$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aebf2509-d933-3897-bba8-edffbb7387f4.roa File: aebf2509-d933-3897-bba8-edffbb7387f4.roa (raw, json) Hash identifier: neTXqVCcCdQLhfsjsYmAh6vvyDkGd28IqMl6xRUBw5M= Subject key identifier: 8D:D9:DC:28:FC:19:D1:C3:0F:69:AF:A4:E2:6A:38:40:5C:54:62:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDFAF40C58DAD9C3BC6680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aebf2509-d933-3897-bba8-edffbb7387f4.roa Signing time: Thu 01 May 2025 17:26:52 +0000 ROA not before: Thu 01 May 2025 17:26:52 +0000 ROA not after: Wed 30 Jul 2025 17:26:52 +0000 asID: 22773 IP address blocks: 174.66.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:fa:f4:0c:58:da:d9:c3:bc:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:52 2025 GMT Not After : Jul 30 17:26:52 2025 GMT Subject: CN=44d32d57-2244-4504-9de3-255953da138c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:44:f7:36:0d:4f:f5:7d:b7:46:41:4d:fa: bf:75:fe:12:c6:c2:84:b6:41:6d:e4:d1:6d:d2:6d: e3:41:19:2d:9b:40:6e:a3:cc:41:07:ce:06:57:73: 8f:aa:ef:91:cf:e3:73:a4:a0:9f:d3:e8:03:fc:1a: d0:30:b7:d3:11:d3:d9:05:89:22:91:39:c5:49:55: c4:d5:78:44:6c:ab:2b:74:78:e8:fe:86:7e:33:f3: 65:dd:9f:12:fd:ed:8e:fc:aa:e5:6b:d0:41:f9:8e: 83:4b:48:7e:68:e3:65:45:10:92:69:73:ed:f4:7a: 56:ab:cb:c7:8b:40:6b:c6:45:64:e1:45:95:88:47: 9b:ed:70:fc:c6:cd:9f:b5:3b:28:8f:88:d7:56:02: c0:73:66:c6:32:a3:44:8d:a6:d3:99:cf:2b:81:4d: fc:82:42:8e:d7:2e:66:9b:2b:53:5b:7e:f2:98:96: 9f:51:13:bf:ab:b3:af:52:76:c0:f8:40:82:ef:26: b7:31:d4:67:ee:9e:0a:49:47:5b:e4:3a:f5:e5:a2: 76:1c:00:0e:7c:89:ac:46:3e:2f:22:2a:55:d5:2e: ca:8e:48:bf:97:29:24:3c:b6:6d:db:1e:99:a2:b8: 92:eb:23:a4:65:04:8f:9b:d2:fc:71:e5:d8:a9:a6: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D9:DC:28:FC:19:D1:C3:0F:69:AF:A4:E2:6A:38:40:5C:54:62:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aebf2509-d933-3897-bba8-edffbb7387f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f3:a3:09:37:fb:1c:ff:88:ba:f6:29:85:d6:e1:94:c8:a2: 56:48:73:5e:d0:50:13:ec:1a:90:18:1b:0e:cd:0f:24:d8:f3: 49:ba:63:72:c9:a7:68:52:c8:8a:ae:5b:06:01:cc:71:e2:e6: 9e:12:fc:63:31:25:7c:4d:d2:ce:2c:ea:83:3f:66:2c:33:23: c1:10:a9:1c:d8:0b:03:47:c9:6a:a6:64:e0:f5:ce:f2:52:36: a5:46:f6:b9:eb:35:0c:06:e1:12:5f:c5:52:a1:93:d7:13:4b: b7:1d:af:7d:c3:2a:b1:dc:7d:d2:75:3f:75:ff:0e:2d:58:08: 19:a9:8a:c1:e2:fd:8c:ba:d4:65:26:26:43:b2:09:98:49:89: 43:80:0b:a1:3e:2f:b4:09:69:02:2d:1a:e8:88:18:fd:65:46: d1:fd:00:83:2b:2c:0e:7a:39:dc:58:a4:44:32:06:3e:bc:eb: 84:56:6f:62:ca:9f:89:cc:da:ee:9b:3c:3c:18:97:d6:3e:34: 5d:d9:67:f0:6c:e5:fc:d6:4f:a7:0e:72:b9:83:7a:ba:ed:d0: d5:5c:1b:97:57:83:3a:a9:37:1a:b8:c7:aa:ee:ca:87:30:47: fb:9a:80:ef:fa:cb:b4:50:5d:25:00:90:4c:d6:f6:dd:33:d6: 67:06:11:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/fr0DFja2cO8ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY1MloXDTI1MDczMDE3MjY1MlowLzEtMCsGA1UEAxMk NDRkMzJkNTctMjI0NC00NTA0LTlkZTMtMjU1OTUzZGExMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9VE9zYNT/V9t0ZBTfq/df4SxsKEtkFt5NFt 0m3jQRktm0Buo8xBB84GV3OPqu+Rz+NzpKCf0+gD/BrQMLfTEdPZBYkikTnFSVXE 1XhEbKsrdHjo/oZ+M/Nl3Z8S/e2O/Krla9BB+Y6DS0h+aONlRRCSaXPt9HpWq8vH i0BrxkVk4UWViEeb7XD8xs2ftTsoj4jXVgLAc2bGMqNEjabTmc8rgU38gkKO1y5m mytTW37ymJafURO/q7OvUnbA+ECC7ya3MdRn7p4KSUdb5Dr15aJ2HAAOfImsRj4v IipV1S7Kjki/lykkPLZt2x6ZoriS6yOkZQSPm9L8ceXYqaZqHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Z3Cj8GdHDD2mvpOJqOEBcVGKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWViZjI1MDktZDkzMy0z ODk3LWJiYTgtZWRmZmJiNzM4N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLzowk3+xz/iLr2KYXW4ZTIolZIc17QUBPsGpAYGw7NDyTY80m6Y3LJ p2hSyIquWwYBzHHi5p4S/GMxJXxN0s4s6oM/ZiwzI8EQqRzYCwNHyWqmZOD1zvJS NqVG9rnrNQwG4RJfxVKhk9cTS7cdr33DKrHcfdJ1P3X/Di1YCBmpisHi/Yy61GUm JkOyCZhJiUOAC6E+L7QJaQItGuiIGP1lRtH9AIMrLA56OdxYpEQyBj6864RWb2LK n4nM2u6bPDwYl9Y+NF3ZZ/Bs5fzWT6cOcrmDerrt0NVcG5dXgzqpNxq4x6ruyocw R/uagO/6y7RQXSUAkEzW9t0z1mcGEVQ= -----END CERTIFICATE-----Generated at Mon May 12 18:27:09 2025 by rpki-client