$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ac4623-9aab-34be-832b-927d562bdc00.roa File: a0ac4623-9aab-34be-832b-927d562bdc00.roa (raw, json) Hash identifier: 18d/bVPZ2KwLAr7O6Cv3m5H72lYxPCisFbX0GOD+rtY= Subject key identifier: 8B:3C:08:4B:A8:62:35:89:37:60:86:F9:EE:F5:46:99:DA:15:B2:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F822258D16F9A8BEC40880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ac4623-9aab-34be-832b-927d562bdc00.roa Signing time: Thu 01 May 2025 17:15:06 +0000 ROA not before: Thu 01 May 2025 17:15:06 +0000 ROA not after: Wed 30 Jul 2025 17:15:06 +0000 asID: 22773 IP address blocks: 70.160.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:22:25:8d:16:f9:a8:be:c4:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:06 2025 GMT Not After : Jul 30 17:15:06 2025 GMT Subject: CN=879cc554-8e5b-4a3a-a6cd-2db698a50932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:85:b6:12:1e:4a:91:f7:5c:11:d6:04:8b: e1:e0:8a:8b:60:7a:7d:a1:97:00:da:f3:62:75:78: ab:49:90:55:aa:2e:30:ba:ed:01:9f:ee:51:3c:af: 27:38:e9:06:54:ac:20:87:40:56:08:79:d0:32:59: 2e:ad:06:e3:58:ad:57:8d:a6:19:a8:b9:69:a0:47: ab:67:c1:72:79:fc:69:38:de:cb:fa:a4:6a:04:d8: e9:cb:a2:e9:98:c0:72:ad:ef:6e:d8:b8:82:b7:69: 24:0d:14:c0:98:7f:12:ba:79:73:75:c9:73:85:ec: 5a:f4:9e:55:1d:27:b4:36:3c:b7:3e:3f:ed:ae:02: 51:b3:aa:14:67:35:33:8f:a2:92:d4:7b:87:2d:eb: b3:b9:97:08:bb:70:d1:b5:54:e0:bb:c2:cc:e6:77: ae:57:78:06:70:99:47:41:b8:11:4b:7b:e9:2d:ed: 3a:9a:f7:6d:5c:fa:cd:cf:d8:57:3f:b3:b7:41:95: 92:4e:51:cb:60:14:39:cb:d7:20:fc:a8:2c:cb:3b: d6:7a:42:be:26:21:95:33:e3:d4:55:95:69:0f:4a: 43:c0:b2:e2:bb:19:34:07:cd:17:d5:98:93:24:bb: e8:aa:07:6a:46:86:38:1f:79:9f:be:a6:85:15:a2: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:08:4B:A8:62:35:89:37:60:86:F9:EE:F5:46:99:DA:15:B2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0ac4623-9aab-34be-832b-927d562bdc00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:02:2f:45:7a:10:60:ad:f6:0a:15:4a:7e:8c:07:14:95:44: d6:6b:83:d5:f4:6a:ac:e5:19:2f:70:21:91:23:76:8c:41:fc: bb:57:c3:2e:ec:e7:48:dd:85:d6:94:ea:42:5e:ae:ca:f6:4f: be:da:a7:29:c3:6f:a7:20:a4:a0:96:a7:99:b2:7b:ed:bf:98: a6:66:ad:fc:4a:7e:d1:d2:9f:a7:73:4a:a3:48:38:0f:24:00: 74:76:4f:51:39:cf:f7:c2:6b:84:13:63:c0:23:2e:52:44:00: c1:eb:21:67:d4:6d:35:fc:1a:ea:58:12:50:8d:dd:89:29:5f: f9:aa:3a:6b:a3:fa:75:eb:62:5b:94:c1:67:45:37:e3:39:46: 1a:03:6a:ec:8f:6d:6a:06:d9:b3:08:40:f9:bc:d1:32:a9:ec: 72:c2:b8:aa:74:c4:11:1b:14:0d:ef:1f:a3:66:f4:83:ee:00: ff:7a:55:37:09:10:76:56:2d:5e:f2:73:97:4c:2e:a5:90:a5: 0c:d9:12:fa:80:b6:3b:9d:15:4f:33:d4:39:b1:0b:a0:8d:da: ef:29:d7:35:30:37:3d:0a:18:b3:6a:96:81:a6:cf:31:07:00: 58:4a:f4:e7:73:12:86:91:8e:27:f1:a7:11:9f:71:52:67:6a: 22:97:78:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+CIljRb5qL7ECIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUwNloXDTI1MDczMDE3MTUwNlowLzEtMCsGA1UEAxMk ODc5Y2M1NTQtOGU1Yi00YTNhLWE2Y2QtMmRiNjk4YTUwOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV2FthIeSpH3XBHWBIvh4IqLYHp9oZcA2vNi dXirSZBVqi4wuu0Bn+5RPK8nOOkGVKwgh0BWCHnQMlkurQbjWK1XjaYZqLlpoEer Z8FyefxpON7L+qRqBNjpy6LpmMByre9u2LiCt2kkDRTAmH8Sunlzdclzhexa9J5V HSe0Njy3Pj/trgJRs6oUZzUzj6KS1HuHLeuzuZcIu3DRtVTgu8LM5neuV3gGcJlH QbgRS3vpLe06mvdtXPrNz9hXP7O3QZWSTlHLYBQ5y9cg/KgsyzvWekK+JiGVM+PU VZVpD0pDwLLiuxk0B80X1ZiTJLvoqgdqRoY4H3mfvqaFFaJYQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIs8CEuoYjWJN2CG+e71RpnaFbIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBhYzQ2MjMtOWFhYi0z NGJlLTgzMmItOTI3ZDU2MmJkYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkCL0V6EGCt9goVSn6MBxSVRNZrg9X0aqzlGS9wIZEjdoxB/LtXwy7s 50jdhdaU6kJersr2T77apynDb6cgpKCWp5mye+2/mKZmrfxKftHSn6dzSqNIOA8k AHR2T1E5z/fCa4QTY8AjLlJEAMHrIWfUbTX8GupYElCN3YkpX/mqOmuj+nXrYluU wWdFN+M5RhoDauyPbWoG2bMIQPm80TKp7HLCuKp0xBEbFA3vH6Nm9IPuAP96VTcJ EHZWLV7yc5dMLqWQpQzZEvqAtjudFU8z1DmxC6CN2u8p1zUwNz0KGLNqloGmzzEH AFhK9OdzEoaRjifxpxGfcVJnaiKXePs= -----END CERTIFICATE-----Generated at Mon May 12 10:25:46 2025 by rpki-client