$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75c6d981-1694-3de6-a9d8-2d7d89b602f8.roa File: 75c6d981-1694-3de6-a9d8-2d7d89b602f8.roa (raw, json) Hash identifier: U9BrR+dFOQwsmFAMKNCr6+pM+fImRabS2CDCvJdVOLI= Subject key identifier: 81:18:B6:7D:38:5D:66:2A:8C:3A:A6:74:F1:44:9B:BC:90:A9:F3:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858494B13FBDD58883B816C5C5280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75c6d981-1694-3de6-a9d8-2d7d89b602f8.roa Signing time: Mon 24 Mar 2025 10:19:43 +0000 ROA not before: Mon 24 Mar 2025 10:19:43 +0000 ROA not after: Sun 22 Jun 2025 10:19:43 +0000 asID: 22773 IP address blocks: 70.167.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:13:fb:dd:58:88:3b:81:6c:5c:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 24 10:19:43 2025 GMT Not After : Jun 22 10:19:43 2025 GMT Subject: CN=ff685209-2af0-4ef5-84fb-8e87e6ae1139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:99:84:45:7e:60:99:59:71:de:fd:98:3f:3c: 02:9d:93:57:bf:15:3f:27:f3:33:23:cf:6a:63:f3: ea:d3:c2:01:02:39:08:29:18:5a:09:3d:5b:3a:ea: 1c:8f:4f:7c:3b:f4:d3:38:e9:f1:87:f6:e4:f2:41: 1c:1a:7c:e9:11:6f:70:8f:e2:f0:f2:5c:0c:d7:0c: 78:95:6f:13:54:cf:06:84:ec:eb:bb:03:49:ca:fe: 61:27:53:70:53:0a:55:50:31:bc:c2:2b:3f:1f:59: 3c:99:15:3e:83:54:37:97:b4:2d:27:c0:90:96:fb: 1e:e9:f7:7b:99:bf:65:a2:98:90:b7:74:31:1a:c0: b9:e4:a9:32:9a:e4:40:b0:50:b1:1c:89:48:53:31: 8a:34:75:25:bf:9d:46:d6:1f:6c:84:a8:a0:27:36: 7c:73:bb:4f:61:76:9a:8a:f2:c2:10:7f:d1:92:62: 3b:52:4a:31:ca:57:aa:b3:d3:8e:bf:db:70:7c:9a: 00:94:3c:6e:0c:59:b7:21:df:f6:02:46:79:c9:7e: 48:e4:8a:2f:92:7f:67:c5:a1:5d:7f:b2:8f:73:2e: 7c:37:33:ae:f4:e5:6b:8d:24:cf:35:b0:00:64:7d: 5d:58:34:2e:a0:0e:9a:5e:93:48:30:84:b3:87:59: c8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:18:B6:7D:38:5D:66:2A:8C:3A:A6:74:F1:44:9B:BC:90:A9:F3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75c6d981-1694-3de6-a9d8-2d7d89b602f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.167.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c2:df:4e:cf:85:dc:87:3c:de:08:bf:db:a1:73:ba:05:24: b7:ef:0e:a6:f8:b3:6a:8d:26:7a:b4:eb:7e:c0:27:59:27:25: 26:67:5e:3f:86:3d:9c:07:b1:be:72:61:6d:ed:b6:ce:c7:65: 75:32:d6:4f:f7:e8:e6:f9:9b:ef:6f:f0:c5:3a:f1:6c:7a:e5: bd:4a:75:ac:19:a7:36:28:26:5b:0c:6a:8f:df:18:08:39:06: 90:b1:a4:0e:b9:df:65:5f:39:a3:6b:3e:85:f3:a8:03:d6:81: 84:16:8a:5e:a8:a8:cb:19:4c:71:cd:df:ba:69:09:bb:20:b4: 3d:e5:b7:ad:39:ff:95:e1:d5:f3:16:b4:e7:8d:84:af:d1:09: d2:ad:24:e0:67:2a:76:dc:77:f0:ca:c3:f2:18:34:91:e9:c8: 5e:13:14:55:3d:20:45:54:16:02:55:0c:a3:79:bb:bf:94:47: 61:98:c6:05:04:02:d9:ed:5e:26:25:56:6d:6f:6c:ca:b5:31: d8:c5:c8:f8:7d:42:33:42:4e:64:bb:4b:d5:b4:9c:31:2e:8c: ef:27:d5:05:fa:55:b8:46:64:1b:b8:3d:2f:05:14:09:24:ed: bf:4f:06:1a:76:7b:72:b0:e8:ec:78:c7:4c:e1:cd:34:f8:5e: 4f:12:eb:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLE/vdWIg7gWxcUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMyNDEwMTk0M1oXDTI1MDYyMjEwMTk0M1owLzEtMCsGA1UEAxMk ZmY2ODUyMDktMmFmMC00ZWY1LTg0ZmItOGU4N2U2YWUxMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45mERX5gmVlx3v2YPzwCnZNXvxU/J/MzI89q Y/Pq08IBAjkIKRhaCT1bOuocj098O/TTOOnxh/bk8kEcGnzpEW9wj+Lw8lwM1wx4 lW8TVM8GhOzruwNJyv5hJ1NwUwpVUDG8wis/H1k8mRU+g1Q3l7QtJ8CQlvse6fd7 mb9lopiQt3QxGsC55KkymuRAsFCxHIlIUzGKNHUlv51G1h9shKigJzZ8c7tPYXaa ivLCEH/RkmI7Ukoxyleqs9OOv9twfJoAlDxuDFm3Id/2AkZ5yX5I5Iovkn9nxaFd f7KPcy58NzOu9OVrjSTPNbAAZH1dWDQuoA6aXpNIMISzh1nIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEYtn04XWYqjDqmdPFEm7yQqfOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzVjNmQ5ODEtMTY5NC0z ZGU2LWE5ZDgtMmQ3ZDg5YjYwMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqchMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPC307PhdyHPN4Iv9uhc7oFJLfvDqb4s2qNJnq0637AJ1knJSZnXj+G PZwHsb5yYW3tts7HZXUy1k/36Ob5m+9v8MU68Wx65b1KdawZpzYoJlsMao/fGAg5 BpCxpA6532VfOaNrPoXzqAPWgYQWil6oqMsZTHHN37ppCbsgtD3lt605/5Xh1fMW tOeNhK/RCdKtJOBnKnbcd/DKw/IYNJHpyF4TFFU9IEVUFgJVDKN5u7+UR2GYxgUE AtntXiYlVm1vbMq1MdjFyPh9QjNCTmS7S9W0nDEujO8n1QX6VbhGZBu4PS8FFAkk 7b9PBhp2e3Kw6Ox4x0zhzTT4Xk8S67I= -----END CERTIFICATE-----Generated at Sun Apr 6 17:54:09 2025 by rpki-client