$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa File: 3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa (raw, json) Hash identifier: OTRLX89+/70Oo7zNrFFuZaoWD8ulLVJFgVsxsgID0EQ= Subject key identifier: 3D:68:4E:15:3F:90:D5:5E:E3:B9:FF:A4:54:FB:06:1D:FB:9E:8D:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57EFDCF79A8957ABCC700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa Signing time: Thu 01 May 2025 17:09:47 +0000 ROA not before: Thu 01 May 2025 17:09:47 +0000 ROA not after: Wed 30 Jul 2025 17:09:47 +0000 asID: 22773 IP address blocks: 70.172.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7e:fd:cf:79:a8:95:7a:bc:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:47 2025 GMT Not After : Jul 30 17:09:47 2025 GMT Subject: CN=0be952ba-ae1e-43d6-ba58-c2f1c85d3d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:09:12:e5:f9:c5:23:86:68:9b:d3:5f:75: 32:8c:b9:3b:65:96:6b:cc:0b:12:10:e4:4c:b2:8b: 43:3c:11:ba:2f:c2:67:ec:34:cb:cf:db:5e:d5:8a: c0:7d:2c:27:a3:83:1b:d4:37:bc:94:7d:3f:cb:ed: 1c:40:ca:85:8e:7f:ad:a7:7f:af:5f:5f:1c:a6:ca: f6:d3:e0:5a:fa:f8:db:b6:85:b1:14:4a:98:c2:d9: d4:ab:df:68:d0:51:d9:c9:d7:dc:a7:e0:fe:c0:dd: d9:a1:46:bc:1d:06:f5:fe:0b:a4:a3:82:b2:ab:19: e0:45:8d:94:18:60:51:c3:dd:f3:2b:83:d6:b0:b1: 59:62:d7:90:c1:3a:3e:81:69:57:74:9a:d9:c3:eb: 78:b3:1f:7e:6a:b6:fb:e5:26:2d:0e:cc:26:32:35: fa:af:87:e3:0c:59:df:7b:c0:be:9b:bd:84:39:67: 40:bb:3e:5c:2a:0e:9d:4b:29:2e:f0:bd:67:ee:a1: 28:42:98:b9:06:b0:3b:68:54:d1:15:ef:d9:82:77: 62:ca:04:20:11:1c:db:b0:70:ac:26:ba:e0:46:73: 8e:88:79:71:4b:1f:a1:3a:6f:ba:f0:08:ea:95:75: ed:c6:a8:ce:d2:95:54:6c:00:28:d3:0a:72:c3:42: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:68:4E:15:3F:90:D5:5E:E3:B9:FF:A4:54:FB:06:1D:FB:9E:8D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e6:7f:11:32:a5:9e:c4:ef:60:da:53:c6:b6:22:e4:53:6d: 2d:a0:a6:6e:d5:24:a2:6f:0d:72:40:64:9e:c5:bf:c0:4a:b8: cc:cf:ea:43:61:0f:d7:7c:c2:46:4c:4a:05:fc:34:11:33:2d: 6a:ae:36:0c:95:4b:67:f4:b7:a1:21:6d:9f:df:61:6f:7b:1b: 0e:25:47:65:fb:06:1b:80:a3:b2:24:b2:93:c6:62:0d:bf:50: 94:ea:64:f5:c0:a8:22:bc:f9:a9:0b:af:3c:67:a6:02:00:3c: 6a:55:e4:a3:15:c5:c1:38:8c:4a:57:cd:ca:71:d1:3d:a7:2f: f1:54:5a:8d:20:61:10:c1:fc:8d:36:f5:b0:4f:c7:77:64:73: a5:54:69:c4:8c:d4:1b:7c:55:b3:54:ec:c6:2c:7b:55:33:6d: 64:a6:1e:8c:17:5a:2c:48:88:3e:f1:80:75:a4:ab:8d:10:10: bd:b2:8c:e7:88:41:71:73:25:ae:24:ef:01:5d:5b:d2:54:b2: 9e:31:42:b1:9f:33:70:8c:ee:be:03:75:87:42:cd:18:c2:d6: 7a:da:84:89:be:a8:84:93:2c:5a:e9:77:53:ea:2c:64:fe:37: 29:d8:6f:1b:9b:66:42:34:2e:00:a1:77:97:92:ea:9a:2b:c9: 27:07:5b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19X79z3molXq8xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0N1oXDTI1MDczMDE3MDk0N1owLzEtMCsGA1UEAxMk MGJlOTUyYmEtYWUxZS00M2Q2LWJhNTgtYzJmMWM4NWQzZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbkJEuX5xSOGaJvTX3UyjLk7ZZZrzAsSEORM sotDPBG6L8Jn7DTLz9te1YrAfSwno4Mb1De8lH0/y+0cQMqFjn+tp3+vX18cpsr2 0+Ba+vjbtoWxFEqYwtnUq99o0FHZydfcp+D+wN3ZoUa8HQb1/guko4KyqxngRY2U GGBRw93zK4PWsLFZYteQwTo+gWlXdJrZw+t4sx9+arb75SYtDswmMjX6r4fjDFnf e8C+m72EOWdAuz5cKg6dSyku8L1n7qEoQpi5BrA7aFTRFe/ZgndiygQgERzbsHCs JrrgRnOOiHlxSx+hOm+68AjqlXXtxqjO0pVUbAAo0wpyw0LZ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1oThU/kNVe47n/pFT7Bh37no02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Y5NzU1NjItZTllOC0z NGMzLThlNDctODRiZDY0YzRmZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETmfxEypZ7E72DaU8a2IuRTbS2gpm7VJKJvDXJAZJ7Fv8BKuMzP6kNh D9d8wkZMSgX8NBEzLWquNgyVS2f0t6EhbZ/fYW97Gw4lR2X7BhuAo7IkspPGYg2/ UJTqZPXAqCK8+akLrzxnpgIAPGpV5KMVxcE4jEpXzcpx0T2nL/FUWo0gYRDB/I02 9bBPx3dkc6VUacSM1Bt8VbNU7MYse1UzbWSmHowXWixIiD7xgHWkq40QEL2yjOeI QXFzJa4k7wFdW9JUsp4xQrGfM3CM7r4DdYdCzRjC1nrahIm+qISTLFrpd1PqLGT+ NynYbxubZkI0LgChd5eS6poryScHW9Y= -----END CERTIFICATE-----Generated at Tue Jul 1 20:35:25 2025 by rpki-client