$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3796e7c-2a64-3975-9497-b73f7cb94099.roa File: e3796e7c-2a64-3975-9497-b73f7cb94099.roa (raw, json) Hash identifier: f+mr9DvvmGFNn32ntWDBd2PoQRst2DmqKG7b5V74E0U= Subject key identifier: 25:FB:33:55:D1:A5:A8:30:40:23:36:E3:AE:B6:BC:9C:D9:7E:B6:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F51BA7DAF2C9CDA94904C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3796e7c-2a64-3975-9497-b73f7cb94099.roa Signing time: Thu 01 May 2025 17:09:00 +0000 ROA not before: Thu 01 May 2025 17:09:00 +0000 ROA not after: Wed 30 Jul 2025 17:09:00 +0000 asID: 22773 IP address blocks: 68.9.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:1b:a7:da:f2:c9:cd:a9:49:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:00 2025 GMT Not After : Jul 30 17:09:00 2025 GMT Subject: CN=bab1ce3a-b7e7-4986-a51f-6449e0193bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:51:e6:7e:04:e8:1c:ee:23:d2:9b:90:ea: 0a:7a:e0:ba:c6:51:29:d2:93:1f:6b:ed:ac:35:1f: 08:bc:94:92:56:a6:6d:12:2e:91:5f:7e:31:94:1b: b8:6f:cc:85:b7:c7:83:52:3b:59:e4:5c:65:21:fa: 89:a0:88:1d:14:e1:ab:d5:36:d9:cc:07:81:f8:f3: 3f:13:16:6d:bf:99:96:63:df:ec:eb:2f:68:81:3f: 96:78:03:35:1f:42:7b:6e:fa:3d:ff:01:32:38:01: d2:6a:d4:a9:ba:9e:0b:54:32:fb:db:cc:64:18:89: d9:20:72:22:0b:d8:e0:b2:c3:23:2a:df:40:02:f2: 74:19:7a:a7:64:4f:7f:d3:e2:2e:fd:f4:b1:9e:fd: 53:fc:f9:59:e5:14:5d:f7:86:c9:8b:90:6c:6e:67: 95:7a:c3:30:24:02:17:3a:56:49:6d:39:35:46:a1: b7:1a:00:cf:e7:61:29:94:67:bf:e6:09:df:c3:0f: 9d:ab:26:14:35:23:6c:ed:22:03:bf:0e:73:c1:6b: 29:14:99:85:5c:f3:ef:63:90:32:0a:7b:cf:6b:4f: ac:c3:45:75:90:a3:3a:00:2b:4f:b5:24:22:d5:5d: fd:85:76:d0:89:41:e2:22:4c:1a:94:62:45:07:ca: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FB:33:55:D1:A5:A8:30:40:23:36:E3:AE:B6:BC:9C:D9:7E:B6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3796e7c-2a64-3975-9497-b73f7cb94099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f3:6f:c8:bc:5f:78:d6:fa:0b:d0:77:15:ac:93:b9:d6:4d: c8:05:69:d2:b7:f7:49:75:30:fe:21:a1:a1:23:09:0d:e9:21: b4:f1:bf:da:3c:6c:20:99:f0:09:a4:ba:7a:d0:22:66:6c:2f: 31:88:f7:23:eb:a0:f0:01:cc:a1:dd:9f:66:7c:1e:e4:f7:bb: 1d:93:08:c0:7b:1b:7a:fa:54:3a:21:67:b5:98:d9:5f:f8:20: 72:03:2c:aa:91:ac:4a:dd:ab:0c:0e:1d:65:ba:0e:fd:5b:f8: 91:d5:bd:36:99:9f:77:ee:86:89:4d:b7:20:40:14:64:a3:ab: 9d:c6:28:14:5c:70:15:64:eb:3b:d5:f7:ae:5a:28:b4:86:4b: 28:6b:3c:7c:0b:94:26:d0:da:f7:13:de:9d:a4:8a:56:fe:d0: c2:5a:6d:ba:3b:1f:48:f1:b1:b0:0a:1e:15:53:78:87:97:20: 26:e7:46:dd:00:e4:68:51:f4:83:05:44:0f:e6:c5:b3:e5:87: d1:9d:bc:a2:f1:b9:65:3f:69:64:e7:8a:94:0f:bd:e6:8f:1f: a1:5b:18:14:c5:a3:a6:ba:91:43:02:58:df:9a:b4:0a:3c:54: 3b:27:7a:e3:87:0c:e0:a1:53:e1:f4:56:4f:ef:11:43:33:93: c3:61:0b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19Run2vLJzalJBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkwMFoXDTI1MDczMDE3MDkwMFowLzEtMCsGA1UEAxMk YmFiMWNlM2EtYjdlNy00OTg2LWE1MWYtNjQ0OWUwMTkzYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+tR5n4E6BzuI9KbkOoKeuC6xlEp0pMfa+2s NR8IvJSSVqZtEi6RX34xlBu4b8yFt8eDUjtZ5FxlIfqJoIgdFOGr1TbZzAeB+PM/ ExZtv5mWY9/s6y9ogT+WeAM1H0J7bvo9/wEyOAHSatSpup4LVDL728xkGInZIHIi C9jgssMjKt9AAvJ0GXqnZE9/0+Iu/fSxnv1T/PlZ5RRd94bJi5BsbmeVesMwJAIX OlZJbTk1RqG3GgDP52EplGe/5gnfww+dqyYUNSNs7SIDvw5zwWspFJmFXPPvY5Ay CnvPa0+sw0V1kKM6ACtPtSQi1V39hXbQiUHiIkwalGJFB8oqewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX7M1XRpagwQCM24662vJzZfrY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTM3OTZlN2MtMmE2NC0z OTc1LTk0OTctYjczZjdjYjk0MDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAmlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHzb8i8X3jW+gvQdxWsk7nWTcgFadK390l1MP4hoaEjCQ3pIbTxv9o8 bCCZ8AmkunrQImZsLzGI9yProPABzKHdn2Z8HuT3ux2TCMB7G3r6VDohZ7WY2V/4 IHIDLKqRrErdqwwOHWW6Dv1b+JHVvTaZn3fuholNtyBAFGSjq53GKBRccBVk6zvV 965aKLSGSyhrPHwLlCbQ2vcT3p2kilb+0MJabbo7H0jxsbAKHhVTeIeXICbnRt0A 5GhR9IMFRA/mxbPlh9GdvKLxuWU/aWTnipQPveaPH6FbGBTFo6a6kUMCWN+atAo8 VDsneuOHDOChU+H0Vk/vEUMzk8NhCx4= -----END CERTIFICATE-----Generated at Sun May 11 07:51:40 2025 by rpki-client