$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16a7ce0-f386-3b0c-a373-8eadf33e4685.roa File: b16a7ce0-f386-3b0c-a373-8eadf33e4685.roa (raw, json) Hash identifier: PwDxX9VEOSx1R+qhQazq6VbgNeIwgg6FdrmrFGatlu8= Subject key identifier: 66:41:B2:9C:33:50:21:BF:FC:29:CD:EF:08:50:98:AE:86:F9:71:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848960B6059AC37D3C587366E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16a7ce0-f386-3b0c-a373-8eadf33e4685.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 63182 IP address blocks: 70.184.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:60:59:ac:37:d3:c5:87:36:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=c9ede1a7-45db-473c-adf6-8768174edec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:6c:01:23:07:17:d3:5f:51:16:57:c0:76: 27:8a:20:7e:9b:42:a7:d2:b0:5d:dc:f0:e8:8f:9a: dd:13:58:a9:a9:66:36:25:9a:71:93:3a:92:28:f5: 95:43:97:e2:b0:0b:01:34:81:91:4f:08:df:b7:d9: 6f:db:ac:75:78:e1:4a:af:5f:2b:34:bf:f8:65:e0: c9:25:3a:eb:c4:e7:71:e2:53:03:53:18:b8:62:3d: a0:46:53:23:c1:c3:7c:34:b4:60:f9:d5:90:fa:e7: cd:1b:41:9d:7d:d8:f8:02:22:15:38:b6:3e:64:58: 5e:54:c6:9a:b1:92:6d:12:be:fd:67:71:48:c9:74: a6:9c:4d:bb:b0:45:e1:2f:2e:ef:1e:6c:1a:45:ba: 60:d1:7f:f9:a5:44:82:c8:92:88:72:9f:4b:c1:49: 09:2e:2b:34:f1:ba:92:07:c4:9f:1b:9e:ff:a2:24: 19:59:f9:06:31:ac:e3:f5:57:70:7a:c9:e5:c2:fa: 19:ca:be:88:ea:25:4e:3a:a2:b3:20:9b:27:01:fc: b7:7a:3d:b7:00:ff:4b:f2:aa:21:87:e3:1d:6b:3c: 1f:40:ff:a9:49:08:ab:87:35:bb:f4:b6:8e:ea:0c: 1d:34:66:07:41:50:cb:0c:af:dc:51:bf:49:c9:fe: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:B2:9C:33:50:21:BF:FC:29:CD:EF:08:50:98:AE:86:F9:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16a7ce0-f386-3b0c-a373-8eadf33e4685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.184.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:65:87:49:b6:35:d4:d7:4c:1b:c5:da:53:5b:51:62:f1:07: 44:1d:db:bc:ce:1a:f7:63:81:e8:c5:f6:24:44:1c:35:ea:a7: 32:77:e7:40:d2:75:26:ee:e9:9a:cb:bd:1d:6f:68:44:cd:48: 5b:6b:cf:20:81:db:16:00:c8:17:b9:d0:d0:8b:60:bf:dc:bd: 66:77:8f:13:4e:55:e4:83:42:db:11:30:ed:cf:7a:ed:72:c8: 15:2f:6f:ac:24:e5:aa:c6:c0:f9:0d:dd:aa:5e:7f:d0:81:2e: d4:1a:8a:c5:a1:04:df:ee:d6:51:aa:db:db:37:34:86:28:ae: 25:4c:8d:af:75:90:60:5e:49:a2:2d:ea:6d:25:c1:81:61:6c: f3:3b:8e:8f:8e:89:e3:c7:ad:84:1e:a8:d9:80:a5:5f:01:5c: 3f:86:5a:31:6a:2f:08:8c:28:bb:47:03:0d:bd:9a:81:97:55: 4b:d5:b7:d3:ce:ec:0c:f5:84:56:63:0e:68:32:8d:c2:7e:23: 65:86:d0:44:02:7d:06:39:83:01:fa:7d:70:03:a6:f6:e2:45: dd:3d:a6:98:bf:03:88:90:fb:fb:fa:b9:66:50:ec:11:ee:5d: a8:88:73:4d:da:28:ba:45:9b:69:da:07:1e:c6:cf:82:93:fa: 5c:0f:4b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiWC2BZrDfTxYc2boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk YzllZGUxYTctNDVkYi00NzNjLWFkZjYtODc2ODE3NGVkZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg89sASMHF9NfURZXwHYniiB+m0Kn0rBd3PDo j5rdE1ipqWY2JZpxkzqSKPWVQ5fisAsBNIGRTwjft9lv26x1eOFKr18rNL/4ZeDJ JTrrxOdx4lMDUxi4Yj2gRlMjwcN8NLRg+dWQ+ufNG0Gdfdj4AiIVOLY+ZFheVMaa sZJtEr79Z3FIyXSmnE27sEXhLy7vHmwaRbpg0X/5pUSCyJKIcp9LwUkJLis08bqS B8SfG57/oiQZWfkGMazj9VdwesnlwvoZyr6I6iVOOqKzIJsnAfy3ej23AP9L8qoh h+MdazwfQP+pSQirhzW79LaO6gwdNGYHQVDLDK/cUb9Jyf7IowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZBspwzUCG//CnN7whQmK6G+XEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjE2YTdjZTAtZjM4Ni0z YjBjLWEzNzMtOGVhZGYzM2U0Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrjJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1lh0m2NdTXTBvF2lNbUWLxB0Qd27zOGvdjgejF9iREHDXqpzJ350DS dSbu6ZrLvR1vaETNSFtrzyCB2xYAyBe50NCLYL/cvWZ3jxNOVeSDQtsRMO3Peu1y yBUvb6wk5arGwPkN3apef9CBLtQaisWhBN/u1lGq29s3NIYoriVMja91kGBeSaIt 6m0lwYFhbPM7jo+OiePHrYQeqNmApV8BXD+GWjFqLwiMKLtHAw29moGXVUvVt9PO 7Az1hFZjDmgyjcJ+I2WG0EQCfQY5gwH6fXADpvbiRd09ppi/A4iQ+/v6uWZQ7BHu XaiIc03aKLpFm2naBx7Gz4KT+lwPS/k= -----END CERTIFICATE-----Generated at Sun Apr 6 15:56:11 2025 by rpki-client