$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa File: 65eae229-cc2a-3adf-a331-de769866420a.roa (raw, json) Hash identifier: jFlAWbmuoHzIdf9zXz2m9wlzKN2AqNClO6arjfOWO60= Subject key identifier: A9:C0:F2:78:F3:74:D4:27:86:91:C0:05:1E:03:D3:A9:CD:57:AD:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F81FDC14A59827B64D7600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa Signing time: Thu 01 May 2025 17:15:05 +0000 ROA not before: Thu 01 May 2025 17:15:05 +0000 ROA not after: Wed 30 Jul 2025 17:15:05 +0000 asID: 22773 IP address blocks: 70.160.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:1f:dc:14:a5:98:27:b6:4d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:05 2025 GMT Not After : Jul 30 17:15:05 2025 GMT Subject: CN=ae3f4614-2c2c-44d6-aa64-076154a04766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:bf:19:10:d8:01:a7:b3:dd:00:bd:bb:6a: a8:31:43:40:8f:73:29:bf:45:0b:2e:f3:e1:ce:c9: ce:ad:61:86:b2:2e:38:3e:33:a9:ab:ee:70:c9:a9: 13:a5:da:90:76:57:af:49:a8:e2:33:6b:a2:33:c2: 22:9b:4d:10:d8:89:5f:f1:2d:52:12:5f:42:80:a0: 84:c0:19:36:d5:fd:48:98:a1:c8:07:27:e6:6f:33: 04:f1:66:c0:80:68:fb:b2:4f:14:cb:29:aa:73:b4: 6f:57:12:ce:b7:79:3a:00:ff:03:e5:ae:b6:41:4d: 7f:99:68:9a:07:c5:a9:bf:d5:f6:38:7f:64:f0:80: 87:91:f5:7e:37:64:a3:08:cc:24:d7:a9:9c:56:51: 1a:85:65:b6:71:ac:fd:dd:90:97:72:2e:b5:8c:6d: 6d:4d:5d:9c:72:e8:0f:d2:43:65:d5:81:43:80:57: 0a:b7:4a:0e:f3:f5:36:c6:33:c2:2c:9c:0f:ea:7d: 37:fe:17:03:ae:df:90:42:82:16:b4:1a:a7:d4:51: 7e:af:31:f1:d4:b1:60:65:3e:46:81:8d:e3:e5:9e: c1:77:0b:5c:a4:34:62:ad:6f:c5:52:af:4f:d1:6b: c5:68:9d:66:7a:56:e5:ec:67:66:f2:79:bd:ec:d2: b2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:F2:78:F3:74:D4:27:86:91:C0:05:1E:03:D3:A9:CD:57:AD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65eae229-cc2a-3adf-a331-de769866420a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:80:93:fc:40:7d:71:68:61:7c:8d:21:61:49:85:81:1a:73: 81:d1:cd:16:d5:a9:59:40:c4:18:8c:6e:ef:80:68:f5:3b:43: 2a:92:35:e6:7e:c9:c3:a8:b3:f7:32:af:8e:1c:c6:1a:28:81: 96:c0:77:af:43:30:79:0d:62:7d:57:b3:68:8f:21:78:17:9f: c7:8b:06:65:3b:08:13:dd:ee:b4:52:bd:49:31:75:e7:2f:fe: 88:c9:46:97:34:fe:90:5e:90:ec:15:6e:55:ed:f6:fd:12:45: 31:ba:a1:de:3d:12:92:a8:d6:e1:73:89:4a:0e:04:84:f2:4a: 5a:43:00:cf:04:d8:81:4c:f8:15:ea:93:cc:39:4b:4e:13:e5: ae:5c:43:e2:6b:cb:e6:34:70:80:3c:50:d5:2f:7c:2b:89:7e: 1f:34:e6:b6:23:57:a6:af:e5:f2:97:23:13:ef:c6:05:29:ee: 36:b2:c9:ea:e1:51:69:87:0c:59:c5:68:1f:a2:79:18:35:aa: ba:80:01:51:60:12:75:e5:4d:f6:d6:35:86:52:20:15:ea:74: fc:15:c6:3a:40:bc:cc:9c:b6:bf:cd:fa:e4:96:fd:d0:a6:75: 6d:35:92:97:95:7a:c9:d0:5d:47:48:60:1b:6b:63:c7:cc:cd: b7:8a:50:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+B/cFKWYJ7ZNdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUwNVoXDTI1MDczMDE3MTUwNVowLzEtMCsGA1UEAxMk YWUzZjQ2MTQtMmMyYy00NGQ2LWFhNjQtMDc2MTU0YTA0NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXO/GRDYAaez3QC9u2qoMUNAj3Mpv0ULLvPh zsnOrWGGsi44PjOpq+5wyakTpdqQdlevSajiM2uiM8Iim00Q2Ilf8S1SEl9CgKCE wBk21f1ImKHIByfmbzME8WbAgGj7sk8Uyymqc7RvVxLOt3k6AP8D5a62QU1/mWia B8Wpv9X2OH9k8ICHkfV+N2SjCMwk16mcVlEahWW2caz93ZCXci61jG1tTV2ccugP 0kNl1YFDgFcKt0oO8/U2xjPCLJwP6n03/hcDrt+QQoIWtBqn1FF+rzHx1LFgZT5G gY3j5Z7BdwtcpDRirW/FUq9P0WvFaJ1melbl7Gdm8nm97NKyHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnA8njzdNQnhpHABR4D06nNV63QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjVlYWUyMjktY2MyYS0z YWRmLWEzMzEtZGU3Njk4NjY0MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+Ak/xAfXFoYXyNIWFJhYEac4HRzRbVqVlAxBiMbu+AaPU7QyqSNeZ+ ycOos/cyr44cxhoogZbAd69DMHkNYn1Xs2iPIXgXn8eLBmU7CBPd7rRSvUkxdecv /ojJRpc0/pBekOwVblXt9v0SRTG6od49EpKo1uFziUoOBITySlpDAM8E2IFM+BXq k8w5S04T5a5cQ+Jry+Y0cIA8UNUvfCuJfh805rYjV6av5fKXIxPvxgUp7jayyerh UWmHDFnFaB+ieRg1qrqAAVFgEnXlTfbWNYZSIBXqdPwVxjpAvMyctr/N+uSW/dCm dW01kpeVesnQXUdIYBtrY8fMzbeKUKs= -----END CERTIFICATE-----Generated at Sat May 10 10:42:41 2025 by rpki-client