$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa File: af5fa3e2-cabf-3d75-97f1-1341349cb118.roa (raw, json) Hash identifier: nYygLa+KX/8SnymD/UQ1mCc4eeACNAyeacdSHP6/62g= Subject key identifier: 60:08:E2:79:5E:F8:30:95:50:63:9C:60:9C:C8:56:F3:8E:54:58:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F581EC15FB572A6DB60780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa Signing time: Thu 01 May 2025 17:09:48 +0000 ROA not before: Thu 01 May 2025 17:09:48 +0000 ROA not after: Wed 30 Jul 2025 17:09:48 +0000 asID: 22773 IP address blocks: 70.175.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:81:ec:15:fb:57:2a:6d:b6:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:48 2025 GMT Not After : Jul 30 17:09:48 2025 GMT Subject: CN=9286959c-d7f4-4887-86a8-2a4dd28ea10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:e6:81:8d:72:21:1f:7c:3a:80:16:3f:0f: 09:20:9c:40:eb:e2:2a:84:86:42:53:a5:04:aa:7d: c2:d5:b7:85:73:f4:7c:18:62:89:c4:ff:d9:7b:ed: c7:dc:32:04:02:3c:e7:ee:b7:b1:f3:8b:40:20:5b: 9c:c8:73:d7:72:6c:03:67:cf:3a:4c:5b:8e:45:08: 99:1f:48:b6:0f:8d:2f:4b:eb:79:75:96:f9:8a:a2: e8:73:fc:be:27:5f:cf:bf:b7:54:8f:98:ac:fa:df: 68:83:cf:88:53:4a:15:18:76:4b:ba:cc:31:66:eb: 9b:e9:fe:a0:5a:8e:97:bf:96:dc:e5:4e:02:e2:a0: 8e:4b:fd:5b:a3:47:f7:6e:2e:a4:36:2e:fb:65:bf: 12:fe:4e:43:76:3e:5a:cf:91:ee:a2:ce:82:2a:ac: 7f:2b:9b:9e:0a:cc:4d:33:54:98:73:45:e9:45:c3: 8e:67:21:aa:93:f3:a6:06:0a:ae:d7:9f:33:ec:f4: a5:72:f4:f9:eb:5b:8f:09:c8:26:3c:ec:5c:80:67: da:c8:f0:77:85:eb:cf:46:84:fc:31:d9:dd:74:0d: c1:d4:62:8d:15:19:39:1e:88:0b:73:99:95:f6:de: 24:e7:fd:b3:1a:9d:61:4d:64:bb:e6:f5:ae:0f:3a: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:08:E2:79:5E:F8:30:95:50:63:9C:60:9C:C8:56:F3:8E:54:58:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af5fa3e2-cabf-3d75-97f1-1341349cb118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.175.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f1:33:f5:6e:17:46:70:3b:d8:6e:56:a5:81:a0:8b:45:40: 64:c9:81:35:9c:7f:dc:22:58:88:bc:bd:eb:3a:bb:e4:8c:57: 89:68:a0:c9:f8:48:17:76:4b:d0:44:92:1f:51:a2:c0:c3:cd: ad:8e:e6:e8:8b:eb:06:34:4f:29:18:e4:76:39:42:cc:e5:00: 1b:b8:f4:64:df:5e:4e:2f:8e:90:25:3f:21:67:1e:8d:3e:19: 7a:a7:cc:40:3a:f4:2b:cf:29:85:a4:29:10:12:f1:da:fa:49: 42:12:f1:75:3e:98:4b:dd:e1:96:68:61:91:78:70:ca:f9:20: 7a:25:34:05:80:d8:7f:f8:e3:f0:07:dc:d7:08:ec:37:49:f1: 89:06:7b:45:6f:45:22:90:1d:2e:44:c6:1c:cb:0d:df:b0:f2: 34:c6:74:c8:7a:1f:23:1d:00:ed:05:12:a6:09:43:56:33:29: ce:92:34:5a:d0:14:95:43:59:f7:7d:a5:f3:ae:47:61:28:8f: f9:30:ad:fe:b7:be:a2:99:be:11:1e:f2:a2:51:d9:c9:66:69: ec:f9:d6:22:09:db:12:1b:d9:65:85:09:cf:31:34:f6:8c:9a: e9:a6:7e:20:64:f5:45:f9:ba:1b:6d:64:cb:e2:90:37:59:89: 58:de:71:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19YHsFftXKm22B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0OFoXDTI1MDczMDE3MDk0OFowLzEtMCsGA1UEAxMk OTI4Njk1OWMtZDdmNC00ODg3LTg2YTgtMmE0ZGQyOGVhMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWDmgY1yIR98OoAWPw8JIJxA6+IqhIZCU6UE qn3C1beFc/R8GGKJxP/Ze+3H3DIEAjzn7rex84tAIFucyHPXcmwDZ886TFuORQiZ H0i2D40vS+t5dZb5iqLoc/y+J1/Pv7dUj5is+t9og8+IU0oVGHZLuswxZuub6f6g Wo6Xv5bc5U4C4qCOS/1bo0f3bi6kNi77Zb8S/k5Ddj5az5Huos6CKqx/K5ueCsxN M1SYc0XpRcOOZyGqk/OmBgqu158z7PSlcvT561uPCcgmPOxcgGfayPB3hevPRoT8 MdnddA3B1GKNFRk5HogLc5mV9t4k5/2zGp1hTWS75vWuDzpH6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAI4nle+DCVUGOcYJzIVvOOVFijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY1ZmEzZTItY2FiZi0z ZDc1LTk3ZjEtMTM0MTM0OWNiMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3xM/VuF0ZwO9huVqWBoItFQGTJgTWcf9wiWIi8ves6u+SMV4looMn4 SBd2S9BEkh9RosDDza2O5uiL6wY0TykY5HY5QszlABu49GTfXk4vjpAlPyFnHo0+ GXqnzEA69CvPKYWkKRAS8dr6SUIS8XU+mEvd4ZZoYZF4cMr5IHolNAWA2H/44/AH 3NcI7DdJ8YkGe0VvRSKQHS5ExhzLDd+w8jTGdMh6HyMdAO0FEqYJQ1YzKc6SNFrQ FJVDWfd9pfOuR2Eoj/kwrf63vqKZvhEe8qJR2clmaez51iIJ2xIb2WWFCc8xNPaM mummfiBk9UX5uhttZMvikDdZiVjecck= -----END CERTIFICATE-----Generated at Mon May 12 16:07:06 2025 by rpki-client