$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa File: 21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa (raw, json) Hash identifier: QFxFleREtWzlQt6Khh4WR7pK9NY21yyZ1iv2bzP9OyY= Subject key identifier: 1F:BA:26:B5:6C:85:91:39:4D:FC:A9:42:C5:B1:AB:9F:01:BD:38:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD4F9EA7432A5F3A1D4640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa Signing time: Thu 01 May 2025 17:25:32 +0000 ROA not before: Thu 01 May 2025 17:25:32 +0000 ROA not after: Wed 30 Jul 2025 17:25:32 +0000 asID: 22773 IP address blocks: 70.181.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:4f:9e:a7:43:2a:5f:3a:1d:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:32 2025 GMT Not After : Jul 30 17:25:32 2025 GMT Subject: CN=273d1d91-99dc-41dd-a3c1-170fd427612b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:a9:9d:77:e5:e2:18:f4:38:72:0d:de:35: e5:8c:62:b7:c0:fe:b5:a5:e0:4a:b0:2b:c3:41:28: 45:47:67:12:95:c3:57:88:d1:39:03:e6:27:c2:81: 11:3f:12:c4:0d:5a:f9:d9:33:01:1f:9c:b0:53:58: 2f:1c:24:66:ed:9b:b1:07:f7:7a:0a:c8:e5:9d:c5: 38:96:c6:c2:56:bf:5c:13:72:38:9b:3f:aa:ff:4e: a5:69:29:b2:9e:79:46:07:27:af:0d:c9:3b:fc:64: 47:1b:a9:5b:31:f2:40:30:09:ee:31:a2:88:57:c1: 62:52:33:93:66:20:a9:10:f9:c0:0c:88:f3:44:07: b9:5a:03:e1:5a:1f:be:a5:a3:4c:8e:62:df:90:18: 9b:dc:b3:e9:a9:f5:26:b6:d5:4d:ad:b9:54:76:15: 17:2d:4c:45:6a:5d:b9:88:db:f6:59:f9:06:c0:57: 7b:44:b2:6f:0e:30:f7:07:91:19:ab:95:fb:22:f7: fb:08:5f:cd:07:b8:02:37:4b:c4:a4:e9:6c:e0:8d: d9:69:11:7e:c2:2f:9d:84:63:38:ad:78:39:5c:33: d3:7b:ef:d4:b8:9b:70:5a:ad:5e:36:ea:2d:dd:c9: cd:c1:fa:7c:bd:40:d9:74:01:03:69:05:39:96:84: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:26:B5:6C:85:91:39:4D:FC:A9:42:C5:B1:AB:9F:01:BD:38:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21e8f22d-24ee-357a-baba-b3f5f8a7457e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:98:43:6a:9a:9c:d7:b6:e4:d1:ae:eb:c6:b9:75:45:b1:1f: ca:00:e3:fb:85:2a:0a:d2:01:9a:f4:0e:e2:21:95:c5:0e:83: d9:57:5e:da:10:c4:1d:de:59:5d:29:c6:ff:ff:21:c2:75:8d: e7:ce:d8:a1:c9:d9:66:0a:5d:19:a6:02:4b:5c:da:99:17:3a: df:05:c7:f3:ca:0a:e6:f3:2b:a6:ec:55:e7:f8:0f:24:52:cf: 49:52:ec:74:46:ad:02:9e:6e:8e:e4:d7:41:d6:26:01:e0:13: 64:25:d0:d9:cc:6b:1a:4c:87:10:41:61:e4:f1:80:3b:ec:fa: 2f:9a:bd:32:87:aa:e5:6c:70:60:78:c8:34:a2:fe:19:e7:1c: 05:af:9e:39:dd:d1:30:ec:c6:55:36:ae:1b:96:de:9b:78:3c: 04:13:5c:c2:39:aa:39:7a:21:cb:97:e2:9b:0f:78:51:17:6d: 22:a1:da:b9:54:f7:a5:5c:47:bf:ca:bc:b4:17:58:0d:c4:63: b5:0e:80:29:37:7f:48:d2:c6:dd:08:ce:c8:2e:bd:fd:ab:23: 6a:11:93:55:b5:62:d8:11:de:12:46:be:a2:aa:72:ca:fc:9c: 70:3f:d5:13:59:f5:86:8f:6e:f8:7b:70:c9:a4:3d:1f:60:c2: e4:8b:96:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/U+ep0MqXzodRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzMloXDTI1MDczMDE3MjUzMlowLzEtMCsGA1UEAxMk MjczZDFkOTEtOTlkYy00MWRkLWEzYzEtMTcwZmQ0Mjc2MTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgmpnXfl4hj0OHIN3jXljGK3wP61peBKsCvD QShFR2cSlcNXiNE5A+YnwoERPxLEDVr52TMBH5ywU1gvHCRm7ZuxB/d6CsjlncU4 lsbCVr9cE3I4mz+q/06laSmynnlGByevDck7/GRHG6lbMfJAMAnuMaKIV8FiUjOT ZiCpEPnADIjzRAe5WgPhWh++paNMjmLfkBib3LPpqfUmttVNrblUdhUXLUxFal25 iNv2WfkGwFd7RLJvDjD3B5EZq5X7Ivf7CF/NB7gCN0vEpOls4I3ZaRF+wi+dhGM4 rXg5XDPTe+/UuJtwWq1eNuot3cnNwfp8vUDZdAEDaQU5loRENQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+6JrVshZE5TfypQsWxq58BvTjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFlOGYyMmQtMjRlZS0z NTdhLWJhYmEtYjNmNWY4YTc0NTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOYQ2qanNe25NGu68a5dUWxH8oA4/uFKgrSAZr0DuIhlcUOg9lXXtoQ xB3eWV0pxv//IcJ1jefO2KHJ2WYKXRmmAktc2pkXOt8Fx/PKCubzK6bsVef4DyRS z0lS7HRGrQKebo7k10HWJgHgE2Ql0NnMaxpMhxBBYeTxgDvs+i+avTKHquVscGB4 yDSi/hnnHAWvnjnd0TDsxlU2rhuW3pt4PAQTXMI5qjl6IcuX4psPeFEXbSKh2rlU 96VcR7/KvLQXWA3EY7UOgCk3f0jSxt0Izsguvf2rI2oRk1W1YtgR3hJGvqKqcsr8 nHA/1RNZ9YaPbvh7cMmkPR9gwuSLllY= -----END CERTIFICATE-----Generated at Sun May 11 22:03:14 2025 by rpki-client