$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa File: 476525f4-d55f-34aa-8111-518c8eff2684.roa (raw, json) Hash identifier: 8z2degZpbRHv/hLD+1/AdAX1vsIEVahRJYHAvak5B94= Subject key identifier: EC:E9:63:27:C8:BB:C0:5A:4B:A9:3D:CC:FA:AD:04:00:E9:81:69:B1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F82BB62F8DC617FAA6AA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa Signing time: Thu 01 May 2025 17:15:10 +0000 ROA not before: Thu 01 May 2025 17:15:10 +0000 ROA not after: Wed 30 Jul 2025 17:15:10 +0000 asID: 22773 IP address blocks: 70.160.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:2b:b6:2f:8d:c6:17:fa:a6:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:10 2025 GMT Not After : Jul 30 17:15:10 2025 GMT Subject: CN=5ca79c69-cff9-4b52-902e-e53e864566e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:06:e1:34:84:79:54:e3:bf:e6:df:8e:f2: 99:de:bd:5f:15:ee:fe:15:bb:48:89:21:20:ea:87: bf:8a:4b:e4:b1:ce:de:f0:f1:83:ef:f5:58:58:c0: b1:0d:63:5d:cb:ae:1e:e8:39:7f:1d:fe:68:6e:ae: ff:7b:a4:41:30:c3:d8:53:0b:18:2f:7c:48:7e:79: 63:2e:97:ee:98:21:bd:be:67:e5:f0:db:ba:25:bb: 0e:06:de:ab:33:06:d5:13:fd:22:ac:8f:f3:44:c2: a6:85:9c:04:ec:30:02:b2:b3:d3:a7:be:39:9d:95: 28:d0:1d:4c:7e:f1:37:9c:1b:bf:23:ef:e8:21:cf: 12:07:6b:b6:4a:1c:da:a6:30:e8:40:99:d3:90:c0: c3:fc:71:ac:de:89:ee:7f:65:9d:18:4e:77:45:05: 45:fb:1f:a9:e0:83:7e:e1:2f:65:d8:20:f5:b4:6e: 39:ce:e2:9a:cc:d1:d5:0a:93:17:6b:aa:0e:9e:23: 9b:91:bb:e6:7b:09:72:10:d3:84:4b:26:25:34:18: 39:0a:f5:7f:89:b7:a7:d1:8f:bc:16:d4:5f:46:15: 4d:57:9b:69:ef:94:ae:d2:56:de:89:28:cd:73:56: d5:95:c7:5d:3b:0d:5a:4d:4c:dc:0b:9f:84:42:6b: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:63:27:C8:BB:C0:5A:4B:A9:3D:CC:FA:AD:04:00:E9:81:69:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6e:b3:40:fa:2d:dd:a4:7c:e2:70:42:2c:73:83:dc:be:7e: 19:14:e6:74:f3:89:24:ae:61:6b:da:23:23:d3:98:f7:90:b1: f2:0d:60:27:69:2e:4d:4e:e9:7f:05:a0:5b:8c:21:0b:ae:08: fd:09:d0:23:9f:ff:f7:38:bd:7c:23:43:34:d2:06:f1:27:97: 98:ae:8c:5d:e7:40:8a:70:b2:c5:ef:1b:1c:1e:2d:58:0e:45: 87:1d:be:31:fc:6e:84:34:fc:1e:e0:c8:bf:44:0e:a3:05:f1: f1:eb:79:90:76:71:06:91:c0:0d:70:9f:58:31:89:30:9a:dd: c8:9a:6f:af:8b:24:e8:0e:d9:8a:1b:cc:0a:f0:73:e8:65:e2: e3:7c:c6:3d:77:cc:3a:b0:85:4e:8b:e0:0f:b8:e6:aa:d4:83: a1:6f:02:95:78:40:fb:53:7b:a2:c0:c3:67:44:25:69:bd:bb: be:17:b3:a0:9d:8a:c6:88:82:5f:dd:8f:29:f6:cb:4b:de:e0: 73:1f:39:36:ba:bd:a4:f8:1b:19:81:da:48:d8:28:66:47:7b: ba:f7:f1:73:4f:0d:64:65:6d:fe:ba:7b:72:57:ca:eb:01:33: 33:dd:27:2a:62:55:88:23:82:ff:d5:7b:51:c9:bf:26:da:88: bd:ca:92:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+Cu2L43GF/qmqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUxMFoXDTI1MDczMDE3MTUxMFowLzEtMCsGA1UEAxMk NWNhNzljNjktY2ZmOS00YjUyLTkwMmUtZTUzZTg2NDU2NmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJgG4TSEeVTjv+bfjvKZ3r1fFe7+FbtIiSEg 6oe/ikvksc7e8PGD7/VYWMCxDWNdy64e6Dl/Hf5obq7/e6RBMMPYUwsYL3xIfnlj LpfumCG9vmfl8Nu6JbsOBt6rMwbVE/0irI/zRMKmhZwE7DACsrPTp745nZUo0B1M fvE3nBu/I+/oIc8SB2u2ShzapjDoQJnTkMDD/HGs3onuf2WdGE53RQVF+x+p4IN+ 4S9l2CD1tG45zuKazNHVCpMXa6oOniObkbvmewlyENOESyYlNBg5CvV/iben0Y+8 FtRfRhVNV5tp75Su0lbeiSjNc1bVlcddOw1aTUzcC5+EQmuHiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzpYyfIu8BaS6k9zPqtBADpgWmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc2NTI1ZjQtZDU1Zi0z NGFhLTgxMTEtNTE4YzhlZmYyNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRus0D6Ld2kfOJwQixzg9y+fhkU5nTziSSuYWvaIyPTmPeQsfINYCdp Lk1O6X8FoFuMIQuuCP0J0COf//c4vXwjQzTSBvEnl5iujF3nQIpwssXvGxweLVgO RYcdvjH8boQ0/B7gyL9EDqMF8fHreZB2cQaRwA1wn1gxiTCa3ciab6+LJOgO2Yob zArwc+hl4uN8xj13zDqwhU6L4A+45qrUg6FvApV4QPtTe6LAw2dEJWm9u74Xs6Cd isaIgl/djyn2y0ve4HMfOTa6vaT4GxmB2kjYKGZHe7r38XNPDWRlbf66e3JXyusB MzPdJypiVYgjgv/Ve1HJvybaiL3Kkm0= -----END CERTIFICATE-----Generated at Tue May 13 18:45:54 2025 by rpki-client