$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c369ee30-c31f-37f1-ac46-4bda286d4dd6.roa File: c369ee30-c31f-37f1-ac46-4bda286d4dd6.roa (raw, json) Hash identifier: xPIVfrDR4J+iYgnxhRUoWV+tYfElGRILJhZIoyZ3C3c= Subject key identifier: 02:9C:DA:C0:0B:01:2E:1F:40:3E:1D:57:DE:F7:4B:5E:87:D0:5B:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F528171162591E4CB651C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c369ee30-c31f-37f1-ac46-4bda286d4dd6.roa Signing time: Thu 01 May 2025 17:09:06 +0000 ROA not before: Thu 01 May 2025 17:09:06 +0000 ROA not after: Wed 30 Jul 2025 17:09:06 +0000 asID: 22773 IP address blocks: 68.9.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:28:17:11:62:59:1e:4c:b6:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:06 2025 GMT Not After : Jul 30 17:09:06 2025 GMT Subject: CN=72dbfecc-ac12-49cd-b104-7645ae746e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6d:f6:d9:8a:56:9a:ed:5d:c5:e6:17:7a:32: 1b:be:10:a0:fd:d5:61:93:66:ee:88:d8:e0:f8:98: d0:68:f1:a4:3c:cf:ab:f1:83:16:da:8c:b7:02:d3: a3:0c:8f:83:05:13:f7:1c:4f:fa:6f:f2:b7:d7:07: 90:e2:a6:bc:a9:01:a7:58:73:93:c9:5f:0b:b2:3c: e6:ed:c2:97:d9:ce:7c:9a:42:91:dd:14:00:bc:c3: ef:ff:f8:36:50:1a:21:de:13:c9:fc:55:77:54:2d: 25:33:fa:f5:bf:09:43:51:0c:d4:07:a6:0b:37:3f: 4f:61:45:8a:6c:9c:4d:25:cd:49:df:1c:31:4c:16: 8b:f8:09:b4:f5:8a:bc:31:08:a2:90:f4:f9:c1:69: bf:da:6e:1b:fc:df:cc:60:50:bd:49:9c:2d:ee:b3: a0:9d:84:90:cc:ff:3a:b3:58:21:ef:0b:6c:46:3a: fd:08:a3:ae:97:b3:da:8b:40:eb:38:7e:8a:2b:1a: 3a:00:b7:1d:17:3b:ad:cf:00:80:5e:54:91:48:e5: 42:69:f0:3a:55:20:ce:f8:84:45:b7:5c:ac:1b:df: 74:41:36:e4:57:2a:7e:73:6c:29:50:b1:05:5a:a7: a1:b7:32:54:1e:82:ef:ac:cb:a6:89:62:43:e3:dd: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:DA:C0:0B:01:2E:1F:40:3E:1D:57:DE:F7:4B:5E:87:D0:5B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c369ee30-c31f-37f1-ac46-4bda286d4dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:db:60:55:4a:c7:fb:ce:cc:7c:98:c7:0f:64:cd:61:33: 49:20:c3:12:ba:5a:a0:44:ab:28:76:90:fb:17:66:db:2e:97: ba:9e:dc:4c:ac:18:d1:bd:84:38:4d:2f:e1:3c:d8:a3:ef:ae: 4e:8d:ea:8f:a2:8f:75:a2:27:55:b7:ba:37:da:11:6b:c6:85: 7f:09:1e:bc:f2:52:85:bf:f3:78:b2:1a:03:87:dc:46:0f:7f: 18:e9:d0:d2:ba:7b:3f:b0:7b:a5:45:e2:89:a9:47:30:83:57: c2:09:19:a3:d1:89:7d:c3:0f:2a:d7:e1:40:ca:df:95:62:a1: e7:6b:6b:cf:24:bf:90:8b:93:35:27:a2:05:02:f6:63:4f:28: 3c:e4:d4:eb:eb:b5:ea:79:ef:70:aa:e8:cb:70:2f:5c:87:fa: eb:d9:10:54:91:c7:44:a7:da:bb:13:27:81:0e:f7:79:29:90: 72:db:01:a6:9a:71:cd:1f:86:2e:71:6e:64:52:c0:d0:1c:ee: f2:dd:8d:98:65:bc:24:52:75:68:64:30:5a:8d:10:17:c3:aa: ca:5d:6b:37:8e:b9:66:5d:97:0b:99:d7:d3:cc:2d:fa:b6:11: a4:92:6a:8a:e9:e0:81:c3:df:2b:50:2d:58:68:ab:fc:88:e3: ab:2f:ee:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19SgXEWJZHky2UcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkwNloXDTI1MDczMDE3MDkwNlowLzEtMCsGA1UEAxMk NzJkYmZlY2MtYWMxMi00OWNkLWIxMDQtNzY0NWFlNzQ2ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim322YpWmu1dxeYXejIbvhCg/dVhk2buiNjg +JjQaPGkPM+r8YMW2oy3AtOjDI+DBRP3HE/6b/K31weQ4qa8qQGnWHOTyV8Lsjzm 7cKX2c58mkKR3RQAvMPv//g2UBoh3hPJ/FV3VC0lM/r1vwlDUQzUB6YLNz9PYUWK bJxNJc1J3xwxTBaL+Am09Yq8MQiikPT5wWm/2m4b/N/MYFC9SZwt7rOgnYSQzP86 s1gh7wtsRjr9CKOul7Pai0DrOH6KKxo6ALcdFzutzwCAXlSRSOVCafA6VSDO+IRF t1ysG990QTbkVyp+c2wpULEFWqehtzJUHoLvrMumiWJD492V+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKc2sALAS4fQD4dV973S16H0Fs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzM2OWVlMzAtYzMxZi0z N2YxLWFjNDYtNGJkYTI4NmQ0ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwn22BVSsf7zsx8mMcPZM1hM0kgwxK6WqBEqyh2kPsXZtsul7qe3Eys GNG9hDhNL+E82KPvrk6N6o+ij3WiJ1W3ujfaEWvGhX8JHrzyUoW/83iyGgOH3EYP fxjp0NK6ez+we6VF4ompRzCDV8IJGaPRiX3DDyrX4UDK35Vioedra88kv5CLkzUn ogUC9mNPKDzk1Ovrtep573Cq6MtwL1yH+uvZEFSRx0Sn2rsTJ4EO93kpkHLbAaaa cc0fhi5xbmRSwNAc7vLdjZhlvCRSdWhkMFqNEBfDqspdazeOuWZdlwuZ19PMLfq2 EaSSaorp4IHD3ytQLVhoq/yI46sv7m0= -----END CERTIFICATE-----Generated at Sun May 11 13:25:38 2025 by rpki-client