$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc066abe-fb8b-3ad7-a8ce-2e2da1d79e71.roa File: cc066abe-fb8b-3ad7-a8ce-2e2da1d79e71.roa (raw, json) Hash identifier: as4707HXjyKD397FXJT7s+sSCvFYvT/uLIdqcHsPKQo= Subject key identifier: 72:37:B4:37:53:B9:B3:B4:D3:44:53:17:95:32:DD:95:EE:31:2E:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FCFF5D07BFA6A2A122FDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc066abe-fb8b-3ad7-a8ce-2e2da1d79e71.roa Signing time: Thu 01 May 2025 17:24:54 +0000 ROA not before: Thu 01 May 2025 17:24:54 +0000 ROA not after: Wed 30 Jul 2025 17:24:54 +0000 asID: 22773 IP address blocks: 68.8.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fc:ff:5d:07:bf:a6:a2:a1:22:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:24:54 2025 GMT Not After : Jul 30 17:24:54 2025 GMT Subject: CN=36d38e96-8f1b-4307-88ba-a81076158349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2a:c9:9d:03:67:9c:da:ef:f2:5c:49:85:f4: 27:c9:ec:e6:35:2c:9e:8b:af:3b:ef:19:ea:56:41: c7:b2:c0:9e:75:01:de:88:7b:c5:23:f8:90:47:b3: c1:98:33:05:ba:4c:9e:66:61:3b:59:33:c1:dd:8b: 16:65:4d:8b:a8:99:49:2f:61:37:ed:fe:bf:aa:72: 41:d8:70:34:c6:c4:0e:d8:df:25:82:64:03:a7:d2: 04:d3:a4:6a:f0:4a:01:1e:e3:80:ef:03:93:aa:d3: 3d:02:0b:ab:d3:ef:4a:e9:ba:1f:22:05:d0:fa:c1: c8:22:0a:98:56:89:e3:18:76:76:6a:8b:63:54:71: 88:c2:63:35:58:4b:10:e5:c6:21:6c:97:58:cc:ef: 01:55:e3:07:03:4e:6c:3a:f9:4d:b9:99:d4:dd:f0: 31:be:e9:1a:37:c3:db:3e:13:a5:30:3d:95:83:e3: 30:3a:84:ce:fc:e2:e9:97:bd:cf:80:cb:c1:bb:3e: d6:51:ba:01:08:43:bd:a6:fa:a1:9f:e6:3e:54:f9: 15:a8:cb:3c:bc:a5:8a:e4:a9:28:65:e3:ad:7f:72: 0f:24:06:a5:1b:a3:48:a2:1d:0a:f6:25:b4:e6:32: 8f:ff:04:4a:a6:af:92:c6:cb:39:3c:d2:c4:de:b5: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:B4:37:53:B9:B3:B4:D3:44:53:17:95:32:DD:95:EE:31:2E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc066abe-fb8b-3ad7-a8ce-2e2da1d79e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.8.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:61:e3:0d:36:b8:0d:91:aa:95:df:8c:06:94:fe:d0:e7:8a: 97:52:28:23:f4:45:6c:16:4b:ba:e1:f7:36:c3:71:d9:f7:18: 78:c8:51:29:49:1f:64:87:71:eb:d3:e7:4b:5a:3a:6b:23:2d: 11:bd:6c:9f:d5:86:e6:96:2b:78:0c:89:33:ac:6a:33:c0:d2: dc:1e:92:fb:45:7b:f0:f5:0b:ed:30:f9:b1:c7:ba:0d:21:91: ac:54:2d:b1:d1:cb:3c:f5:cc:12:25:71:f3:14:41:8c:95:fa: 62:92:51:2d:0b:0b:8e:32:cd:7a:44:f0:40:23:f1:65:00:1d: 71:66:12:80:85:86:cb:b6:7b:82:7b:66:16:82:f1:5b:3c:8a: aa:4e:b6:a6:47:9f:85:d2:67:ba:23:db:2c:24:80:7d:54:98: 59:51:77:cc:d2:a7:b5:24:bc:09:fb:69:df:7a:10:a0:14:ea: ad:06:ed:94:f2:b0:68:3f:d5:ec:dd:a5:51:9d:28:25:87:b5: 40:cf:45:f2:77:79:76:44:a1:b7:69:a2:52:a8:49:17:8d:80: 57:3c:d0:03:83:63:d3:08:72:15:f2:95:1c:87:97:38:85:b0: 8a:30:d8:02:14:24:6f:cb:1d:35:2c:ee:de:5c:26:14:63:61: 82:15:fe:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/P9dB7+moqEi/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjQ1NFoXDTI1MDczMDE3MjQ1NFowLzEtMCsGA1UEAxMk MzZkMzhlOTYtOGYxYi00MzA3LTg4YmEtYTgxMDc2MTU4MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnirJnQNnnNrv8lxJhfQnyezmNSyei6877xnq VkHHssCedQHeiHvFI/iQR7PBmDMFukyeZmE7WTPB3YsWZU2LqJlJL2E37f6/qnJB 2HA0xsQO2N8lgmQDp9IE06Rq8EoBHuOA7wOTqtM9Agur0+9K6bofIgXQ+sHIIgqY VonjGHZ2aotjVHGIwmM1WEsQ5cYhbJdYzO8BVeMHA05sOvlNuZnU3fAxvukaN8Pb PhOlMD2Vg+MwOoTO/OLpl73PgMvBuz7WUboBCEO9pvqhn+Y+VPkVqMs8vKWK5Kko ZeOtf3IPJAalG6NIoh0K9iW05jKP/wRKpq+Sxss5PNLE3rUAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI3tDdTubO000RTF5Uy3ZXuMS4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2MwNjZhYmUtZmI4Yi0z YWQ3LWE4Y2UtMmUyZGExZDc5ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1h4w02uA2RqpXfjAaU/tDnipdSKCP0RWwWS7rh9zbDcdn3GHjIUSlJ H2SHcevT50taOmsjLRG9bJ/VhuaWK3gMiTOsajPA0twekvtFe/D1C+0w+bHHug0h kaxULbHRyzz1zBIlcfMUQYyV+mKSUS0LC44yzXpE8EAj8WUAHXFmEoCFhsu2e4J7 ZhaC8Vs8iqpOtqZHn4XSZ7oj2ywkgH1UmFlRd8zSp7UkvAn7ad96EKAU6q0G7ZTy sGg/1ezdpVGdKCWHtUDPRfJ3eXZEobdpolKoSReNgFc80AODY9MIchXylRyHlziF sIow2AIUJG/LHTUs7t5cJhRjYYIV/qA= -----END CERTIFICATE-----Generated at Sat May 10 21:03:51 2025 by rpki-client