$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f582b5f7-80cf-3ca9-b011-4af2cfaafb96.roa File: f582b5f7-80cf-3ca9-b011-4af2cfaafb96.roa (raw, json) Hash identifier: 6Gp/X5150aHlzZaeAAyuTeQVJJizSQ/Fzc3uG+P2uLY= Subject key identifier: 86:CF:5B:9B:14:8B:05:EC:DB:78:A8:4E:81:F8:20:4D:76:61:A8:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7D07A4EC69B2DDB72B520 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f582b5f7-80cf-3ca9-b011-4af2cfaafb96.roa Signing time: Thu 01 May 2025 17:14:27 +0000 ROA not before: Thu 01 May 2025 17:14:27 +0000 ROA not after: Wed 30 Jul 2025 17:14:27 +0000 asID: 22773 IP address blocks: 68.0.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:d0:7a:4e:c6:9b:2d:db:72:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:27 2025 GMT Not After : Jul 30 17:14:27 2025 GMT Subject: CN=2134588d-1752-4894-b8e0-98211ecbabe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:d5:c9:b2:3d:f8:23:ad:19:ee:0f:62:2e: dd:01:05:e8:10:c4:02:5b:bf:7e:df:e5:1c:18:75: 73:10:9d:9a:17:ad:18:af:fd:76:71:cb:7c:0b:0d: a3:8a:05:b6:a4:43:44:1f:de:5b:ff:67:33:c4:b8: c0:92:54:8e:7c:7c:92:e2:e0:66:77:3a:d3:45:d1: c4:86:7d:21:1e:4b:61:d7:54:29:bf:1c:a3:e0:32: 46:ba:8c:d2:15:32:9a:12:ad:83:03:e9:06:fb:41: d8:e7:35:6c:3f:0b:8e:a6:57:91:6e:74:f6:b4:ec: b2:7b:59:af:fe:b4:30:d2:70:db:7b:61:10:8a:3f: 1f:aa:33:cd:3d:b9:d0:db:aa:9e:d4:38:85:53:ca: 62:aa:0b:69:24:33:e0:25:ce:16:c4:5a:bb:0c:26: 8d:c3:d5:38:b8:76:a8:7f:d2:38:5f:21:e8:1e:0c: 8b:6a:1c:93:9b:39:18:69:44:3a:3b:ad:a0:94:7e: 5a:f5:08:54:62:5a:5c:97:c1:c9:24:28:39:36:5c: bc:5b:14:f6:85:9d:0f:4a:68:94:a8:47:2d:43:b9: 29:23:ba:fd:61:58:6d:20:a5:bf:16:90:67:9c:39: 13:75:72:77:87:b4:04:3a:7f:5d:c7:cf:50:05:fa: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CF:5B:9B:14:8B:05:EC:DB:78:A8:4E:81:F8:20:4D:76:61:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f582b5f7-80cf-3ca9-b011-4af2cfaafb96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d1:de:c7:3e:3f:1b:8e:84:23:2f:1a:e2:a7:40:d3:61:99: 46:03:f1:33:14:fc:f8:f1:4c:a1:1a:42:13:d1:4b:c3:44:db: c9:ef:b8:eb:cf:4c:41:fc:a3:21:d5:9c:46:82:da:7c:6d:17: 6d:ac:16:e0:49:e4:da:f1:16:0f:1d:be:20:fe:4c:57:a4:87: 6f:3a:5f:45:8f:8b:ad:b3:3e:0b:fa:5e:a2:aa:59:92:2b:27: c2:18:3f:c3:8e:31:d4:06:c4:b0:2e:ad:03:33:db:47:7d:2d: d3:ee:f5:e1:1c:59:b1:ff:6f:13:50:03:fe:d4:9b:c7:0f:4b: b6:f3:4a:9c:91:94:11:a3:64:05:91:60:bb:0e:b6:bc:66:eb: b7:83:e9:5d:e9:2c:d5:83:78:1b:65:44:4a:d6:cf:f5:a1:3e: 14:05:3b:3c:c2:ea:2d:0d:f8:58:ac:c3:3f:74:d5:d1:ca:90: 8b:4e:47:83:fa:4c:c6:4b:c2:7f:81:17:22:88:93:6a:ab:10: 0c:e5:9d:2a:f7:06:22:9a:99:2d:2d:a4:58:9c:a0:f5:89:6f: 6c:04:12:e5:1b:35:c2:91:16:ab:a2:9c:ea:7d:94:9e:9e:18: 4f:65:56:08:b0:b1:4e:7e:91:63:02:13:43:1c:7d:8d:91:1d: 24:02:09:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm199B6TsabLdtytSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQyN1oXDTI1MDczMDE3MTQyN1owLzEtMCsGA1UEAxMk MjEzNDU4OGQtMTc1Mi00ODk0LWI4ZTAtOTgyMTFlY2JhYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0jVybI9+COtGe4PYi7dAQXoEMQCW79+3+Uc GHVzEJ2aF60Yr/12cct8Cw2jigW2pENEH95b/2czxLjAklSOfHyS4uBmdzrTRdHE hn0hHkth11Qpvxyj4DJGuozSFTKaEq2DA+kG+0HY5zVsPwuOpleRbnT2tOyye1mv /rQw0nDbe2EQij8fqjPNPbnQ26qe1DiFU8piqgtpJDPgJc4WxFq7DCaNw9U4uHao f9I4XyHoHgyLahyTmzkYaUQ6O62glH5a9QhUYlpcl8HJJCg5Nly8WxT2hZ0PSmiU qEctQ7kpI7r9YVhtIKW/FpBnnDkTdXJ3h7QEOn9dx89QBfqfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbPW5sUiwXs23ioToH4IE12YagLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjU4MmI1ZjctODBjZi0z Y2E5LWIwMTEtNGFmMmNmYWFmYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTR3sc+PxuOhCMvGuKnQNNhmUYD8TMU/PjxTKEaQhPRS8NE28nvuOvP TEH8oyHVnEaC2nxtF22sFuBJ5NrxFg8dviD+TFekh286X0WPi62zPgv6XqKqWZIr J8IYP8OOMdQGxLAurQMz20d9LdPu9eEcWbH/bxNQA/7Um8cPS7bzSpyRlBGjZAWR YLsOtrxm67eD6V3pLNWDeBtlRErWz/WhPhQFOzzC6i0N+Fiswz901dHKkItOR4P6 TMZLwn+BFyKIk2qrEAzlnSr3BiKamS0tpFicoPWJb2wEEuUbNcKRFquinOp9lJ6e GE9lVgiwsU5+kWMCE0McfY2RHSQCCVk= -----END CERTIFICATE-----Generated at Sun May 11 09:06:16 2025 by rpki-client