$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b794192-e2b8-3efe-8a0f-c7d965f1af44.roa File: 1b794192-e2b8-3efe-8a0f-c7d965f1af44.roa (raw, json) Hash identifier: LIB8dcAKxX1AARl2zrwlhJQmI8s8BxB2zRUMRKoSNBI= Subject key identifier: 61:C5:25:CD:52:37:9A:FE:05:DA:D1:59:D3:86:7C:46:93:A9:DD:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD55E009D78236390A9E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b794192-e2b8-3efe-8a0f-c7d965f1af44.roa Signing time: Thu 01 May 2025 17:25:35 +0000 ROA not before: Thu 01 May 2025 17:25:35 +0000 ROA not after: Wed 30 Jul 2025 17:25:35 +0000 asID: 22773 IP address blocks: 70.181.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:55:e0:09:d7:82:36:39:0a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:35 2025 GMT Not After : Jul 30 17:25:35 2025 GMT Subject: CN=8adc502d-a39e-42cf-875b-b81b83512bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:8a:c9:02:96:c0:54:02:ce:3b:82:20:10: 71:15:57:07:e6:91:f6:4a:74:e7:78:f4:ac:7b:bc: 1c:18:3d:92:cd:fb:8f:60:af:c9:4b:ea:ff:5a:5a: 92:75:c0:5d:bc:58:7e:c1:a1:b5:a7:7b:ac:e1:01: 21:a5:36:db:42:87:ba:24:ea:67:17:f2:23:e5:a2: 48:5f:46:5e:06:71:de:72:53:6e:ae:0f:ac:6a:d0: 77:0d:4d:40:13:6a:ea:e8:7e:80:fa:c7:74:05:86: f0:07:07:08:4e:7d:4a:d6:49:2e:29:e3:56:a8:5a: 74:d6:00:7a:b7:f3:9f:0c:7d:f8:dd:68:df:b2:db: a0:e4:4b:67:42:5b:43:d7:a2:ad:3c:e0:95:5e:e4: a6:50:d5:b6:90:e6:45:6f:18:f4:99:89:66:b8:42: 28:88:f2:4d:7b:5a:f0:c4:a5:7f:c5:1b:a5:e3:05: 06:f4:89:51:ed:9f:a0:a8:d0:be:eb:f8:bc:1b:7e: c9:0a:cf:8b:97:13:04:8e:bc:90:ad:42:c9:fd:3e: bd:45:32:d3:f5:1b:c8:f2:82:4d:a1:d3:76:ee:88: e4:94:47:38:c0:cd:18:6d:d3:f3:0c:a2:7e:82:5e: 0b:1e:7b:b7:cc:d5:d5:7e:83:38:c8:a8:74:3a:6d: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:25:CD:52:37:9A:FE:05:DA:D1:59:D3:86:7C:46:93:A9:DD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b794192-e2b8-3efe-8a0f-c7d965f1af44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d6:a8:b4:8e:45:93:1b:8b:8a:90:45:f2:7a:8b:32:43:98: 81:1d:62:b1:1f:64:38:82:20:eb:05:53:57:b5:92:dc:2d:d7: cd:7e:d1:38:6e:ac:f8:b6:2d:42:5b:14:e8:02:47:92:eb:c7: f9:10:c5:e7:72:ae:a0:bb:8b:a9:2c:97:df:1e:30:ab:50:af: 21:a1:de:32:5b:40:03:b0:c0:14:b0:05:dc:f9:67:f2:f5:ff: 31:0d:0b:18:9e:e6:13:53:9b:1e:39:25:27:2a:73:89:db:56: ca:42:cb:b1:53:17:f3:9b:79:fc:89:aa:a6:3a:49:21:64:6a: 9c:5c:67:36:5c:31:44:18:06:d6:d8:7f:f6:3e:3d:dd:35:d3: 06:96:ba:5b:c1:50:dc:6d:cb:d7:9b:4d:b4:f9:a6:31:72:44: 9e:8d:32:3b:b5:53:b8:cd:d9:b5:02:4b:fb:cf:78:96:23:7c: 7b:59:e2:c1:04:6c:1e:cb:15:d7:04:de:0a:5b:ec:44:c6:d5: 3c:e3:1d:f8:28:59:03:0d:2e:b9:17:5a:ba:f8:71:92:03:6a: 9e:a6:78:58:93:4d:1a:96:d9:52:7c:ba:42:c8:08:ff:69:a0: fa:31:6d:42:01:12:d9:41:a3:5c:4a:51:c0:77:e5:27:d2:8c: 0e:ca:d3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/VXgCdeCNjkKngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzNVoXDTI1MDczMDE3MjUzNVowLzEtMCsGA1UEAxMk OGFkYzUwMmQtYTM5ZS00MmNmLTg3NWItYjgxYjgzNTEyYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC+KyQKWwFQCzjuCIBBxFVcH5pH2SnTnePSs e7wcGD2SzfuPYK/JS+r/WlqSdcBdvFh+waG1p3us4QEhpTbbQoe6JOpnF/Ij5aJI X0ZeBnHeclNurg+satB3DU1AE2rq6H6A+sd0BYbwBwcITn1K1kkuKeNWqFp01gB6 t/OfDH343Wjfstug5EtnQltD16KtPOCVXuSmUNW2kOZFbxj0mYlmuEIoiPJNe1rw xKV/xRul4wUG9IlR7Z+gqNC+6/i8G37JCs+LlxMEjryQrULJ/T69RTLT9RvI8oJN odN27ojklEc4wM0YbdPzDKJ+gl4LHnu3zNXVfoM4yKh0Om1X3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHFJc1SN5r+BdrRWdOGfEaTqd21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWI3OTQxOTItZTJiOC0z ZWZlLThhMGYtYzdkOTY1ZjFhZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITWqLSORZMbi4qQRfJ6izJDmIEdYrEfZDiCIOsFU1e1ktwt181+0Thu rPi2LUJbFOgCR5Lrx/kQxedyrqC7i6ksl98eMKtQryGh3jJbQAOwwBSwBdz5Z/L1 /zENCxie5hNTmx45JScqc4nbVspCy7FTF/ObefyJqqY6SSFkapxcZzZcMUQYBtbY f/Y+Pd010waWulvBUNxty9ebTbT5pjFyRJ6NMju1U7jN2bUCS/vPeJYjfHtZ4sEE bB7LFdcE3gpb7ETG1TzjHfgoWQMNLrkXWrr4cZIDap6meFiTTRqW2VJ8ukLICP9p oPoxbUIBEtlBo1xKUcB35SfSjA7K0xc= -----END CERTIFICATE-----Generated at Sat May 10 22:22:05 2025 by rpki-client