$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa File: c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa (raw, json) Hash identifier: +3QQ+44PRll0TUub919g1zP70fg8tH0j+u1ageYZ2Mc= Subject key identifier: BA:0C:C2:90:3E:CF:8E:E6:D5:7B:0E:65:F1:96:B7:2D:97:92:B2:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57746F1566DC10B770500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa Signing time: Thu 01 May 2025 17:09:43 +0000 ROA not before: Thu 01 May 2025 17:09:43 +0000 ROA not after: Wed 30 Jul 2025 17:09:43 +0000 asID: 22773 IP address blocks: 70.172.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:77:46:f1:56:6d:c1:0b:77:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:43 2025 GMT Not After : Jul 30 17:09:43 2025 GMT Subject: CN=3ed8b916-e86f-4ce1-b6ea-6c109976c869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:65:5b:b2:db:07:0d:3a:05:fd:78:e2:40:23: 92:0b:58:da:ec:2a:59:24:7e:09:67:ad:ae:22:52: ab:13:a0:cf:26:d3:ac:8d:e4:ba:34:68:29:e0:de: d3:8a:92:e3:a3:87:ad:ee:08:db:6b:45:27:dc:5c: 47:bd:83:3c:d4:80:ea:7c:87:43:fe:2a:a4:71:58: 9c:62:5a:65:24:08:5e:6a:7f:8f:9f:c5:12:fc:b2: 92:eb:83:dd:34:37:fc:18:08:70:66:f6:f5:e2:08: af:f2:bd:49:a5:a1:b4:b5:09:0f:fd:63:3c:01:67: 59:9f:e8:00:07:1b:53:4f:d1:da:13:a7:5c:71:55: b2:4c:3a:ce:6b:4f:37:e3:4d:3c:34:e5:e9:58:9e: 04:39:7c:bd:6a:53:41:31:85:39:03:38:f4:2f:32: 70:90:5f:a8:6c:cc:e6:0a:13:14:61:bc:7a:15:46: 6a:61:dc:b6:7e:b9:03:41:d9:3c:24:5c:40:1f:88: ea:f9:1e:ac:2b:09:0b:59:6e:be:c5:ab:33:17:9c: 16:a8:1f:58:ad:c2:3f:9a:3d:a3:2d:e6:db:06:cf: 38:7f:12:db:39:72:6a:f5:cd:96:a0:9a:d5:5f:57: 4d:1a:3c:cb:5c:23:bf:1a:77:aa:45:db:4d:17:c5: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:C2:90:3E:CF:8E:E6:D5:7B:0E:65:F1:96:B7:2D:97:92:B2:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c1c7b38d-26d3-382b-9d16-66db881e4ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f5:48:1c:a0:36:ec:37:3a:1b:e0:7b:70:09:65:8c:f1:cd: b9:68:b9:99:cc:d7:87:48:83:0b:3b:de:43:b2:32:79:e4:6e: d3:09:d5:f3:74:52:3c:58:65:57:ea:e5:9a:c5:9f:30:5b:85: d1:11:6e:75:6f:b9:c1:65:48:71:0a:30:cc:01:da:c7:85:f5: e0:6e:0c:7a:52:6b:b4:be:18:42:03:54:c0:4d:e0:bb:fd:89: 2c:ea:f5:bf:29:16:f8:9a:ef:29:8b:35:f2:b3:09:bd:b5:19: 5f:f8:68:f6:4f:9a:02:ae:e3:05:0f:5f:35:35:6f:65:b9:14: 40:6e:38:9a:7b:05:44:9a:c2:58:d6:7a:50:13:af:83:21:31: 75:5b:48:39:88:04:76:21:67:3d:ed:53:de:25:83:2e:40:e0: 50:dd:1a:c0:74:6d:c2:a8:2b:90:f0:41:37:fd:72:76:e4:bf: 03:16:61:0c:4c:7c:47:f3:7f:5f:60:c8:87:62:dc:d1:11:56: 8b:4a:96:fc:af:2d:b7:de:8c:18:7d:ba:40:e1:d8:d4:38:79: 66:0f:cf:f7:30:e9:d8:4d:10:b4:df:5b:4e:c4:c3:64:a8:3a: 68:28:87:ef:47:ea:c6:f0:11:a2:e3:c9:e7:05:4e:dd:48:9a: b1:82:12:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XdG8VZtwQt3BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0M1oXDTI1MDczMDE3MDk0M1owLzEtMCsGA1UEAxMk M2VkOGI5MTYtZTg2Zi00Y2UxLWI2ZWEtNmMxMDk5NzZjODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGVbstsHDToF/XjiQCOSC1ja7CpZJH4JZ62u IlKrE6DPJtOsjeS6NGgp4N7TipLjo4et7gjba0Un3FxHvYM81IDqfIdD/iqkcVic YlplJAhean+Pn8US/LKS64PdNDf8GAhwZvb14giv8r1JpaG0tQkP/WM8AWdZn+gA BxtTT9HaE6dccVWyTDrOa0834008NOXpWJ4EOXy9alNBMYU5Azj0LzJwkF+obMzm ChMUYbx6FUZqYdy2frkDQdk8JFxAH4jq+R6sKwkLWW6+xaszF5wWqB9YrcI/mj2j LebbBs84fxLbOXJq9c2WoJrVX1dNGjzLXCO/GneqRdtNF8UALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoMwpA+z47m1XsOZfGWty2XkrKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzFjN2IzOGQtMjZkMy0z ODJiLTlkMTYtNjZkYjg4MWU0Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP1SBygNuw3Ohvge3AJZYzxzblouZnM14dIgws73kOyMnnkbtMJ1fN0 UjxYZVfq5ZrFnzBbhdERbnVvucFlSHEKMMwB2seF9eBuDHpSa7S+GEIDVMBN4Lv9 iSzq9b8pFvia7ymLNfKzCb21GV/4aPZPmgKu4wUPXzU1b2W5FEBuOJp7BUSawljW elATr4MhMXVbSDmIBHYhZz3tU94lgy5A4FDdGsB0bcKoK5DwQTf9cnbkvwMWYQxM fEfzf19gyIdi3NERVotKlvyvLbfejBh9ukDh2NQ4eWYPz/cw6dhNELTfW07Ew2So Omgoh+9H6sbwEaLjyecFTt1ImrGCEiI= -----END CERTIFICATE-----Generated at Sat May 10 20:54:11 2025 by rpki-client