKXt BjKoWy+XLvF+9j38cInOPu5+bZxhBqb327hcWcjvh8+bzFJsXO6CsCrNnA8snVw4 P9H9hGwlXq4Gwa/ukNJ5lJO0zjR8MH90tXckM5cFvKk457Ai0mSXFbpXcDTWVJ0k 1vYgNMBVPBng7VQav1FqHcKXjAp5Ghsjey9F1dTa2xg89B2hrL3bvvTLWcD615/z uC1c+W0HJbjCuHf2pPuozKYBq3b9+07uMKZXbXe6eha6kMauHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETOly0146dv7C48BgQGfMeUoFOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzA5MDA5YzUtOTIzYi0z YjY1LTljMzgtZGM2MDhlMDBhM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRG0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs64zoTeVP67p0/FofkSfJ66fQ2BPauC4FIXLX+U2/TXmIejGDkaKVb rw49x86PRHy1GoDNokNlbl3j4aZlRJvIwLOA1uIEOFIrXA5/vs58n5KZilXRf3Kn hTwentbnffRpvPYsMvJ6vqbnOHhyK1V+R7q6rrRiKsXyboOVviJ5a5qIWVpJU7FB 04iEUYbE+vv2Nh1BaxQ5W6YuO0JOk6rR6XqhMFy8VVR6/5jEKt24Q/DUagUhKkkD ONgqMFYcc+3Z1SvmIyiIN9e2/kJ9cEdNV824+RNLi6/pFOhzckIee+jJ+P0wOcNd xUiHj7ICh+n0Q7tA7ubqSyQJ/LcOX9o= -----END CERTIFICATE-----Generated at Sat May 10 19:35:40 2025 by rpki-client