$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc0d33dd-5487-3eda-8434-bd780e23a0b0.roa File: fc0d33dd-5487-3eda-8434-bd780e23a0b0.roa (raw, json) Hash identifier: cR4JstxQwnapWTVz9+eUaxFq+PSLjk3M7yI7Rvuy2zI= Subject key identifier: 3C:A9:AB:73:25:5C:EC:3D:79:D7:80:3A:2C:9A:83:9D:55:03:DB:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDEBE0498662CD1139E3E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc0d33dd-5487-3eda-8434-bd780e23a0b0.roa Signing time: Thu 01 May 2025 17:26:45 +0000 ROA not before: Thu 01 May 2025 17:26:45 +0000 ROA not after: Wed 30 Jul 2025 17:26:45 +0000 asID: 22773 IP address blocks: 174.65.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:eb:e0:49:86:62:cd:11:39:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:45 2025 GMT Not After : Jul 30 17:26:45 2025 GMT Subject: CN=2b529acf-d8fd-42c6-bdc2-5b13c2317096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:2e:6c:9a:b9:8e:16:2e:a4:dd:c6:a5:2e: 4e:20:1c:89:0f:e4:1b:8f:cd:72:00:8e:f2:7c:41: 66:37:b9:4b:ae:d1:7b:9a:df:cd:c6:d1:4a:a5:db: 9f:64:11:8f:f9:3b:88:5e:0b:dd:78:b3:89:a6:16: 3a:cc:d1:1f:03:2f:2d:4d:fa:09:9b:b5:dd:7a:d7: 9c:e0:76:58:40:99:da:55:fc:d3:70:2e:b5:e7:e9: 08:48:de:65:06:15:82:15:9c:79:e1:51:15:b0:7e: 48:86:72:b5:74:87:bd:bc:28:23:84:5b:37:e2:f4: e2:b4:30:e3:d6:05:ef:53:04:bb:a2:c4:7f:de:51: d3:f2:fc:18:97:f6:79:21:2f:21:06:f6:91:b0:ba: 98:d6:39:93:e3:d6:96:09:69:47:38:80:ad:dc:e5: cf:ed:b2:91:2f:97:bb:58:73:28:e5:0a:ff:c6:e6: b0:be:43:4e:5d:12:a6:f6:a8:3b:3a:f3:2f:af:e8: ce:9e:cb:55:26:c4:b1:61:81:18:5b:7f:25:66:17: 97:a0:60:e0:05:4e:ab:ab:6a:23:c2:64:11:1b:95: 14:e0:99:78:f8:23:1d:1c:0c:91:9b:93:37:d9:c6: 40:ff:f0:a9:e0:6d:eb:8a:41:2f:39:74:25:45:22: 27:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A9:AB:73:25:5C:EC:3D:79:D7:80:3A:2C:9A:83:9D:55:03:DB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc0d33dd-5487-3eda-8434-bd780e23a0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:80:6a:3b:db:e1:f8:e8:70:df:89:b5:be:81:6d:fb:e2:a6: 4f:03:5d:be:b2:15:e9:19:03:47:a9:b2:81:27:b8:81:f8:58: 71:dd:e9:db:d3:c8:aa:75:f3:c2:5a:86:5c:9c:0b:d5:7a:ce: 54:72:40:82:f9:b5:6d:f2:f9:4a:d0:41:83:8c:48:0a:20:3a: 69:4d:1e:80:76:f2:67:e8:d0:5a:81:9a:dc:7b:e0:2c:10:9b: 40:23:78:78:04:59:0d:72:6c:b3:c2:72:cc:63:d9:f7:10:d7: d3:62:6e:73:63:af:83:92:75:48:69:dc:60:6a:a1:74:af:44: 8b:1b:67:f3:e3:f6:00:fa:4a:f1:6a:2e:d3:a0:84:7c:d7:b1: 0b:13:bd:c5:1f:bf:91:60:00:3d:1c:14:50:f8:5e:28:1e:63: 03:db:2b:ab:9a:fd:6b:47:c2:70:6b:7b:38:3c:fc:4e:6d:69: 31:20:e9:c8:88:fd:97:4d:5a:cb:67:40:35:7f:fe:24:31:cf: 0a:79:ba:b0:24:de:13:22:7c:e8:51:d7:24:1e:f8:0f:de:7d: 7e:33:c8:06:3d:ba:57:43:1e:0c:fb:b3:23:63:eb:60:b5:dc: c0:ae:d4:e3:83:90:67:5e:a5:00:ea:ba:f3:85:fa:5d:46:39: 3a:e2:7b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/evgSYZizRE54+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY0NVoXDTI1MDczMDE3MjY0NVowLzEtMCsGA1UEAxMk MmI1MjlhY2YtZDhmZC00MmM2LWJkYzItNWIxM2MyMzE3MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwoubJq5jhYupN3GpS5OIByJD+Qbj81yAI7y fEFmN7lLrtF7mt/NxtFKpdufZBGP+TuIXgvdeLOJphY6zNEfAy8tTfoJm7Xdetec 4HZYQJnaVfzTcC615+kISN5lBhWCFZx54VEVsH5IhnK1dIe9vCgjhFs34vTitDDj 1gXvUwS7osR/3lHT8vwYl/Z5IS8hBvaRsLqY1jmT49aWCWlHOICt3OXP7bKRL5e7 WHMo5Qr/xuawvkNOXRKm9qg7OvMvr+jOnstVJsSxYYEYW38lZheXoGDgBU6rq2oj wmQRG5UU4Jl4+CMdHAyRm5M32cZA//Cp4G3rikEvOXQlRSInkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDypq3MlXOw9edeAOiyag51VA9sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmMwZDMzZGQtNTQ4Ny0z ZWRhLTg0MzQtYmQ3ODBlMjNhMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSAajvb4fjocN+Jtb6Bbfvipk8DXb6yFekZA0epsoEnuIH4WHHd6dvT yKp188JahlycC9V6zlRyQIL5tW3y+UrQQYOMSAogOmlNHoB28mfo0FqBmtx74CwQ m0AjeHgEWQ1ybLPCcsxj2fcQ19NibnNjr4OSdUhp3GBqoXSvRIsbZ/Pj9gD6SvFq LtOghHzXsQsTvcUfv5FgAD0cFFD4XigeYwPbK6ua/WtHwnBrezg8/E5taTEg6ciI /ZdNWstnQDV//iQxzwp5urAk3hMifOhR1yQe+A/efX4zyAY9uldDHgz7syNj62C1 3MCu1OODkGdepQDquvOF+l1GOTriezA= -----END CERTIFICATE-----Generated at Sun May 11 14:54:22 2025 by rpki-client