$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7339f86-f879-3793-b1fa-326f46ea4f54.roa File: d7339f86-f879-3793-b1fa-326f46ea4f54.roa (raw, json) Hash identifier: 6qt4kWs3ogfKF85TjmgJVCA/aV0oUev44QKXmCdc2Ok= Subject key identifier: 01:2F:C2:CF:AC:17:9A:E4:A8:42:15:6F:8B:18:32:80:AB:32:C7:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F826AA5CEBB1B033BDB5A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7339f86-f879-3793-b1fa-326f46ea4f54.roa Signing time: Thu 01 May 2025 17:15:08 +0000 ROA not before: Thu 01 May 2025 17:15:08 +0000 ROA not after: Wed 30 Jul 2025 17:15:08 +0000 asID: 22773 IP address blocks: 70.160.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:26:aa:5c:eb:b1:b0:33:bd:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:08 2025 GMT Not After : Jul 30 17:15:08 2025 GMT Subject: CN=8b4bbcdb-1161-4eaa-bcf8-840f0c2a3cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7b:f7:d6:42:a4:9c:29:15:84:ed:94:2e:bb: 02:c1:2a:97:05:bd:4c:52:75:69:9b:44:8d:7b:e4: 41:33:fb:26:6f:43:99:5f:f8:64:15:18:41:5b:6b: 65:40:2b:86:9f:5f:6b:30:4e:86:6b:c5:10:05:7a: 2e:13:11:ab:2c:0c:28:71:57:fc:9f:3d:b1:a0:ac: 2d:ea:9a:7e:68:2c:fb:59:44:3b:a9:31:0e:08:b6: 90:12:33:0e:19:ef:ce:7b:15:22:73:be:80:4a:ce: 9f:d0:0b:19:5d:e6:06:a3:80:5e:a2:a3:71:c8:78: 09:29:29:9b:09:c5:ad:35:7c:77:5a:17:88:33:23: 47:c9:28:1a:1a:01:3c:d4:f8:8a:7b:25:d2:fb:ca: 7d:24:22:f5:54:8c:0b:43:41:a1:b6:a9:4f:6c:47: 3f:24:08:b6:32:b6:0d:cd:09:1a:0c:3b:4c:27:32: 1a:62:c9:c8:d3:a0:41:2e:e6:9a:c5:40:b2:2d:41: 57:fe:d0:1b:34:ba:dc:20:a5:08:05:e5:59:39:51: 7c:61:7c:5e:ff:36:93:db:43:56:95:00:9f:f2:ac: dd:7b:55:44:b7:00:bf:be:e7:27:b5:c3:71:29:b6: a3:57:97:a5:b1:29:38:e5:99:a6:91:b6:e8:06:39: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2F:C2:CF:AC:17:9A:E4:A8:42:15:6F:8B:18:32:80:AB:32:C7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d7339f86-f879-3793-b1fa-326f46ea4f54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:10:9f:0c:e5:d3:73:10:2c:39:c8:a9:24:57:21:0b:7a:9e: 57:ac:55:5e:84:ed:67:14:c8:6c:16:4a:5b:88:71:a4:6a:6c: e6:ec:cb:ab:1f:04:f2:4b:e5:63:00:d6:b1:6f:34:f2:c9:40: 22:20:df:e3:89:21:07:4d:00:a5:98:ed:c8:72:c6:88:73:d8: ca:84:a9:9f:2d:d2:ab:fc:55:95:d7:6e:38:a1:9b:ee:77:f3: 95:b5:5f:af:b3:70:f8:2e:c6:9c:6d:a3:c7:f5:8f:03:61:eb: 39:4f:31:2c:f8:50:fd:c4:78:c5:f0:f4:47:9e:90:f1:26:25: f5:b3:3a:0c:3b:c1:0d:d1:34:c2:89:c1:41:87:cf:32:0a:19: 2f:e3:41:7a:7d:4f:97:5d:7f:96:5c:52:5a:6a:11:35:e9:20: ec:37:a6:8e:de:45:55:c8:5e:59:43:d9:b3:e0:93:6c:fd:d3: b7:e3:c3:28:c7:d8:3e:81:04:75:89:10:4f:7f:b2:14:39:6c: 46:d5:b6:c7:86:37:1e:4e:99:94:5c:fc:8f:d2:9a:08:ab:41: 22:69:bc:f8:ed:34:35:41:e5:3a:a3:52:1c:0d:fa:e7:23:95: 6a:9d:c5:b5:a7:35:e3:92:1d:96:34:36:57:82:c8:40:2e:3d: 50:23:71:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+CaqXOuxsDO9taAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUwOFoXDTI1MDczMDE3MTUwOFowLzEtMCsGA1UEAxMk OGI0YmJjZGItMTE2MS00ZWFhLWJjZjgtODQwZjBjMmEzY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3v31kKknCkVhO2ULrsCwSqXBb1MUnVpm0SN e+RBM/smb0OZX/hkFRhBW2tlQCuGn19rME6Ga8UQBXouExGrLAwocVf8nz2xoKwt 6pp+aCz7WUQ7qTEOCLaQEjMOGe/OexUic76ASs6f0AsZXeYGo4BeoqNxyHgJKSmb CcWtNXx3WheIMyNHySgaGgE81PiKeyXS+8p9JCL1VIwLQ0GhtqlPbEc/JAi2MrYN zQkaDDtMJzIaYsnI06BBLuaaxUCyLUFX/tAbNLrcIKUIBeVZOVF8YXxe/zaT20NW lQCf8qzde1VEtwC/vucntcNxKbajV5elsSk45ZmmkbboBjkguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEvws+sF5rkqEIVb4sYMoCrMsd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDczMzlmODYtZjg3OS0z NzkzLWIxZmEtMzI2ZjQ2ZWE0ZjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcQnwzl03MQLDnIqSRXIQt6nlesVV6E7WcUyGwWSluIcaRqbObsy6sf BPJL5WMA1rFvNPLJQCIg3+OJIQdNAKWY7chyxohz2MqEqZ8t0qv8VZXXbjihm+53 85W1X6+zcPguxpxto8f1jwNh6zlPMSz4UP3EeMXw9EeekPEmJfWzOgw7wQ3RNMKJ wUGHzzIKGS/jQXp9T5ddf5ZcUlpqETXpIOw3po7eRVXIXllD2bPgk2z907fjwyjH 2D6BBHWJEE9/shQ5bEbVtseGNx5OmZRc/I/SmgirQSJpvPjtNDVB5TqjUhwN+ucj lWqdxbWnNeOSHZY0NleCyEAuPVAjcXA= -----END CERTIFICATE-----Generated at Tue May 13 02:41:22 2025 by rpki-client