$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa File: cd693e18-ca78-3fa2-a261-73751fa32b45.roa (raw, json) Hash identifier: jUSff5sqvN5tLZgs+c4b1KXG40ypp/wwgloA0jsVMIE= Subject key identifier: 46:E4:13:9A:4F:11:40:63:CB:E5:7C:61:AE:93:76:34:41:E3:96:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F518B1FA73CC5410F4DAE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa Signing time: Thu 01 May 2025 17:08:59 +0000 ROA not before: Thu 01 May 2025 17:08:59 +0000 ROA not after: Wed 30 Jul 2025 17:08:59 +0000 asID: 22773 IP address blocks: 68.9.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:18:b1:fa:73:cc:54:10:f4:da:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:08:59 2025 GMT Not After : Jul 30 17:08:59 2025 GMT Subject: CN=d2b232ae-e633-4c81-a357-a6e3aec77be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:f5:ae:38:2b:20:c9:2a:8a:ed:35:d7:f6: 9f:53:a5:da:fb:70:e4:b1:be:2d:67:47:fd:e9:56: 7a:13:fa:bf:d5:ae:a3:56:fd:7e:75:c3:11:7b:26: 61:1f:5d:cb:55:b0:3d:d1:9c:76:4e:ca:ae:b4:42: b7:25:3f:4d:b2:27:e6:72:c9:a3:55:00:c0:5b:7e: 2a:ab:50:42:1e:ee:3d:e1:7e:5c:d1:02:c2:0a:78: 1b:48:1b:a9:53:72:a3:e9:90:44:f8:15:5c:d7:2d: 7e:9c:6c:c3:5f:ae:33:82:69:7e:70:6b:e8:f3:31: cf:b1:9d:05:d7:4f:a5:a2:b6:5a:37:c0:0c:bc:0a: 2b:24:36:e9:50:a2:1d:ef:6d:6d:1a:55:f3:bf:df: 80:5c:d5:2e:09:c4:e3:73:df:74:94:25:44:66:a8: 82:76:74:bc:5e:bb:5c:15:5e:b1:22:d6:c2:94:46: 3f:e5:63:b0:9c:f2:0b:8f:e7:c6:a0:b7:d7:5c:16: 58:88:0a:24:0a:c9:05:78:51:8f:d7:ad:a5:e4:3f: 98:c8:7b:c6:2f:61:cb:28:df:90:17:62:39:51:39: 6d:a5:a8:27:7a:dc:61:16:34:16:e7:dd:45:b7:c7: e9:d5:0a:67:50:61:9e:0e:35:12:e5:a3:10:ea:72: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E4:13:9A:4F:11:40:63:CB:E5:7C:61:AE:93:76:34:41:E3:96:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd693e18-ca78-3fa2-a261-73751fa32b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:db:ce:9b:d8:8e:41:c7:05:60:ca:8d:9a:89:93:9b:2f:2a: 07:81:cf:d1:25:ff:b1:1b:61:79:d3:53:5d:30:06:29:f7:9c: 11:ec:4a:38:1a:89:f8:63:43:55:c7:21:c9:15:95:8d:fd:a0: de:71:fa:fc:e7:87:55:67:6f:ec:20:22:5f:a6:bd:ef:2b:56: fe:2c:5e:c0:a8:57:ce:9b:43:06:bb:2f:c8:04:e2:06:70:e7: 8c:5d:09:24:83:d0:35:95:83:d6:82:cd:28:87:2d:65:cb:6d: ac:f4:8c:88:cc:19:d9:1c:8c:ae:76:6e:11:cd:1c:95:f5:dc: 47:6d:03:13:93:4d:5c:6b:56:44:70:70:d2:f2:b4:b4:21:fd: d6:c0:6b:48:54:a9:66:34:54:a0:61:5d:a7:5c:3f:67:df:90: ca:c9:6d:71:f4:04:ff:b6:96:28:f7:2f:3f:a4:62:24:68:16: c2:31:74:c6:4e:c1:f9:75:0a:7b:48:8c:c0:ac:ef:9c:e2:fc: 48:5e:d4:12:4d:b7:5a:ed:5a:8d:5c:8c:cc:8e:65:82:cf:65: f6:e9:55:d1:57:c6:17:d3:1a:ca:94:db:ba:e5:0a:f7:d4:65: 98:7b:0d:7a:e5:9a:91:8a:e7:d2:7d:52:ee:6b:18:f7:0e:a1: 25:99:ca:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Rix+nPMVBD02uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDg1OVoXDTI1MDczMDE3MDg1OVowLzEtMCsGA1UEAxMk ZDJiMjMyYWUtZTYzMy00YzgxLWEzNTctYTZlM2FlYzc3YmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6n1rjgrIMkqiu011/afU6Xa+3Dksb4tZ0f9 6VZ6E/q/1a6jVv1+dcMReyZhH13LVbA90Zx2TsqutEK3JT9NsifmcsmjVQDAW34q q1BCHu494X5c0QLCCngbSBupU3Kj6ZBE+BVc1y1+nGzDX64zgml+cGvo8zHPsZ0F 10+lorZaN8AMvAorJDbpUKId721tGlXzv9+AXNUuCcTjc990lCVEZqiCdnS8Xrtc FV6xItbClEY/5WOwnPILj+fGoLfXXBZYiAokCskFeFGP162l5D+YyHvGL2HLKN+Q F2I5UTltpagnetxhFjQW591Ft8fp1QpnUGGeDjUS5aMQ6nLqxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbkE5pPEUBjy+V8Ya6TdjRB45ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q2OTNlMTgtY2E3OC0z ZmEyLWEyNjEtNzM3NTFmYTMyYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfbzpvYjkHHBWDKjZqJk5svKgeBz9El/7EbYXnTU10wBin3nBHsSjga ifhjQ1XHIckVlY39oN5x+vznh1Vnb+wgIl+mve8rVv4sXsCoV86bQwa7L8gE4gZw 54xdCSSD0DWVg9aCzSiHLWXLbaz0jIjMGdkcjK52bhHNHJX13EdtAxOTTVxrVkRw cNLytLQh/dbAa0hUqWY0VKBhXadcP2ffkMrJbXH0BP+2lij3Lz+kYiRoFsIxdMZO wfl1CntIjMCs75zi/Ehe1BJNt1rtWo1cjMyOZYLPZfbpVdFXxhfTGsqU27rlCvfU ZZh7DXrlmpGK59J9Uu5rGPcOoSWZylQ= -----END CERTIFICATE-----Generated at Fri May 9 05:33:45 2025 by rpki-client