$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef936196-d311-3657-adbc-9d2a2e79f738.roa File: ef936196-d311-3657-adbc-9d2a2e79f738.roa (raw, json) Hash identifier: G8I6SGHXIhkl4CR7ENrAMGvo+p6fgOIQXwAZmefbJFY= Subject key identifier: 91:AB:DB:2B:D5:E7:E6:D3:29:B8:9A:4E:FA:53:1D:C2:D6:CE:AE:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849D3AA1AE8076A0360CAA0E9D4 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef936196-d311-3657-adbc-9d2a2e79f738.roa Signing time: Mon 12 May 2025 08:32:08 +0000 ROA not before: Mon 12 May 2025 08:32:08 +0000 ROA not after: Sun 10 Aug 2025 08:32:08 +0000 asID: 22773 IP address blocks: 174.70.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d3:aa:1a:e8:07:6a:03:60:ca:a0:e9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 12 08:32:08 2025 GMT Not After : Aug 10 08:32:08 2025 GMT Subject: CN=dc6197ba-ea51-47c1-998b-61555cdd8fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:3c:29:31:ba:21:c5:f7:79:73:03:83:f1: 6f:5a:16:d5:8e:23:48:9f:1f:e1:a4:a2:e5:0d:d8: fd:d5:b8:97:ac:ba:c9:f8:d0:56:0e:d5:bf:b4:d6: c2:6b:6a:0c:c7:a6:b0:69:02:05:8b:5d:17:a1:f0: 93:4d:66:15:1c:87:76:87:ca:fb:ee:4c:11:96:20: a3:ed:58:be:34:41:b4:be:25:63:d5:ad:96:c1:9d: 6a:1d:91:03:ca:e0:3f:26:9a:85:1e:8f:68:81:bd: 71:85:a1:ea:4f:b3:b3:9f:e3:9c:61:3c:58:07:45: f8:7b:76:d0:29:05:f8:24:3d:4b:0a:7a:4b:82:e7: a8:2a:54:d7:d0:8e:d9:22:4c:85:a1:94:c2:89:d3: 25:e1:a2:69:8d:21:34:1c:09:79:0e:c2:01:bf:7b: 98:05:32:b1:eb:e9:44:cf:72:25:b2:e4:93:c5:3a: a0:e7:e2:e6:f9:7b:ee:71:10:3d:c2:23:41:91:a4: 7e:79:a9:68:90:74:24:da:93:ab:5f:f3:ad:3a:46: ed:4c:60:6a:8f:88:68:0b:22:2d:3e:c2:59:f5:e0: a5:fb:e1:8d:7e:78:8a:f0:31:f1:44:1d:fc:d1:ed: b0:80:8a:45:86:7a:9c:29:8b:cf:bd:cb:78:53:9e: d3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:DB:2B:D5:E7:E6:D3:29:B8:9A:4E:FA:53:1D:C2:D6:CE:AE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef936196-d311-3657-adbc-9d2a2e79f738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.70.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ba:ea:2c:fa:2b:c8:47:23:59:16:3a:29:7b:f0:ce:47:7e: 31:84:4b:02:a5:ca:52:94:25:7e:4e:5e:7e:df:1c:ba:c0:bf: dd:86:77:cf:11:c6:65:56:df:d8:31:c2:83:4d:af:f0:e0:26: 16:9e:65:df:5e:21:86:e8:28:aa:8e:3f:1a:78:05:49:29:71: b2:d3:81:d2:a3:ff:de:da:34:92:1f:24:d3:5e:5c:ee:68:26: b9:e9:6f:0f:57:ed:be:6d:47:45:2f:01:4d:ea:d2:e0:24:fd: 96:70:9d:2d:f7:7c:27:15:a7:76:1b:04:16:a9:02:ed:9e:ea: c5:e1:e5:f7:6a:d7:84:16:74:8e:77:d0:dd:81:61:f2:7f:a4: dc:cc:f7:15:bf:16:48:5a:02:33:a0:ba:00:4b:90:0e:4f:3c: 49:29:0a:0c:69:4a:c6:36:d8:91:49:bd:46:3d:4a:9d:5a:fc: 60:3e:fd:dd:58:d7:f8:e1:ff:3e:49:3d:e6:a0:30:f7:aa:1c: 89:2c:a3:b2:44:b1:59:73:14:3e:ef:bb:00:ca:3a:65:5a:f8: 37:db:b4:0d:af:e3:04:f2:d0:2e:98:bb:da:1e:81:1a:25:ea: c5:54:13:ed:04:97:85:ae:b9:08:61:e2:d3:e5:e1:18:f5:4b: 3b:50:36:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnTqhroB2oDYMqg6dQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUxMjA4MzIwOFoXDTI1MDgxMDA4MzIwOFowLzEtMCsGA1UEAxMk ZGM2MTk3YmEtZWE1MS00N2MxLTk5OGItNjE1NTVjZGQ4ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupk8KTG6IcX3eXMDg/FvWhbVjiNInx/hpKLl Ddj91biXrLrJ+NBWDtW/tNbCa2oMx6awaQIFi10XofCTTWYVHId2h8r77kwRliCj 7Vi+NEG0viVj1a2WwZ1qHZEDyuA/JpqFHo9ogb1xhaHqT7Ozn+OcYTxYB0X4e3bQ KQX4JD1LCnpLgueoKlTX0I7ZIkyFoZTCidMl4aJpjSE0HAl5DsIBv3uYBTKx6+lE z3IlsuSTxTqg5+Lm+XvucRA9wiNBkaR+ealokHQk2pOrX/OtOkbtTGBqj4hoCyIt PsJZ9eCl++GNfniK8DHxRB380e2wgIpFhnqcKYvPvct4U57TpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGr2yvV5+bTKbiaTvpTHcLWzq5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY5MzYxOTYtZDMxMS0z NjU3LWFkYmMtOWQyYTJlNzlmNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG66iz6K8hHI1kWOil78M5HfjGESwKlylKUJX5OXn7fHLrAv92Gd88R xmVW39gxwoNNr/DgJhaeZd9eIYboKKqOPxp4BUkpcbLTgdKj/97aNJIfJNNeXO5o Jrnpbw9X7b5tR0UvAU3q0uAk/ZZwnS33fCcVp3YbBBapAu2e6sXh5fdq14QWdI53 0N2BYfJ/pNzM9xW/FkhaAjOgugBLkA5PPEkpCgxpSsY22JFJvUY9Sp1a/GA+/d1Y 1/jh/z5JPeagMPeqHIkso7JEsVlzFD7vuwDKOmVa+DfbtA2v4wTy0C6Yu9oegRol 6sVUE+0El4WuuQhh4tPl4Rj1SztQNgw= -----END CERTIFICATE-----Generated at Tue May 13 00:54:54 2025 by rpki-client