$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa File: c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa (raw, json) Hash identifier: qorhJ+g/Kj5IQw1El3qxvK3qMnltaMXvWCD95Gp0vfw= Subject key identifier: 89:6B:71:77:FE:E1:14:EF:50:FC:E7:EA:83:4A:16:E8:AF:51:50:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8453380C4DC739007E280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa Signing time: Thu 01 May 2025 17:15:22 +0000 ROA not before: Thu 01 May 2025 17:15:22 +0000 ROA not after: Wed 30 Jul 2025 17:15:22 +0000 asID: 22773 IP address blocks: 70.174.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:45:33:80:c4:dc:73:90:07:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:22 2025 GMT Not After : Jul 30 17:15:22 2025 GMT Subject: CN=ce849bcc-eab0-47d0-a2de-8f9b582cf29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:98:e7:ac:f5:70:73:ec:72:2c:c7:1e:1a: f9:2c:05:e1:b9:2e:49:ce:de:67:e0:95:79:82:a9: af:4f:bc:81:02:31:a2:9f:b5:47:87:9d:7b:2c:df: a1:91:2d:05:cb:c3:cc:ed:a6:d1:af:2c:75:ac:c4: 22:01:56:54:64:93:55:51:fd:29:cd:d9:58:37:aa: f6:2a:a5:eb:6f:4c:ae:bf:0d:c7:05:f5:34:db:20: 7f:ac:d7:c4:09:ea:de:46:2f:ad:d0:6f:28:e8:71: 97:24:11:4e:b2:b6:ab:95:39:c8:8b:9c:d4:49:3d: fc:16:14:7d:ae:77:6c:a3:9f:cd:32:30:6a:2f:b4: 27:59:79:2b:a0:7b:9f:6f:98:90:27:f8:48:b7:ff: fa:23:79:23:d1:9b:31:20:d3:fe:3e:ea:fc:f6:48: c8:76:a5:c2:b9:04:06:f0:e6:bf:29:df:59:1a:d6: b6:f7:3d:ac:6a:4a:04:5f:cc:06:46:a1:e0:be:09: e0:f1:6b:4c:80:39:80:8d:2d:6b:ba:f6:f6:72:14: d9:04:cd:29:29:c4:e8:43:dd:61:40:c1:46:14:dc: aa:72:ac:3f:a3:2f:4e:b3:9e:53:65:45:31:7f:19: af:c5:bc:07:3e:d5:24:4c:9d:cb:3c:6f:fe:cf:08: b3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6B:71:77:FE:E1:14:EF:50:FC:E7:EA:83:4A:16:E8:AF:51:50:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c24cc351-17ac-3be4-a4fe-b40a905d34fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:67:72:5e:b8:37:c8:52:04:f3:8a:b9:59:d1:8a:ee:1f:79: 84:df:77:da:00:27:f3:5d:1e:7c:6c:f6:ca:86:44:04:ea:f8: 96:64:6c:db:c1:e1:8b:85:29:48:c8:ef:01:73:d8:8f:00:e6: be:ad:9e:0f:32:c0:4e:5b:9e:33:53:60:57:a5:a5:df:3d:27: 5d:53:69:b5:57:25:16:24:78:bf:bb:e3:7c:f6:b9:06:d3:7b: 17:4b:46:ac:c4:68:21:97:be:39:eb:9a:2f:20:2c:3b:12:31: c4:d6:4c:aa:0d:df:07:c4:94:90:fc:34:f9:3f:23:a7:af:cc: 16:53:9a:36:13:e7:2c:cb:da:00:56:c3:7b:5b:8d:00:58:cd: 0b:f5:6f:59:63:1c:a4:86:33:19:8b:4a:84:76:56:8e:17:af: ac:41:2e:27:17:c0:f6:15:eb:23:54:33:e7:25:a7:7c:6b:7e: 9b:1f:17:bb:50:46:b3:fe:17:32:26:d1:c4:54:d7:a4:a0:ad: da:25:b8:56:7b:bf:18:55:c9:f9:0c:e1:af:df:72:09:1f:27: ba:df:6a:4c:1a:c3:bb:9b:6d:43:14:a5:cc:ed:cd:af:02:3d: 74:b0:f4:d6:56:4e:0f:1b:4e:5f:fd:d9:b3:81:70:d2:c4:12: a7:8e:2c:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+EUzgMTcc5AH4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyMloXDTI1MDczMDE3MTUyMlowLzEtMCsGA1UEAxMk Y2U4NDliY2MtZWFiMC00N2QwLWEyZGUtOGY5YjU4MmNmMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqY56z1cHPscizHHhr5LAXhuS5Jzt5n4JV5 gqmvT7yBAjGin7VHh517LN+hkS0Fy8PM7abRryx1rMQiAVZUZJNVUf0pzdlYN6r2 KqXrb0yuvw3HBfU02yB/rNfECereRi+t0G8o6HGXJBFOsrarlTnIi5zUST38FhR9 rndso5/NMjBqL7QnWXkroHufb5iQJ/hIt//6I3kj0ZsxINP+Pur89kjIdqXCuQQG 8Oa/Kd9ZGta29z2sakoEX8wGRqHgvgng8WtMgDmAjS1ruvb2chTZBM0pKcToQ91h QMFGFNyqcqw/oy9Os55TZUUxfxmvxbwHPtUkTJ3LPG/+zwizBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlrcXf+4RTvUPzn6oNKFuivUVCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzI0Y2MzNTEtMTdhYy0z YmU0LWE0ZmUtYjQwYTkwNWQzNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtncl64N8hSBPOKuVnRiu4feYTfd9oAJ/NdHnxs9sqGRATq+JZkbNvB 4YuFKUjI7wFz2I8A5r6tng8ywE5bnjNTYFelpd89J11TabVXJRYkeL+743z2uQbT exdLRqzEaCGXvjnrmi8gLDsSMcTWTKoN3wfElJD8NPk/I6evzBZTmjYT5yzL2gBW w3tbjQBYzQv1b1ljHKSGMxmLSoR2Vo4Xr6xBLicXwPYV6yNUM+clp3xrfpsfF7tQ RrP+FzIm0cRU16SgrdoluFZ7vxhVyfkM4a/fcgkfJ7rfakwaw7ubbUMUpcztza8C PXSw9NZWTg8bTl/92bOBcNLEEqeOLB8= -----END CERTIFICATE-----Generated at Sun May 11 09:13:40 2025 by rpki-client