$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97849910-2fee-36fd-b9c0-d3dce91261e3.roa File: 97849910-2fee-36fd-b9c0-d3dce91261e3.roa (raw, json) Hash identifier: wLA6NzfqrCP+06CKL9AN784HaTiDjjVeX3uLmrINkDg= Subject key identifier: 8A:28:D3:B3:B2:D1:F8:FA:1E:6B:75:88:7E:80:4B:D0:F6:0F:C6:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F83E14617D87C26C8A0780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97849910-2fee-36fd-b9c0-d3dce91261e3.roa Signing time: Thu 01 May 2025 17:15:19 +0000 ROA not before: Thu 01 May 2025 17:15:19 +0000 ROA not after: Wed 30 Jul 2025 17:15:19 +0000 asID: 22773 IP address blocks: 70.161.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:3e:14:61:7d:87:c2:6c:8a:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:19 2025 GMT Not After : Jul 30 17:15:19 2025 GMT Subject: CN=c5252ad3-a31c-4b60-9b82-faf337d0ef4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:ff:aa:0f:5b:75:8e:aa:21:10:e8:9e:84: 27:32:91:73:c9:6e:3d:4d:06:e2:d3:59:b4:b9:46: 2a:8d:7b:ac:0b:70:6d:14:fe:7d:53:9d:eb:93:2d: c6:18:06:60:55:2d:9e:e9:3e:f6:ac:85:e7:51:67: f2:0c:ed:85:04:e1:bc:fb:4d:f6:e1:e2:13:bd:89: ca:1f:5b:51:8a:f9:62:3b:71:0b:37:26:dc:21:ae: c7:6a:89:b7:44:b5:3f:37:b8:84:fa:f0:ce:2c:20: 88:36:8c:76:05:de:40:fa:f6:b7:01:6c:f1:40:bf: 48:8e:2b:3b:bf:93:87:a6:a2:7f:d0:10:0c:43:a7: bf:36:31:3c:12:e7:a5:6b:bf:37:e7:34:4f:98:17: ed:87:ff:51:19:3a:80:91:86:00:6b:cf:ad:e1:14: fb:0a:48:04:ea:2d:73:a6:6e:bc:47:21:de:da:97: a4:e9:e5:ad:5e:a4:df:a0:a5:e0:db:25:e7:cb:05: 05:7d:d0:36:e5:45:f9:11:4c:ab:81:5e:13:9a:04: 3f:e4:1e:2a:4c:34:2a:c2:e2:df:d6:15:ca:7c:8d: 22:95:b4:ec:8f:9c:40:3e:68:f6:39:85:ff:61:eb: 2f:5d:c4:cf:c0:25:85:af:a1:1b:3a:e1:0f:20:12: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:D3:B3:B2:D1:F8:FA:1E:6B:75:88:7E:80:4B:D0:F6:0F:C6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97849910-2fee-36fd-b9c0-d3dce91261e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:99:9a:78:59:4f:43:a8:01:a5:13:f1:99:2c:c8:24:60:b4: a8:54:65:d8:d1:85:60:99:e2:77:7e:c9:b7:16:13:c5:95:cc: ba:d5:1f:68:f7:e9:ea:93:9c:1f:24:9c:78:58:4e:70:98:e7: 2b:a2:f3:5e:87:17:f0:30:db:4f:e4:45:6c:e7:f5:7d:13:cd: fb:55:e6:8b:5f:bb:87:64:ef:b4:23:a4:96:74:b7:e3:73:b5: ee:ed:83:b2:47:33:9a:69:97:1a:74:b4:b8:76:fe:b5:00:9c: 01:fe:74:b3:fd:16:8c:1f:8e:61:a7:a6:ca:50:17:38:39:07: 44:39:70:ad:2e:46:3c:39:80:6f:90:0c:4e:66:a7:31:38:2b: c8:1a:ad:10:a3:88:47:17:6c:5f:47:ab:32:9c:d2:14:59:7d: 78:e2:86:ce:3f:07:19:6f:d6:4d:5c:d0:11:ed:95:98:6f:3f: af:8a:2f:f8:30:15:fc:3d:d8:ec:11:1f:1c:59:0e:07:9b:0b: 68:36:98:4d:ab:32:09:2f:c5:51:12:5a:3a:df:d3:2b:66:4b: c5:93:01:52:ea:fa:09:c4:91:ff:23:18:3a:45:c4:57:45:48: 13:c4:d5:0d:84:12:33:de:8c:e7:af:b7:a2:29:09:5d:00:c9: 96:fc:80:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+D4UYX2HwmyKB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUxOVoXDTI1MDczMDE3MTUxOVowLzEtMCsGA1UEAxMk YzUyNTJhZDMtYTMxYy00YjYwLTliODItZmFmMzM3ZDBlZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsD/qg9bdY6qIRDonoQnMpFzyW49TQbi01m0 uUYqjXusC3BtFP59U53rky3GGAZgVS2e6T72rIXnUWfyDO2FBOG8+0324eITvYnK H1tRivliO3ELNybcIa7Haom3RLU/N7iE+vDOLCCINox2Bd5A+va3AWzxQL9Ijis7 v5OHpqJ/0BAMQ6e/NjE8Euela7835zRPmBfth/9RGTqAkYYAa8+t4RT7CkgE6i1z pm68RyHe2pek6eWtXqTfoKXg2yXnywUFfdA25UX5EUyrgV4TmgQ/5B4qTDQqwuLf 1hXKfI0ilbTsj5xAPmj2OYX/YesvXcTPwCWFr6EbOuEPIBLJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoo07Oy0fj6Hmt1iH6AS9D2D8YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTc4NDk5MTAtMmZlZS0z NmZkLWI5YzAtZDNkY2U5MTI2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyZmnhZT0OoAaUT8ZksyCRgtKhUZdjRhWCZ4nd+ybcWE8WVzLrVH2j3 6eqTnB8knHhYTnCY5yui816HF/Aw20/kRWzn9X0TzftV5otfu4dk77QjpJZ0t+Nz te7tg7JHM5pplxp0tLh2/rUAnAH+dLP9FowfjmGnpspQFzg5B0Q5cK0uRjw5gG+Q DE5mpzE4K8garRCjiEcXbF9HqzKc0hRZfXjihs4/Bxlv1k1c0BHtlZhvP6+KL/gw Ffw92OwRHxxZDgebC2g2mE2rMgkvxVESWjrf0ytmS8WTAVLq+gnEkf8jGDpFxFdF SBPE1Q2EEjPejOevt6IpCV0AyZb8gPw= -----END CERTIFICATE-----Generated at Sun May 11 13:40:23 2025 by rpki-client