$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa File: ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa (raw, json) Hash identifier: eWHB0KBmvIM0k4TmkR0oqUTRAC/Z5d+/s/WZqoCw1JI= Subject key identifier: CF:F6:50:E8:82:51:0F:E7:94:BC:36:D7:FE:66:5E:91:61:35:A9:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F8484D17BA4009B9224E10 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa Signing time: Thu 01 May 2025 17:15:24 +0000 ROA not before: Thu 01 May 2025 17:15:24 +0000 ROA not after: Wed 30 Jul 2025 17:15:24 +0000 asID: 22773 IP address blocks: 70.174.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:48:4d:17:ba:40:09:b9:22:4e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:24 2025 GMT Not After : Jul 30 17:15:24 2025 GMT Subject: CN=541f37e7-3758-4d89-be7d-598ac9fc26cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:cf:cb:d6:dc:57:ac:b3:14:77:44:a3:ed: 81:7d:52:33:86:af:30:be:e7:e0:a0:a1:f8:ed:43: 0b:d9:f9:b5:09:4d:b0:f0:ab:37:be:d9:44:34:c2: 05:ca:08:36:c8:d0:73:70:1e:95:47:44:25:cd:5a: 2b:75:e5:f2:dd:95:3b:0e:07:aa:16:8e:78:a4:e6: 95:15:dc:ac:8b:e1:68:be:52:f1:7a:21:09:36:1b: 9e:8c:b2:5b:7a:63:a4:ef:1b:1d:ae:f0:aa:3a:c1: 75:3a:33:4b:01:44:11:c1:b9:59:7e:6d:ea:00:99: 8d:7c:8d:a7:b3:e3:16:63:4e:7d:ec:1b:a3:85:54: 3e:c8:26:67:09:74:75:0e:d4:b8:48:1c:58:02:17: be:cb:39:95:3c:ed:a5:10:63:ae:0b:c4:38:de:78: 0d:fa:64:db:6c:48:e2:89:9f:68:d6:4e:cb:74:a6: d1:df:76:ad:60:4b:01:53:7f:66:a9:9e:48:89:66: 18:a5:fe:f3:10:6e:b2:d5:e7:f0:75:d3:d1:61:77: 02:4b:3a:97:4e:de:5d:31:2b:29:cf:e0:3b:bc:73: b8:ea:31:c0:0c:a8:e0:44:16:bc:42:b0:6e:3b:09: ec:36:82:50:7a:7d:ad:99:cf:03:3d:0a:ec:63:1e: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F6:50:E8:82:51:0F:E7:94:BC:36:D7:FE:66:5E:91:61:35:A9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed923d34-4e62-3764-a90a-ebcc76aa2d13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:53:7f:97:c6:4d:8c:16:7e:8e:45:c8:a9:d9:5a:aa:0b:27: cd:aa:2f:be:40:cc:93:26:58:06:85:59:c0:ad:2b:bf:4c:f5: 56:fc:e1:a6:c5:74:0e:cc:ff:68:28:b2:a5:0a:49:70:ee:31: 51:16:eb:a0:ff:a4:cf:dc:89:06:33:51:70:aa:0f:dd:cc:5d: ec:6c:33:7b:1a:98:a7:55:49:75:13:9d:95:b8:c3:0a:f0:0d: b1:b2:41:0f:69:13:e0:bf:84:97:87:5b:6b:23:3d:f3:09:c1: 3c:47:56:d9:f3:58:75:73:db:72:79:f8:d0:3f:79:5c:eb:9a: bb:6b:f1:c0:1c:2c:67:54:95:de:6b:a3:7d:53:35:3e:79:bf: d4:de:26:51:85:26:9b:12:5e:17:4e:69:eb:18:7a:2f:bd:56: e1:d6:3c:de:a3:b1:04:95:70:b4:47:aa:ce:f3:bd:21:fb:7d: b1:ad:96:be:18:3d:df:ce:8f:79:1c:43:6f:5c:c7:6a:72:ea: e2:f0:a7:3b:8f:01:71:ac:97:39:b4:e5:79:7b:40:cf:4b:f6: 95:29:09:e8:18:51:e9:b6:8f:03:af:64:cf:07:92:23:e3:aa: f3:83:ff:df:f6:cc:ff:72:9b:13:77:b6:9b:de:c9:e1:a1:0c: de:35:3c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+EhNF7pACbkiThAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUyNFoXDTI1MDczMDE3MTUyNFowLzEtMCsGA1UEAxMk NTQxZjM3ZTctMzc1OC00ZDg5LWJlN2QtNTk4YWM5ZmMyNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskTPy9bcV6yzFHdEo+2BfVIzhq8wvufgoKH4 7UML2fm1CU2w8Ks3vtlENMIFygg2yNBzcB6VR0QlzVordeXy3ZU7DgeqFo54pOaV Fdysi+FovlLxeiEJNhuejLJbemOk7xsdrvCqOsF1OjNLAUQRwblZfm3qAJmNfI2n s+MWY0597BujhVQ+yCZnCXR1DtS4SBxYAhe+yzmVPO2lEGOuC8Q43ngN+mTbbEji iZ9o1k7LdKbR33atYEsBU39mqZ5IiWYYpf7zEG6y1efwddPRYXcCSzqXTt5dMSsp z+A7vHO46jHADKjgRBa8QrBuOwnsNoJQen2tmc8DPQrsYx7KPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/2UOiCUQ/nlLw21/5mXpFhNalMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQ5MjNkMzQtNGU2Mi0z NzY0LWE5MGEtZWJjYzc2YWEyZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZTf5fGTYwWfo5FyKnZWqoLJ82qL75AzJMmWAaFWcCtK79M9Vb84abF dA7M/2gosqUKSXDuMVEW66D/pM/ciQYzUXCqD93MXexsM3samKdVSXUTnZW4wwrw DbGyQQ9pE+C/hJeHW2sjPfMJwTxHVtnzWHVz23J5+NA/eVzrmrtr8cAcLGdUld5r o31TNT55v9TeJlGFJpsSXhdOaesYei+9VuHWPN6jsQSVcLRHqs7zvSH7fbGtlr4Y Pd/Oj3kcQ29cx2py6uLwpzuPAXGslzm05Xl7QM9L9pUpCegYUem2jwOvZM8HkiPj qvOD/9/2zP9ymxN3tpveyeGhDN41PLI= -----END CERTIFICATE-----Generated at Tue Jul 1 11:04:05 2025 by rpki-client