$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa File: 890657e2-2f37-3642-bba7-2b0835ec2741.roa (raw, json) Hash identifier: fuQu5QIOlORniscfvs9hqMY1W/9TFpag/RypZmYkOt8= Subject key identifier: 68:DE:BA:B0:0A:7E:2A:55:2E:F8:9E:61:2D:09:FB:8D:C4:D5:52:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584832F05B96F8A228360650F780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 22773 IP address blocks: 68.227.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:5b:96:f8:a2:28:36:06:50:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=30dc96a5-3d49-4f98-96e0-a78e30120149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:71:d0:93:ba:28:86:d5:fe:3e:16:a0:78: 1d:1d:a4:b8:e3:2a:e4:88:1d:05:71:d9:33:d3:99: 1b:17:b5:11:64:d4:de:3e:57:5b:df:41:d0:39:48: c0:e6:ec:a1:0c:d5:24:83:3b:fc:9a:7a:7f:9d:0c: d3:05:39:99:eb:dc:a9:01:85:70:45:d4:cd:35:cf: 05:fa:de:4b:7f:41:74:c5:4b:5a:bf:47:90:f5:74: 82:0b:01:b0:3e:7b:9d:c8:8d:1f:96:73:06:30:79: 59:4a:3f:10:ec:74:31:70:f9:92:af:38:fa:02:ea: c3:e8:bc:9e:86:4a:b2:b5:90:c4:d3:1c:f4:90:77: ee:13:e7:15:84:3d:37:7d:02:4d:53:8c:a8:3b:24: 35:9e:7b:02:36:63:3a:c4:08:66:63:1d:82:0b:5f: aa:0d:4f:75:b4:5d:34:3e:73:4f:a6:3b:bd:6f:ed: 21:4f:26:ae:e1:7d:e9:9c:f3:10:15:c9:de:e9:f6: 71:52:1b:11:6e:6a:db:3d:78:95:a8:ce:3a:87:c3: 05:a4:25:90:16:de:84:c2:55:5f:71:71:6c:a1:9c: 5b:aa:70:64:f2:41:fc:5f:95:24:dd:bd:13:cf:fe: db:e1:9f:38:c1:0c:ba:63:27:0c:79:a6:e2:2f:e8: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DE:BA:B0:0A:7E:2A:55:2E:F8:9E:61:2D:09:FB:8D:C4:D5:52:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/890657e2-2f37-3642-bba7-2b0835ec2741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ae:62:df:31:04:10:39:e1:1f:b6:f7:41:4a:ee:65:40:55: e3:ff:76:49:5f:c6:c8:9f:f5:6e:dd:4d:e2:e2:81:4e:b1:c7: fa:cc:4c:4e:15:c8:ae:1a:ee:40:ae:1a:aa:a3:57:0f:e6:2a: ad:32:f8:d2:76:9e:da:2f:f0:fd:07:21:5b:e3:74:e5:35:3d: 09:b6:c1:52:e7:f5:08:dd:b3:39:7b:dd:9a:3b:05:62:a3:06: d3:0a:db:b2:d0:c5:d3:82:14:43:c7:ea:21:a1:a2:c9:5d:6a: 61:8b:3f:9f:d5:78:5f:43:0c:07:8d:76:92:3a:9b:7f:b0:76: 0c:2e:90:34:5e:f3:6c:4f:b3:10:50:97:75:5b:98:84:6d:7a: 99:86:71:49:2e:96:14:bd:79:de:38:46:90:ce:ef:01:c5:be: e9:01:d7:f2:e3:11:dc:3e:72:f7:28:38:40:5a:f2:7f:9a:03: e5:b6:4a:18:e0:3b:c8:a6:fd:cb:60:62:9d:81:36:a3:5a:cd: d1:c1:62:b0:bd:e2:fa:38:07:ea:66:3e:8a:d8:39:c6:8e:4d: fc:48:30:35:48:7a:ff:61:a3:e9:76:f9:a0:4f:4c:00:90:25: 2b:13:7e:08:d8:4d:19:06:69:2f:89:48:78:ad:90:22:0c:cc: fb:a2:dc:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8FuW+KIoNgZQ94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MzBkYzk2YTUtM2Q0OS00Zjk4LTk2ZTAtYTc4ZTMwMTIwMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjBx0JO6KIbV/j4WoHgdHaS44yrkiB0Fcdkz 05kbF7URZNTePldb30HQOUjA5uyhDNUkgzv8mnp/nQzTBTmZ69ypAYVwRdTNNc8F +t5Lf0F0xUtav0eQ9XSCCwGwPnudyI0flnMGMHlZSj8Q7HQxcPmSrzj6AurD6Lye hkqytZDE0xz0kHfuE+cVhD03fQJNU4yoOyQ1nnsCNmM6xAhmYx2CC1+qDU91tF00 PnNPpju9b+0hTyau4X3pnPMQFcne6fZxUhsRbmrbPXiVqM46h8MFpCWQFt6EwlVf cXFsoZxbqnBk8kH8X5Uk3b0Tz/7b4Z84wQy6YycMeabiL+gttwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjeurAKfipVLvieYS0J+43E1VIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODkwNjU3ZTItMmYzNy0z NjQyLWJiYTctMmIwODM1ZWMyNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROMGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHauYt8xBBA54R+290FK7mVAVeP/dklfxsif9W7dTeLigU6xx/rMTE4V yK4a7kCuGqqjVw/mKq0y+NJ2ntov8P0HIVvjdOU1PQm2wVLn9Qjdszl73Zo7BWKj BtMK27LQxdOCFEPH6iGhosldamGLP5/VeF9DDAeNdpI6m3+wdgwukDRe82xPsxBQ l3VbmIRtepmGcUkulhS9ed44RpDO7wHFvukB1/LjEdw+cvcoOEBa8n+aA+W2Shjg O8im/ctgYp2BNqNazdHBYrC94vo4B+pmPorYOcaOTfxIMDVIev9ho+l2+aBPTACQ JSsTfgjYTRkGaS+JSHitkCIMzPui3GU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:40 2025 by rpki-client