$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec72c714-d2fe-3f4d-9b1c-ed4dc65c8d62.roa File: ec72c714-d2fe-3f4d-9b1c-ed4dc65c8d62.roa (raw, json) Hash identifier: fikoWJUSM0oDmghalIn+WEflHXAa3M8aJMZe2V8LCOQ= Subject key identifier: A9:D6:8D:DE:2C:15:BE:63:E5:01:0F:38:75:53:04:12:DA:CE:4A:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848ADC61EAE5044764AC76D4780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec72c714-d2fe-3f4d-9b1c-ed4dc65c8d62.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 22773 IP address blocks: 68.227.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:1e:ae:50:44:76:4a:c7:6d:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=954e7e48-7b68-41bd-9067-7d7a94ca911a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:be:98:35:80:12:0d:17:5c:0a:89:aa:c2: c4:d2:7f:fe:83:86:d3:af:ec:90:4c:de:27:66:c6: 99:a2:9e:82:c5:6f:46:cd:99:42:eb:51:1e:d3:d4: 3a:16:d3:70:e5:a6:18:e6:69:6e:b6:47:11:76:34: ec:1f:f4:19:40:79:ca:48:3e:f4:d7:d4:56:ad:92: 44:93:ae:22:d2:81:2d:49:c9:f8:89:22:ad:49:97: 70:12:b5:b8:35:ee:48:b2:21:05:1e:35:db:03:48: 5d:e3:46:0f:63:c7:01:e8:d5:55:25:2c:84:f5:8e: 63:57:e8:3d:2f:84:a9:c5:72:79:41:88:ab:31:9c: 2a:7e:42:41:a9:39:b4:7f:4d:b5:44:c2:14:da:a5: 48:aa:29:b1:ed:cd:fc:90:94:06:21:86:a7:5d:b6: 5f:4e:b3:1f:70:58:ef:54:12:31:8b:bd:26:8e:94: c8:64:1b:89:e6:ca:ce:07:34:94:f4:67:be:9c:d5: 45:e3:9c:1c:03:8d:f3:22:79:67:0b:ce:61:5b:3c: d4:39:47:ea:85:0d:08:42:d4:69:bb:60:14:6e:ae: ed:be:5e:42:46:7c:1b:ad:c3:ab:f0:41:53:53:fe: 06:73:fe:fa:9a:2c:38:7a:89:84:fb:1b:e4:2d:de: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:8D:DE:2C:15:BE:63:E5:01:0F:38:75:53:04:12:DA:CE:4A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec72c714-d2fe-3f4d-9b1c-ed4dc65c8d62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:95:51:3a:70:96:d0:33:6d:0a:f2:88:85:bc:a4:f1:13:40: b4:48:d2:0b:a4:ec:7a:26:c5:86:81:04:fc:7d:53:a9:3d:81: 24:c4:20:f2:eb:05:d6:7d:26:07:95:82:be:a1:48:2e:a3:72: dc:ea:03:16:28:fb:ba:fb:07:4c:ee:92:c2:0c:82:32:a9:8a: 77:d6:2c:50:79:04:bc:1a:3a:5a:22:0f:83:77:f7:96:bf:77: c6:9c:bb:8d:1c:fc:90:c5:c6:ca:70:19:59:ef:23:2b:1f:00: 57:f5:40:c5:42:5b:54:d4:ef:e9:49:94:a7:75:25:e6:48:4c: 94:80:77:a6:e1:87:84:7e:62:20:da:15:53:b0:36:3f:61:ea: ba:1c:a4:a1:93:b1:71:60:4f:74:e4:74:db:72:48:d1:c3:9f: 08:30:87:7b:a2:69:33:61:36:70:0f:ef:9d:30:12:b6:ad:79: e4:b3:31:2a:53:9c:9d:58:82:6a:62:6f:f8:67:34:e8:3f:2f: 7c:63:53:29:96:49:f3:31:1b:2f:00:d5:ea:46:13:21:8d:18: 24:08:fc:9e:62:61:26:86:2d:6e:3e:f8:de:47:0b:0e:7b:04: df:29:10:43:d0:68:dc:3c:5f:3f:0b:74:38:e1:87:e3:90:7f: a8:9d:99:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxh6uUER2SsdtR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk OTU0ZTdlNDgtN2I2OC00MWJkLTkwNjctN2Q3YTk0Y2E5MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW++mDWAEg0XXAqJqsLE0n/+g4bTr+yQTN4n ZsaZop6CxW9GzZlC61Ee09Q6FtNw5aYY5mlutkcRdjTsH/QZQHnKSD7019RWrZJE k64i0oEtScn4iSKtSZdwErW4Ne5IsiEFHjXbA0hd40YPY8cB6NVVJSyE9Y5jV+g9 L4SpxXJ5QYirMZwqfkJBqTm0f021RMIU2qVIqimx7c38kJQGIYanXbZfTrMfcFjv VBIxi70mjpTIZBuJ5srOBzSU9Ge+nNVF45wcA43zInlnC85hWzzUOUfqhQ0IQtRp u2AUbq7tvl5CRnwbrcOr8EFTU/4Gc/76miw4eomE+xvkLd5AIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnWjd4sFb5j5QEPOHVTBBLazkoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWM3MmM3MTQtZDJmZS0z ZjRkLTliMWMtZWQ0ZGM2NWM4ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2VUTpwltAzbQryiIW8pPETQLRI0guk7HomxYaBBPx9U6k9gSTEIPLr BdZ9JgeVgr6hSC6jctzqAxYo+7r7B0zuksIMgjKpinfWLFB5BLwaOloiD4N395a/ d8acu40c/JDFxspwGVnvIysfAFf1QMVCW1TU7+lJlKd1JeZITJSAd6bhh4R+YiDa FVOwNj9h6rocpKGTsXFgT3TkdNtySNHDnwgwh3uiaTNhNnAP750wErateeSzMSpT nJ1Ygmpib/hnNOg/L3xjUymWSfMxGy8A1epGEyGNGCQI/J5iYSaGLW4++N5HCw57 BN8pEEPQaNw8Xz8LdDjhh+OQf6idmUI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:42 2025 by rpki-client