$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b793f27c-6b65-396f-be0c-fc96d986c7b6.roa File: b793f27c-6b65-396f-be0c-fc96d986c7b6.roa (raw, json) Hash identifier: qkJ/5WzZIey2MXOwizun0XL2JqUBRVdzFQQtSmTbWx0= Subject key identifier: F0:DA:CF:1D:3F:C8:6C:E5:E1:4B:94:2E:7D:C8:AB:5B:EC:87:7A:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8522C66F864454C5EFE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b793f27c-6b65-396f-be0c-fc96d986c7b6.roa Signing time: Thu 01 May 2025 17:15:28 +0000 ROA not before: Thu 01 May 2025 17:15:28 +0000 ROA not after: Wed 30 Jul 2025 17:15:28 +0000 asID: 22773 IP address blocks: 70.186.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:52:2c:66:f8:64:45:4c:5e:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:28 2025 GMT Not After : Jul 30 17:15:28 2025 GMT Subject: CN=0d7d066f-1468-4baf-97cd-baad19da38e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:2b:56:91:f3:0e:25:fd:cf:ac:3e:a1:8f: 60:b6:18:66:dc:ce:80:91:0c:5b:ae:e8:f4:d8:95: 05:af:f6:aa:3b:f4:8f:79:fa:41:7f:e0:58:bf:a5: d5:78:65:cf:fa:b7:8e:0c:7b:1f:f7:53:5a:93:9d: 88:c3:81:68:87:4b:de:6a:c1:c0:c1:48:c2:1a:f4: 5e:4e:0c:88:88:59:ba:ec:54:0b:ab:11:49:51:57: e8:8f:aa:b7:fc:0a:1b:e9:c2:7f:15:3c:13:71:c0: 8c:d3:4e:82:3a:38:d7:35:07:bf:63:d7:50:1d:97: 72:f1:d1:6b:81:3b:f7:e9:e9:4e:4e:ca:f3:6a:f0: 7f:fb:b3:ef:fc:7a:24:1f:98:e8:4f:ec:db:55:64: c1:72:91:3d:b3:15:8f:b5:77:e8:c1:98:70:d8:4b: 87:3f:64:ee:87:a1:17:70:66:d8:7a:17:a2:d3:35: a6:16:ec:cf:c2:14:d2:8c:50:ca:14:58:e5:15:72: 96:26:14:1f:5e:57:78:3b:bf:0e:bc:8b:5a:c4:e1: 7b:26:aa:29:fc:6b:6f:b0:5b:f0:48:99:7f:7e:ea: 9f:0c:25:08:5c:88:c1:c6:d6:ef:2b:c6:f8:12:0c: e9:5a:20:36:88:f4:7f:3f:ea:2d:2e:ee:a6:72:1e: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:CF:1D:3F:C8:6C:E5:E1:4B:94:2E:7D:C8:AB:5B:EC:87:7A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b793f27c-6b65-396f-be0c-fc96d986c7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.186.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4f:f3:56:b2:7a:24:b5:94:b2:cf:42:4c:20:15:6c:32:14: 11:a2:66:46:79:b1:bc:a2:e7:d9:c8:e5:dd:eb:42:ab:52:19: 41:0f:f8:47:ef:25:04:0a:ea:90:38:29:91:18:07:4b:43:2b: 5b:f9:6d:45:5b:06:3e:83:16:30:04:88:92:b2:ae:51:1b:58: f0:c7:f6:62:6d:19:a8:59:6b:03:4d:54:c2:ea:76:de:a3:0b: e0:b1:00:19:b2:46:14:e0:66:ea:d8:eb:91:89:98:f7:0d:8d: 46:3f:8a:a3:1b:1a:1a:d0:39:b0:d5:fa:e5:ee:17:29:2c:a7: 48:67:cd:0a:ea:8c:43:8d:72:86:d4:09:5f:6d:a4:55:f4:3c: 41:7a:6c:76:05:76:31:59:fa:c6:e0:20:b5:a3:1a:2a:19:16: d4:20:f3:24:a3:2d:40:58:37:a7:6a:aa:a3:16:e1:35:b9:b7: d4:75:63:e4:f0:2e:64:5c:7a:42:dd:d2:1f:65:b4:fa:ab:40: 16:d3:c4:2a:c4:cc:09:fc:b0:09:04:67:42:67:5a:a8:75:8a: 1e:8a:ee:33:68:5c:88:30:53:13:15:ef:89:25:43:38:5c:68: 32:85:66:76:28:6a:00:2e:92:8c:b8:59:1a:15:56:d0:55:f0: 2a:10:39:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+FIsZvhkRUxe/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyOFoXDTI1MDczMDE3MTUyOFowLzEtMCsGA1UEAxMk MGQ3ZDA2NmYtMTQ2OC00YmFmLTk3Y2QtYmFhZDE5ZGEzOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDYrVpHzDiX9z6w+oY9gthhm3M6AkQxbruj0 2JUFr/aqO/SPefpBf+BYv6XVeGXP+reODHsf91Nak52Iw4Foh0veasHAwUjCGvRe TgyIiFm67FQLqxFJUVfoj6q3/Aob6cJ/FTwTccCM006COjjXNQe/Y9dQHZdy8dFr gTv36elOTsrzavB/+7Pv/HokH5joT+zbVWTBcpE9sxWPtXfowZhw2EuHP2Tuh6EX cGbYehei0zWmFuzPwhTSjFDKFFjlFXKWJhQfXld4O78OvItaxOF7Jqop/GtvsFvw SJl/fuqfDCUIXIjBxtbvK8b4EgzpWiA2iPR/P+otLu6mch4c5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDazx0/yGzl4UuULn3Iq1vsh3qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjc5M2YyN2MtNmI2NS0z OTZmLWJlMGMtZmM5NmQ5ODZjN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtP81ayeiS1lLLPQkwgFWwyFBGiZkZ5sbyi59nI5d3rQqtSGUEP+Efv JQQK6pA4KZEYB0tDK1v5bUVbBj6DFjAEiJKyrlEbWPDH9mJtGahZawNNVMLqdt6j C+CxABmyRhTgZurY65GJmPcNjUY/iqMbGhrQObDV+uXuFyksp0hnzQrqjEONcobU CV9tpFX0PEF6bHYFdjFZ+sbgILWjGioZFtQg8ySjLUBYN6dqqqMW4TW5t9R1Y+Tw LmRcekLd0h9ltPqrQBbTxCrEzAn8sAkEZ0JnWqh1ih6K7jNoXIgwUxMV74klQzhc aDKFZnYoagAukoy4WRoVVtBV8CoQObI= -----END CERTIFICATE-----Generated at Sat May 10 19:23:50 2025 by rpki-client