$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa File: 52fd0d0b-65ba-321c-8779-22e25b08722a.roa (raw, json) Hash identifier: +PqQ32q8CK5EAq2/QnpDPbGat9yg1UCLhT2S3StbRvs= Subject key identifier: 72:E8:95:CA:1E:B8:5F:57:FC:F3:21:68:41:F0:2B:D9:42:E8:8B:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17735EC111572ADCF7D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 62957 IP address blocks: 70.165.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:77:35:ec:11:15:72:ad:cf:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=7c946974-086a-4fe6-b5d6-f498881951d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:c7:42:d2:a8:10:b2:18:43:4a:c4:d1:37: 80:3b:1c:81:a8:d5:c2:74:d5:6d:92:cb:47:57:d0: fb:6b:ec:4b:59:fe:a2:20:8a:e3:fb:de:3e:f0:33: 0d:09:18:31:32:da:a9:1c:08:a8:46:95:bd:ce:c4: db:9a:34:63:0b:dd:13:18:0f:5e:74:93:84:c4:b4: 36:04:6f:ff:3a:00:3a:d0:d4:de:03:ac:24:0f:12: e3:ad:39:d4:04:ec:fa:01:29:cf:fe:14:ae:8f:c6: bb:39:07:a0:5f:6c:d8:1f:ea:93:46:b1:b4:31:d1: 21:ea:eb:9f:63:d3:93:66:39:77:9e:18:73:33:c7: 50:e1:db:0e:b1:f4:75:da:e7:5a:2c:38:90:3f:da: a0:49:e7:53:8d:b6:4a:5a:6f:a5:20:74:5f:05:0c: 3c:cb:d5:a4:f9:ba:f6:59:62:dc:c9:5f:0c:ff:2f: 62:0b:63:8a:b7:e2:21:55:bf:66:44:62:0f:82:1b: 01:56:c4:97:08:90:f8:78:8d:12:7f:2a:c7:fb:ee: b8:43:de:08:2c:3f:65:ce:b7:06:2e:00:26:bc:a6: 8c:c0:ce:c8:b7:ca:97:e1:17:2e:b0:01:fa:20:97: bd:54:5a:23:ea:5f:3e:04:cc:a7:ff:9a:d7:60:f5: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E8:95:CA:1E:B8:5F:57:FC:F3:21:68:41:F0:2B:D9:42:E8:8B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52fd0d0b-65ba-321c-8779-22e25b08722a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:90:34:cc:6d:81:4e:08:df:39:4b:bb:6e:cb:55:4c:2c:cb: 9f:1c:81:b6:18:7e:44:0c:a0:a0:5d:f8:14:9b:68:39:b6:ab: 20:8a:55:ff:a3:24:ac:37:b3:dd:a2:eb:31:fc:06:18:f6:15: 84:56:7e:27:97:86:2b:cb:e4:96:78:2a:1c:6b:6b:76:e1:16: 3a:f8:62:10:d8:68:ec:d9:ec:d6:63:bf:17:8a:f9:87:c1:ff: 56:06:a9:ad:48:d8:77:36:4d:e5:12:f4:07:ae:ac:2b:63:47: 04:6c:a6:d8:2c:3b:c2:3c:11:b0:25:a9:71:86:a2:fd:1b:5d: 35:f3:7f:6b:0f:9d:c8:c4:2d:13:2e:d7:bd:6b:8f:13:6b:ce: 55:e6:9e:c2:f8:e4:48:d2:48:3e:f0:3b:e9:d1:78:31:d9:6b: 1c:df:ba:f0:fa:cc:0b:c6:7a:af:59:61:cd:e9:13:52:84:ec: 62:cd:73:46:ea:5d:96:e3:99:77:6c:3a:ac:7c:ae:69:17:bb: fa:8a:e2:f0:fe:da:77:2a:8c:81:67:88:5b:70:07:28:c0:c7: 43:5e:5c:3c:e9:e5:8e:2a:1b:e4:04:6e:b1:d2:bd:8b:e9:01: b6:3e:d3:34:15:72:3d:19:98:46:64:b4:b6:8e:95:aa:f2:ce: 3a:b2:2c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXc17BEVcq3PfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk N2M5NDY5NzQtMDg2YS00ZmU2LWI1ZDYtZjQ5ODg4MTk1MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCPHQtKoELIYQ0rE0TeAOxyBqNXCdNVtkstH V9D7a+xLWf6iIIrj+94+8DMNCRgxMtqpHAioRpW9zsTbmjRjC90TGA9edJOExLQ2 BG//OgA60NTeA6wkDxLjrTnUBOz6ASnP/hSuj8a7OQegX2zYH+qTRrG0MdEh6uuf Y9OTZjl3nhhzM8dQ4dsOsfR12udaLDiQP9qgSedTjbZKWm+lIHRfBQw8y9Wk+br2 WWLcyV8M/y9iC2OKt+IhVb9mRGIPghsBVsSXCJD4eI0SfyrH++64Q94ILD9lzrcG LgAmvKaMwM7It8qX4RcusAH6IJe9VFoj6l8+BMyn/5rXYPU5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLolcoeuF9X/PMhaEHwK9lC6IukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJmZDBkMGItNjViYS0z MjFjLTg3NzktMjJlMjViMDg3MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqWTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaQNMxtgU4I3zlLu27LVUwsy58cgbYYfkQMoKBd+BSbaDm2qyCKVf+j JKw3s92i6zH8Bhj2FYRWfieXhivL5JZ4Khxra3bhFjr4YhDYaOzZ7NZjvxeK+YfB /1YGqa1I2Hc2TeUS9AeurCtjRwRsptgsO8I8EbAlqXGGov0bXTXzf2sPncjELRMu 171rjxNrzlXmnsL45EjSSD7wO+nReDHZaxzfuvD6zAvGeq9ZYc3pE1KE7GLNc0bq XZbjmXdsOqx8rmkXu/qK4vD+2ncqjIFniFtwByjAx0NeXDzp5Y4qG+QEbrHSvYvp AbY+0zQVcj0ZmEZktLaOlaryzjqyLHo= -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:04 2025 by rpki-client