$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3eee9147-411f-303e-80fe-ad88e5a0e312.roa File: 3eee9147-411f-303e-80fe-ad88e5a0e312.roa (raw, json) Hash identifier: L2AKP/QSWgHEusgTTpo+XYnvMvS9NcYgh1Ar4btPATY= Subject key identifier: 6D:BC:5A:66:38:F8:08:40:33:12:01:F7:A2:59:84:C1:48:9D:63:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD54049ABB4B4903D86440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3eee9147-411f-303e-80fe-ad88e5a0e312.roa Signing time: Thu 01 May 2025 17:25:34 +0000 ROA not before: Thu 01 May 2025 17:25:34 +0000 ROA not after: Wed 30 Jul 2025 17:25:34 +0000 asID: 22773 IP address blocks: 70.181.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:54:04:9a:bb:4b:49:03:d8:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:34 2025 GMT Not After : Jul 30 17:25:34 2025 GMT Subject: CN=b21b6fc0-df21-44c4-8f58-8e823b8ca7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:fb:d5:86:f4:3b:93:c2:f5:ce:97:35:fa: 4a:ee:d2:56:76:73:3b:d8:af:3d:3c:9a:7d:95:37: 97:c4:40:55:33:cf:df:39:20:d5:d6:fe:57:b0:f4: 45:6f:c7:c4:8b:61:dd:9c:1b:f5:73:b2:c6:32:bf: 98:bb:99:71:ba:00:62:0b:63:40:14:92:f2:b0:9c: fd:35:cd:85:dc:f2:df:93:2b:65:fc:d5:ec:ff:94: 44:d7:42:93:a5:bf:bc:1b:4e:fa:ad:c1:ec:81:fb: 51:b2:0c:d2:db:df:a8:ae:ee:84:be:a4:f8:37:e3: 79:6a:c5:c0:02:40:6f:11:21:a5:4c:a6:fc:96:df: 22:a0:55:d5:94:85:02:2a:00:dd:b2:09:45:50:66: 54:3d:cb:22:ac:06:1a:68:a6:3b:c8:d7:95:e6:42: dc:9d:09:3b:b2:64:54:ab:fb:59:45:4a:86:e6:b1: 79:93:67:6c:e0:b4:6b:1d:57:d2:b8:2e:3c:59:b1: 61:fc:50:d8:b5:0d:40:d7:30:24:67:40:be:27:2f: 27:70:d6:dc:f6:37:24:05:cc:e9:10:f4:cb:37:01: a1:19:9a:05:ac:89:6a:3f:d3:08:f0:d9:9d:a4:eb: 5f:12:1a:66:f8:a2:e8:39:74:2d:57:6f:7b:fc:e2: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:5A:66:38:F8:08:40:33:12:01:F7:A2:59:84:C1:48:9D:63:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3eee9147-411f-303e-80fe-ad88e5a0e312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a5:99:92:3d:07:79:d3:0d:fe:4f:fc:81:96:0f:51:3d:84: 87:a0:0b:62:68:a2:8f:ee:7a:c4:03:73:49:8c:e7:bb:81:65: a0:91:a8:92:71:11:6c:9d:20:be:9a:62:05:44:63:1c:ac:37: 70:b6:d6:58:13:e3:09:aa:be:fd:94:f2:77:cd:2f:e8:11:db: 56:3d:3b:05:a7:3b:c1:a0:79:6d:43:14:c5:8e:26:3a:04:0b: 34:7c:2d:0b:19:29:ca:8c:5b:c0:ce:f6:d1:7f:af:dd:21:3e: c5:e2:79:5a:e9:dc:21:26:73:bc:a7:93:91:77:3d:96:a1:0c: d4:c4:33:84:d0:56:14:1e:5e:80:0b:89:3b:e2:4d:a5:2e:46: fc:bd:8a:03:80:73:d1:08:a1:8c:40:c4:20:37:fc:bd:5a:81: b1:ed:a1:b1:4c:c7:09:23:7a:28:68:f6:db:67:35:37:80:58: 91:c5:04:57:02:5d:80:49:88:4e:69:fa:dc:55:5c:57:6f:f8: 2a:5f:7e:e3:68:27:d9:fa:46:c7:3b:22:70:12:1e:a3:cc:98: ac:8f:f5:3d:75:24:6f:f6:37:dd:c0:dc:e0:63:b0:35:58:9c: 5a:8e:01:6e:fc:8a:d6:63:56:d8:0b:4e:15:e5:77:6e:f9:be: 96:c4:b7:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/VQEmrtLSQPYZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzNFoXDTI1MDczMDE3MjUzNFowLzEtMCsGA1UEAxMk YjIxYjZmYzAtZGYyMS00NGM0LThmNTgtOGU4MjNiOGNhN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnb71Yb0O5PC9c6XNfpK7tJWdnM72K89PJp9 lTeXxEBVM8/fOSDV1v5XsPRFb8fEi2HdnBv1c7LGMr+Yu5lxugBiC2NAFJLysJz9 Nc2F3PLfkytl/NXs/5RE10KTpb+8G076rcHsgftRsgzS29+oru6EvqT4N+N5asXA AkBvESGlTKb8lt8ioFXVlIUCKgDdsglFUGZUPcsirAYaaKY7yNeV5kLcnQk7smRU q/tZRUqG5rF5k2ds4LRrHVfSuC48WbFh/FDYtQ1A1zAkZ0C+Jy8ncNbc9jckBczp EPTLNwGhGZoFrIlqP9MI8NmdpOtfEhpm+KLoOXQtV297/OLxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG28WmY4+AhAMxIB96JZhMFInWMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2VlZTkxNDctNDExZi0z MDNlLTgwZmUtYWQ4OGU1YTBlMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABilmZI9B3nTDf5P/IGWD1E9hIegC2Jooo/uesQDc0mM57uBZaCRqJJx EWydIL6aYgVEYxysN3C21lgT4wmqvv2U8nfNL+gR21Y9OwWnO8GgeW1DFMWOJjoE CzR8LQsZKcqMW8DO9tF/r90hPsXieVrp3CEmc7ynk5F3PZahDNTEM4TQVhQeXoAL iTviTaUuRvy9igOAc9EIoYxAxCA3/L1agbHtobFMxwkjeiho9ttnNTeAWJHFBFcC XYBJiE5p+txVXFdv+CpffuNoJ9n6Rsc7InASHqPMmKyP9T11JG/2N93A3OBjsDVY nFqOAW78itZjVtgLThXld275vpbEt10= -----END CERTIFICATE-----Generated at Sun May 11 09:13:45 2025 by rpki-client