$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d74b6d-2325-3178-90e2-de3554e8ec4b.roa File: 34d74b6d-2325-3178-90e2-de3554e8ec4b.roa (raw, json) Hash identifier: 2eAT5fc6DpzDlDBcXpTpdYDFocPY0DvBRGPOjHI6AYY= Subject key identifier: 6C:B3:14:D3:49:A2:F3:C0:EE:FA:CA:6A:2D:61:1B:DF:7A:5E:62:BD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F88B72934A39DF8B0B5B60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d74b6d-2325-3178-90e2-de3554e8ec4b.roa Signing time: Thu 01 May 2025 17:15:55 +0000 ROA not before: Thu 01 May 2025 17:15:55 +0000 ROA not after: Wed 30 Jul 2025 17:15:55 +0000 asID: 22773 IP address blocks: 174.66.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:8b:72:93:4a:39:df:8b:0b:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:55 2025 GMT Not After : Jul 30 17:15:55 2025 GMT Subject: CN=785c3631-7edb-4e56-91d6-15f1ee5c3783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:60:4a:cc:e7:ef:b5:be:ba:12:31:31:44:1c: 10:1b:e7:d1:a1:d9:08:51:9a:57:25:28:c0:06:20: 22:c7:22:11:f5:60:29:81:0b:7d:75:7b:d6:d6:98: 67:cb:d5:31:14:f8:58:20:b2:65:f3:ba:d4:70:d7: 83:81:13:cb:27:22:a3:c8:a8:d6:1b:94:6e:b6:31: df:33:8d:3b:b8:eb:9b:95:38:73:d9:7f:04:53:c6: 46:94:22:9e:a6:ef:52:49:17:b1:1d:88:45:14:4b: 0d:15:c0:00:16:02:4a:9a:ab:cc:dc:e4:1f:58:34: 73:f9:99:72:d8:e8:d9:f5:29:15:0a:26:00:6e:05: 3b:85:b0:f9:31:c9:d9:c5:c0:55:75:cf:96:db:65: a9:d6:5d:3b:fa:1c:20:73:c9:b0:f8:f1:d5:00:f0: bf:ab:e4:93:b2:c9:bd:d2:dc:9b:5b:eb:54:9e:5b: 13:6d:98:af:62:c4:aa:60:71:da:24:6e:81:f1:95: 83:d1:9e:43:79:1d:87:c2:c9:af:0f:ef:e9:83:3d: a2:fd:ed:ca:e7:0a:21:b1:f4:4d:b6:2d:c0:41:04: 76:ab:6d:b0:ff:41:33:7f:7c:fa:f3:dc:bc:45:d4: 32:29:aa:cc:8a:7f:46:62:41:4b:a0:ec:83:b9:6f: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B3:14:D3:49:A2:F3:C0:EE:FA:CA:6A:2D:61:1B:DF:7A:5E:62:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34d74b6d-2325-3178-90e2-de3554e8ec4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ca:c0:f5:df:63:f5:a0:17:ed:c4:3b:fe:85:e2:9d:29:c1: 71:17:a3:91:b6:ea:bf:de:e0:61:f5:19:55:28:0a:af:b4:49: e6:86:0f:c0:77:1c:26:80:64:48:99:14:d0:00:cf:f3:0d:92: 20:f6:29:bb:b0:8e:54:4d:d3:b3:18:20:de:7a:9c:49:22:26: be:f7:2f:0e:88:89:45:fd:02:49:c6:81:44:22:4e:c1:54:f5: f1:ab:06:6b:ef:60:a1:f0:49:ef:7a:be:12:86:ea:7e:85:23: 7e:13:c8:cd:bf:17:8b:7f:31:b2:66:c2:e0:67:c3:4c:c2:c3: 1e:62:e1:82:b9:91:8f:16:d3:4a:bf:72:b4:92:42:a5:55:73: d1:a2:a9:62:f4:41:00:d5:ed:1f:07:76:b3:14:89:5d:72:72: 92:7b:9c:d5:9d:3f:56:fd:f7:af:0a:da:f6:fa:de:0d:c2:d3: 3a:ed:68:c7:d0:76:e2:f7:c2:7f:3a:d8:ec:c2:4f:3e:de:e1: ea:7e:cc:25:f6:6a:cb:f2:d9:9c:f8:17:44:bd:61:72:17:f1: 39:37:ad:e5:ca:0f:61:86:6d:02:a9:eb:78:25:57:de:a3:34: be:e1:0e:1c:d6:ad:4a:5c:3a:6d:d7:f2:dd:ec:98:49:d5:02: 51:04:a3:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+Ityk0o534sLW2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTU1NVoXDTI1MDczMDE3MTU1NVowLzEtMCsGA1UEAxMk Nzg1YzM2MzEtN2VkYi00ZTU2LTkxZDYtMTVmMWVlNWMzNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42BKzOfvtb66EjExRBwQG+fRodkIUZpXJSjA BiAixyIR9WApgQt9dXvW1phny9UxFPhYILJl87rUcNeDgRPLJyKjyKjWG5RutjHf M407uOublThz2X8EU8ZGlCKepu9SSRexHYhFFEsNFcAAFgJKmqvM3OQfWDRz+Zly 2OjZ9SkVCiYAbgU7hbD5McnZxcBVdc+W22Wp1l07+hwgc8mw+PHVAPC/q+STssm9 0tybW+tUnlsTbZivYsSqYHHaJG6B8ZWD0Z5DeR2HwsmvD+/pgz2i/e3K5wohsfRN ti3AQQR2q22w/0Ezf3z689y8RdQyKarMin9GYkFLoOyDuW/zcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyzFNNJovPA7vrKai1hG996XmK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzRkNzRiNmQtMjMyNS0z MTc4LTkwZTItZGUzNTU0ZThlYzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkIJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzKwPXfY/WgF+3EO/6F4p0pwXEXo5G26r/e4GH1GVUoCq+0SeaGD8B3 HCaAZEiZFNAAz/MNkiD2KbuwjlRN07MYIN56nEkiJr73Lw6IiUX9AknGgUQiTsFU 9fGrBmvvYKHwSe96vhKG6n6FI34TyM2/F4t/MbJmwuBnw0zCwx5i4YK5kY8W00q/ crSSQqVVc9GiqWL0QQDV7R8HdrMUiV1ycpJ7nNWdP1b9968K2vb63g3C0zrtaMfQ duL3wn862OzCTz7e4ep+zCX2asvy2Zz4F0S9YXIX8Tk3reXKD2GGbQKp63glV96j NL7hDhzWrUpcOm3X8t3smEnVAlEEoyQ= -----END CERTIFICATE-----Generated at Mon May 12 04:38:09 2025 by rpki-client