$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac90dd-66a5-330a-9a29-659dcf4c1c67.roa File: 35ac90dd-66a5-330a-9a29-659dcf4c1c67.roa (raw, json) Hash identifier: 0Q7gCP/NYxKgjUDWVH+5cKw1uX0XdFhCfklq27279KE= Subject key identifier: E8:EE:2F:A9:40:DA:7A:8C:18:D7:F5:FC:45:6E:19:8A:7E:9F:E8:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDE1E9BDB2073A7C083C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac90dd-66a5-330a-9a29-659dcf4c1c67.roa Signing time: Thu 01 May 2025 17:26:41 +0000 ROA not before: Thu 01 May 2025 17:26:41 +0000 ROA not after: Wed 30 Jul 2025 17:26:41 +0000 asID: 22773 IP address blocks: 174.65.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:e1:e9:bd:b2:07:3a:7c:08:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:41 2025 GMT Not After : Jul 30 17:26:41 2025 GMT Subject: CN=8541e28f-82e1-46fb-89f0-4588b805c67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:18:cc:5c:7e:91:3d:84:54:cb:56:da:92:f3: ac:ac:47:4e:44:69:00:e5:c9:77:e2:3f:68:e9:08: c4:7e:80:1a:a7:ab:8c:1d:ab:21:aa:54:70:78:30: b1:ef:16:e1:db:88:33:3a:25:3b:9e:fb:83:a7:9f: 56:00:ba:05:c2:26:4e:c0:99:07:a6:0c:ad:d4:f5: 14:d3:4f:d9:44:0a:d5:c8:2a:03:c2:e4:3c:a0:95: c6:63:cc:30:b9:b2:8f:f0:79:ad:c5:96:5e:fa:17: 13:4c:43:a3:2a:b6:51:4d:34:21:62:a9:ad:3f:d4: bf:10:cc:29:e9:01:f7:76:da:e5:ac:dd:96:0f:a9: 15:5b:f3:de:03:48:25:7e:af:ed:0f:86:3a:c9:c9: 1e:b2:53:1d:b2:71:3a:11:d0:5e:07:92:69:a2:05: 96:63:2b:09:6a:41:73:94:e0:01:23:aa:cc:3b:03: e3:ff:e2:fd:bf:97:cc:a0:68:40:34:a1:ae:16:d9: 79:02:3e:6b:1f:fd:05:24:dd:b2:db:68:50:af:5c: 33:52:e6:07:7d:4c:89:16:20:f9:f8:87:1c:65:52: df:7e:a2:dc:57:c6:96:4a:51:75:bb:5a:d4:a8:df: c1:52:66:e8:b9:b9:7c:53:c6:bf:f2:6f:e9:70:78: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EE:2F:A9:40:DA:7A:8C:18:D7:F5:FC:45:6E:19:8A:7E:9F:E8:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac90dd-66a5-330a-9a29-659dcf4c1c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f0:fe:28:fa:97:8c:80:de:e7:c5:1f:e7:46:90:48:af:2d: 53:ee:33:40:64:b9:37:1a:8a:da:7e:8e:bc:fe:21:f9:99:66: 15:a8:61:5a:e2:24:3d:f9:85:b2:52:79:fa:06:b7:c2:c6:09: 08:1b:63:61:89:c4:49:78:95:e4:09:21:6e:d2:85:6e:aa:14: a6:37:a5:cb:22:bd:11:7b:32:bf:7c:39:f2:27:b9:17:63:18: 6d:70:52:c0:8c:10:4d:e9:4d:88:34:bd:13:60:08:fc:6e:f4: 95:d8:e5:c5:dd:85:35:17:84:96:0d:e0:d5:2a:58:32:7b:77: af:56:1c:b3:01:5c:32:4c:72:b0:59:32:3d:cd:42:8b:af:c0: 3d:37:ba:d1:a3:4e:b4:6a:c5:5d:d2:f0:41:b2:ff:1a:ef:e5: 45:c1:e2:76:2f:e0:09:85:8e:03:13:65:9a:04:51:3f:a1:90: 47:29:52:2b:3b:6e:3a:88:ff:e9:4c:c3:ba:e0:50:23:74:c2: c4:e5:4e:f8:ac:f9:09:23:ad:c9:cc:2f:4d:8c:a1:9e:52:b7: bd:6b:e7:61:d3:79:0c:31:ce:33:f9:ee:39:b0:55:08:da:6a: 17:f1:ec:7b:b8:3e:f7:f7:5a:6c:e0:db:d0:8c:5f:75:b0:8e: 66:f8:a5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/eHpvbIHOnwIPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY0MVoXDTI1MDczMDE3MjY0MVowLzEtMCsGA1UEAxMk ODU0MWUyOGYtODJlMS00NmZiLTg5ZjAtNDU4OGI4MDVjNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRjMXH6RPYRUy1bakvOsrEdORGkA5cl34j9o 6QjEfoAap6uMHashqlRweDCx7xbh24gzOiU7nvuDp59WALoFwiZOwJkHpgyt1PUU 00/ZRArVyCoDwuQ8oJXGY8wwubKP8HmtxZZe+hcTTEOjKrZRTTQhYqmtP9S/EMwp 6QH3dtrlrN2WD6kVW/PeA0glfq/tD4Y6yckeslMdsnE6EdBeB5JpogWWYysJakFz lOABI6rMOwPj/+L9v5fMoGhANKGuFtl5Aj5rH/0FJN2y22hQr1wzUuYHfUyJFiD5 +IccZVLffqLcV8aWSlF1u1rUqN/BUmboubl8U8a/8m/pcHjI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjuL6lA2nqMGNf1/EVuGYp+n+gIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVhYzkwZGQtNjZhNS0z MzBhLTlhMjktNjU5ZGNmNGMxYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/w/ij6l4yA3ufFH+dGkEivLVPuM0BkuTcaitp+jrz+IfmZZhWoYVri JD35hbJSefoGt8LGCQgbY2GJxEl4leQJIW7ShW6qFKY3pcsivRF7Mr98OfInuRdj GG1wUsCMEE3pTYg0vRNgCPxu9JXY5cXdhTUXhJYN4NUqWDJ7d69WHLMBXDJMcrBZ Mj3NQouvwD03utGjTrRqxV3S8EGy/xrv5UXB4nYv4AmFjgMTZZoEUT+hkEcpUis7 bjqI/+lMw7rgUCN0wsTlTvis+QkjrcnML02MoZ5St71r52HTeQwxzjP57jmwVQja ahfx7Hu4Pvf3Wmzg29CMX3Wwjmb4pcA= -----END CERTIFICATE-----Generated at Mon May 12 16:53:58 2025 by rpki-client