$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18452a2-4a93-3e2a-bf8c-2c97701e39da.roa File: f18452a2-4a93-3e2a-bf8c-2c97701e39da.roa (raw, json) Hash identifier: jzNNz1rCwUCfGiu5YanGuOtDNoqn8BcCWQ5wlW350Vs= Subject key identifier: 28:15:AB:6D:26:96:2B:86:70:FF:0B:58:BA:02:34:AE:D2:0D:8F:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F82A4F5781799B714F9380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18452a2-4a93-3e2a-bf8c-2c97701e39da.roa Signing time: Thu 01 May 2025 17:15:09 +0000 ROA not before: Thu 01 May 2025 17:15:09 +0000 ROA not after: Wed 30 Jul 2025 17:15:09 +0000 asID: 22773 IP address blocks: 70.160.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:2a:4f:57:81:79:9b:71:4f:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:09 2025 GMT Not After : Jul 30 17:15:09 2025 GMT Subject: CN=0fa5b9de-aa59-4a15-8c37-65aa4a9159a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:69:a1:4a:d9:8d:21:34:bc:be:ab:bb:c4:ef: 89:13:24:fc:02:f7:34:3d:36:db:3b:8b:be:93:f3: 60:44:f9:cc:46:1c:52:73:30:a0:93:ab:29:9e:55: ae:65:38:15:b7:76:e6:0d:89:55:46:fa:db:f7:19: 5c:9c:a9:60:47:2e:78:de:59:d6:d7:8c:9d:6f:88: 68:2d:8a:77:94:52:44:22:c9:a7:bc:e9:a5:05:22: 58:7a:af:a3:a4:b4:e0:9a:a7:23:94:52:ae:a1:9f: 3f:50:1e:b5:39:9c:fc:85:e7:5d:54:b4:5c:93:53: be:49:8b:27:f7:94:b1:5c:cb:41:b2:ad:1c:9f:51: bf:95:bb:bf:a1:23:30:af:e6:b6:86:72:f7:47:6f: 87:54:b9:dc:33:ff:48:0a:1a:09:d7:47:23:d1:66: e1:92:92:8d:5f:f0:fc:55:9b:11:58:45:74:4e:ea: 1d:a0:95:5c:68:42:1c:55:6c:89:7d:c4:75:3d:04: eb:22:b9:2b:46:eb:8f:17:bf:a3:1d:c4:c6:4e:ab: d8:01:41:ed:de:f7:38:fb:98:af:eb:6f:e3:b0:50: 97:c7:9c:2a:4c:eb:ab:5e:c5:e4:83:a6:59:9d:d8: 5b:fd:ab:8a:9e:57:63:24:53:17:2c:a7:59:df:7d: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:AB:6D:26:96:2B:86:70:FF:0B:58:BA:02:34:AE:D2:0D:8F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f18452a2-4a93-3e2a-bf8c-2c97701e39da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:98:60:dd:dc:93:c9:5b:b2:6e:4f:ab:73:d5:b0:e9:6b:2f: 14:16:52:f3:23:f5:fc:10:25:8c:37:b6:d7:a8:59:ea:56:99: 2d:ea:cd:54:05:bf:01:45:79:1f:11:7f:6f:28:d3:90:89:d3: 63:40:a4:05:da:d2:39:cd:c0:72:cc:55:87:41:2e:72:8f:07: a1:17:d7:dc:35:88:df:e0:1c:3d:97:0c:42:a8:53:8d:6a:5f: 36:d6:88:8f:63:67:ec:ef:21:12:7b:1f:54:7b:39:e1:c0:00: 9d:17:5f:98:57:fe:84:e0:05:84:fb:32:83:73:1c:6d:38:2b: 28:b5:5f:9c:21:1b:38:b2:7e:7e:24:9d:74:68:5b:3c:9d:ef: d6:e8:ff:d1:b9:8f:43:fb:08:a0:fe:ad:6e:f9:41:2b:49:2f: f5:ec:f6:87:72:3d:6e:94:d5:6f:83:60:af:44:64:1c:3a:53: cf:0b:5a:2a:0f:88:de:3a:33:f0:35:77:77:5a:29:2d:2b:45: c4:9d:56:61:94:56:ad:62:79:5e:ef:7d:b6:e7:ee:c2:98:af: 9b:4e:7f:cb:57:11:26:91:82:d6:50:ea:df:04:2a:df:ce:9b: 95:de:33:77:e0:a7:7f:bb:c8:14:3c:40:75:31:79:0c:89:5c: 68:d1:8f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+CpPV4F5m3FPk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTUwOVoXDTI1MDczMDE3MTUwOVowLzEtMCsGA1UEAxMk MGZhNWI5ZGUtYWE1OS00YTE1LThjMzctNjVhYTRhOTE1OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmmhStmNITS8vqu7xO+JEyT8Avc0PTbbO4u+ k/NgRPnMRhxSczCgk6spnlWuZTgVt3bmDYlVRvrb9xlcnKlgRy543lnW14ydb4ho LYp3lFJEIsmnvOmlBSJYeq+jpLTgmqcjlFKuoZ8/UB61OZz8heddVLRck1O+SYsn 95SxXMtBsq0cn1G/lbu/oSMwr+a2hnL3R2+HVLncM/9IChoJ10cj0WbhkpKNX/D8 VZsRWEV0TuodoJVcaEIcVWyJfcR1PQTrIrkrRuuPF7+jHcTGTqvYAUHt3vc4+5iv 62/jsFCXx5wqTOurXsXkg6ZZndhb/auKnldjJFMXLKdZ333BmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgVq20mliuGcP8LWLoCNK7SDY9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjE4NDUyYTItNGE5My0z ZTJhLWJmOGMtMmM5NzcwMWUzOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqDhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaYYN3ck8lbsm5Pq3PVsOlrLxQWUvMj9fwQJYw3tteoWepWmS3qzVQF vwFFeR8Rf28o05CJ02NApAXa0jnNwHLMVYdBLnKPB6EX19w1iN/gHD2XDEKoU41q XzbWiI9jZ+zvIRJ7H1R7OeHAAJ0XX5hX/oTgBYT7MoNzHG04Kyi1X5whGziyfn4k nXRoWzyd79bo/9G5j0P7CKD+rW75QStJL/Xs9odyPW6U1W+DYK9EZBw6U88LWioP iN46M/A1d3daKS0rRcSdVmGUVq1ieV7vfbbn7sKYr5tOf8tXESaRgtZQ6t8EKt/O m5XeM3fgp3+7yBQ8QHUxeQyJXGjRjx8= -----END CERTIFICATE-----Generated at Fri May 9 03:03:10 2025 by rpki-client