$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff492f43-4bff-3f21-bf65-aa018a784dc6.roa File: ff492f43-4bff-3f21-bf65-aa018a784dc6.roa (raw, json) Hash identifier: a1c894pyf2qNnYMCKQAPFrh009C2TuOqtF15/A2FpLU= Subject key identifier: DB:76:3E:F5:95:02:EA:33:77:31:AD:B1:B8:C4:86:BA:99:60:73:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDFA269762CFC1312B2DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff492f43-4bff-3f21-bf65-aa018a784dc6.roa Signing time: Thu 01 May 2025 17:26:52 +0000 ROA not before: Thu 01 May 2025 17:26:52 +0000 ROA not after: Wed 30 Jul 2025 17:26:52 +0000 asID: 22773 IP address blocks: 174.66.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:fa:26:97:62:cf:c1:31:2b:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:52 2025 GMT Not After : Jul 30 17:26:52 2025 GMT Subject: CN=3d76dccc-283f-49f7-85bb-7cf0e137c026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:fd:7a:a3:78:75:3e:d0:41:85:90:a8:01: 60:48:ab:9c:1f:6c:21:27:33:e6:12:b3:a0:7c:52: 8f:8e:eb:47:cb:2c:22:e9:8c:f2:c4:20:6c:ff:87: e7:71:25:ac:a3:b3:b4:fb:2c:f0:b8:af:17:93:bd: 57:be:3d:e4:1a:92:e2:7d:d8:d9:93:1f:e6:a0:08: 61:56:11:90:43:a5:b3:4a:dd:2a:a7:bf:00:83:a3: 5b:14:c4:2c:e9:c9:0e:3c:17:82:0a:f6:d0:95:65: d9:06:b1:cd:81:ee:39:84:33:8e:e6:1e:f7:c7:20: 97:78:32:bd:dc:96:26:a4:b0:e0:a1:55:95:19:e0: 9c:d5:1d:6b:ec:be:64:42:3b:2c:14:09:85:7c:1e: 77:e5:65:b1:06:af:3e:bb:66:b9:ea:80:0c:b2:75: 1b:3b:30:8b:23:f9:8a:b2:1d:eb:bb:2e:0a:c1:73: 71:ba:17:b4:26:a4:82:11:35:94:7b:e5:99:bd:07: 77:42:79:e5:dc:39:bf:3a:4b:f8:8b:83:4b:e7:71: 91:0e:4b:01:42:13:5b:3a:bd:9e:79:98:25:9b:79: 32:9b:23:9c:a0:00:ae:e0:5c:af:bb:dc:97:69:e5: d6:0d:11:f5:46:d9:fa:a5:cb:75:4d:ad:8a:e1:f2: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:76:3E:F5:95:02:EA:33:77:31:AD:B1:B8:C4:86:BA:99:60:73:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff492f43-4bff-3f21-bf65-aa018a784dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f9:58:71:13:b1:6d:96:4b:05:e1:eb:de:b8:5c:ee:57:bd: ec:f7:bd:e9:53:00:1b:98:cf:d7:e4:09:f0:44:27:9d:db:af: 90:71:19:0e:a0:34:8f:53:85:af:73:80:90:19:33:d8:1f:0b: dc:fa:5a:d8:e8:b9:71:e8:bf:68:cd:0f:30:69:53:94:de:ac: 26:56:1f:45:56:3a:71:2e:18:c1:00:03:6e:a9:71:ea:50:d5: de:af:dc:3d:35:e7:b2:94:8d:75:07:1a:c2:01:b5:9e:d5:a4: ff:aa:f5:6d:92:2d:5a:3d:79:90:63:ef:15:db:41:33:cb:a3: 9f:bd:c1:d4:b8:ba:7b:9e:4d:a7:d4:dd:3e:e2:96:22:11:42: 28:98:1e:6f:d1:2a:3f:45:c7:f3:59:1f:51:8f:6a:f8:e0:3f: af:9a:29:d1:9b:a7:a5:9a:c9:2f:5f:44:45:e2:65:ba:cd:97: b2:cd:fe:09:49:54:b5:99:82:84:78:29:3a:ed:f6:3a:e8:4e: a8:9c:cf:50:b6:a7:a1:8c:18:23:2c:72:51:62:9f:3d:11:0e: 29:6d:36:98:b3:56:ff:35:f8:76:6c:a7:8b:8c:c5:c0:0e:ed: 1b:f1:c0:a0:d2:a9:65:68:a7:e8:e9:7d:1a:81:ed:b4:99:b7: 8c:e4:d3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/foml2LPwTErLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjY1MloXDTI1MDczMDE3MjY1MlowLzEtMCsGA1UEAxMk M2Q3NmRjY2MtMjgzZi00OWY3LTg1YmItN2NmMGUxMzdjMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+T9eqN4dT7QQYWQqAFgSKucH2whJzPmErOg fFKPjutHyywi6YzyxCBs/4fncSWso7O0+yzwuK8Xk71Xvj3kGpLifdjZkx/moAhh VhGQQ6WzSt0qp78Ag6NbFMQs6ckOPBeCCvbQlWXZBrHNge45hDOO5h73xyCXeDK9 3JYmpLDgoVWVGeCc1R1r7L5kQjssFAmFfB535WWxBq8+u2a56oAMsnUbOzCLI/mK sh3ruy4KwXNxuhe0JqSCETWUe+WZvQd3Qnnl3Dm/Okv4i4NL53GRDksBQhNbOr2e eZglm3kymyOcoACu4Fyvu9yXaeXWDRH1Rtn6pct1Ta2K4fIqswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt2PvWVAuozdzGtsbjEhrqZYHNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmY0OTJmNDMtNGJmZi0z ZjIxLWJmNjUtYWEwMThhNzg0ZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP5WHETsW2WSwXh6964XO5Xvez3velTABuYz9fkCfBEJ53br5BxGQ6g NI9Tha9zgJAZM9gfC9z6WtjouXHov2jNDzBpU5TerCZWH0VWOnEuGMEAA26pcepQ 1d6v3D0157KUjXUHGsIBtZ7VpP+q9W2SLVo9eZBj7xXbQTPLo5+9wdS4unueTafU 3T7iliIRQiiYHm/RKj9Fx/NZH1GPavjgP6+aKdGbp6WayS9fREXiZbrNl7LN/glJ VLWZgoR4KTrt9jroTqicz1C2p6GMGCMsclFinz0RDiltNpizVv81+HZsp4uMxcAO 7RvxwKDSqWVop+jpfRqB7bSZt4zk050= -----END CERTIFICATE-----Generated at Sun May 11 15:07:41 2025 by rpki-client