$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa File: 9517be29-9871-3935-8ef2-27c36f9c427b.roa (raw, json) Hash identifier: SqG4Qh2+3Z2n+hgA/G9IeAJzh+jwHznsRSRXjJyhtoA= Subject key identifier: 67:BF:33:CD:90:34:DE:19:B0:7B:89:2F:99:A2:1F:95:E4:7A:21:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848C150E533C8F5BDDF5D5AF680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa Signing time: Mon 03 Feb 2025 02:00:39 +0000 ROA not before: Mon 03 Feb 2025 02:00:39 +0000 ROA not after: Sun 04 May 2025 01:00:39 +0000 asID: 22773 IP address blocks: 70.168.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c1:50:e5:33:c8:f5:bd:df:5d:5a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 02:00:39 2025 GMT Not After : May 4 01:00:39 2025 GMT Subject: CN=e9154d82-c923-40fa-b42e-61bb7070da9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:30:3f:72:04:a6:c3:aa:ad:73:c5:98:f7: 57:6b:75:28:02:8b:1f:14:ad:16:cb:4e:0a:8e:ee: 39:dd:6f:d6:0b:93:62:1c:85:04:0f:de:af:10:93: 78:7c:5a:f0:6d:6c:5e:f5:a6:2e:54:92:be:1f:bf: 5c:f6:1f:ee:5d:ac:43:65:d3:1f:c4:6f:78:96:1f: 06:b7:6b:20:8e:7c:1e:88:dc:57:43:70:e5:18:58: 94:ad:e7:f6:75:a9:b5:79:e6:78:6e:8b:38:99:c3: b5:8b:d4:13:33:f1:c4:8e:9d:6d:d8:de:dd:21:58: 2f:50:7d:ab:97:d5:f4:cd:72:1f:86:bc:fc:87:4b: 4f:7e:6a:ee:0e:30:0b:fd:45:14:51:9e:71:7e:dc: 5b:3e:b4:1f:42:d5:ab:07:3d:22:c6:bf:6a:2b:5a: f2:1e:50:9b:4e:0c:c6:e9:b8:85:9c:84:d8:0d:e9: c6:ff:41:9f:70:e1:bf:51:92:dd:80:9a:f1:50:31: ef:f4:8b:f5:9c:b6:5e:c5:de:2a:78:43:c1:b0:07: 2c:a0:5d:38:e4:11:fc:9a:30:bd:e9:34:47:4e:fb: 27:39:95:97:72:ef:86:75:67:40:de:4b:97:69:aa: a8:ee:eb:5f:84:71:b3:62:c0:fb:25:3e:b8:82:46: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:33:CD:90:34:DE:19:B0:7B:89:2F:99:A2:1F:95:E4:7A:21:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:8c:2e:f9:77:b1:d4:09:ca:99:a4:cd:b4:2b:3e:f3:6e:c2: 93:db:93:79:29:75:2c:81:9b:6a:53:bf:02:d6:68:99:fa:22: e7:a6:f2:0b:91:da:e4:a5:2f:3d:68:d2:7a:f3:b1:e7:34:c8: ed:7c:0a:21:ec:94:95:2c:2c:da:f0:20:ba:97:22:7a:7e:f4: 81:7b:4e:f2:bf:09:a7:1b:e3:8b:e1:69:cd:0a:c2:9f:c2:f5: 47:8f:c2:c4:c2:14:3d:23:5e:cb:69:64:a3:2a:8e:8f:54:b5: 7c:0b:72:10:2b:5a:ca:5e:35:58:45:b8:9f:ed:a2:11:03:69: 6f:73:67:8e:56:58:4f:8e:5a:c7:ef:4c:78:45:bd:ed:53:d1: 99:96:a1:ea:72:c6:be:5c:89:4f:a8:00:fa:0e:0a:ef:1c:f7: 81:ba:8a:c8:0d:f8:37:fb:42:ae:20:b8:21:41:35:a3:c7:bc: f2:e6:e9:6e:0e:2d:c8:57:75:25:9f:f2:9b:70:aa:5d:7d:8a: 78:b2:0f:2e:48:d7:09:e5:9a:27:70:3e:27:0e:33:f8:7e:e4: 9b:89:fc:41:7e:b7:5a:50:71:98:5d:b3:07:54:43:f7:f7:04: 6e:c5:72:77:e8:71:ae:95:a0:e9:5c:e2:f3:66:61:7f:c2:19: 44:c7:cf:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUOUzyPW9311a9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTkxNTRkODItYzkyMy00MGZhLWI0MmUtNjFiYjcwNzBkYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss4wP3IEpsOqrXPFmPdXa3UoAosfFK0Wy04K ju453W/WC5NiHIUED96vEJN4fFrwbWxe9aYuVJK+H79c9h/uXaxDZdMfxG94lh8G t2sgjnweiNxXQ3DlGFiUref2dam1eeZ4bos4mcO1i9QTM/HEjp1t2N7dIVgvUH2r l9X0zXIfhrz8h0tPfmruDjAL/UUUUZ5xftxbPrQfQtWrBz0ixr9qK1ryHlCbTgzG 6biFnITYDenG/0GfcOG/UZLdgJrxUDHv9Iv1nLZexd4qeEPBsAcsoF045BH8mjC9 6TRHTvsnOZWXcu+GdWdA3kuXaaqo7utfhHGzYsD7JT64gkYHzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe/M82QNN4ZsHuJL5miH5XkeiEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUxN2JlMjktOTg3MS0z OTM1LThlZjItMjdjMzZmOWM0MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKMLvl3sdQJypmkzbQrPvNuwpPbk3kpdSyBm2pTvwLWaJn6Iuem8guR 2uSlLz1o0nrzsec0yO18CiHslJUsLNrwILqXInp+9IF7TvK/Cacb44vhac0Kwp/C 9UePwsTCFD0jXstpZKMqjo9UtXwLchArWspeNVhFuJ/tohEDaW9zZ45WWE+OWsfv THhFve1T0ZmWoepyxr5ciU+oAPoOCu8c94G6isgN+Df7Qq4guCFBNaPHvPLm6W4O LchXdSWf8ptwql19iniyDy5I1wnlmidwPicOM/h+5JuJ/EF+t1pQcZhdswdUQ/f3 BG7Fcnfoca6VoOlc4vNmYX/CGUTHz6Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:09 2025 by rpki-client