$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d786cac7-0d54-3f6d-829c-8304b37a8ba3.roa File: d786cac7-0d54-3f6d-829c-8304b37a8ba3.roa (raw, json) Hash identifier: eW36c6eZQUfRQavwsbR559HKCnUzNLP9TD//lpiNO/0= Subject key identifier: 30:43:84:3F:62:A0:8B:4A:C5:68:FD:A5:EE:F2:B3:65:B6:E6:CE:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5767EE5CB9687B1C48420 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d786cac7-0d54-3f6d-829c-8304b37a8ba3.roa Signing time: Thu 01 May 2025 17:09:43 +0000 ROA not before: Thu 01 May 2025 17:09:43 +0000 ROA not after: Wed 30 Jul 2025 17:09:43 +0000 asID: 22773 IP address blocks: 70.172.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:76:7e:e5:cb:96:87:b1:c4:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:43 2025 GMT Not After : Jul 30 17:09:43 2025 GMT Subject: CN=28fc189e-e950-4086-baec-71994bbcd30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:a4:a2:e6:56:a9:5b:96:45:4b:28:45:0b: a6:9a:2a:fb:2f:6a:c4:70:9f:66:af:08:df:e6:bc: e4:b4:d2:8f:2b:91:12:be:d1:77:05:cf:66:b9:82: 62:ab:3d:c1:85:ff:66:96:41:5d:05:02:23:28:81: 76:ed:3c:7f:43:66:87:fe:94:b3:12:73:4e:06:6e: b3:fb:ed:63:f1:68:70:4f:bf:57:ee:34:87:8f:4a: 20:04:a2:48:47:0a:e5:f9:54:fb:5f:2f:ec:40:02: 93:90:ab:60:18:ad:f1:09:7b:0e:9a:04:f9:5e:03: 10:05:a7:be:10:74:61:0f:23:59:8f:81:ea:7a:4d: c5:83:eb:68:07:f4:c0:c9:ba:90:56:21:b9:18:f4: e7:ba:a0:14:c5:5d:f9:85:55:6f:9f:a6:ea:a1:dc: 80:d2:a3:65:b0:ce:77:2d:c4:e2:46:b2:ed:d5:04: 3b:38:74:a3:17:1d:40:3b:b6:1b:b6:5b:a0:cb:14: b0:03:db:bd:7f:93:12:87:01:23:a3:55:ec:3c:89: b4:18:30:f0:24:d9:ee:80:1b:7c:ac:81:ab:e2:a7: e2:ed:21:3f:50:72:67:44:e1:0c:98:49:90:7c:0d: d9:8c:68:ec:1d:96:ea:7c:25:3a:1e:fd:5e:1b:f7: f8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:43:84:3F:62:A0:8B:4A:C5:68:FD:A5:EE:F2:B3:65:B6:E6:CE:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d786cac7-0d54-3f6d-829c-8304b37a8ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:01:c4:de:8c:ee:c5:a2:13:ff:87:ba:1f:48:e2:4f:32:cc: 8c:5b:70:88:d2:67:f8:9b:f3:49:3e:89:b0:c4:eb:43:ca:c8: c7:6c:20:ee:60:37:23:7b:1f:41:1a:7e:c1:04:8d:24:e3:ac: 6f:50:42:a3:40:ba:32:6d:d7:f9:08:f1:a8:b6:d2:8b:44:80: a0:77:0f:13:a6:db:ec:b9:c4:0f:8f:fe:3d:92:48:a7:38:98: fb:70:84:14:38:4f:07:cc:8e:aa:1f:d0:54:04:49:1a:74:79: 0d:41:82:5d:a9:c3:ca:dc:a3:f8:5f:da:e1:a0:f4:92:55:a4: 95:06:99:25:c2:10:27:2a:55:33:ac:c6:91:25:b4:db:38:fd: ae:89:26:3e:0e:8d:c7:77:dd:44:3b:bc:04:c1:2f:36:89:76: f1:93:a5:95:37:89:13:d2:59:1c:f3:8b:b2:1a:c2:07:af:a3: 8a:d8:56:d1:77:a0:52:9b:00:41:c0:47:07:d3:63:0c:42:58: 62:72:01:dc:4c:83:41:f5:f1:a3:d4:c1:7d:40:05:7d:e0:e5: 9e:dd:77:e8:b3:4c:8a:ee:7b:5c:5e:a3:74:8e:6b:ce:48:98: d3:86:d9:09:04:00:6c:06:4f:40:2b:91:8b:21:e1:a5:eb:1b: 5f:ef:2d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XZ+5cuWh7HEhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0M1oXDTI1MDczMDE3MDk0M1owLzEtMCsGA1UEAxMk MjhmYzE4OWUtZTk1MC00MDg2LWJhZWMtNzE5OTRiYmNkMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9KkouZWqVuWRUsoRQummir7L2rEcJ9mrwjf 5rzktNKPK5ESvtF3Bc9muYJiqz3Bhf9mlkFdBQIjKIF27Tx/Q2aH/pSzEnNOBm6z ++1j8WhwT79X7jSHj0ogBKJIRwrl+VT7Xy/sQAKTkKtgGK3xCXsOmgT5XgMQBae+ EHRhDyNZj4Hqek3Fg+toB/TAybqQViG5GPTnuqAUxV35hVVvn6bqodyA0qNlsM53 LcTiRrLt1QQ7OHSjFx1AO7YbtlugyxSwA9u9f5MShwEjo1XsPIm0GDDwJNnugBt8 rIGr4qfi7SE/UHJnROEMmEmQfA3ZjGjsHZbqfCU6Hv1eG/f4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBDhD9ioItKxWj9pe7ys2W25s49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDc4NmNhYzctMGQ1NC0z ZjZkLTgyOWMtODMwNGIzN2E4YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQBxN6M7sWiE/+Huh9I4k8yzIxbcIjSZ/ib80k+ibDE60PKyMdsIO5g NyN7H0EafsEEjSTjrG9QQqNAujJt1/kI8ai20otEgKB3DxOm2+y5xA+P/j2SSKc4 mPtwhBQ4TwfMjqof0FQESRp0eQ1Bgl2pw8rco/hf2uGg9JJVpJUGmSXCECcqVTOs xpEltNs4/a6JJj4Ojcd33UQ7vATBLzaJdvGTpZU3iRPSWRzzi7Iawgevo4rYVtF3 oFKbAEHARwfTYwxCWGJyAdxMg0H18aPUwX1ABX3g5Z7dd+izTIrue1xeo3SOa85I mNOG2QkEAGwGT0ArkYsh4aXrG1/vLQo= -----END CERTIFICATE-----Generated at Fri May 9 23:55:49 2025 by rpki-client