$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa File: cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa (raw, json) Hash identifier: wi+hbNhdOMtRVCnW37p1oBRnne9NDrfsUZvMi0R7YV0= Subject key identifier: 3B:21:2C:C8:6D:4F:8F:A9:AD:BC:E6:7A:8B:04:08:BC:E2:22:D4:AD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F54341AD5A1C4134155800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa Signing time: Thu 01 May 2025 17:09:19 +0000 ROA not before: Thu 01 May 2025 17:09:19 +0000 ROA not after: Wed 30 Jul 2025 17:09:19 +0000 asID: 22773 IP address blocks: 68.14.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:43:41:ad:5a:1c:41:34:15:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:19 2025 GMT Not After : Jul 30 17:09:19 2025 GMT Subject: CN=8e6565c4-f26a-4987-af86-3debd7e57492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:ba:5d:d3:91:06:6b:9f:7b:bc:56:fe:91: 67:46:10:b2:fb:ec:06:1e:47:94:89:ba:54:c4:36: 23:d2:30:e0:3f:86:cd:1f:d0:36:63:e9:c6:0a:1c: e4:49:6b:b5:65:53:fc:e7:30:01:d3:0f:c3:2d:a8: df:d9:50:77:e6:65:fe:c4:21:42:f8:86:55:d0:9f: 04:d8:0e:50:6f:3e:e5:4f:5e:36:42:5a:3a:1d:ef: 85:84:09:6f:d2:97:29:0c:d9:06:7d:d9:cc:5a:2b: 97:eb:ac:de:5d:94:d3:8e:81:a5:f7:15:1b:d8:13: 22:9e:d4:13:b4:65:5e:2f:19:2f:23:66:0f:a4:c7: 5c:b8:68:7b:6f:b0:9a:df:ac:f4:be:1f:0f:32:f4: 2f:a8:18:c5:c4:f5:84:a7:36:8d:42:9d:77:a6:c9: fc:d2:cf:db:ac:90:0d:53:05:dc:3e:cf:2f:92:35: 4c:46:0b:0a:e9:59:86:19:6b:89:1b:50:0d:33:8a: 11:43:fd:ed:cb:b0:db:b1:d8:fa:66:f2:08:58:e0: 9f:93:47:01:2a:00:eb:60:d4:60:e3:94:93:53:23: 26:a0:b9:19:6a:8f:f5:db:cd:6f:83:29:c2:37:c9: 1d:0f:22:fd:c4:aa:af:26:54:2c:c2:5e:09:c7:00: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:21:2C:C8:6D:4F:8F:A9:AD:BC:E6:7A:8B:04:08:BC:E2:22:D4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd7ea8d2-8ba9-32ea-a311-6bb1205f3e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:9b:96:72:fe:11:77:a7:84:6b:fe:24:24:2d:cd:5b:3e:14: 0b:af:85:36:13:78:0f:9c:f8:ab:d9:6c:bd:f7:d9:5b:b2:0a: d0:53:2b:c1:f5:e3:d0:6b:70:29:8f:8e:17:fa:b7:78:e9:e3: 07:e5:76:ec:d8:08:4e:75:84:2a:20:4c:b5:b2:a6:84:b0:7f: 92:c5:8b:72:3a:5f:7a:ae:3b:ee:ae:dd:eb:02:b7:17:72:93: ee:9c:ea:83:b4:0a:05:84:a4:b0:47:a2:dd:88:36:e6:05:64: d9:f6:80:b5:83:61:05:9a:72:af:da:26:11:7c:7e:5c:3f:84: 77:2e:c2:8e:1d:bc:35:cd:ac:01:75:85:38:a9:b3:ce:fa:23: b7:b3:c5:7a:22:26:eb:7c:fd:42:63:9a:06:ec:92:f9:8a:06: bd:8e:d5:60:03:cd:3c:14:12:ca:a9:f6:4a:0e:44:6c:2b:8f: ee:7b:7c:be:8b:e1:45:20:26:6a:62:ba:08:7f:7f:76:e8:f9: bf:5d:a1:4f:73:28:c7:e1:2f:56:b2:57:e3:8d:7f:8d:b5:b9: 04:e0:72:55:2e:0b:34:8e:ca:8a:7d:b3:8c:54:1a:70:b1:dd: 42:f2:d8:4b:67:20:d4:fd:d3:fa:f3:ce:a0:e4:b9:40:55:03: 26:1d:7d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19UNBrVocQTQVWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxOVoXDTI1MDczMDE3MDkxOVowLzEtMCsGA1UEAxMk OGU2NTY1YzQtZjI2YS00OTg3LWFmODYtM2RlYmQ3ZTU3NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm266XdORBmufe7xW/pFnRhCy++wGHkeUibpU xDYj0jDgP4bNH9A2Y+nGChzkSWu1ZVP85zAB0w/DLajf2VB35mX+xCFC+IZV0J8E 2A5Qbz7lT142Qlo6He+FhAlv0pcpDNkGfdnMWiuX66zeXZTTjoGl9xUb2BMintQT tGVeLxkvI2YPpMdcuGh7b7Ca36z0vh8PMvQvqBjFxPWEpzaNQp13psn80s/brJAN UwXcPs8vkjVMRgsK6VmGGWuJG1ANM4oRQ/3ty7Dbsdj6ZvIIWOCfk0cBKgDrYNRg 45STUyMmoLkZao/1281vgynCN8kdDyL9xKqvJlQswl4JxwDCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDshLMhtT4+prbzmeosECLziItStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q3ZWE4ZDItOGJhOS0z MmVhLWEzMTEtNmJiMTIwNWYzZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGublnL+EXenhGv+JCQtzVs+FAuvhTYTeA+c+KvZbL332VuyCtBTK8H1 49BrcCmPjhf6t3jp4wflduzYCE51hCogTLWypoSwf5LFi3I6X3quO+6u3esCtxdy k+6c6oO0CgWEpLBHot2INuYFZNn2gLWDYQWacq/aJhF8flw/hHcuwo4dvDXNrAF1 hTips876I7ezxXoiJut8/UJjmgbskvmKBr2O1WADzTwUEsqp9koORGwrj+57fL6L 4UUgJmpiugh/f3bo+b9doU9zKMfhL1ayV+ONf421uQTgclUuCzSOyop9s4xUGnCx 3ULy2EtnINT90/rzzqDkuUBVAyYdfVM= -----END CERTIFICATE-----Generated at Sun May 11 15:32:37 2025 by rpki-client