$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8b155f8-4107-3c4e-a5c5-fec28b0a0a7a.roa File: d8b155f8-4107-3c4e-a5c5-fec28b0a0a7a.roa (raw, json) Hash identifier: F8Fwio1lpvB1VuVmfS2WFpOyn4fQrApoQF3wnFYjThM= Subject key identifier: FA:4C:6F:B7:5F:80:D1:9D:CA:1C:E7:EE:CE:D7:83:3C:3E:7F:B2:66 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F52AB3791B7EC553510420 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8b155f8-4107-3c4e-a5c5-fec28b0a0a7a.roa Signing time: Thu 01 May 2025 17:09:07 +0000 ROA not before: Thu 01 May 2025 17:09:07 +0000 ROA not after: Wed 30 Jul 2025 17:09:07 +0000 asID: 22773 IP address blocks: 68.9.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:2a:b3:79:1b:7e:c5:53:51:04:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:07 2025 GMT Not After : Jul 30 17:09:07 2025 GMT Subject: CN=6b9fea6d-8f40-427b-9624-458079eb62f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:8c:fc:37:4e:7e:e0:e8:11:c1:fa:65:18: 07:66:c0:9d:45:a4:53:16:a1:c0:a3:55:6c:b8:85: 51:f1:36:9b:27:4a:3c:c1:a5:02:e5:0b:ed:30:19: fa:b8:d7:37:54:ef:6a:73:3c:1a:de:e7:73:f0:e2: 45:84:26:1e:8c:59:b9:ca:9b:61:16:40:1a:de:12: f6:9a:15:50:3d:d3:34:24:27:84:d6:e0:59:50:86: 87:f8:91:d9:6f:ef:87:02:08:d8:2b:5b:53:97:cf: d1:af:05:18:90:d9:e9:da:3c:f7:82:88:22:4e:13: ce:1c:7d:c9:76:a4:22:4d:67:8c:ee:2a:9d:61:dc: 09:df:51:44:ad:bd:5e:21:74:1e:76:d2:b0:94:2f: b7:1d:26:8b:29:03:db:e9:78:65:bd:10:e9:2d:52: 52:a9:e6:f9:e3:01:ba:21:0b:ec:f6:09:bd:45:ac: 9e:06:39:e0:e7:fb:c8:16:ef:3a:35:f0:bf:58:ef: 50:1a:93:ed:c0:63:65:45:ab:b0:76:31:61:ec:1d: e4:55:cd:bb:92:04:dd:4c:2a:0a:5c:73:7c:b4:b2: 1b:79:b9:55:92:12:f8:b2:cc:f7:6e:74:07:81:32: 96:0a:f9:6a:ac:17:77:bd:4a:86:ea:6d:46:04:51: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:6F:B7:5F:80:D1:9D:CA:1C:E7:EE:CE:D7:83:3C:3E:7F:B2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8b155f8-4107-3c4e-a5c5-fec28b0a0a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:10:36:41:81:2f:1a:b5:87:d9:34:76:d9:4d:7f:1f:88:82: 2c:14:69:94:84:ca:a8:20:dd:89:e5:02:02:3d:c2:d9:fd:b7: d4:3a:be:57:64:89:c3:7b:90:99:47:41:8a:d8:ea:2f:cd:2f: 96:00:ab:64:9e:4c:10:05:71:ba:f6:81:5d:18:26:66:65:9d: 0c:8c:b2:9c:c1:d2:4e:f4:14:f1:68:c2:32:ec:ff:2b:2d:93: 08:b0:80:a6:67:0b:44:42:d6:d6:61:67:6b:28:21:ce:8c:b0: e5:39:71:0a:91:b9:a0:eb:4c:ea:03:2f:4b:98:c1:af:6f:62: 3d:f2:75:8b:b7:d4:ca:79:c9:ae:56:19:39:01:ce:b6:8f:27: 3b:11:5f:62:8d:aa:4b:ea:1f:bd:91:9b:f2:f1:56:ce:2d:81: 42:98:e1:10:e6:ec:6f:1c:97:e4:a7:3e:bf:8e:80:fc:83:82: f3:20:57:52:d8:9a:1a:c0:40:02:7c:3e:0e:7b:fb:a5:6d:2b: 97:5b:3a:72:d0:da:32:97:62:3d:ac:94:0f:2a:63:ff:ec:a1: c0:48:66:5e:cb:c5:d1:16:64:79:e7:2b:6a:8e:70:96:ff:8b: cb:12:34:86:22:65:ac:7f:0a:a4:29:8e:d2:db:09:36:08:81: 76:04:4e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19SqzeRt+xVNRBCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkwN1oXDTI1MDczMDE3MDkwN1owLzEtMCsGA1UEAxMk NmI5ZmVhNmQtOGY0MC00MjdiLTk2MjQtNDU4MDc5ZWI2MmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbCM/DdOfuDoEcH6ZRgHZsCdRaRTFqHAo1Vs uIVR8TabJ0o8waUC5QvtMBn6uNc3VO9qczwa3udz8OJFhCYejFm5ypthFkAa3hL2 mhVQPdM0JCeE1uBZUIaH+JHZb++HAgjYK1tTl8/RrwUYkNnp2jz3gogiThPOHH3J dqQiTWeM7iqdYdwJ31FErb1eIXQedtKwlC+3HSaLKQPb6XhlvRDpLVJSqeb54wG6 IQvs9gm9RayeBjng5/vIFu86NfC/WO9QGpPtwGNlRauwdjFh7B3kVc27kgTdTCoK XHN8tLIbeblVkhL4ssz3bnQHgTKWCvlqrBd3vUqG6m1GBFGRiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpMb7dfgNGdyhzn7s7Xgzw+f7JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDhiMTU1ZjgtNDEwNy0z YzRlLWE1YzUtZmVjMjhiMGEwYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAnoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgQNkGBLxq1h9k0dtlNfx+IgiwUaZSEyqgg3YnlAgI9wtn9t9Q6vldk icN7kJlHQYrY6i/NL5YAq2SeTBAFcbr2gV0YJmZlnQyMspzB0k70FPFowjLs/yst kwiwgKZnC0RC1tZhZ2soIc6MsOU5cQqRuaDrTOoDL0uYwa9vYj3ydYu31Mp5ya5W GTkBzraPJzsRX2KNqkvqH72Rm/LxVs4tgUKY4RDm7G8cl+SnPr+OgPyDgvMgV1LY mhrAQAJ8Pg57+6VtK5dbOnLQ2jKXYj2slA8qY//socBIZl7LxdEWZHnnK2qOcJb/ i8sSNIYiZax/CqQpjtLbCTYIgXYETi4= -----END CERTIFICATE-----Generated at Sat May 10 16:45:00 2025 by rpki-client