$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa File: 2b348d42-e915-30c8-90d9-c6a574165b90.roa (raw, json) Hash identifier: brnJEfced2q6y0xGuiBDUG04Y767p7W9t1a8JG5EiGg= Subject key identifier: 53:10:3A:C8:0D:51:AA:4E:58:97:F7:EB:DB:C5:F0:B8:93:C4:55:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57A4233B11143BF4F7210 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa Signing time: Thu 01 May 2025 17:09:45 +0000 ROA not before: Thu 01 May 2025 17:09:45 +0000 ROA not after: Wed 30 Jul 2025 17:09:45 +0000 asID: 22773 IP address blocks: 70.172.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7a:42:33:b1:11:43:bf:4f:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:45 2025 GMT Not After : Jul 30 17:09:45 2025 GMT Subject: CN=46e4609f-3add-4ef5-aae8-583abbf04aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:ac:7c:60:f6:81:51:71:20:a1:ec:e9:f1: 26:56:25:14:6c:30:74:ac:cc:a1:8a:ab:90:33:09: da:75:24:8c:b1:8c:d7:3d:87:2b:d9:c3:d2:d2:bd: c9:5f:85:d9:aa:a5:a5:12:7d:40:43:e4:8a:07:7d: 16:b3:82:73:f2:9d:80:b5:e2:22:9c:d3:a8:74:c7: 55:09:16:aa:36:2e:89:39:76:4c:d6:5c:bf:78:a4: dd:37:70:f6:87:f8:24:63:58:98:c1:8a:b3:53:c5: da:78:44:68:19:ef:3d:71:49:d5:d0:1e:9f:fe:b9: 0d:b1:84:78:9b:15:75:81:09:75:bf:07:cd:90:64: 42:6b:0f:6b:88:4c:9b:67:b0:cb:56:6b:04:2e:b9: 7f:39:68:51:cd:04:a1:c4:be:09:30:2d:f5:4c:c2: e4:6c:a3:ea:e0:30:e0:9c:df:a3:79:b9:35:ac:56: 62:d1:eb:85:19:8b:83:4c:8f:5e:8b:a7:be:5b:7d: 8f:9f:90:55:d3:85:54:dc:77:6c:5a:48:88:59:3c: c1:5e:0b:47:2a:ad:95:42:12:1b:94:07:0c:20:2f: 8f:70:ec:0b:8e:d9:e4:f1:f4:10:4d:c4:01:13:79: 7d:cb:2f:07:01:a5:61:7d:7d:c1:a5:8d:37:73:95: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:10:3A:C8:0D:51:AA:4E:58:97:F7:EB:DB:C5:F0:B8:93:C4:55:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b348d42-e915-30c8-90d9-c6a574165b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:66:88:f9:56:ee:cf:6a:56:cd:2e:42:77:6f:68:8b:05:eb: 93:05:ba:ac:82:ab:94:96:66:f4:40:df:df:75:fb:e8:8a:ad: 55:b6:69:9c:4b:42:80:e9:19:f5:0d:f0:0c:7d:51:46:08:87: ee:21:ba:14:50:f3:44:ab:b6:2f:30:8f:4c:0c:2d:8e:8e:4f: a2:7c:22:48:95:46:5c:1c:ed:39:5b:f0:e6:31:cc:c0:f3:20: 35:5a:89:54:42:86:ec:92:f0:3b:22:fb:86:c1:c3:81:d5:0e: a1:69:1e:4c:ee:a5:fb:91:c4:78:42:ed:eb:0e:da:03:6d:f3: 8a:f3:fc:03:16:ba:d3:bc:90:f9:47:4d:4d:e5:78:38:5b:8d: 35:ca:09:9e:ef:1c:2d:fd:38:e4:20:72:19:1d:33:3b:9a:c7: b9:42:c8:87:8b:87:cf:90:5e:65:f6:b5:2c:da:f4:ec:f1:a5: 83:f1:7a:1b:50:c7:f1:d1:ae:8e:64:5b:ac:d4:43:0a:07:c9: 38:3c:47:8d:84:2e:6c:b6:73:d6:70:68:0e:c8:c7:56:76:88: 3e:d2:a3:ea:82:e7:8e:b6:0c:c2:6e:ca:1f:a3:b9:03:78:8f: dd:9d:de:2b:2a:91:ce:04:2e:d7:5a:96:9b:1c:2d:f3:e5:47: 5f:82:8e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XpCM7ERQ79PchAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NVoXDTI1MDczMDE3MDk0NVowLzEtMCsGA1UEAxMk NDZlNDYwOWYtM2FkZC00ZWY1LWFhZTgtNTgzYWJiZjA0YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eCsfGD2gVFxIKHs6fEmViUUbDB0rMyhiquQ MwnadSSMsYzXPYcr2cPS0r3JX4XZqqWlEn1AQ+SKB30Ws4Jz8p2AteIinNOodMdV CRaqNi6JOXZM1ly/eKTdN3D2h/gkY1iYwYqzU8XaeERoGe89cUnV0B6f/rkNsYR4 mxV1gQl1vwfNkGRCaw9riEybZ7DLVmsELrl/OWhRzQShxL4JMC31TMLkbKPq4DDg nN+jebk1rFZi0euFGYuDTI9ei6e+W32Pn5BV04VU3HdsWkiIWTzBXgtHKq2VQhIb lAcMIC+PcOwLjtnk8fQQTcQBE3l9yy8HAaVhfX3BpY03c5UAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMQOsgNUapOWJf369vF8LiTxFVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmIzNDhkNDItZTkxNS0z MGM4LTkwZDktYzZhNTc0MTY1YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5miPlW7s9qVs0uQndvaIsF65MFuqyCq5SWZvRA3991++iKrVW2aZxL QoDpGfUN8Ax9UUYIh+4huhRQ80Srti8wj0wMLY6OT6J8IkiVRlwc7Tlb8OYxzMDz IDVaiVRChuyS8Dsi+4bBw4HVDqFpHkzupfuRxHhC7esO2gNt84rz/AMWutO8kPlH TU3leDhbjTXKCZ7vHC39OOQgchkdMzuax7lCyIeLh8+QXmX2tSza9OzxpYPxehtQ x/HRro5kW6zUQwoHyTg8R42ELmy2c9ZwaA7Ix1Z2iD7So+qC5462DMJuyh+juQN4 j92d3isqkc4ELtdalpscLfPlR1+CjrM= -----END CERTIFICATE-----Generated at Sun May 11 16:54:00 2025 by rpki-client