$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec9c9e6f-fe37-30ae-9f9b-a8fbdc7e263a.roa File: ec9c9e6f-fe37-30ae-9f9b-a8fbdc7e263a.roa (raw, json) Hash identifier: b6UTNlmw5kfBJAvREDkVevM1+/pIorAJr4pzmPLNKJs= Subject key identifier: 0F:47:3E:3F:A8:3D:3E:4D:8C:71:92:EF:71:E0:08:E8:13:31:F4:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F532305A58AD621A6A7080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec9c9e6f-fe37-30ae-9f9b-a8fbdc7e263a.roa Signing time: Thu 01 May 2025 17:09:11 +0000 ROA not before: Thu 01 May 2025 17:09:11 +0000 ROA not after: Wed 30 Jul 2025 17:09:11 +0000 asID: 22773 IP address blocks: 68.14.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:32:30:5a:58:ad:62:1a:6a:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:11 2025 GMT Not After : Jul 30 17:09:11 2025 GMT Subject: CN=c588e8a6-9962-40bd-a675-b68849edd09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:8d:72:18:5d:fb:9f:5a:f1:6a:f2:5d:85: 3b:b8:e8:2d:fd:2c:54:65:89:5b:c7:4c:3f:e2:ed: 10:57:85:9e:59:6e:07:d1:26:a4:40:7d:1d:ec:0b: ce:1e:96:d7:e7:93:d9:e2:39:c9:8f:4e:35:85:5b: 19:42:f4:c4:46:39:20:7b:83:46:90:e8:20:1d:34: b1:66:e3:3e:3a:68:b0:f7:4a:a8:54:46:ec:17:1b: 19:3c:43:a3:33:b7:02:14:60:70:04:cc:74:6c:c8: bb:92:ba:8f:c9:a1:b8:bb:7d:8b:ef:7c:e2:9d:66: a5:48:ef:82:d2:a3:a0:f4:fd:61:b3:d6:f9:e9:d7: c3:66:da:e5:58:b4:22:79:00:b2:3b:8d:c0:a0:bd: d4:83:6b:e9:07:22:94:eb:55:99:04:0f:cc:ca:14: 56:4d:40:54:48:52:0a:57:02:da:2a:31:f0:fe:ef: 4b:5e:ee:ca:df:14:30:47:42:73:09:ac:ae:69:79: 55:a5:de:97:d7:d5:03:62:5d:53:cf:f8:4d:cf:85: 45:36:dc:85:74:a7:fb:e9:66:d2:12:70:67:64:27: 6c:d5:7c:9d:b7:46:00:1a:e2:9e:71:94:ca:bb:00: c2:b7:86:1c:28:db:ec:16:b8:ab:71:43:1a:32:f9: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:47:3E:3F:A8:3D:3E:4D:8C:71:92:EF:71:E0:08:E8:13:31:F4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec9c9e6f-fe37-30ae-9f9b-a8fbdc7e263a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:9f:95:73:fb:34:f4:27:9e:7f:a7:68:60:ea:57:22:7b:55: f3:71:4a:90:96:26:ab:e8:52:cd:6c:b7:1e:ba:08:14:d1:ec: a5:43:cd:28:d2:f0:53:3f:19:49:32:80:eb:78:6d:b2:ee:9f: e5:92:bd:98:ed:7d:9f:74:18:68:f3:f7:f9:71:40:53:be:25: 65:37:ae:18:ee:b4:c5:1f:bb:f1:1c:74:d3:a3:bc:a9:4e:31: df:6c:1e:38:19:a3:87:77:1e:b7:33:4f:42:ca:7a:cd:ca:72: e0:a3:8e:be:8d:64:94:19:c9:37:07:dc:7d:e2:e2:98:75:fc: d1:c1:20:24:19:de:9e:73:04:fe:d6:c1:02:9a:a8:f1:c6:51: ca:f5:b6:b1:f8:e9:f2:22:fa:2d:ae:7b:fb:76:c7:25:94:42: f8:b6:e3:85:04:62:f3:ee:5b:da:dc:4f:d1:33:58:c8:9b:74: 9f:cb:da:05:44:a7:51:1e:bd:a7:45:5e:eb:1b:ea:65:0b:15: 5b:5d:8b:42:f5:3c:fc:7c:80:4d:d9:ee:3b:de:60:65:58:27: e0:2b:fd:e2:3b:56:63:c2:7d:eb:7a:3d:ea:bc:26:88:10:a3: c5:2d:fa:b7:d1:07:d8:ee:92:b9:be:ca:90:ec:3e:26:fb:aa: 97:0a:3a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19TIwWlitYhpqcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDkxMVoXDTI1MDczMDE3MDkxMVowLzEtMCsGA1UEAxMk YzU4OGU4YTYtOTk2Mi00MGJkLWE2NzUtYjY4ODQ5ZWRkMDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIKNchhd+59a8WryXYU7uOgt/SxUZYlbx0w/ 4u0QV4WeWW4H0SakQH0d7AvOHpbX55PZ4jnJj041hVsZQvTERjkge4NGkOggHTSx ZuM+Omiw90qoVEbsFxsZPEOjM7cCFGBwBMx0bMi7krqPyaG4u32L73zinWalSO+C 0qOg9P1hs9b56dfDZtrlWLQieQCyO43AoL3Ug2vpByKU61WZBA/MyhRWTUBUSFIK VwLaKjHw/u9LXu7K3xQwR0JzCayuaXlVpd6X19UDYl1Tz/hNz4VFNtyFdKf76WbS EnBnZCds1Xydt0YAGuKecZTKuwDCt4YcKNvsFrircUMaMvkTCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9HPj+oPT5NjHGS73HgCOgTMfRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWM5YzllNmYtZmUzNy0z MGFlLTlmOWItYThmYmRjN2UyNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmflXP7NPQnnn+naGDqVyJ7VfNxSpCWJqvoUs1stx66CBTR7KVDzSjS 8FM/GUkygOt4bbLun+WSvZjtfZ90GGjz9/lxQFO+JWU3rhjutMUfu/EcdNOjvKlO Md9sHjgZo4d3HrczT0LKes3KcuCjjr6NZJQZyTcH3H3i4ph1/NHBICQZ3p5zBP7W wQKaqPHGUcr1trH46fIi+i2ue/t2xyWUQvi244UEYvPuW9rcT9EzWMibdJ/L2gVE p1EevadFXusb6mULFVtdi0L1PPx8gE3Z7jveYGVYJ+Ar/eI7VmPCfet6Peq8JogQ o8Ut+rfRB9jukrm+ypDsPib7qpcKOs4= -----END CERTIFICATE-----Generated at Sat May 10 16:49:14 2025 by rpki-client