$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e02af971-4758-384c-ade2-b0508f8b7e1e.roa File: e02af971-4758-384c-ade2-b0508f8b7e1e.roa (raw, json) Hash identifier: qFKKyjkJpidNmLYAsXpP8/WW+VGzxT/FS1cNFe/fBBA= Subject key identifier: 98:BF:B5:9B:38:B1:DA:62:FD:F3:B0:F5:63:B7:76:FC:DC:84:DD:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F583C32B080664457844C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e02af971-4758-384c-ade2-b0508f8b7e1e.roa Signing time: Thu 01 May 2025 17:09:49 +0000 ROA not before: Thu 01 May 2025 17:09:49 +0000 ROA not after: Wed 30 Jul 2025 17:09:49 +0000 asID: 22773 IP address blocks: 70.175.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:83:c3:2b:08:06:64:45:78:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:49 2025 GMT Not After : Jul 30 17:09:49 2025 GMT Subject: CN=92b601b7-03fd-484a-b0f4-d2287ca9dd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:52:5b:9e:50:e5:92:9d:07:fa:d3:9b:48: b2:63:dd:6b:98:f7:b4:73:db:e5:fe:77:d3:d4:fd: 24:31:3d:88:78:b1:1a:d9:a3:64:9e:f0:ef:08:1e: 01:07:35:44:4d:91:16:63:50:e5:dd:b9:b1:46:b1: 15:30:30:95:18:83:b5:1d:f5:eb:a3:83:33:46:f9: 3d:0a:e9:94:ff:e9:bd:eb:ab:3e:a2:46:63:0f:3c: ec:26:0b:a5:78:5c:8d:db:3d:46:4c:be:5c:c3:2a: d7:e5:40:a3:82:a4:d7:ba:ba:8c:4c:6b:b9:26:f4: 27:ab:5c:46:7b:fe:ba:99:b3:ee:91:41:10:0b:b6: 1f:80:c6:83:d5:f2:74:01:f3:ce:e7:28:66:5d:46: 43:11:5c:0d:16:38:08:67:3e:54:76:16:65:db:ff: 01:5a:83:c3:de:68:4a:00:a9:ab:79:43:a7:fe:04: db:8d:10:90:9b:9d:88:f0:b4:88:eb:54:fa:d5:bd: 3d:dd:00:af:75:83:8d:96:29:7f:b1:db:34:2e:82: 21:e0:d9:1e:b2:b9:eb:ac:13:f9:df:a1:9e:14:9d: 4f:d2:4a:ea:f0:91:89:a9:86:69:83:68:17:37:92: 9d:97:05:61:25:56:67:44:d5:6f:2f:02:2f:e5:00: c1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:B5:9B:38:B1:DA:62:FD:F3:B0:F5:63:B7:76:FC:DC:84:DD:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e02af971-4758-384c-ade2-b0508f8b7e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.175.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:10:63:8f:09:47:a2:23:ac:02:7c:d5:5f:a2:2e:08:ef:2f: ae:9d:2f:19:da:7c:c9:4c:a4:b4:6f:8d:dd:b0:07:a5:4f:ec: 95:7c:d1:86:15:a1:eb:e4:d3:e5:0f:08:92:31:ce:92:dc:7e: a1:91:fd:38:ee:6b:d3:47:c0:bc:90:85:69:c4:57:6a:b8:7e: e6:26:8d:c4:02:d8:81:2d:45:20:7a:f5:0d:13:90:eb:e4:57: b5:21:26:b5:0f:8b:fe:bb:f1:7d:46:6e:6b:93:85:90:ef:f5: b0:be:59:bf:0e:5a:35:af:e8:39:cc:3d:63:33:c8:4e:82:a2: 40:53:82:79:73:b8:35:35:29:2b:53:39:94:3b:ba:ea:ad:87: c1:58:4c:da:bd:16:6d:ba:e1:cd:9b:9b:b2:d7:7c:36:64:47: c3:86:31:d8:7e:ec:b3:f1:c5:8a:3b:cb:04:42:6a:b0:d2:ab: 44:03:a4:8a:d0:8e:75:25:a1:b0:48:3a:7d:26:ef:56:01:d5: 1f:ba:eb:4b:62:49:5c:59:c3:aa:2d:88:0a:78:8b:65:e4:33: 39:36:df:dd:12:9a:d9:1a:4f:b6:27:b2:30:9b:47:6d:d2:c6: 19:38:0d:8d:82:3c:71:35:60:a6:4c:70:26:ce:83:5e:8d:75: 0e:66:97:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19YPDKwgGZEV4RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0OVoXDTI1MDczMDE3MDk0OVowLzEtMCsGA1UEAxMk OTJiNjAxYjctMDNmZC00ODRhLWIwZjQtZDIyODdjYTlkZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhehSW55Q5ZKdB/rTm0iyY91rmPe0c9vl/nfT 1P0kMT2IeLEa2aNknvDvCB4BBzVETZEWY1Dl3bmxRrEVMDCVGIO1HfXro4MzRvk9 CumU/+m966s+okZjDzzsJguleFyN2z1GTL5cwyrX5UCjgqTXurqMTGu5JvQnq1xG e/66mbPukUEQC7YfgMaD1fJ0AfPO5yhmXUZDEVwNFjgIZz5UdhZl2/8BWoPD3mhK AKmreUOn/gTbjRCQm52I8LSI61T61b093QCvdYONlil/sds0LoIh4NkesrnrrBP5 36GeFJ1P0krq8JGJqYZpg2gXN5KdlwVhJVZnRNVvLwIv5QDBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi/tZs4sdpi/fOw9WO3dvzchN3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTAyYWY5NzEtNDc1OC0z ODRjLWFkZTItYjA1MDhmOGI3ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4QY48JR6IjrAJ81V+iLgjvL66dLxnafMlMpLRvjd2wB6VP7JV80YYV oevk0+UPCJIxzpLcfqGR/Tjua9NHwLyQhWnEV2q4fuYmjcQC2IEtRSB69Q0TkOvk V7UhJrUPi/678X1GbmuThZDv9bC+Wb8OWjWv6DnMPWMzyE6CokBTgnlzuDU1KStT OZQ7uuqth8FYTNq9Fm264c2bm7LXfDZkR8OGMdh+7LPxxYo7ywRCarDSq0QDpIrQ jnUlobBIOn0m71YB1R+660tiSVxZw6otiAp4i2XkMzk2390SmtkaT7YnsjCbR23S xhk4DY2CPHE1YKZMcCbOg16NdQ5ml+E= -----END CERTIFICATE-----Generated at Sun May 11 09:08:29 2025 by rpki-client