$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94ade44b-8cbc-35e7-a074-1f8cda6432c6.roa File: 94ade44b-8cbc-35e7-a074-1f8cda6432c6.roa (raw, json) Hash identifier: bFu23C4LO5CWzZ0WMPo1AFpAOPKc/vi+aWABtA3MFKs= Subject key identifier: 18:39:76:75:77:9B:56:A3:38:5D:9F:45:36:39:26:DA:AE:17:C0:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57D8CA3DB7D95A7164C40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94ade44b-8cbc-35e7-a074-1f8cda6432c6.roa Signing time: Thu 01 May 2025 17:09:46 +0000 ROA not before: Thu 01 May 2025 17:09:46 +0000 ROA not after: Wed 30 Jul 2025 17:09:46 +0000 asID: 22773 IP address blocks: 70.172.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7d:8c:a3:db:7d:95:a7:16:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:46 2025 GMT Not After : Jul 30 17:09:46 2025 GMT Subject: CN=fcf9d375-c924-4704-ac85-f9ce585bdff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:2e:8c:b3:3e:52:ed:46:42:62:25:ff:84: a0:f5:72:6e:d9:65:e4:87:d0:92:8b:81:76:be:15: 87:2f:d3:a5:1b:e1:cc:09:aa:d2:a1:91:dc:0a:b5: 20:a5:a1:18:ba:72:1d:61:01:9e:cd:ca:f1:ec:9e: 4f:83:cc:5b:42:ae:ef:5f:43:5c:12:ac:38:b7:92: 4f:96:fd:b3:e7:3b:6d:c8:3a:f3:b0:4b:82:d3:74: 29:3e:20:b9:a8:ed:9c:59:5d:a6:25:2e:49:14:d2: af:44:8d:41:43:1b:f4:18:2f:e7:7d:c7:e2:9d:77: 81:96:30:36:1d:6a:30:1a:db:e2:24:2f:82:db:dd: 9c:88:63:6b:64:ce:0c:ab:33:32:c9:9e:b5:0c:79: 59:5b:9d:56:31:41:c6:44:2d:eb:f3:a0:05:35:c3: 12:80:1b:89:c9:1f:7f:2e:72:aa:7c:02:54:fc:ec: 81:d8:1e:19:42:c3:92:4d:d4:03:c5:8f:74:34:f6: 26:20:1f:a1:77:a8:7e:09:db:91:4d:49:8c:7c:81: d1:6f:e3:b0:0e:5e:04:95:33:63:21:2e:6b:71:90: bd:82:2c:99:9b:bf:e3:a0:d5:ba:8c:bc:5a:67:e9: 69:fc:08:97:d1:75:1e:86:36:f0:73:db:4f:de:df: eb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:39:76:75:77:9B:56:A3:38:5D:9F:45:36:39:26:DA:AE:17:C0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/94ade44b-8cbc-35e7-a074-1f8cda6432c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e6:d9:34:70:41:dd:89:55:60:e0:f4:76:1f:db:f7:93:a7: 4e:c3:72:5b:c0:75:74:84:df:0f:45:99:da:74:70:41:12:84: d7:72:6b:87:df:34:4e:1b:2a:19:fa:66:8d:e2:bb:88:0a:4a: 9e:8c:49:9f:07:70:f6:b8:dc:61:6f:1a:2b:96:36:f0:d1:b9: e5:57:a0:d6:f0:81:28:f2:66:a2:96:97:22:34:63:bf:84:1d: ba:9d:44:8d:5d:a2:1a:93:25:5b:e4:51:04:60:51:0c:f2:66: 64:8f:6e:3a:d8:33:1a:80:a2:df:dd:a9:9c:8a:83:e5:ee:39: fa:a0:60:1c:f4:65:be:71:fd:58:e7:4c:e3:8f:de:be:ce:f5: 03:d8:b0:71:05:d7:39:6b:ec:35:66:75:e9:e8:73:92:08:89: 91:86:3c:fe:31:0e:c7:ca:c3:cd:a1:d2:b1:0e:37:fd:b0:cf: 3b:dc:28:c1:1d:33:5c:55:3b:cb:bc:f1:c6:fe:c5:34:11:96: 1e:a1:30:b8:62:94:ea:67:67:d3:be:e5:1d:46:28:78:93:75: 62:e3:71:31:2a:3a:43:69:25:05:b6:40:21:bc:c5:ae:21:04: ac:ac:9c:15:48:a8:16:a4:1a:65:11:12:3c:b2:0e:48:ce:ed: 25:9f:13:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19X2Mo9t9lacWTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NloXDTI1MDczMDE3MDk0NlowLzEtMCsGA1UEAxMk ZmNmOWQzNzUtYzkyNC00NzA0LWFjODUtZjljZTU4NWJkZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLAujLM+Uu1GQmIl/4Sg9XJu2WXkh9CSi4F2 vhWHL9OlG+HMCarSoZHcCrUgpaEYunIdYQGezcrx7J5Pg8xbQq7vX0NcEqw4t5JP lv2z5zttyDrzsEuC03QpPiC5qO2cWV2mJS5JFNKvRI1BQxv0GC/nfcfinXeBljA2 HWowGtviJC+C292ciGNrZM4MqzMyyZ61DHlZW51WMUHGRC3r86AFNcMSgBuJyR9/ LnKqfAJU/OyB2B4ZQsOSTdQDxY90NPYmIB+hd6h+CduRTUmMfIHRb+OwDl4ElTNj IS5rcZC9giyZm7/joNW6jLxaZ+lp/AiX0XUehjbwc9tP3t/rBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBg5dnV3m1ajOF2fRTY5JtquF8DiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTRhZGU0NGItOGNiYy0z NWU3LWEwNzQtMWY4Y2RhNjQzMmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzm2TRwQd2JVWDg9HYf2/eTp07DclvAdXSE3w9Fmdp0cEEShNdya4ff NE4bKhn6Zo3iu4gKSp6MSZ8HcPa43GFvGiuWNvDRueVXoNbwgSjyZqKWlyI0Y7+E HbqdRI1dohqTJVvkUQRgUQzyZmSPbjrYMxqAot/dqZyKg+XuOfqgYBz0Zb5x/Vjn TOOP3r7O9QPYsHEF1zlr7DVmdenoc5IIiZGGPP4xDsfKw82h0rEON/2wzzvcKMEd M1xVO8u88cb+xTQRlh6hMLhilOpnZ9O+5R1GKHiTdWLjcTEqOkNpJQW2QCG8xa4h BKysnBVIqBakGmUREjyyDkjO7SWfE2k= -----END CERTIFICATE-----Generated at Sat May 10 22:08:28 2025 by rpki-client