$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950a5e5c-9160-3220-a7c6-2a1e0108f9d4.roa File: 950a5e5c-9160-3220-a7c6-2a1e0108f9d4.roa (raw, json) Hash identifier: /t7NnkoWGtlnd0pAPHUostd/NfSvDLiwsvQI1uN35oc= Subject key identifier: F8:46:2F:34:47:D5:0F:5B:CF:BB:34:E5:73:1C:A8:FE:11:9C:71:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F578027E8CA00A800D01A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950a5e5c-9160-3220-a7c6-2a1e0108f9d4.roa Signing time: Thu 01 May 2025 17:09:44 +0000 ROA not before: Thu 01 May 2025 17:09:44 +0000 ROA not after: Wed 30 Jul 2025 17:09:44 +0000 asID: 22773 IP address blocks: 70.172.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:78:02:7e:8c:a0:0a:80:0d:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:44 2025 GMT Not After : Jul 30 17:09:44 2025 GMT Subject: CN=dbbaacd5-4565-4869-9cf1-043c0cabe372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:4e:13:12:19:4d:f4:22:74:f5:b2:20:de: af:b8:49:d6:45:d1:ff:e2:d5:c5:46:a1:09:96:0a: ad:eb:ef:89:87:59:f7:f7:62:e0:92:b3:fa:1a:a7: 89:f1:02:08:97:09:22:24:bf:97:1b:e2:07:4f:7c: 0b:d4:7a:30:e1:a7:32:b6:08:cf:b2:d7:c8:de:ef: d0:9e:f1:7d:91:e4:68:b8:44:24:77:49:de:17:24: 96:48:c8:07:cf:cf:77:79:8d:c6:27:a5:2f:2e:c8: 21:96:f2:2b:47:c9:2d:27:6a:d5:28:e4:c4:90:82: 0c:33:36:0d:bf:82:b2:3e:83:af:0a:b4:b7:67:d8: a2:e0:4b:85:74:12:f9:a8:82:0f:e9:12:2a:d1:aa: dc:09:54:58:b5:f3:a3:0c:2c:56:c2:71:ab:37:2f: da:06:e7:ef:ee:b8:d0:a0:3d:ce:6b:8f:00:ce:18: 9c:4a:26:d9:aa:3d:68:5c:dc:6d:9c:ef:3c:34:42: d5:d3:a8:7f:cf:c7:f4:1b:79:27:63:5f:d2:49:5f: 1a:4f:9d:4d:43:d6:c9:04:3d:29:84:08:62:43:66: 26:87:d3:28:b4:25:0e:b4:69:76:b0:5e:00:4e:55: d3:41:26:2a:0b:21:20:81:f6:87:40:84:b1:35:6e: 8c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:46:2F:34:47:D5:0F:5B:CF:BB:34:E5:73:1C:A8:FE:11:9C:71:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/950a5e5c-9160-3220-a7c6-2a1e0108f9d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8f:c9:e0:33:1e:ab:a4:13:0c:a2:a1:79:45:17:0f:86:94: fb:d6:0f:40:62:b7:81:70:b7:97:1f:15:45:d0:6a:3c:de:db: 96:3f:44:aa:a6:de:24:41:d4:30:e6:5d:54:0f:96:bc:ec:60: b5:ce:66:27:60:93:dc:3c:02:28:91:33:aa:ea:a6:78:a0:1d: 4d:35:06:81:fc:64:20:67:52:72:9b:73:1c:d9:16:2e:54:72: bf:d3:6a:da:b0:bb:78:0b:f1:a3:75:a4:5c:14:61:33:bf:d2: 2c:7e:28:c6:02:0c:48:dd:91:97:fa:5a:68:d7:a4:60:37:c9: 5e:86:80:bd:2c:63:24:bc:eb:ad:51:0e:29:77:16:70:b3:8a: d9:eb:e4:85:ac:27:5c:aa:5d:10:fe:7e:3e:7f:be:ee:6e:c2: d2:34:b2:a8:e7:a3:86:e8:26:46:ea:00:e0:a1:31:f7:5e:7b: d4:f1:0c:e4:bd:dd:db:f7:14:23:6a:72:7c:e7:dd:c0:79:6a: bc:b0:82:eb:b4:ce:ef:0d:29:f6:a1:ef:8b:c6:12:ec:96:05: 34:d2:3b:4d:05:86:26:fe:29:22:90:20:8d:60:8b:8d:27:8d: 29:0b:a2:48:88:59:49:91:c4:14:a3:e6:d0:3a:fb:3d:35:a1: 5f:db:be:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XgCfoygCoANAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NFoXDTI1MDczMDE3MDk0NFowLzEtMCsGA1UEAxMk ZGJiYWFjZDUtNDU2NS00ODY5LTljZjEtMDQzYzBjYWJlMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRtOExIZTfQidPWyIN6vuEnWRdH/4tXFRqEJ lgqt6++Jh1n392LgkrP6GqeJ8QIIlwkiJL+XG+IHT3wL1How4acytgjPstfI3u/Q nvF9keRouEQkd0neFySWSMgHz893eY3GJ6UvLsghlvIrR8ktJ2rVKOTEkIIMMzYN v4KyPoOvCrS3Z9ii4EuFdBL5qIIP6RIq0arcCVRYtfOjDCxWwnGrNy/aBufv7rjQ oD3Oa48AzhicSibZqj1oXNxtnO88NELV06h/z8f0G3knY1/SSV8aT51NQ9bJBD0p hAhiQ2Ymh9MotCUOtGl2sF4ATlXTQSYqCyEggfaHQISxNW6MdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhGLzRH1Q9bz7s05XMcqP4RnHFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUwYTVlNWMtOTE2MC0z MjIwLWE3YzYtMmExZTAxMDhmOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCPyeAzHqukEwyioXlFFw+GlPvWD0Bit4Fwt5cfFUXQajze25Y/RKqm 3iRB1DDmXVQPlrzsYLXOZidgk9w8AiiRM6rqpnigHU01BoH8ZCBnUnKbcxzZFi5U cr/Tatqwu3gL8aN1pFwUYTO/0ix+KMYCDEjdkZf6WmjXpGA3yV6GgL0sYyS8661R Dil3FnCzitnr5IWsJ1yqXRD+fj5/vu5uwtI0sqjno4boJkbqAOChMfdee9TxDOS9 3dv3FCNqcnzn3cB5arywguu0zu8NKfah74vGEuyWBTTSO00Fhib+KSKQII1gi40n jSkLokiIWUmRxBSj5tA6+z01oV/bvq0= -----END CERTIFICATE-----Generated at Sun May 11 12:51:25 2025 by rpki-client