$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6def8f45-ccdf-39bf-82e2-d725b55b2712.roa File: 6def8f45-ccdf-39bf-82e2-d725b55b2712.roa (raw, json) Hash identifier: +L7D4LEk6tAj/f06q2YKZGB3gCnU5rYMh+d+t2fA7Bg= Subject key identifier: AE:A0:9F:CA:63:40:66:0C:27:E6:30:C7:F2:AD:7B:12:70:AC:6D:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858495EEED61DC2B27C76519D0E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6def8f45-ccdf-39bf-82e2-d725b55b2712.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 22773 IP address blocks: 70.174.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d6:1d:c2:b2:7c:76:51:9d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=aa175e27-2701-48dc-a1c1-dfe617945814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:f7:c2:ba:5b:b4:85:06:86:21:b4:f3:4a: f7:76:9c:81:5f:90:63:8f:28:ae:fc:4b:30:a5:f3: 32:a5:de:43:83:4e:b0:86:de:52:41:46:00:cb:ef: df:af:1d:6e:34:93:ac:84:8c:08:db:1a:7c:57:de: ee:ac:36:5e:a2:d2:57:d6:3b:7b:b5:61:71:ce:39: 70:5c:b8:94:17:3c:d9:ba:1a:bb:74:76:e5:fd:a2: 88:1f:67:d7:d6:45:04:96:c3:ee:f7:85:88:1d:06: 56:03:16:8f:51:8d:63:80:db:3c:db:73:e1:17:12: 2f:d2:82:01:22:ee:43:bf:33:c6:08:8a:c8:c0:36: 44:ba:dc:44:17:4b:d3:c9:59:6a:f2:b9:9a:1b:ab: b1:12:d3:4e:28:7f:05:58:31:b4:20:df:c7:0a:2d: 3f:d8:d4:dd:42:fd:c6:31:5c:6a:b6:1f:3e:3d:b5: 41:44:5f:ef:ec:8b:a2:b8:5e:5a:d9:bb:69:f7:b1: 09:d9:32:66:69:2e:55:79:0d:84:46:86:e4:90:18: a9:ec:b5:bb:70:85:b5:8a:7e:5f:c6:7b:09:11:48: 77:71:a9:bb:62:df:49:92:76:43:5a:dc:69:1e:61: ae:9f:2c:b9:01:9b:a9:b0:fe:9c:97:53:90:51:ca: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A0:9F:CA:63:40:66:0C:27:E6:30:C7:F2:AD:7B:12:70:AC:6D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6def8f45-ccdf-39bf-82e2-d725b55b2712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6a:19:4c:5a:be:4e:93:4e:4a:b0:15:cd:70:25:47:84:56: 78:52:0b:25:6b:52:a9:e9:1d:a5:70:cf:6e:2a:23:ee:af:48: 4c:69:d5:47:af:06:fb:43:fc:ee:b5:ca:22:87:4a:d8:a1:74: ea:38:09:f2:dc:8f:41:7a:08:0f:7d:52:5a:2d:20:fb:61:99: e0:88:9a:41:77:7f:29:6e:36:b5:a4:f0:80:a9:90:80:12:83: db:87:9f:ca:28:ad:4a:cb:c8:dd:32:99:87:c1:27:84:46:47: 21:ee:4d:e3:12:93:c8:d8:bd:4f:1b:2a:31:4a:81:66:51:e8: 78:40:16:9c:76:df:42:a1:56:c1:c0:be:5e:61:0f:02:87:56: 21:81:51:2c:ee:fc:18:da:da:76:93:f1:cd:a4:a1:86:8b:63: c2:36:cd:ce:24:52:7f:6e:1d:7a:a4:90:0f:cb:11:b9:ec:2e: 8b:38:4c:90:cc:6c:4d:1f:bc:6d:5c:a3:c8:8b:de:ed:db:d4: c2:1e:a7:56:ed:7f:11:7f:15:46:18:ab:36:f9:99:53:82:be: b9:b6:66:27:09:62:16:05:d8:42:4c:2e:6e:00:a9:c1:b6:c0: 46:5f:66:d0:6d:9c:d8:de:0d:87:ff:a0:5f:68:e5:5c:73:e8: 6a:5c:11:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tYdwrJ8dlGdDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk YWExNzVlMjctMjcwMS00OGRjLWExYzEtZGZlNjE3OTQ1ODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+f3wrpbtIUGhiG080r3dpyBX5Bjjyiu/Esw pfMypd5Dg06wht5SQUYAy+/frx1uNJOshIwI2xp8V97urDZeotJX1jt7tWFxzjlw XLiUFzzZuhq7dHbl/aKIH2fX1kUElsPu94WIHQZWAxaPUY1jgNs823PhFxIv0oIB Iu5DvzPGCIrIwDZEutxEF0vTyVlq8rmaG6uxEtNOKH8FWDG0IN/HCi0/2NTdQv3G MVxqth8+PbVBRF/v7IuiuF5a2btp97EJ2TJmaS5VeQ2ERobkkBip7LW7cIW1in5f xnsJEUh3cam7Yt9JknZDWtxpHmGunyy5AZupsP6cl1OQUcplqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6gn8pjQGYMJ+Ywx/KtexJwrG2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmRlZjhmNDUtY2NkZi0z OWJmLTgyZTItZDcyNWI1NWIyNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZqGUxavk6TTkqwFc1wJUeEVnhSCyVrUqnpHaVwz24qI+6vSExp1Uev BvtD/O61yiKHStihdOo4CfLcj0F6CA99UlotIPthmeCImkF3fyluNrWk8ICpkIAS g9uHn8oorUrLyN0ymYfBJ4RGRyHuTeMSk8jYvU8bKjFKgWZR6HhAFpx230KhVsHA vl5hDwKHViGBUSzu/Bja2naT8c2koYaLY8I2zc4kUn9uHXqkkA/LEbnsLos4TJDM bE0fvG1co8iL3u3b1MIep1btfxF/FUYYqzb5mVOCvrm2ZicJYhYF2EJMLm4AqcG2 wEZfZtBtnNjeDYf/oF9o5Vxz6GpcEW4= -----END CERTIFICATE-----Generated at Sun Apr 6 16:01:57 2025 by rpki-client