$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa File: 221ee8af-67af-39f0-8880-44845100db4f.roa (raw, json) Hash identifier: lZUWEi4HlYF1ZsK5dT+lkHkgeZi55G6zdoFW4bycM4g= Subject key identifier: 71:69:BA:43:C8:25:BF:E7:F5:93:8A:B5:6C:23:E4:A9:50:97:4B:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57E3F8A1DB9A6CD989680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa Signing time: Thu 01 May 2025 17:09:46 +0000 ROA not before: Thu 01 May 2025 17:09:46 +0000 ROA not after: Wed 30 Jul 2025 17:09:46 +0000 asID: 22773 IP address blocks: 70.172.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7e:3f:8a:1d:b9:a6:cd:98:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:46 2025 GMT Not After : Jul 30 17:09:46 2025 GMT Subject: CN=68101ce9-7ca0-4d68-b811-9e1a9c993e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:75:5f:5f:19:19:af:de:fd:21:66:91:c8: 26:ac:4b:50:87:d8:f3:b6:bc:d8:7c:de:97:7e:8d: 4e:b5:ae:55:a2:ab:58:c5:e2:71:7e:00:a3:01:44: 5b:c3:d5:20:17:61:23:d7:e1:80:f4:f1:a7:c6:88: 54:22:3e:6e:13:e8:22:17:53:6c:7a:01:91:2f:ab: 8c:80:03:ad:e0:fe:a2:c8:9f:c8:54:80:aa:67:a2: d9:4a:fa:ad:4b:93:16:b5:37:db:93:43:6e:64:90: 27:89:45:8f:58:b4:b1:d9:c2:37:28:25:d6:b2:af: f6:82:5d:91:49:b4:b5:2d:43:02:07:df:8b:16:10: e9:5e:1c:12:0a:24:53:49:73:5f:c7:e7:95:28:c5: ec:93:95:5b:98:81:ea:62:2a:0c:e8:3d:c3:47:ce: 59:37:6a:2f:b3:1e:59:6c:c2:b6:53:80:02:a7:72: 0c:46:88:84:70:c7:64:18:9a:56:1f:34:a6:58:56: e8:c2:f4:6c:26:b3:39:a6:bb:64:f6:2a:ae:97:ba: 5c:4e:33:19:ed:ea:c8:87:38:64:44:29:26:86:3a: 16:3a:be:b3:06:d0:41:6c:52:e7:6b:ea:2c:6e:50: d5:46:55:bb:06:8b:7d:ef:6a:1f:be:a4:8f:05:39: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:69:BA:43:C8:25:BF:E7:F5:93:8A:B5:6C:23:E4:A9:50:97:4B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b6:69:4f:50:f2:dc:8c:b9:f2:12:25:a5:ba:ff:e6:81:7c: 0a:8e:83:ac:8f:c1:97:4b:6e:94:a2:24:6b:ed:dd:ba:16:98: 19:d2:a4:f8:7a:e6:80:b0:c0:20:f9:16:f3:0e:52:7b:0d:73: f3:0f:6a:49:fd:27:d0:18:de:d2:a2:ab:9a:78:4e:01:da:77: 08:0a:6a:50:76:a2:cf:45:a5:5f:9c:c7:50:65:5d:e8:f4:39: 0d:18:c5:2b:95:84:2c:f9:a1:07:fe:de:d0:1a:c2:54:64:6b: e4:28:a6:87:96:8e:5a:f5:69:69:2d:85:a2:e5:51:56:cf:aa: 99:7a:7e:8c:ad:59:ad:b1:41:59:f4:b8:95:61:fe:8c:b0:5f: 15:f3:51:1d:6e:5d:9e:40:2a:6a:3b:c6:75:1b:75:c5:9c:e2: eb:06:4a:05:34:dd:96:f8:3d:17:93:96:74:42:62:d0:bc:d1: 37:4e:bc:0e:07:00:ed:d2:df:0c:f7:5b:9a:fd:d3:f9:85:9e: 9d:97:bb:04:94:86:b7:6a:7d:a6:0d:46:2c:f4:78:53:eb:f0: f2:aa:f5:18:f7:96:7c:97:d3:2e:d1:80:7f:9a:c0:a0:a6:6d: c5:f9:ea:81:8d:5a:da:2e:ce:bb:d2:cf:ca:4c:96:48:03:4d: eb:ee:60:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19X4/ih25ps2YloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NloXDTI1MDczMDE3MDk0NlowLzEtMCsGA1UEAxMk NjgxMDFjZTktN2NhMC00ZDY4LWI4MTEtOWUxYTljOTkzZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDV1X18ZGa/e/SFmkcgmrEtQh9jztrzYfN6X fo1Ota5VoqtYxeJxfgCjAURbw9UgF2Ej1+GA9PGnxohUIj5uE+giF1NsegGRL6uM gAOt4P6iyJ/IVICqZ6LZSvqtS5MWtTfbk0NuZJAniUWPWLSx2cI3KCXWsq/2gl2R SbS1LUMCB9+LFhDpXhwSCiRTSXNfx+eVKMXsk5VbmIHqYioM6D3DR85ZN2ovsx5Z bMK2U4ACp3IMRoiEcMdkGJpWHzSmWFbowvRsJrM5prtk9iqul7pcTjMZ7erIhzhk RCkmhjoWOr6zBtBBbFLna+osblDVRlW7Bot972ofvqSPBTk9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFpukPIJb/n9ZOKtWwj5KlQl0u8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxZWU4YWYtNjdhZi0z OWYwLTg4ODAtNDQ4NDUxMDBkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO2aU9Q8tyMufISJaW6/+aBfAqOg6yPwZdLbpSiJGvt3boWmBnSpPh6 5oCwwCD5FvMOUnsNc/MPakn9J9AY3tKiq5p4TgHadwgKalB2os9FpV+cx1BlXej0 OQ0YxSuVhCz5oQf+3tAawlRka+QopoeWjlr1aWkthaLlUVbPqpl6foytWa2xQVn0 uJVh/oywXxXzUR1uXZ5AKmo7xnUbdcWc4usGSgU03Zb4PReTlnRCYtC80TdOvA4H AO3S3wz3W5r90/mFnp2XuwSUhrdqfaYNRiz0eFPr8PKq9Rj3lnyX0y7RgH+awKCm bcX56oGNWtouzrvSz8pMlkgDTevuYE0= -----END CERTIFICATE-----Generated at Wed May 14 11:44:43 2025 by rpki-client