$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9edbfb06-6b95-310a-8dcf-550662e7e6cd.roa File: 9edbfb06-6b95-310a-8dcf-550662e7e6cd.roa (raw, json) Hash identifier: uVFxqPI2MFczIceNrRUe6wwyfbY3jKQnfOYjFHAWCo8= Subject key identifier: 35:4F:D3:82:C1:E6:DB:7B:FD:30:FC:04:0D:E3:B8:7C:2F:34:14:8E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57C0C4D838081F27B9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9edbfb06-6b95-310a-8dcf-550662e7e6cd.roa Signing time: Thu 01 May 2025 17:09:45 +0000 ROA not before: Thu 01 May 2025 17:09:45 +0000 ROA not after: Wed 30 Jul 2025 17:09:45 +0000 asID: 22773 IP address blocks: 70.172.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7c:0c:4d:83:80:81:f2:7b:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:45 2025 GMT Not After : Jul 30 17:09:45 2025 GMT Subject: CN=de4ce45b-f747-4a92-a3b6-590016c59715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:05:0f:a6:2d:9f:d7:25:41:cc:9c:8b:7e: 07:fd:d4:f7:46:b7:ff:ce:46:33:05:17:fa:5d:d5: 3c:a0:b3:64:14:82:3f:27:ca:60:7e:9e:4a:1c:ce: d7:c5:1f:4d:04:8d:ac:17:35:f6:f6:40:17:be:cc: 7f:12:c6:68:21:33:81:60:40:40:71:3b:d5:5c:50: 64:7d:02:f4:f2:e9:37:2b:e7:b2:d4:19:86:2c:f3: 89:37:6b:f7:31:45:4a:62:11:2d:43:79:28:15:dd: 74:47:a5:fd:a5:10:67:c9:81:32:a2:e1:f4:68:2f: 48:f7:ee:54:8c:2f:04:4b:3a:d5:6e:1f:c4:73:10: 8a:de:d5:94:50:87:86:1d:9e:77:ac:fa:3e:87:a7: d3:45:8e:5d:d9:8a:d9:e1:0a:88:6b:0e:1e:47:b1: 4a:ea:c6:95:c8:23:1b:eb:b6:94:88:57:aa:a6:1c: 3e:2d:d9:11:a3:8c:b1:95:73:c1:12:8c:17:0c:3f: 76:4b:79:af:37:f7:91:a1:6e:94:61:6d:9a:48:ec: ff:8e:67:62:d3:5b:66:43:4d:8b:b6:85:66:2e:2c: f4:b8:ad:94:35:d0:76:39:ad:84:47:0b:21:ce:75: 49:58:fb:1a:3f:53:7a:b8:ba:01:e2:45:06:28:2f: 9b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:D3:82:C1:E6:DB:7B:FD:30:FC:04:0D:E3:B8:7C:2F:34:14:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9edbfb06-6b95-310a-8dcf-550662e7e6cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:2e:51:c8:20:57:36:77:92:9a:1d:4f:90:e6:b2:be:62:35: 35:a1:5c:48:72:2a:ef:8f:00:40:ed:bc:f7:9c:ce:06:4d:5f: 9a:a0:c8:1b:6e:33:33:af:02:58:48:fa:12:b7:53:f2:56:9e: 80:58:46:56:f3:92:ef:c2:6b:66:75:93:0e:15:3d:3a:2d:8f: 96:eb:a8:81:a0:ee:ae:63:ac:7a:67:0a:68:49:10:11:74:b7: 1f:bf:9d:15:26:58:3a:34:0f:bb:40:0f:6a:f7:ad:db:e0:ed: 38:7e:74:38:fb:8e:71:a3:a5:08:49:b6:7e:d2:b8:cd:b5:62: db:39:e3:35:2f:b5:0c:83:af:bf:03:5e:6d:2b:de:12:ac:2f: 3f:b8:fe:0f:17:72:9c:97:b5:5a:ea:39:0a:85:06:41:3d:14: d2:64:f0:25:e6:30:92:e8:48:57:58:29:90:93:66:df:c1:43: fc:21:27:ae:57:65:f3:89:cc:10:92:fc:80:be:f0:6c:f9:c2: 8b:ba:2f:3e:42:54:6d:93:82:60:20:01:e9:00:50:7f:ca:fb: 19:b3:a7:40:e7:34:01:73:8c:73:57:7a:57:f6:2f:7b:24:b6: fd:66:62:47:e3:12:a2:16:b7:91:9a:c5:57:17:46:de:a5:cc: 09:7c:7a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XwMTYOAgfJ7nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NVoXDTI1MDczMDE3MDk0NVowLzEtMCsGA1UEAxMk ZGU0Y2U0NWItZjc0Ny00YTkyLWEzYjYtNTkwMDE2YzU5NzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfkFD6Ytn9clQcyci34H/dT3Rrf/zkYzBRf6 XdU8oLNkFII/J8pgfp5KHM7XxR9NBI2sFzX29kAXvsx/EsZoITOBYEBAcTvVXFBk fQL08uk3K+ey1BmGLPOJN2v3MUVKYhEtQ3koFd10R6X9pRBnyYEyouH0aC9I9+5U jC8ESzrVbh/EcxCK3tWUUIeGHZ53rPo+h6fTRY5d2YrZ4QqIaw4eR7FK6saVyCMb 67aUiFeqphw+LdkRo4yxlXPBEowXDD92S3mvN/eRoW6UYW2aSOz/jmdi01tmQ02L toVmLiz0uK2UNdB2Oa2ERwshznVJWPsaP1N6uLoB4kUGKC+bfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVP04LB5tt7/TD8BA3juHwvNBSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWVkYmZiMDYtNmI5NS0z MTBhLThkY2YtNTUwNjYyZTdlNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8uUcggVzZ3kpodT5Dmsr5iNTWhXEhyKu+PAEDtvPeczgZNX5qgyBtu MzOvAlhI+hK3U/JWnoBYRlbzku/Ca2Z1kw4VPTotj5brqIGg7q5jrHpnCmhJEBF0 tx+/nRUmWDo0D7tAD2r3rdvg7Th+dDj7jnGjpQhJtn7SuM21Yts54zUvtQyDr78D Xm0r3hKsLz+4/g8XcpyXtVrqOQqFBkE9FNJk8CXmMJLoSFdYKZCTZt/BQ/whJ65X ZfOJzBCS/IC+8Gz5wou6Lz5CVG2TgmAgAekAUH/K+xmzp0DnNAFzjHNXelf2L3sk tv1mYkfjEqIWt5GaxVcXRt6lzAl8ekA= -----END CERTIFICATE-----Generated at Tue May 13 07:56:57 2025 by rpki-client