$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d66746a6-63d3-3171-a598-9c617194de89.roa File: d66746a6-63d3-3171-a598-9c617194de89.roa (raw, json) Hash identifier: DkgX2IbQStfeKo21mz9IlG3M74ED504I+262vwiqHkI= Subject key identifier: 34:A9:D3:AD:A3:1E:24:66:A5:E7:DB:AD:75:31:1E:BD:7F:24:4C:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD2B412656931574161F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d66746a6-63d3-3171-a598-9c617194de89.roa Signing time: Thu 01 May 2025 17:25:14 +0000 ROA not before: Thu 01 May 2025 17:25:14 +0000 ROA not after: Wed 30 Jul 2025 17:25:14 +0000 asID: 22773 IP address blocks: 68.105.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:2b:41:26:56:93:15:74:16:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:14 2025 GMT Not After : Jul 30 17:25:14 2025 GMT Subject: CN=882cba04-bf3c-4bd9-9f28-a68bfc9bb4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5b:ca:9d:a1:fe:4e:4b:d6:94:64:bf:37:8a: f1:f3:03:99:b0:75:eb:5e:42:bc:62:c5:4e:99:64: be:40:af:5b:f9:77:ba:e2:6b:eb:cd:21:5a:48:9e: 7a:51:ef:ed:40:3c:93:35:26:43:88:0d:de:c2:6b: 85:14:02:89:a9:5f:28:13:34:c6:c3:c8:c7:2b:ce: 22:20:f4:6e:ba:7c:ea:79:c9:a6:d1:87:24:47:07: 9c:05:60:80:e8:aa:ca:81:15:b0:af:7f:93:55:ba: df:96:bd:f2:12:11:70:08:4a:c0:22:3f:2d:87:7a: c2:ba:1a:64:5d:5b:49:fe:c9:a7:ab:0b:d5:46:9f: d1:20:10:b4:79:d3:6f:46:92:d7:1b:f7:cf:e4:32: 58:85:cd:64:ae:ac:61:1b:c7:4d:3d:6f:10:fc:47: f4:c5:52:8e:f8:b2:53:fd:79:72:5b:19:b5:8f:95: 44:65:fd:d2:f4:f8:32:ee:77:e4:1a:84:93:41:a3: 46:4d:bc:6c:96:35:7e:db:84:c3:65:9c:ec:c8:8a: 96:8b:9d:4c:a0:02:fb:71:34:59:a0:af:13:65:f4: 42:2f:7d:c3:aa:45:9e:68:d7:0a:fb:cf:3b:b5:b6: 55:e9:d3:b5:4e:2d:3b:9e:2c:5a:4c:33:35:75:4f: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A9:D3:AD:A3:1E:24:66:A5:E7:DB:AD:75:31:1E:BD:7F:24:4C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d66746a6-63d3-3171-a598-9c617194de89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.105.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:07:81:33:75:f2:7d:97:cc:ba:c3:59:9a:b6:27:76:3c:d2: 54:22:07:41:b7:c9:22:a5:28:bf:d1:ae:df:a4:bd:66:5e:88: bf:35:c3:b0:4f:0b:80:f9:cf:f9:2e:f9:fc:ac:0e:48:ca:26: f8:aa:cc:ef:20:cc:e1:42:f3:6f:e0:45:23:44:42:c0:de:46: 0c:08:13:7a:a9:22:52:4e:71:26:df:50:17:95:c4:ca:da:57: d2:e4:d3:9e:c9:11:fb:81:85:9d:64:c9:ca:0b:2c:2a:de:a4: 25:13:77:38:a1:5f:90:da:25:17:90:c8:92:18:3f:92:a6:23: 6b:73:53:5a:17:d8:b2:7b:74:b5:fc:3d:76:81:24:eb:ce:2d: 32:31:ed:56:ed:6f:08:bc:7b:39:3b:d0:b5:a5:1a:0c:c1:b0: 23:50:48:d3:b4:93:e0:e9:33:78:04:3a:57:10:8b:ad:0b:5c: 9c:b3:96:0d:61:80:d3:80:c9:28:e6:82:36:4b:65:b8:83:1a: 70:e7:8e:78:d7:8d:53:d8:50:75:92:76:df:3a:21:a3:b3:95: 46:ee:b7:5e:80:74:3e:a7:51:02:1f:8e:58:a9:37:77:03:85: ac:95:e7:0e:79:c8:b7:85:d1:ad:5e:e7:b2:f4:da:ef:52:47: ea:63:01:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/StBJlaTFXQWH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUxNFoXDTI1MDczMDE3MjUxNFowLzEtMCsGA1UEAxMk ODgyY2JhMDQtYmYzYy00YmQ5LTlmMjgtYTY4YmZjOWJiNGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylvKnaH+TkvWlGS/N4rx8wOZsHXrXkK8YsVO mWS+QK9b+Xe64mvrzSFaSJ56Ue/tQDyTNSZDiA3ewmuFFAKJqV8oEzTGw8jHK84i IPRuunzqecmm0YckRwecBWCA6KrKgRWwr3+TVbrflr3yEhFwCErAIj8th3rCuhpk XVtJ/smnqwvVRp/RIBC0edNvRpLXG/fP5DJYhc1krqxhG8dNPW8Q/Ef0xVKO+LJT /XlyWxm1j5VEZf3S9Pgy7nfkGoSTQaNGTbxsljV+24TDZZzsyIqWi51MoAL7cTRZ oK8TZfRCL33DqkWeaNcK+887tbZV6dO1Ti07nixaTDM1dU8J+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSp062jHiRmpefbrXUxHr1/JEwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDY2NzQ2YTYtNjNkMy0z MTcxLWE1OTgtOWM2MTcxOTRkZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgHgTN18n2XzLrDWZq2J3Y80lQiB0G3ySKlKL/Rrt+kvWZeiL81w7BP C4D5z/ku+fysDkjKJviqzO8gzOFC82/gRSNEQsDeRgwIE3qpIlJOcSbfUBeVxMra V9Lk057JEfuBhZ1kycoLLCrepCUTdzihX5DaJReQyJIYP5KmI2tzU1oX2LJ7dLX8 PXaBJOvOLTIx7Vbtbwi8ezk70LWlGgzBsCNQSNO0k+DpM3gEOlcQi60LXJyzlg1h gNOAySjmgjZLZbiDGnDnjnjXjVPYUHWSdt86IaOzlUbut16AdD6nUQIfjlipN3cD hayV5w55yLeF0a1e57L02u9SR+pjAZg= -----END CERTIFICATE-----Generated at Tue May 13 08:34:37 2025 by rpki-client