$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda6adf8-aaa0-3c12-ac4b-3c0ab127d477.roa File: dda6adf8-aaa0-3c12-ac4b-3c0ab127d477.roa (raw, json) Hash identifier: tu2JNEISypyLKWoR1e8vozCp+bFvPa4psE5vGTyPsTk= Subject key identifier: CB:94:3F:3A:2F:9E:58:82:59:5A:1C:90:D8:90:5C:81:D4:FE:18:B9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FD51975F5E46F12DD02500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda6adf8-aaa0-3c12-ac4b-3c0ab127d477.roa Signing time: Thu 01 May 2025 17:25:33 +0000 ROA not before: Thu 01 May 2025 17:25:33 +0000 ROA not after: Wed 30 Jul 2025 17:25:33 +0000 asID: 22773 IP address blocks: 70.181.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:51:97:5f:5e:46:f1:2d:d0:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:25:33 2025 GMT Not After : Jul 30 17:25:33 2025 GMT Subject: CN=c8e093b3-67ba-40c8-b181-ddac3b2897a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:88:90:1e:21:22:8e:df:60:da:50:e8:fb: 67:60:ff:f8:26:56:f6:1b:5b:1c:12:95:04:83:ad: a5:11:86:a2:6b:43:b8:2e:5c:a7:3f:d0:c7:18:4f: c7:d8:ac:fa:1d:4e:6e:0c:d7:64:0b:ed:f6:9b:06: e3:8d:2b:bc:70:c2:47:69:88:36:b0:24:dd:a2:5d: 95:fb:81:7f:41:ec:84:a4:17:51:c0:6d:13:2a:ce: a5:ae:ae:18:a6:3d:d5:f2:5b:70:ac:12:1e:b3:8e: 53:33:43:cf:1a:3b:3c:c3:3e:d1:5f:75:db:69:5b: dc:e2:57:ec:8c:ae:18:a8:90:c1:61:b0:41:0d:cf: 74:56:b9:8b:8d:64:ca:ad:0b:df:05:37:c5:45:13: b9:0e:cd:f8:21:87:de:5a:7a:ba:81:89:65:06:09: fb:24:54:a2:ac:cd:41:75:6d:e6:0e:af:5c:b4:d0: 55:57:88:ef:11:0d:79:e3:e8:cd:a5:4a:60:a2:13: 86:1e:c1:77:04:ea:4f:a6:5d:1a:b9:2e:04:11:fa: 13:92:28:fc:e8:ab:b4:cb:35:20:0c:5f:1e:be:df: 02:64:21:1e:d6:ec:7e:1e:99:af:a7:96:d6:b3:50: 3b:82:63:91:bd:87:b7:98:50:02:ad:8d:72:5f:48: 7e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:94:3F:3A:2F:9E:58:82:59:5A:1C:90:D8:90:5C:81:D4:FE:18:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dda6adf8-aaa0-3c12-ac4b-3c0ab127d477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.181.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:cd:bc:74:9b:67:8b:17:ed:8f:75:92:4d:07:14:13:84:ba: f5:a3:6d:b1:16:af:0c:d8:00:40:05:6f:5c:bc:61:2d:16:ce: c6:b0:91:a9:7a:58:fa:51:3d:52:3f:e1:ef:2d:20:65:0f:31: a1:7b:cb:bc:e8:77:d1:67:bd:03:53:9c:83:67:ba:74:75:25: c2:1c:6f:5e:09:14:fc:fb:09:60:af:b0:5c:1d:bc:e9:a0:65: f1:0f:47:3e:8b:20:cd:3e:41:bf:56:af:d0:7a:80:ed:c7:90: 95:03:44:b7:c2:b5:07:a4:93:e9:a1:52:e0:79:56:5c:bc:32: f9:8c:f3:dd:5f:d6:d3:0f:74:de:0b:fe:62:fa:21:16:99:dc: bf:b9:3c:6c:7e:cb:58:f4:79:4c:eb:b2:97:e5:6e:31:b0:3e: 43:fd:4e:07:18:08:f6:e5:06:f5:d9:63:47:e0:43:ab:26:8d: 6c:ee:03:9d:71:f6:69:8e:15:54:f9:fb:46:24:c7:42:64:2c: 30:b1:87:aa:ac:43:73:4a:43:cd:0b:90:8b:ab:64:98:15:54: eb:83:9c:ff:5a:47:7e:43:02:05:07:17:79:dc:e5:54:82:b0: 9b:8f:ad:26:74:68:68:a2:6e:59:ed:d2:94:dd:74:92:2c:0f: f2:30:a0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/VGXX15G8S3QJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjUzM1oXDTI1MDczMDE3MjUzM1owLzEtMCsGA1UEAxMk YzhlMDkzYjMtNjdiYS00MGM4LWIxODEtZGRhYzNiMjg5N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+iIkB4hIo7fYNpQ6PtnYP/4Jlb2G1scEpUE g62lEYaia0O4LlynP9DHGE/H2Kz6HU5uDNdkC+32mwbjjSu8cMJHaYg2sCTdol2V +4F/QeyEpBdRwG0TKs6lrq4Ypj3V8ltwrBIes45TM0PPGjs8wz7RX3XbaVvc4lfs jK4YqJDBYbBBDc90VrmLjWTKrQvfBTfFRRO5Ds34IYfeWnq6gYllBgn7JFSirM1B dW3mDq9ctNBVV4jvEQ154+jNpUpgohOGHsF3BOpPpl0auS4EEfoTkij86Ku0yzUg DF8evt8CZCEe1ux+Hpmvp5bWs1A7gmORvYe3mFACrY1yX0h+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuUPzovnliCWVockNiQXIHU/hi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRhNmFkZjgtYWFhMC0z YzEyLWFjNGItM2MwYWIxMjdkNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDNvHSbZ4sX7Y91kk0HFBOEuvWjbbEWrwzYAEAFb1y8YS0Wzsawkal6 WPpRPVI/4e8tIGUPMaF7y7zod9FnvQNTnINnunR1JcIcb14JFPz7CWCvsFwdvOmg ZfEPRz6LIM0+Qb9Wr9B6gO3HkJUDRLfCtQekk+mhUuB5Vly8MvmM891f1tMPdN4L /mL6IRaZ3L+5PGx+y1j0eUzrspflbjGwPkP9TgcYCPblBvXZY0fgQ6smjWzuA51x 9mmOFVT5+0Ykx0JkLDCxh6qsQ3NKQ80LkIurZJgVVOuDnP9aR35DAgUHF3nc5VSC sJuPrSZ0aGiiblnt0pTddJIsD/IwoJw= -----END CERTIFICATE-----Generated at Sat May 10 16:03:43 2025 by rpki-client