$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa File: 38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa (raw, json) Hash identifier: Ik765vQAGVKyZe0KdOZcYhkNCo00WmD54CpKAb3Y7ts= Subject key identifier: 5B:97:3B:8D:3B:40:D1:1A:B1:63:69:3D:E7:38:89:B1:BE:9F:B5:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F84481AB397676A2EB2E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa Signing time: Thu 01 May 2025 17:15:22 +0000 ROA not before: Thu 01 May 2025 17:15:22 +0000 ROA not after: Wed 30 Jul 2025 17:15:22 +0000 asID: 22773 IP address blocks: 70.174.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:44:81:ab:39:76:76:a2:eb:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:22 2025 GMT Not After : Jul 30 17:15:22 2025 GMT Subject: CN=9fab6268-77d6-48a9-9f85-cec0f13579a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:13:30:49:e6:f1:8c:a5:12:b7:84:d1:27: 90:f8:a2:b5:9e:ee:aa:8a:a6:4f:6c:dc:96:97:eb: 97:a1:1b:d9:14:de:c5:ff:92:21:e1:b4:0f:bf:c3: 80:3d:fa:34:6a:3f:1f:73:f4:37:d0:cd:52:32:cd: f1:02:82:73:8c:8b:d2:84:8f:4b:2b:f8:af:aa:c8: 41:bc:2c:72:b0:30:c8:d7:a1:24:09:5f:4a:2b:58: a7:a8:13:b4:ae:d2:fc:7c:1a:60:38:0e:0c:c6:c2: c5:90:ff:03:2b:72:a4:e9:e1:a6:fc:89:20:bb:77: d0:2c:f1:87:9e:11:b5:dd:c9:ac:7c:fd:ed:d4:42: ee:fc:a5:30:25:97:04:e9:72:3d:46:50:b5:12:47: 4b:9b:90:ef:14:50:95:8a:08:e7:49:04:58:d3:fd: d6:4c:bc:ca:7e:ad:4f:b7:87:19:8e:8d:23:e3:47: 9f:c4:24:51:98:66:fa:36:fb:84:21:5d:4f:6e:9e: fd:f6:d7:95:ea:07:8c:ca:40:9c:dd:ff:a9:17:f7: af:f6:a2:fe:2b:62:0a:1c:30:4e:de:25:69:65:f6: 66:a9:44:6a:ce:62:26:ce:2d:30:29:80:76:b2:f2: 6a:d0:8b:15:45:63:5e:2d:dc:0d:2b:46:b8:bb:fc: a2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:97:3B:8D:3B:40:D1:1A:B1:63:69:3D:E7:38:89:B1:BE:9F:B5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/38ddfcc0-0dd8-355a-b84a-5f1b6bb8ce4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:98:43:92:cd:4d:48:d5:81:9a:2d:53:2d:73:75:f8:7b:e7: 2e:92:f3:28:8e:db:db:cb:89:95:f0:69:4a:35:06:3c:91:a2: c0:b4:33:57:33:f9:c8:80:0c:10:cc:a3:73:e1:4e:de:4d:42: 07:fc:ff:19:d4:25:4f:1e:80:33:fc:79:b1:bb:ee:2c:38:f7: e0:c7:57:9d:44:d9:48:90:ee:3e:e2:f6:36:b6:f9:98:6a:bf: 34:d0:63:1d:a9:66:c2:c3:cc:90:3c:16:81:f3:4b:5b:05:04: 03:ba:b8:ed:ce:19:6b:84:dd:ef:2d:32:47:92:05:54:26:fe: e3:a7:25:da:58:69:63:74:02:dc:32:e4:ff:52:d9:ca:c6:02: e5:36:1b:bd:d4:da:40:d4:c0:88:c8:64:2a:2f:c0:dd:ec:f9: 96:50:d4:89:da:8d:eb:3e:d7:87:f0:99:25:80:cb:8e:9c:46: 31:d3:aa:ed:d2:4e:cb:75:3a:2a:5c:35:94:a1:cb:03:39:3a: 08:15:da:94:f8:47:fb:29:5b:e5:dc:d0:3d:c3:da:66:0d:cf: 69:8b:f1:2f:f8:02:46:c2:de:f8:68:da:a1:8b:43:81:0c:54: a1:5c:ed:87:2e:1d:82:72:c2:76:c1:eb:48:80:c4:ce:63:8c: 0c:0b:e2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+ESBqzl2dqLrLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyMloXDTI1MDczMDE3MTUyMlowLzEtMCsGA1UEAxMk OWZhYjYyNjgtNzdkNi00OGE5LTlmODUtY2VjMGYxMzU3OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO0TMEnm8YylEreE0SeQ+KK1nu6qiqZPbNyW l+uXoRvZFN7F/5Ih4bQPv8OAPfo0aj8fc/Q30M1SMs3xAoJzjIvShI9LK/ivqshB vCxysDDI16EkCV9KK1inqBO0rtL8fBpgOA4MxsLFkP8DK3Kk6eGm/Ikgu3fQLPGH nhG13cmsfP3t1ELu/KUwJZcE6XI9RlC1EkdLm5DvFFCVigjnSQRY0/3WTLzKfq1P t4cZjo0j40efxCRRmGb6NvuEIV1Pbp799teV6geMykCc3f+pF/ev9qL+K2IKHDBO 3iVpZfZmqURqzmImzi0wKYB2svJq0IsVRWNeLdwNK0a4u/yiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuXO407QNEasWNpPec4ibG+n7VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzhkZGZjYzAtMGRkOC0z NTVhLWI4NGEtNWYxYjZiYjhjZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiYQ5LNTUjVgZotUy1zdfh75y6S8yiO29vLiZXwaUo1BjyRosC0M1cz +ciADBDMo3PhTt5NQgf8/xnUJU8egDP8ebG77iw49+DHV51E2UiQ7j7i9ja2+Zhq vzTQYx2pZsLDzJA8FoHzS1sFBAO6uO3OGWuE3e8tMkeSBVQm/uOnJdpYaWN0Atwy 5P9S2crGAuU2G73U2kDUwIjIZCovwN3s+ZZQ1Inajes+14fwmSWAy46cRjHTqu3S Tst1OipcNZShywM5OggV2pT4R/spW+Xc0D3D2mYNz2mL8S/4AkbC3vho2qGLQ4EM VKFc7YcuHYJywnbB60iAxM5jjAwL4tI= -----END CERTIFICATE-----Generated at Sat May 10 19:20:44 2025 by rpki-client