$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa File: 70f84667-596d-3892-9efc-8d21ee5932e4.roa (raw, json) Hash identifier: zqC4NKs2x0zNdNdFfrct0PY/qMn85MceDNIqw14zVu8= Subject key identifier: 25:06:88:51:E5:AD:1B:DE:4D:BC:EC:A4:27:FB:F6:60:5B:63:2F:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB17F7703B1E433A89D5800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 70.165.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:7f:77:03:b1:e4:33:a8:9d:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=5613a8c9-8653-4de4-a942-fe751a7bd120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:66:f6:66:9f:a3:c6:83:2d:3d:f0:f5:1a: 30:96:f4:7c:a3:80:78:5a:4f:e9:ba:e0:ca:2f:68: de:f6:8f:be:e9:bf:19:f0:50:d9:21:c8:89:7d:7b: 66:fb:3d:e6:c9:b4:84:50:b7:6a:4f:21:5a:73:33: b4:b7:d0:85:07:f8:06:fc:a9:74:53:dc:68:6e:8a: a9:fa:8f:36:eb:24:8c:85:ed:d1:d7:6e:b5:f9:10: ed:8c:b6:83:fe:d1:2f:5d:38:b8:b8:1c:eb:3b:bf: 3d:ba:93:94:63:cd:3e:31:f6:c6:95:ca:a6:72:ec: 9b:5b:19:d7:83:c9:8c:6b:cf:f1:0f:b6:ed:27:47: d1:d7:59:51:00:e8:8c:9e:11:8c:32:6d:05:f2:7a: fc:15:0b:4e:6a:43:ea:95:17:5b:b5:e5:84:1a:60: 8d:ba:be:0b:28:47:64:22:23:47:2c:62:db:5c:03: 5d:8e:8f:ca:2e:f1:bb:10:47:1a:86:7f:3a:e3:26: 6d:35:fd:cf:06:f1:b1:a2:aa:d7:de:d0:f9:af:7a: 72:ed:56:94:23:fd:fa:35:51:73:0d:e5:52:df:3b: 41:45:ef:15:45:91:bf:0b:24:4a:15:a5:e2:fd:4b: 15:8f:8d:62:33:58:ae:b2:24:70:09:de:04:32:f0: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:06:88:51:E5:AD:1B:DE:4D:BC:EC:A4:27:FB:F6:60:5B:63:2F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70f84667-596d-3892-9efc-8d21ee5932e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c4:9f:a9:2f:26:70:4d:64:e5:32:e0:15:69:36:fe:95:44: 8f:f3:e8:a3:fc:08:2e:90:10:f5:35:6e:c6:75:4a:eb:19:72: 2c:73:e1:e3:e5:b3:3b:cd:d7:8d:54:4d:fb:dd:ab:64:d7:ab: 0c:24:8d:34:eb:4f:e4:36:fd:b0:25:d9:73:a9:55:53:78:63: 3b:80:ae:db:47:ac:59:13:66:88:b7:b4:45:7f:99:85:ba:cb: a5:64:89:66:21:c0:69:1c:53:70:f3:27:60:f8:1b:11:c9:12: 16:87:ee:09:af:b3:3b:5c:a2:66:b1:2c:0b:f0:c5:05:d6:b2: c7:7f:63:fc:a5:ca:b6:29:ed:4e:64:af:66:13:2f:e9:c4:05: e8:b2:a1:6a:68:1a:a3:25:9b:7b:f9:96:01:f5:b9:ab:87:9b: 69:08:ab:58:5c:ea:cb:cb:78:65:cc:9e:e1:61:c8:43:6a:f6: ef:95:73:1e:db:b7:b4:73:1f:e4:d0:d6:fc:76:e3:aa:de:9e: 6d:77:11:3e:e7:25:e8:62:5a:8b:25:6c:e3:de:b3:28:11:e8: df:66:d1:31:15:83:51:5a:31:d1:b7:ea:fe:55:70:90:8e:67: 36:62:69:ae:9c:20:41:d3:eb:9e:a7:74:59:bd:34:d4:16:99: ac:53:30:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsX93A7HkM6idWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk NTYxM2E4YzktODY1My00ZGU0LWE5NDItZmU3NTFhN2JkMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Bm9mafo8aDLT3w9RowlvR8o4B4Wk/puuDK L2je9o++6b8Z8FDZIciJfXtm+z3mybSEULdqTyFaczO0t9CFB/gG/Kl0U9xoboqp +o826ySMhe3R1261+RDtjLaD/tEvXTi4uBzrO789upOUY80+MfbGlcqmcuybWxnX g8mMa8/xD7btJ0fR11lRAOiMnhGMMm0F8nr8FQtOakPqlRdbteWEGmCNur4LKEdk IiNHLGLbXANdjo/KLvG7EEcahn864yZtNf3PBvGxoqrX3tD5r3py7VaUI/36NVFz DeVS3ztBRe8VRZG/CyRKFaXi/UsVj41iM1iusiRwCd4EMvCtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUGiFHlrRveTbzspCf79mBbYy+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBmODQ2NjctNTk2ZC0z ODkyLTllZmMtOGQyMWVlNTkzMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPEn6kvJnBNZOUy4BVpNv6VRI/z6KP8CC6QEPU1bsZ1SusZcixz4ePl szvN141UTfvdq2TXqwwkjTTrT+Q2/bAl2XOpVVN4YzuArttHrFkTZoi3tEV/mYW6 y6VkiWYhwGkcU3DzJ2D4GxHJEhaH7gmvsztcomaxLAvwxQXWssd/Y/ylyrYp7U5k r2YTL+nEBeiyoWpoGqMlm3v5lgH1uauHm2kIq1hc6svLeGXMnuFhyENq9u+Vcx7b t7RzH+TQ1vx246renm13ET7nJehiWoslbOPesygR6N9m0TEVg1FaMdG36v5VcJCO ZzZiaa6cIEHT656ndFm9NNQWmaxTMDM= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:30 2025 by rpki-client