$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa File: c56d0796-16f6-3c81-8124-23de10699cb6.roa (raw, json) Hash identifier: AX5K8naA4iLhDg2uKF1UH9dJjDMqow0+ibTCgaCtUVs= Subject key identifier: AF:7D:05:3E:8C:12:A8:AD:FF:4C:44:2B:8C:D7:0C:89:71:80:33:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584917DC3ADED18CFE02D7F27240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 22773 IP address blocks: 70.168.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:3a:de:d1:8c:fe:02:d7:f2:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f705b076-7332-4834-854d-7ae7218672e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:17:06:2b:97:00:ea:92:ae:d1:f4:5e:51: ca:b7:9e:1b:43:67:02:15:97:ab:33:32:00:bc:4c: 21:dd:3c:cc:4a:0c:5b:fb:ad:37:70:93:29:14:db: 7e:8e:51:b8:8c:62:81:bb:43:28:5f:8a:69:5c:be: 4e:53:7b:54:f2:66:fe:1f:26:51:80:7c:70:ba:6d: 20:58:a8:77:3c:24:56:99:10:29:00:dc:f0:c2:09: b7:bd:d3:61:77:44:c0:a2:e1:f2:de:37:30:71:dc: 15:08:b8:8b:28:b0:2d:d4:91:f4:e2:50:9a:3c:47: 85:ff:4b:11:bd:8d:b2:b4:b4:d8:75:f4:d2:79:47: e6:4b:88:d3:5e:1c:3e:ec:0f:b8:26:88:92:8f:b4: 9e:bd:b0:41:c3:cd:e3:c5:df:7e:9d:91:82:1b:42: db:3f:d8:a1:f1:b0:f8:73:95:56:bf:a0:8e:b6:95: db:86:de:3b:a5:dc:98:28:f6:dd:6a:f6:11:0b:0c: 5d:29:c8:6f:b6:e2:39:b9:b3:aa:c3:a0:e4:50:4b: e9:56:61:19:24:e8:c1:5f:72:de:e6:b7:a6:8e:0b: 5b:3b:15:87:2d:da:ed:41:f8:38:46:6b:a7:07:3a: 26:fa:56:c4:70:47:9c:ef:cd:21:56:b7:c1:a7:bb: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7D:05:3E:8C:12:A8:AD:FF:4C:44:2B:8C:D7:0C:89:71:80:33:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c56d0796-16f6-3c81-8124-23de10699cb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.168.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bb:9b:36:65:de:60:e0:6a:71:d6:cd:ab:a2:39:3a:e9:57: 06:c0:f5:92:3f:f6:af:ec:2d:a0:9b:8a:d2:48:a4:7d:44:61: a8:45:ab:9f:bb:0a:97:0e:0a:9f:e7:a2:89:53:a8:ee:37:87: 6e:6c:5a:b9:d6:7d:62:f3:80:3a:75:8a:0e:56:c0:70:93:d1: 3a:07:6f:71:b4:b3:61:b4:fc:01:f9:cc:0b:25:4d:f5:6a:cd: c3:2f:32:bf:b6:07:af:1c:95:60:0e:15:c9:89:26:87:61:f9: ae:18:c3:8e:92:4e:91:20:43:66:48:0c:80:84:77:29:90:22: f9:d7:37:79:9f:ab:4c:b4:ca:6e:87:32:19:7d:85:af:d4:ac: a2:22:fc:1a:e8:d5:78:f5:f1:fd:ba:02:5b:1e:44:5d:5d:fc: 12:7e:fd:8b:41:84:25:10:98:bf:ea:af:7f:c6:3b:fe:7e:65: da:aa:f7:34:92:e5:ac:1d:c3:0f:d6:96:17:c3:a4:de:96:0a: 22:f4:48:44:2c:7a:70:0e:88:85:12:a3:11:e4:2b:0d:bf:f7: dd:85:b5:b9:e2:dc:4f:8b:e3:6a:19:87:d9:10:c5:07:1e:0d: 4c:88:15:c9:f7:e0:59:bf:d1:24:68:94:98:b8:e3:29:6c:1b: ff:e1:e4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Dre0Yz+AtfyckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjcwNWIwNzYtNzMzMi00ODM0LTg1NGQtN2FlNzIxODY3MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7cXBiuXAOqSrtH0XlHKt54bQ2cCFZerMzIA vEwh3TzMSgxb+603cJMpFNt+jlG4jGKBu0MoX4ppXL5OU3tU8mb+HyZRgHxwum0g WKh3PCRWmRApANzwwgm3vdNhd0TAouHy3jcwcdwVCLiLKLAt1JH04lCaPEeF/0sR vY2ytLTYdfTSeUfmS4jTXhw+7A+4JoiSj7SevbBBw83jxd9+nZGCG0LbP9ih8bD4 c5VWv6COtpXbht47pdyYKPbdavYRCwxdKchvtuI5ubOqw6DkUEvpVmEZJOjBX3Le 5remjgtbOxWHLdrtQfg4RmunBzom+lbEcEec780hVrfBp7tOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK99BT6MEqit/0xEK4zXDIlxgDOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzU2ZDA3OTYtMTZmNi0z YzgxLTgxMjQtMjNkZTEwNjk5Y2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC27mzZl3mDganHWzauiOTrpVwbA9ZI/9q/sLaCbitJIpH1EYahFq5+7 CpcOCp/noolTqO43h25sWrnWfWLzgDp1ig5WwHCT0ToHb3G0s2G0/AH5zAslTfVq zcMvMr+2B68clWAOFcmJJodh+a4Yw46STpEgQ2ZIDICEdymQIvnXN3mfq0y0ym6H Mhl9ha/UrKIi/Bro1Xj18f26AlseRF1d/BJ+/YtBhCUQmL/qr3/GO/5+Zdqq9zSS 5awdww/WlhfDpN6WCiL0SEQsenAOiIUSoxHkKw2/992Ftbni3E+L42oZh9kQxQce DUyIFcn34Fm/0SRolJi44ylsG//h5Cg= -----END CERTIFICATE-----Generated at Sun Apr 6 16:05:01 2025 by rpki-client