$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa File: 18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa (raw, json) Hash identifier: LQzOFcdtMtwoPLQHLNN3x9rnU8/T7jrkVost3zQmgMc= Subject key identifier: 21:B8:67:CA:C2:DC:CE:65:EE:2B:7A:F0:3F:54:9B:6D:C6:DF:B4:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F577A28D84D58E78FD7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa Signing time: Thu 01 May 2025 17:09:43 +0000 ROA not before: Thu 01 May 2025 17:09:43 +0000 ROA not after: Wed 30 Jul 2025 17:09:43 +0000 asID: 22773 IP address blocks: 70.172.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:77:a2:8d:84:d5:8e:78:fd:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:43 2025 GMT Not After : Jul 30 17:09:43 2025 GMT Subject: CN=785835d3-3df8-4d5a-bc84-0abe039f003f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:38:dd:a3:61:02:11:fa:1e:4d:d1:65:c1: eb:fb:ba:7d:ae:c2:bc:b4:6f:52:25:16:ae:8e:d4: 01:d6:fe:cd:f2:aa:0f:0b:d1:62:0a:f9:b5:a1:cd: 22:88:c5:70:1f:9c:da:f2:41:21:d2:d3:21:3b:c4: bc:75:36:4a:05:27:8f:cb:95:7b:07:ed:42:ac:8c: 96:6f:7d:5a:33:67:d3:1d:70:1b:ed:c9:7c:c5:ed: 1d:fc:3e:35:08:c7:b3:37:d8:b2:92:10:a2:61:10: 46:a4:e2:da:27:00:cd:43:4e:d4:22:fa:33:c2:0e: 5b:90:18:53:0a:4c:04:27:22:b5:51:a9:83:da:2a: 03:0d:a5:d9:91:53:10:e7:09:12:52:e6:cf:4a:0b: ff:75:4c:b5:3f:c6:e6:87:41:56:bd:25:8b:23:99: 94:20:6c:5c:01:b6:a2:06:fb:5d:b1:8c:83:43:f7: 45:6d:3a:93:03:fd:ca:d6:8d:4c:dc:4d:8a:3f:b0: 50:6f:58:ba:7f:38:98:bd:77:e3:f0:5a:bd:38:0c: ee:26:cf:de:4d:64:ac:8d:f5:b3:eb:10:4d:8a:eb: f6:98:fc:78:49:27:61:0c:a5:13:e7:bb:77:0e:8f: 66:1e:08:65:8b:49:36:3e:e7:78:8f:df:df:f5:c5: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:67:CA:C2:DC:CE:65:EE:2B:7A:F0:3F:54:9B:6D:C6:DF:B4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18a0ddc5-2414-3553-8284-5af97a5d1b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:58:ca:86:ff:cb:0b:b3:94:91:f9:10:08:d4:7a:81:b4:8e: 60:48:90:8f:7e:8e:ef:a7:60:58:0f:5a:00:8e:34:35:35:d1: 3b:dd:cf:a8:73:2b:bb:56:7e:5f:ab:5b:71:c9:7f:a5:a1:3c: c7:9c:ee:43:33:fc:54:2e:6a:46:a4:9e:6f:c1:77:c3:2c:c4: 02:3c:cd:76:08:44:2f:8f:2d:d9:9c:ec:df:bb:ce:6f:f9:72: 2c:d1:01:91:a3:67:8b:1b:89:8d:cf:f3:65:60:1c:b5:9c:b9: 8a:bd:45:00:47:7c:02:d2:27:9a:22:9f:18:40:27:d9:57:5d: 8c:66:9b:aa:8c:7a:b7:2d:e4:4e:16:1a:56:4e:9e:29:5e:de: ec:4c:ec:ea:9e:27:03:a0:19:f7:51:c1:1e:4b:6c:4f:1b:38: af:12:a8:95:d7:fc:5b:52:0f:40:4f:3e:2e:a9:52:85:6d:98: 0b:74:e1:57:77:b3:27:fe:a7:1c:5a:e4:a1:91:11:ce:a4:8f: fd:97:49:48:b3:cf:96:03:c0:ef:66:21:1c:15:9e:2d:b5:70: e0:90:c9:40:ff:59:e6:a8:82:07:66:f7:99:11:31:c6:9a:6e: e8:bd:6b:8e:10:ee:3d:dc:24:8c:51:cf:45:6a:a1:01:72:4f: 2e:e4:61:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XeijYTVjnj9eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0M1oXDTI1MDczMDE3MDk0M1owLzEtMCsGA1UEAxMk Nzg1ODM1ZDMtM2RmOC00ZDVhLWJjODQtMGFiZTAzOWYwMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkes43aNhAhH6Hk3RZcHr+7p9rsK8tG9SJRau jtQB1v7N8qoPC9FiCvm1oc0iiMVwH5za8kEh0tMhO8S8dTZKBSePy5V7B+1CrIyW b31aM2fTHXAb7cl8xe0d/D41CMezN9iykhCiYRBGpOLaJwDNQ07UIvozwg5bkBhT CkwEJyK1UamD2ioDDaXZkVMQ5wkSUubPSgv/dUy1P8bmh0FWvSWLI5mUIGxcAbai BvtdsYyDQ/dFbTqTA/3K1o1M3E2KP7BQb1i6fziYvXfj8Fq9OAzuJs/eTWSsjfWz 6xBNiuv2mPx4SSdhDKUT57t3Do9mHghli0k2Pud4j9/f9cWRxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG4Z8rC3M5l7it68D9Um23G37S9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMThhMGRkYzUtMjQxNC0z NTUzLTgyODQtNWFmOTdhNWQxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVYyob/ywuzlJH5EAjUeoG0jmBIkI9+ju+nYFgPWgCONDU10Tvdz6hz K7tWfl+rW3HJf6WhPMec7kMz/FQuakaknm/Bd8MsxAI8zXYIRC+PLdmc7N+7zm/5 cizRAZGjZ4sbiY3P82VgHLWcuYq9RQBHfALSJ5oinxhAJ9lXXYxmm6qMerct5E4W GlZOnile3uxM7OqeJwOgGfdRwR5LbE8bOK8SqJXX/FtSD0BPPi6pUoVtmAt04Vd3 syf+pxxa5KGREc6kj/2XSUizz5YDwO9mIRwVni21cOCQyUD/Weaoggdm95kRMcaa bui9a44Q7j3cJIxRz0VqoQFyTy7kYWk= -----END CERTIFICATE-----Generated at Mon May 12 12:16:21 2025 by rpki-client