$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b927dd-8b9c-3e94-893f-f914b52b898f.roa File: 23b927dd-8b9c-3e94-893f-f914b52b898f.roa (raw, json) Hash identifier: mOFsZ/mb/Klsbvm4Dglfod4XTRdJ5ZrN4MVk+xtmRlQ= Subject key identifier: 02:CC:F6:7B:6D:92:FB:ED:61:3C:16:CF:27:EF:E9:02:B7:03:8C:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57F52F1408B2B331A8380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b927dd-8b9c-3e94-893f-f914b52b898f.roa Signing time: Thu 01 May 2025 17:09:47 +0000 ROA not before: Thu 01 May 2025 17:09:47 +0000 ROA not after: Wed 30 Jul 2025 17:09:47 +0000 asID: 22773 IP address blocks: 70.172.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7f:52:f1:40:8b:2b:33:1a:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:47 2025 GMT Not After : Jul 30 17:09:47 2025 GMT Subject: CN=8aae2ebd-672d-4803-9782-8dce3273a581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:ca:33:01:0b:68:ec:56:87:cf:b5:fd:62: 02:a1:f1:54:c9:27:ed:77:b4:69:ee:a1:76:15:3d: ff:60:19:7d:19:f4:1a:eb:5f:e4:a8:1c:66:1b:08: bd:43:71:05:3a:77:59:d1:50:9d:9b:82:18:32:90: de:47:db:98:8c:a1:fa:18:5d:9d:34:c7:f6:89:80: 59:b9:31:2e:a4:c6:47:12:eb:51:f1:e2:f9:e2:17: 7d:0c:de:6c:6d:86:7c:24:2a:4a:20:e2:f1:e7:fb: 7f:3e:a2:ff:45:69:f1:b3:e2:cd:1f:6a:71:4e:2a: 5a:a5:2e:12:7d:1e:27:0e:ac:0f:58:b6:d2:ef:93: 33:4f:af:ac:9d:6c:67:d5:27:23:9c:28:61:71:1f: 5d:28:47:4d:1f:12:6d:bd:f5:6d:b5:67:44:55:aa: 11:c0:3f:a7:99:d8:21:65:11:58:85:df:f1:08:6a: bb:18:b4:d3:76:8b:68:d6:37:44:4a:5e:98:05:67: d5:b3:64:2c:2d:6d:40:a4:cc:5a:74:60:a3:ec:07: aa:31:86:82:b8:ce:b6:76:5b:a9:8f:c4:91:0b:b0: 0c:a2:7c:e5:86:e9:4a:fc:e0:e9:3b:2b:c8:b1:8c: 89:0c:a7:19:b9:0c:33:51:a2:e5:e1:e4:e7:8c:7e: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CC:F6:7B:6D:92:FB:ED:61:3C:16:CF:27:EF:E9:02:B7:03:8C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23b927dd-8b9c-3e94-893f-f914b52b898f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c4:58:87:97:bb:5a:61:b7:79:e4:66:55:8e:42:2b:70:dd: 07:b0:1c:27:84:7c:34:1d:03:a0:f8:6f:32:be:3d:75:fb:2a: fa:bc:14:96:a2:3a:92:2c:1b:74:5f:a3:a0:09:64:04:0d:65: 33:7e:8b:9f:06:49:c9:c8:53:a4:c4:eb:2b:06:80:fc:25:8e: 8c:3e:57:98:f7:a8:7c:63:c6:db:8a:fd:ae:1d:62:df:0c:48: 5f:b8:12:77:13:72:b8:bd:49:1e:85:e8:96:0b:80:5c:2d:75: 6f:15:e5:1c:76:d3:22:d4:ea:44:3a:80:e1:f0:60:0b:fa:1d: 35:8c:9a:c2:3e:39:60:08:dd:80:c5:f5:d6:4d:3b:87:4c:b2: bd:73:3b:6f:3c:2c:86:d1:1b:08:5f:10:8a:79:2d:6d:e4:dd: 75:5c:38:5e:9b:18:89:ee:09:be:e9:ae:ef:4a:4d:3c:91:4e: 4a:64:31:e2:75:9f:14:11:c9:b0:a4:d5:e1:4e:8c:bf:28:70: e5:1b:95:aa:02:a7:a8:1b:96:8b:31:fe:04:c1:bc:bd:f9:c7: 63:e3:b3:17:24:76:c3:c2:13:d9:b7:cf:9d:77:ba:62:f6:4d: 19:c5:db:0a:d8:39:bb:b5:13:cd:ef:c4:cd:64:35:8c:29:83: b8:b1:84:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19X9S8UCLKzMag4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0N1oXDTI1MDczMDE3MDk0N1owLzEtMCsGA1UEAxMk OGFhZTJlYmQtNjcyZC00ODAzLTk3ODItOGRjZTMyNzNhNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArefKMwELaOxWh8+1/WICofFUySftd7Rp7qF2 FT3/YBl9GfQa61/kqBxmGwi9Q3EFOndZ0VCdm4IYMpDeR9uYjKH6GF2dNMf2iYBZ uTEupMZHEutR8eL54hd9DN5sbYZ8JCpKIOLx5/t/PqL/RWnxs+LNH2pxTipapS4S fR4nDqwPWLbS75MzT6+snWxn1ScjnChhcR9dKEdNHxJtvfVttWdEVaoRwD+nmdgh ZRFYhd/xCGq7GLTTdoto1jdESl6YBWfVs2QsLW1ApMxadGCj7AeqMYaCuM62dlup j8SRC7AMonzlhulK/ODpOyvIsYyJDKcZuQwzUaLl4eTnjH7+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALM9nttkvvtYTwWzyfv6QK3A4yLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjNiOTI3ZGQtOGI5Yy0z ZTk0LTg5M2YtZjkxNGI1MmI4OThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvEWIeXu1pht3nkZlWOQitw3QewHCeEfDQdA6D4bzK+PXX7Kvq8FJai OpIsG3Rfo6AJZAQNZTN+i58GScnIU6TE6ysGgPwljow+V5j3qHxjxtuK/a4dYt8M SF+4EncTcri9SR6F6JYLgFwtdW8V5Rx20yLU6kQ6gOHwYAv6HTWMmsI+OWAI3YDF 9dZNO4dMsr1zO288LIbRGwhfEIp5LW3k3XVcOF6bGInuCb7pru9KTTyRTkpkMeJ1 nxQRybCk1eFOjL8ocOUblaoCp6gblosx/gTBvL35x2PjsxckdsPCE9m3z513umL2 TRnF2wrYObu1E83vxM1kNYwpg7ixhPY= -----END CERTIFICATE-----Generated at Fri May 9 23:45:53 2025 by rpki-client