$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afec2489-b726-3045-8514-576adf1acfb6.roa File: afec2489-b726-3045-8514-576adf1acfb6.roa (raw, json) Hash identifier: 9vVZh6Kaz791HzXajKoWjunVQE4MT2/naXCP7nerjSg= Subject key identifier: 79:FD:5F:0E:03:74:C4:FB:94:64:26:AC:1D:85:17:64:08:88:BB:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F83E7C77137E407F9864C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afec2489-b726-3045-8514-576adf1acfb6.roa Signing time: Thu 01 May 2025 17:15:19 +0000 ROA not before: Thu 01 May 2025 17:15:19 +0000 ROA not after: Wed 30 Jul 2025 17:15:19 +0000 asID: 22773 IP address blocks: 70.161.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:3e:7c:77:13:7e:40:7f:98:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:19 2025 GMT Not After : Jul 30 17:15:19 2025 GMT Subject: CN=be412bb7-8e86-423f-af73-e88ee5c40e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:f2:c2:bd:72:27:3e:99:ec:a1:24:bf:b7: 0c:0e:7d:26:1b:d6:22:82:7e:59:e6:d1:87:f8:87: bb:94:a7:60:0b:23:f5:ad:17:99:90:32:28:a4:88: 25:8b:a8:b1:97:da:4d:be:af:75:9a:0c:c0:30:b0: 06:4d:11:77:1d:6c:41:86:31:68:ad:d0:79:ec:37: 7e:b6:d7:0c:37:58:be:63:ed:63:34:ec:0c:65:22: 91:f1:4d:ef:a2:1e:ea:5a:95:9f:f6:57:68:eb:a8: a2:8f:a7:8b:4c:ff:6b:18:18:f4:76:a4:b0:98:b8: 28:ec:33:f8:dd:a9:e9:46:8a:d0:76:47:45:1f:d8: d2:ee:c7:70:33:d0:40:de:b3:0f:86:9a:6a:6a:8d: 08:0b:b8:66:51:bc:db:e8:cd:e4:98:5a:27:32:63: 55:ca:21:2c:05:fe:f6:77:22:0d:1a:41:41:47:b0: e2:7e:72:cc:5c:5a:bc:c1:a8:a3:dc:d7:d6:4a:cf: e2:c1:bd:8e:b4:21:47:14:74:4b:fa:9d:e9:7c:be: 39:ab:c5:d8:6f:47:9f:2a:09:2b:2c:6b:0f:69:85: ac:9c:71:7b:c4:0b:2d:d9:70:25:dd:7c:72:10:ad: f2:88:42:2d:dc:5b:9c:a4:64:eb:89:a0:fd:8f:41: 2b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:5F:0E:03:74:C4:FB:94:64:26:AC:1D:85:17:64:08:88:BB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afec2489-b726-3045-8514-576adf1acfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d9:ff:f6:a7:8e:f6:3e:1c:27:ce:10:8c:4c:49:0f:fb:a5: 38:75:3a:82:75:9f:6f:25:72:7b:9b:6b:28:9d:d0:14:74:92: fe:c1:d2:31:de:43:71:c8:dc:ce:4e:4e:c6:c6:4c:7a:22:c0: 0b:19:da:a3:96:98:78:b4:5d:60:9a:18:7f:ce:e6:2c:34:c8: a8:e8:65:17:dd:9e:ad:bb:76:cd:e3:73:6a:4f:fb:94:e4:84: 5b:02:27:23:52:b7:24:6c:fe:0a:50:4c:e5:1b:43:cc:49:4c: ba:ef:b0:fb:10:b6:a1:44:af:df:26:b8:0e:c6:4d:43:f7:77: 7f:33:3b:20:7a:d1:ec:7c:4f:b9:dc:d0:d2:8b:2f:18:0f:c5: d9:4f:eb:14:42:e4:bf:af:b0:99:13:03:8d:0b:4b:86:c7:56: 53:ba:67:a1:c3:b5:96:ee:4c:75:fe:3a:a0:34:51:7e:07:ef: 13:11:67:e8:83:fb:cd:be:4f:7b:67:9e:bb:f7:bb:e2:dc:3e: ea:06:c4:06:b3:14:b9:ba:4e:da:c4:0e:c9:b4:cc:e4:af:0c: 13:5e:22:76:7f:71:21:d0:e5:1d:e1:f4:80:4c:e7:62:91:98: cb:01:da:70:6f:e4:92:2b:64:ee:bc:4f:5e:ff:86:e1:11:a9: 46:52:4f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+D58dxN+QH+YZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUxOVoXDTI1MDczMDE3MTUxOVowLzEtMCsGA1UEAxMk YmU0MTJiYjctOGU4Ni00MjNmLWFmNzMtZTg4ZWU1YzQwZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR/ywr1yJz6Z7KEkv7cMDn0mG9Yign5Z5tGH +Ie7lKdgCyP1rReZkDIopIgli6ixl9pNvq91mgzAMLAGTRF3HWxBhjFordB57Dd+ ttcMN1i+Y+1jNOwMZSKR8U3voh7qWpWf9ldo66iij6eLTP9rGBj0dqSwmLgo7DP4 3anpRorQdkdFH9jS7sdwM9BA3rMPhppqao0IC7hmUbzb6M3kmFonMmNVyiEsBf72 dyINGkFBR7DifnLMXFq8waij3NfWSs/iwb2OtCFHFHRL+p3pfL45q8XYb0efKgkr LGsPaYWsnHF7xAst2XAl3XxyEK3yiEIt3FucpGTriaD9j0ErGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn9Xw4DdMT7lGQmrB2FF2QIiLvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZlYzI0ODktYjcyNi0z MDQ1LTg1MTQtNTc2YWRmMWFjZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHZ//anjvY+HCfOEIxMSQ/7pTh1OoJ1n28lcnubayid0BR0kv7B0jHe Q3HI3M5OTsbGTHoiwAsZ2qOWmHi0XWCaGH/O5iw0yKjoZRfdnq27ds3jc2pP+5Tk hFsCJyNStyRs/gpQTOUbQ8xJTLrvsPsQtqFEr98muA7GTUP3d38zOyB60ex8T7nc 0NKLLxgPxdlP6xRC5L+vsJkTA40LS4bHVlO6Z6HDtZbuTHX+OqA0UX4H7xMRZ+iD +82+T3tnnrv3u+LcPuoGxAazFLm6TtrEDsm0zOSvDBNeInZ/cSHQ5R3h9IBM52KR mMsB2nBv5JIrZO68T17/huERqUZST4E= -----END CERTIFICATE-----Generated at Sun May 11 16:44:52 2025 by rpki-client