$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa File: 659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa (raw, json) Hash identifier: 8lZKMEloOayratMD3GGEPdnYeBcyu9Ry408sEFzstao= Subject key identifier: 8F:63:72:2D:69:6C:4A:79:5E:3E:CC:2C:DC:2B:F8:37:F3:DA:05:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB177E1B87EE10AE5140B78 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 70.168.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:77:e1:b8:7e:e1:0a:e5:14:0b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=286b7342-0d81-4570-84cb-34adcd1ce86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:da:fd:98:37:c1:02:db:15:33:d3:40:5e: 2c:7e:7e:9e:63:79:8f:10:d3:0b:a6:49:52:56:02: e2:2e:c2:bb:14:ce:76:ad:a2:04:13:fd:97:38:16: f9:57:73:e2:c6:17:1c:6c:9d:c3:31:3e:3f:79:b6: 34:c5:44:6f:d5:7b:7a:ea:8e:14:4d:f4:a3:5c:00: 87:27:16:99:2d:f4:a1:5b:24:72:83:83:21:ba:df: a1:8d:b9:4e:25:43:26:f6:a2:04:de:19:34:00:4e: 40:e2:b0:31:1a:c9:c2:0e:ef:c5:11:c4:e2:c8:3b: a7:eb:f8:4d:bc:c8:89:03:5c:f5:5c:77:8d:3a:c3: d8:0e:a9:2a:1a:d7:17:4c:19:65:13:8a:40:e8:de: a6:c5:6f:88:60:ca:99:fe:41:9a:d0:fe:a3:99:ff: 78:54:36:8f:ad:ce:c9:87:95:4a:9e:e0:9d:2f:0f: 30:76:b3:a5:59:66:f3:bc:3b:50:d6:cb:a0:ad:a0: ce:47:d8:5b:16:2f:d4:bf:c0:e2:80:9c:8e:d2:26: 66:0b:ad:1e:68:20:bb:c4:10:4c:1a:93:c4:17:43: 74:4d:5f:31:d6:5f:87:87:7c:01:f2:13:06:3c:9b: d0:bb:47:dd:a4:31:f5:76:07:c3:42:7c:d2:cf:50: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:63:72:2D:69:6C:4A:79:5E:3E:CC:2C:DC:2B:F8:37:F3:DA:05:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/659409c5-cef9-3a49-8d51-d75f84ecf7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:ad:1d:ab:22:24:b1:11:79:99:2a:8d:09:94:7b:2a:5d:13: e1:c3:4a:1a:ce:cf:24:d6:e0:57:fc:31:b3:f3:fe:5d:94:a5: 2c:cc:c3:4a:19:02:94:6f:1f:1d:63:42:0f:3a:dd:35:1d:91: b1:a7:2d:f1:80:da:9e:d1:b8:e9:d3:34:ae:40:2f:58:0c:40: e2:bf:50:5c:09:85:d0:e5:10:d6:f5:d3:98:8e:ea:d7:50:91: 0c:ca:fa:e5:09:86:4f:f4:cd:fd:88:17:9f:a7:dc:70:47:dc: 5e:cd:d3:2a:e2:29:5a:93:c9:0b:02:bf:84:d2:df:da:6d:be: de:82:4c:02:56:37:93:97:39:f8:62:ef:dd:3d:eb:f5:63:3f: 16:06:98:a2:20:62:63:b2:07:8a:47:2f:52:68:95:db:61:9e: 15:c5:80:5a:72:20:05:ca:e0:ac:3d:8b:14:f4:6f:6f:3f:f1: 52:22:6c:f3:2a:68:16:1e:5d:75:83:d5:7c:20:3f:29:d1:e7: a1:86:7c:8b:53:c3:ca:3c:85:43:98:30:77:90:8b:ef:31:fb: 4a:bb:4c:af:91:b1:a3:a9:80:8d:7d:b4:c4:8d:d8:4e:20:b3: 4b:5c:98:ed:81:03:b2:15:07:f4:f7:ae:d2:63:5e:b5:ed:af: 5b:4f:1b:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXfhuH7hCuUUC3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk Mjg2YjczNDItMGQ4MS00NTcwLTg0Y2ItMzRhZGNkMWNlODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXXa/Zg3wQLbFTPTQF4sfn6eY3mPENMLpklS VgLiLsK7FM52raIEE/2XOBb5V3PixhccbJ3DMT4/ebY0xURv1Xt66o4UTfSjXACH JxaZLfShWyRyg4Mhut+hjblOJUMm9qIE3hk0AE5A4rAxGsnCDu/FEcTiyDun6/hN vMiJA1z1XHeNOsPYDqkqGtcXTBllE4pA6N6mxW+IYMqZ/kGa0P6jmf94VDaPrc7J h5VKnuCdLw8wdrOlWWbzvDtQ1sugraDOR9hbFi/Uv8DigJyO0iZmC60eaCC7xBBM GpPEF0N0TV8x1l+Hh3wB8hMGPJvQu0fdpDH1dgfDQnzSz1B+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9jci1pbEp5Xj7MLNwr+Dfz2gWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjU5NDA5YzUtY2VmOS0z YTQ5LThkNTEtZDc1Zjg0ZWNmN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHatHasiJLEReZkqjQmUeypdE+HDShrOzyTW4Ff8MbPz/l2UpSzMw0oZ ApRvHx1jQg863TUdkbGnLfGA2p7RuOnTNK5AL1gMQOK/UFwJhdDlENb105iO6tdQ kQzK+uUJhk/0zf2IF5+n3HBH3F7N0yriKVqTyQsCv4TS39ptvt6CTAJWN5OXOfhi 79096/VjPxYGmKIgYmOyB4pHL1JoldthnhXFgFpyIAXK4Kw9ixT0b28/8VIibPMq aBYeXXWD1XwgPynR56GGfItTw8o8hUOYMHeQi+8x+0q7TK+RsaOpgI19tMSN2E4g s0tcmO2BA7IVB/T3rtJjXrXtr1tPG5I= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:48 2025 by rpki-client