$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa File: 9517be29-9871-3935-8ef2-27c36f9c427b.roa (raw, json) Hash identifier: YoVUVj4qhc+bMMEGLGoNqf5oS7HL+HfB91Nsi2MCeXY= Subject key identifier: 22:7F:94:80:AD:71:B8:AF:C8:65:58:1C:8F:E4:1E:C4:C3:DD:5F:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849A089E74C54A26450719791E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa Signing time: Thu 24 Apr 2025 01:00:47 +0000 ROA not before: Thu 24 Apr 2025 01:00:47 +0000 ROA not after: Wed 23 Jul 2025 01:00:47 +0000 asID: 22773 IP address blocks: 70.168.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:89:e7:4c:54:a2:64:50:71:97:91:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 24 01:00:47 2025 GMT Not After : Jul 23 01:00:47 2025 GMT Subject: CN=87c4324a-6899-41ad-bca6-bc32070ca31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:2e:ef:b3:51:4b:15:1d:d6:2e:d8:0e:15: e1:bc:95:6b:16:d9:ce:04:66:6a:93:10:76:ea:e3: b5:1c:85:d2:3e:6b:68:a4:d9:77:47:63:08:78:2f: 23:54:20:52:11:13:9e:65:58:7d:0d:a8:48:11:ae: 9f:3c:a3:ad:22:90:04:0e:e7:b5:28:71:a7:33:62: 0e:dd:cf:98:2c:01:2b:c9:bc:43:e3:a8:bb:37:2c: c6:25:f4:3b:7e:95:f8:9a:b6:cb:df:ae:39:34:3b: 54:c2:11:31:4b:e4:7a:df:4a:54:fb:68:5c:89:23: 1b:97:35:58:c8:ee:88:77:84:70:1f:1a:c3:a5:55: d0:e2:df:0c:b9:2e:86:df:b8:24:a0:a4:a9:2a:d1: 8d:86:f4:99:b5:73:d5:b1:02:92:27:4d:95:70:f3: c0:11:e3:9b:b9:a8:d9:90:81:6c:db:76:b0:87:f3: 15:2a:82:3c:3b:2c:26:56:e3:47:c4:32:63:6c:db: 8e:f5:c7:9a:bf:04:f4:02:04:65:f1:aa:b7:c4:f3: 46:bd:4d:31:17:89:3b:26:30:8e:f1:47:87:a6:e0: da:1d:e9:11:a5:db:db:ad:31:a0:85:b3:eb:d8:17: 3c:f5:90:28:30:ba:50:a7:4b:1e:a4:a5:19:e0:5c: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7F:94:80:AD:71:B8:AF:C8:65:58:1C:8F:E4:1E:C4:C3:DD:5F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9517be29-9871-3935-8ef2-27c36f9c427b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c8:1c:83:30:71:03:86:08:a0:3e:36:00:e5:e5:31:a9:73: 67:34:c2:92:2c:88:bc:80:b9:ef:89:55:31:df:82:15:25:53: 8e:dd:73:09:3f:40:bb:b9:86:28:a6:d2:58:ec:ce:03:ee:bd: ed:b5:e8:8f:a5:d0:b9:e4:27:13:b4:32:a0:03:ea:4b:b9:74: ba:e0:37:fb:f0:57:6b:5d:21:84:01:e6:94:d9:36:7a:16:ac: 90:26:7d:37:dc:07:70:56:a5:28:b8:9d:19:cf:1f:6a:43:91: 81:dc:0b:c5:7e:7b:da:56:27:d7:4c:cf:f9:95:c2:cf:24:f0: fe:a2:00:72:42:3c:d0:a8:6b:f8:28:a1:72:8d:3a:40:88:13: 26:91:99:42:40:c1:a0:1d:7e:61:8d:db:a1:5e:41:eb:2c:d0: 49:d8:e7:50:d2:e7:65:30:3d:c1:4e:d1:94:d8:ce:96:6c:8f: 0e:a0:29:2b:94:f3:91:38:0e:be:ca:c1:97:ea:b0:92:31:b7: 12:f1:1d:67:2a:67:cb:f5:fe:8a:3c:04:1d:da:8b:d9:1e:25: 99:86:25:a9:3d:f1:ca:7c:14:00:eb:bd:e1:6f:a3:51:62:6c: 79:59:02:61:aa:02:33:6a:9e:0b:ce:b6:c7:02:67:6e:58:ba: 7c:7a:6e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgiedMVKJkUHGXkeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk ODdjNDMyNGEtNjg5OS00MWFkLWJjYTYtYmMzMjA3MGNhMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF4u77NRSxUd1i7YDhXhvJVrFtnOBGZqkxB2 6uO1HIXSPmtopNl3R2MIeC8jVCBSEROeZVh9DahIEa6fPKOtIpAEDue1KHGnM2IO 3c+YLAErybxD46i7NyzGJfQ7fpX4mrbL3645NDtUwhExS+R630pU+2hciSMblzVY yO6Id4RwHxrDpVXQ4t8MuS6G37gkoKSpKtGNhvSZtXPVsQKSJ02VcPPAEeObuajZ kIFs23awh/MVKoI8OywmVuNHxDJjbNuO9ceavwT0AgRl8aq3xPNGvU0xF4k7JjCO 8UeHpuDaHekRpdvbrTGghbPr2Bc89ZAoMLpQp0sepKUZ4FwxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ/lICtcbivyGVYHI/kHsTD3V8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUxN2JlMjktOTg3MS0z OTM1LThlZjItMjdjMzZmOWM0MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3IHIMwcQOGCKA+NgDl5TGpc2c0wpIsiLyAue+JVTHfghUlU47dcwk/ QLu5hiim0ljszgPuve216I+l0LnkJxO0MqAD6ku5dLrgN/vwV2tdIYQB5pTZNnoW rJAmfTfcB3BWpSi4nRnPH2pDkYHcC8V+e9pWJ9dMz/mVws8k8P6iAHJCPNCoa/go oXKNOkCIEyaRmUJAwaAdfmGN26FeQess0EnY51DS52UwPcFO0ZTYzpZsjw6gKSuU 85E4Dr7KwZfqsJIxtxLxHWcqZ8v1/oo8BB3ai9keJZmGJak98cp8FADrveFvo1Fi bHlZAmGqAjNqngvOtscCZ25Yunx6bg8= -----END CERTIFICATE-----Generated at Fri May 9 21:51:03 2025 by rpki-client