$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e8ec42-ff7a-32d5-8aa7-094aa960e985.roa File: 70e8ec42-ff7a-32d5-8aa7-094aa960e985.roa (raw, json) Hash identifier: CIeSGSH1N+9o8NhJsV5vr22R3bgDFdsdC8mjfoHNlJs= Subject key identifier: A9:6F:D5:F5:BF:CD:D7:8D:F0:DA:39:C7:52:BB:D2:11:C0:CF:1C:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F7BF3C87D0EFBA5ECDAB40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e8ec42-ff7a-32d5-8aa7-094aa960e985.roa Signing time: Thu 01 May 2025 17:14:19 +0000 ROA not before: Thu 01 May 2025 17:14:19 +0000 ROA not after: Wed 30 Jul 2025 17:14:19 +0000 asID: 22773 IP address blocks: 24.253.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f7:bf:3c:87:d0:ef:ba:5e:cd:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:14:19 2025 GMT Not After : Jul 30 17:14:19 2025 GMT Subject: CN=15dbfb11-084b-4bb3-aa2c-25559fb6a24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:ad:55:72:71:da:5b:92:ea:47:90:9c:b7: 75:d0:24:e2:f1:01:26:ae:4c:fe:30:a3:59:bf:d0: 50:f1:26:48:b5:6c:0c:49:97:11:2d:4f:fd:df:51: 5a:7f:8a:5b:bf:66:a0:39:2f:de:a8:63:76:3d:84: 73:45:ae:1c:6f:38:16:38:5d:6b:64:1f:00:d2:10: 73:6d:0a:42:f9:d8:f5:19:13:f3:c8:19:89:7c:e6: df:a8:12:90:eb:71:f6:da:0a:81:20:2b:f0:11:f4: 3b:e9:e2:2e:bc:21:11:1c:00:87:83:e5:09:2a:c4: c2:6d:cc:66:8e:5f:be:9c:02:b9:26:68:52:0c:ce: 78:4a:b5:2e:f7:7a:30:f0:de:d7:10:4a:55:00:91: 2f:c6:d3:00:3f:af:86:e1:82:b6:ab:d9:22:5f:40: b6:0b:9e:65:99:88:29:b5:f9:13:51:4f:03:62:ed: 93:87:67:24:70:08:0c:73:cd:53:36:e0:35:26:2d: df:8b:8f:bf:18:04:3d:4a:08:15:d4:86:90:78:0b: b8:66:cf:07:86:df:c3:89:cd:41:ff:ca:f6:62:07: 4d:58:0c:7e:78:57:b1:e2:fa:e1:3e:26:93:fa:01: b4:a1:d7:86:4f:38:0e:2b:ac:c2:26:52:eb:88:c9: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:D5:F5:BF:CD:D7:8D:F0:DA:39:C7:52:BB:D2:11:C0:CF:1C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e8ec42-ff7a-32d5-8aa7-094aa960e985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e2:ee:8d:83:94:46:76:d9:fc:14:e5:99:4a:07:ba:0a:3d: c2:17:61:e2:14:83:f9:d1:6d:53:0e:08:62:46:08:e3:68:ab: b7:3d:e7:a2:f7:10:b0:2c:2f:61:3a:e8:58:99:59:06:42:a5: 8a:8e:e3:51:68:65:cb:34:6b:95:4b:ba:69:12:af:88:0f:7c: 1e:f1:93:d0:27:d2:0b:ab:d7:2c:0d:1c:32:c0:84:a2:e7:58: 9e:33:7d:34:f6:5c:aa:61:0b:9c:25:83:cd:8e:ab:f5:51:69: 7f:8d:f7:72:a8:c6:29:d6:59:3c:f4:60:70:19:41:12:c7:60: 5b:39:d3:00:1e:c9:26:87:b2:c2:b2:97:d0:05:b3:56:22:e6: b4:03:78:57:b9:ce:36:22:b7:c7:9d:22:b4:c3:86:99:d7:74: 3b:e7:49:50:29:d4:97:ee:d8:91:93:48:b7:7f:13:9e:a3:47: d3:9f:3d:56:05:30:8e:41:5b:a5:2c:bd:47:9c:7f:a4:0b:4e: 57:ed:de:8e:bf:2c:4f:bb:4a:2b:1f:23:47:7e:c4:c6:f8:b2: 9b:d4:be:e7:62:ac:85:87:48:2e:48:9c:1d:15:04:20:12:c1: b8:87:02:c1:b9:a3:a1:c9:95:95:60:56:3d:c1:7f:db:d3:1d: a8:b9:2a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19788h9Dvul7Nq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTQxOVoXDTI1MDczMDE3MTQxOVowLzEtMCsGA1UEAxMk MTVkYmZiMTEtMDg0Yi00YmIzLWFhMmMtMjU1NTlmYjZhMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d+tVXJx2luS6keQnLd10CTi8QEmrkz+MKNZ v9BQ8SZItWwMSZcRLU/931Faf4pbv2agOS/eqGN2PYRzRa4cbzgWOF1rZB8A0hBz bQpC+dj1GRPzyBmJfObfqBKQ63H22gqBICvwEfQ76eIuvCERHACHg+UJKsTCbcxm jl++nAK5JmhSDM54SrUu93ow8N7XEEpVAJEvxtMAP6+G4YK2q9kiX0C2C55lmYgp tfkTUU8DYu2Th2ckcAgMc81TNuA1Ji3fi4+/GAQ9SggV1IaQeAu4Zs8Hht/Dic1B /8r2YgdNWAx+eFex4vrhPiaT+gG0odeGTzgOK6zCJlLriMnjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlv1fW/zdeN8No5x1K70hHAzxxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBlOGVjNDItZmY3YS0z MmQ1LThhYTctMDk0YWE5NjBlOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3i7o2DlEZ22fwU5ZlKB7oKPcIXYeIUg/nRbVMOCGJGCONoq7c956L3 ELAsL2E66FiZWQZCpYqO41FoZcs0a5VLumkSr4gPfB7xk9An0gur1ywNHDLAhKLn WJ4zfTT2XKphC5wlg82Oq/VRaX+N93KoxinWWTz0YHAZQRLHYFs50wAeySaHssKy l9AFs1Yi5rQDeFe5zjYit8edIrTDhpnXdDvnSVAp1Jfu2JGTSLd/E56jR9OfPVYF MI5BW6UsvUecf6QLTlft3o6/LE+7SisfI0d+xMb4spvUvudirIWHSC5InB0VBCAS wbiHAsG5o6HJlZVgVj3Bf9vTHai5Klo= -----END CERTIFICATE-----Generated at Sun May 11 09:08:29 2025 by rpki-client