$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa File: 6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa (raw, json) Hash identifier: XjqgnwyzvXNbyctFAWZtvUTbLn3k8Q4L0RknojTLmh4= Subject key identifier: AC:CC:8F:0A:E7:68:4B:EF:74:39:F9:F8:41:EB:6E:0C:C3:21:8B:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858482D5A9AE5B80470E985429F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 22773 IP address blocks: 70.166.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9a:e5:b8:04:70:e9:85:42:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=845f20b0-c4e2-48ae-9838-5a49d6f5eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:82:11:5f:68:ac:2b:d0:e0:44:e8:77:c2: 1d:a4:6c:a6:6f:74:b1:df:de:8c:0f:89:77:5a:12: 80:7f:0a:e3:02:0e:ae:a5:4e:0f:4d:54:06:9f:e4: cd:d6:e8:1b:ed:30:f2:7d:5f:77:9c:c1:e5:9f:28: a1:e4:a8:5e:48:2c:b1:ac:a8:37:94:6c:2a:be:24: f3:f3:57:18:bf:a0:3e:64:96:3c:00:cf:76:16:dc: e8:4f:45:e7:ca:14:e6:41:17:7b:5e:aa:39:72:e3: 0a:c3:ea:af:af:89:20:eb:68:38:35:0a:7e:b4:d0: 4f:85:70:de:e3:00:83:b0:ed:c9:aa:28:f9:59:d8: e9:a4:9d:b4:0b:6f:84:cf:54:94:79:05:fc:2d:b5: b4:26:65:6b:d9:54:e4:41:6c:c6:d8:cb:dd:51:50: 38:c8:48:93:3c:2d:d9:1d:e8:d7:e0:af:51:90:41: 1e:47:71:89:a7:b6:a4:30:25:ee:95:39:89:da:72: 48:11:f1:6d:11:3c:1c:9f:bd:00:0d:2d:65:42:47: f7:e0:c5:83:52:4c:11:84:68:c2:0e:ff:d5:c3:41: cd:46:cb:55:d8:bd:25:7b:78:e5:a7:89:6e:07:72: 27:c1:10:27:88:e6:37:c0:42:19:4a:f0:5b:2a:43: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:8F:0A:E7:68:4B:EF:74:39:F9:F8:41:EB:6E:0C:C3:21:8B:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.166.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b5:dc:a8:df:60:1a:ff:43:49:38:58:0a:e7:f0:f2:01:d9: 2e:8f:bd:1b:b3:3d:9e:8c:d9:bc:e3:a1:b5:98:cc:78:07:6f: 81:76:fb:86:79:1d:bf:6c:60:30:30:9e:0b:1d:da:e0:35:65: 03:43:a8:92:dd:b9:15:2a:96:33:2f:03:04:9c:87:2b:47:57: b0:0f:04:49:bc:77:6a:d2:84:d2:4f:3d:89:37:3f:3c:a3:49: a2:11:1a:bd:59:d9:99:4d:08:84:6b:85:88:ab:43:9d:f7:9b: e0:95:72:2a:84:ac:07:b3:be:2c:20:f9:fa:8e:71:c9:6f:21: 09:77:ec:3c:1d:57:b5:19:e6:30:3f:8f:97:70:b9:ea:55:20: b8:cd:34:05:7e:b4:fd:f2:70:08:df:53:fb:c9:64:5b:67:25: 51:34:ea:09:46:52:fb:5e:99:ed:4c:55:6f:81:c2:f1:56:ab: 8f:c1:e0:21:42:12:dd:31:9b:39:44:11:9f:42:93:5a:2c:50: 45:dd:2c:4e:6a:96:57:19:3b:e0:b2:7f:43:63:0f:64:c8:76: 5b:a9:32:af:88:8b:60:fd:ae:a3:9b:6b:8a:7a:ed:73:09:dd: 51:14:fe:2c:78:2a:90:4b:6d:aa:08:fd:39:95:94:f3:03:8f: 9b:8e:bd:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWprluARw6YVCn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk ODQ1ZjIwYjAtYzRlMi00OGFlLTk4MzgtNWE0OWQ2ZjVlYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2yCEV9orCvQ4ETod8IdpGymb3Sx396MD4l3 WhKAfwrjAg6upU4PTVQGn+TN1ugb7TDyfV93nMHlnyih5KheSCyxrKg3lGwqviTz 81cYv6A+ZJY8AM92FtzoT0XnyhTmQRd7Xqo5cuMKw+qvr4kg62g4NQp+tNBPhXDe 4wCDsO3Jqij5WdjppJ20C2+Ez1SUeQX8LbW0JmVr2VTkQWzG2MvdUVA4yEiTPC3Z HejX4K9RkEEeR3GJp7akMCXulTmJ2nJIEfFtETwcn70ADS1lQkf34MWDUkwRhGjC Dv/Vw0HNRstV2L0le3jlp4luB3InwRAniOY3wEIZSvBbKkP8xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzMjwrnaEvvdDn5+EHrbgzDIYtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmFjMmE0NWItYzRmZS0z OWYyLWIxNjMtNDlmZDdhMDk2NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa13KjfYBr/Q0k4WArn8PIB2S6PvRuzPZ6M2bzjobWYzHgHb4F2+4Z5 Hb9sYDAwngsd2uA1ZQNDqJLduRUqljMvAwSchytHV7APBEm8d2rShNJPPYk3Pzyj SaIRGr1Z2ZlNCIRrhYirQ533m+CVciqErAezviwg+fqOcclvIQl37DwdV7UZ5jA/ j5dwuepVILjNNAV+tP3ycAjfU/vJZFtnJVE06glGUvteme1MVW+BwvFWq4/B4CFC Et0xmzlEEZ9Ck1osUEXdLE5qllcZO+Cyf0NjD2TIdlupMq+Ii2D9rqOba4p67XMJ 3VEU/ix4KpBLbaoI/TmVlPMDj5uOvcU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:11 2025 by rpki-client