$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a7d64d7-ed2a-30c2-a1fd-62b101a89b45.roa File: 7a7d64d7-ed2a-30c2-a1fd-62b101a89b45.roa (raw, json) Hash identifier: rr9ZQpHQAEaWsEIIatFerbr2fqaEKqIfBjn6qgMW+EY= Subject key identifier: 82:90:51:39:EC:D5:27:AC:77:85:92:05:9D:FC:FD:D4:9B:12:38:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F83D56A1ABBC04B3B1EA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a7d64d7-ed2a-30c2-a1fd-62b101a89b45.roa Signing time: Thu 01 May 2025 17:15:18 +0000 ROA not before: Thu 01 May 2025 17:15:18 +0000 ROA not after: Wed 30 Jul 2025 17:15:18 +0000 asID: 22773 IP address blocks: 70.161.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:3d:56:a1:ab:bc:04:b3:b1:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:18 2025 GMT Not After : Jul 30 17:15:18 2025 GMT Subject: CN=4fcb42f2-be36-4ae2-8bca-3799385626a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:5f:5f:d6:2d:39:80:fd:3c:8b:ae:73:8d: a6:0b:03:87:da:74:de:91:4e:a1:e2:2e:7e:55:f5: ec:48:50:97:ea:d2:d9:f1:49:1f:ee:c4:e7:f2:59: 12:85:d1:15:a9:0b:72:be:4c:06:fb:84:93:f6:d3: ee:63:b2:72:f0:71:ef:a3:78:c7:b9:a1:53:20:b2: ca:67:15:96:8d:51:60:25:75:ce:9d:ba:50:6c:87: 15:70:9a:42:e1:e6:4a:49:66:78:42:36:6f:d8:f9: 04:f4:64:e9:ab:0d:b9:58:a5:0c:53:6f:a1:d6:7d: 3b:44:f4:10:2f:c9:74:e0:72:9b:41:80:e1:61:9d: 6c:c7:c2:50:84:40:80:63:90:09:50:e8:21:18:3b: 2a:dc:dd:c7:38:d5:7d:92:65:b9:2d:44:e0:d9:18: 67:e2:d0:e5:dd:bf:5c:a8:49:9f:bb:b9:2b:24:0c: 88:48:da:a9:16:92:de:21:89:30:4c:67:82:c8:6c: b6:be:ee:d1:9d:f2:26:2b:4d:a7:71:e4:61:23:b0: e6:cc:2e:f5:75:38:81:fd:f2:29:6f:f3:8e:71:30: 11:9d:29:90:a1:b2:9e:10:4a:66:61:89:18:5c:ca: a0:0b:36:21:82:63:35:28:66:37:0e:28:51:66:45: bf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:51:39:EC:D5:27:AC:77:85:92:05:9D:FC:FD:D4:9B:12:38:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a7d64d7-ed2a-30c2-a1fd-62b101a89b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:09:d1:be:d0:ef:69:88:06:5b:54:b7:85:da:16:2a:23:8d: ff:42:b5:a9:b3:ef:f9:8b:13:27:ab:29:43:e8:42:49:97:0c: b1:6f:4c:a4:b5:f0:64:6a:1c:c0:4d:7c:02:b2:8d:d6:ef:86: c2:a1:36:fb:84:eb:02:dc:f2:70:f2:87:a8:4b:70:a9:c8:9e: ed:4c:1d:3d:62:cd:50:94:78:b8:84:e0:7a:75:fd:7c:38:71: 0f:c8:71:15:18:1e:6a:34:83:6f:d3:92:a7:14:84:b9:c1:24: ee:2d:17:91:48:60:f0:17:1b:6d:5b:af:8b:d3:98:cb:1c:a8: e9:f4:dc:03:33:23:a7:33:b8:7f:13:61:2c:04:48:69:c8:e9: 72:d0:29:a9:37:1a:10:7d:9d:43:fe:00:bb:fe:30:16:13:2f: 11:b8:92:ce:7c:ea:32:65:41:50:de:f0:5f:93:3e:18:7f:16: 6f:d5:b5:2c:c3:6c:36:65:dc:78:93:2a:4e:03:2b:db:5c:90: a4:4b:86:f3:39:52:48:2b:96:22:73:5d:bb:c2:aa:41:23:9f: 6e:34:19:32:fe:f5:f8:f5:13:18:4d:a8:1e:af:94:93:0f:2a: df:d0:e0:4e:03:a3:e6:1e:90:3b:8a:67:d6:b4:bf:8d:47:81: 64:9e:38:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+D1Woau8BLOx6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUxOFoXDTI1MDczMDE3MTUxOFowLzEtMCsGA1UEAxMk NGZjYjQyZjItYmUzNi00YWUyLThiY2EtMzc5OTM4NTYyNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRVfX9YtOYD9PIuuc42mCwOH2nTekU6h4i5+ VfXsSFCX6tLZ8Ukf7sTn8lkShdEVqQtyvkwG+4ST9tPuY7Jy8HHvo3jHuaFTILLK ZxWWjVFgJXXOnbpQbIcVcJpC4eZKSWZ4QjZv2PkE9GTpqw25WKUMU2+h1n07RPQQ L8l04HKbQYDhYZ1sx8JQhECAY5AJUOghGDsq3N3HONV9kmW5LUTg2Rhn4tDl3b9c qEmfu7krJAyISNqpFpLeIYkwTGeCyGy2vu7RnfImK02nceRhI7DmzC71dTiB/fIp b/OOcTARnSmQobKeEEpmYYkYXMqgCzYhgmM1KGY3DihRZkW/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKQUTns1Sesd4WSBZ38/dSbEjjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2E3ZDY0ZDctZWQyYS0z MGMyLWExZmQtNjJiMTAxYTg5YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgJ0b7Q72mIBltUt4XaFiojjf9Ctamz7/mLEyerKUPoQkmXDLFvTKS1 8GRqHMBNfAKyjdbvhsKhNvuE6wLc8nDyh6hLcKnInu1MHT1izVCUeLiE4Hp1/Xw4 cQ/IcRUYHmo0g2/TkqcUhLnBJO4tF5FIYPAXG21br4vTmMscqOn03AMzI6czuH8T YSwESGnI6XLQKak3GhB9nUP+ALv+MBYTLxG4ks586jJlQVDe8F+TPhh/Fm/VtSzD bDZl3HiTKk4DK9tckKRLhvM5UkgrliJzXbvCqkEjn240GTL+9fj1ExhNqB6vlJMP Kt/Q4E4Do+YekDuKZ9a0v41HgWSeOE4= -----END CERTIFICATE-----Generated at Sun May 11 00:38:47 2025 by rpki-client