$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa File: c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa (raw, json) Hash identifier: 6weYWH+cv8v1VTlDzNE64YJit7j9WBr/GRy/XTWh8zg= Subject key identifier: 42:A3:27:39:18:14:5B:4A:93:B5:1C:04:0F:DC:C9:20:3C:02:DA:51 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8382BF24734D3482CE580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa Signing time: Thu 01 May 2025 17:15:16 +0000 ROA not before: Thu 01 May 2025 17:15:16 +0000 ROA not after: Wed 30 Jul 2025 17:15:16 +0000 asID: 22773 IP address blocks: 70.161.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:38:2b:f2:47:34:d3:48:2c:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:16 2025 GMT Not After : Jul 30 17:15:16 2025 GMT Subject: CN=82f9f8ff-6944-427f-b428-6328ddf41526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:4a:7b:d0:fc:1c:a9:d2:f9:ca:c1:f5:24: 0f:ef:eb:bd:d5:12:67:5d:6a:5e:ca:89:5d:d3:59: 81:cb:ce:3b:df:71:6b:3c:b6:ab:20:95:f4:75:94: 1c:32:81:b8:d8:7f:a7:ef:7e:70:53:fb:45:d2:bc: 74:39:0c:46:3e:bf:37:8d:18:ed:f2:ee:f3:57:6e: 7c:92:58:52:2f:80:f3:aa:47:f5:c3:f0:90:23:12: 05:c6:3a:02:bd:7b:ba:56:e4:a1:cb:6f:94:a6:44: 13:11:67:75:66:14:37:47:cb:4c:12:13:de:e2:bc: 57:7c:34:bf:08:f1:0e:3a:a2:69:c8:51:fb:bb:06: b8:64:46:58:d1:b5:5d:b9:4d:01:ed:ea:a1:76:47: cf:07:93:b6:44:b0:77:1f:eb:14:c7:52:a9:3f:c5: d7:80:0c:c8:76:c5:ff:fb:6e:32:20:1d:67:1b:d4: 75:79:66:12:67:be:b8:a4:5f:12:b7:ed:5c:84:c7: 1b:e5:b9:02:dc:f5:01:00:3d:ff:58:15:fb:60:95: 25:e4:fe:4a:bd:b6:c8:a6:4a:22:be:07:52:33:5a: 62:9a:f8:38:ea:b8:b0:37:2a:35:f3:22:81:48:8b: 57:99:5e:01:da:f3:a9:6e:4a:10:27:f3:14:06:45: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:27:39:18:14:5B:4A:93:B5:1C:04:0F:DC:C9:20:3C:02:DA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8efda1d-396c-3ef1-8d35-c9a2223b1e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:83:fb:b4:49:de:fb:93:e3:d9:71:df:36:58:db:33:b5:ea: 78:cf:12:8a:0a:37:59:ba:90:b9:00:e8:67:c8:5e:96:80:ad: 3c:a8:bf:fc:6b:d9:74:7b:6a:44:0a:0c:98:8d:8a:78:20:46: b9:0a:31:6d:d7:97:37:28:35:e9:aa:22:37:bf:f4:94:89:66: 5b:f7:4a:ec:11:5e:9a:82:92:00:ad:20:1d:8c:f9:02:e0:cf: 63:67:65:03:28:27:ce:41:f4:b6:67:2d:6b:75:cb:f5:c0:8d: a7:c6:87:41:72:5c:30:60:ce:32:d4:20:81:e3:cc:4f:38:39: cb:2c:d5:71:8d:4d:19:5b:7b:ee:aa:c6:bf:23:79:61:1e:83: 57:92:9d:5d:db:38:ab:29:f4:e8:69:55:22:0d:2e:93:f1:1b: 72:3a:3f:69:5e:11:11:99:9f:66:85:18:7a:c4:77:bd:84:52: bc:49:5b:5b:92:40:3c:06:0b:67:17:ce:60:b7:dd:aa:a0:98: 08:43:99:08:15:8a:d1:d1:c3:82:84:a8:11:7b:0a:d1:c6:d3: 20:a1:e4:48:f5:91:2d:11:63:ba:6a:73:81:62:a9:8f:55:7d: 51:7c:a7:11:4a:ce:01:05:45:e0:a0:d8:b3:6e:92:8b:18:cf: 9e:c5:71:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+Dgr8kc000gs5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUxNloXDTI1MDczMDE3MTUxNlowLzEtMCsGA1UEAxMk ODJmOWY4ZmYtNjk0NC00MjdmLWI0MjgtNjMyOGRkZjQxNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX9Ke9D8HKnS+crB9SQP7+u91RJnXWpeyold 01mBy84733FrPLarIJX0dZQcMoG42H+n735wU/tF0rx0OQxGPr83jRjt8u7zV258 klhSL4Dzqkf1w/CQIxIFxjoCvXu6VuShy2+UpkQTEWd1ZhQ3R8tMEhPe4rxXfDS/ CPEOOqJpyFH7uwa4ZEZY0bVduU0B7eqhdkfPB5O2RLB3H+sUx1KpP8XXgAzIdsX/ +24yIB1nG9R1eWYSZ764pF8St+1chMcb5bkC3PUBAD3/WBX7YJUl5P5KvbbIpkoi vgdSM1pimvg46riwNyo18yKBSItXmV4B2vOpbkoQJ/MUBkX3rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKjJzkYFFtKk7UcBA/cySA8AtpRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzhlZmRhMWQtMzk2Yy0z ZWYxLThkMzUtYzlhMjIyM2IxZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWD+7RJ3vuT49lx3zZY2zO16njPEooKN1m6kLkA6GfIXpaArTyov/xr 2XR7akQKDJiNinggRrkKMW3XlzcoNemqIje/9JSJZlv3SuwRXpqCkgCtIB2M+QLg z2NnZQMoJ85B9LZnLWt1y/XAjafGh0FyXDBgzjLUIIHjzE84Ocss1XGNTRlbe+6q xr8jeWEeg1eSnV3bOKsp9OhpVSINLpPxG3I6P2leERGZn2aFGHrEd72EUrxJW1uS QDwGC2cXzmC33aqgmAhDmQgVitHRw4KEqBF7CtHG0yCh5Ej1kS0RY7pqc4FiqY9V fVF8pxFKzgEFReCg2LNukosYz57FcXM= -----END CERTIFICATE-----Generated at Thu May 8 17:22:35 2025 by rpki-client