$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa File: e696ed8b-7967-3936-9e45-2a4c196cd69d.roa (raw, json) Hash identifier: tBl9zbcoOqW/yavEHgO0H8aCD3usud0rUqvbjRAHEpA= Subject key identifier: D2:AC:B4:C7:5D:6E:DF:3B:6D:7E:5D:30:CF:9B:F6:92:46:52:44:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285848E16BF30462C4FE8CA12FA300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 19905 IP address blocks: 70.165.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:f3:04:62:c4:fe:8c:a1:2f:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=e793c16e-d719-442a-bebc-6ea40876fd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:4e:e0:39:35:7c:ff:d7:7d:99:e2:5f:31: 00:45:20:92:ba:d0:9c:6f:8e:f8:f5:c7:64:3d:ce: f9:b2:09:6b:62:39:c4:7a:ed:8e:09:6f:40:1b:e7: 44:30:9e:33:8e:1e:42:df:9a:0d:27:dd:cd:e9:d4: c0:dc:f8:bc:59:99:2a:cb:a8:8e:c4:4f:8a:f7:ef: 10:89:6b:dd:aa:07:08:03:54:43:ea:56:17:1f:c1: 4d:bd:26:40:9c:c9:3e:f1:c5:93:47:63:e9:9f:e7: 59:a1:01:d1:9b:d5:3c:7f:03:56:be:56:26:3d:31: 5d:95:48:e5:e7:45:f1:c5:c9:7a:e0:e7:ec:54:bf: b2:a7:3b:ea:7f:b6:df:2a:48:e3:59:3c:30:0f:84: 81:ff:60:98:89:ab:5b:ee:52:68:8a:5c:a6:2a:cc: 20:23:a2:15:de:65:09:71:a3:d8:60:11:01:99:2f: 9f:a3:2d:ae:04:d3:b4:85:e0:a3:2e:3b:92:49:fd: d9:50:e5:c9:d1:6c:9a:b1:99:a0:54:57:ff:e6:a8: af:39:5b:ac:a1:de:f1:92:79:37:f8:cb:ba:61:23: e0:89:5c:bf:fd:99:b9:fe:f2:3c:c0:c1:8a:af:f5: 80:48:ee:f8:60:46:72:40:d2:01:23:cd:64:93:b0: 9b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AC:B4:C7:5D:6E:DF:3B:6D:7E:5D:30:CF:9B:F6:92:46:52:44:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e696ed8b-7967-3936-9e45-2a4c196cd69d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:80:1e:02:59:e4:a1:77:41:4b:70:d3:a7:e5:70:51:61:c8: 9a:d8:92:c4:39:78:05:94:13:b9:2c:a6:22:ad:7a:87:71:3f: e6:dc:6f:f2:45:f2:c0:e4:d0:3a:4e:43:b3:81:91:98:a4:21: d0:83:94:50:74:cc:98:55:93:2b:bb:bb:4e:c6:a5:fd:7d:e6: 13:f9:b0:72:fd:45:a6:98:89:a6:87:84:99:a4:14:cf:4f:ce: da:0a:d5:01:59:f9:35:90:14:b9:d3:dc:47:83:9a:b2:3b:f9: 56:23:8e:71:35:f8:01:76:d3:d0:6b:0d:81:85:0d:a3:ce:1d: b7:2f:b7:0d:1d:00:1f:4d:f0:09:5a:50:ff:e8:c8:1f:13:66: 51:7c:4a:16:31:4b:44:a2:29:90:d6:16:84:14:87:56:1f:6d: a2:18:b0:5c:1c:18:a8:80:e2:e5:70:9f:ca:95:3c:78:fe:f3: 4e:88:61:60:e2:bc:f1:e4:42:5c:20:87:7b:e6:42:d8:6f:24: bf:d7:2f:6a:a8:5f:22:28:2b:3f:6e:5b:5d:00:67:bf:a8:87: 9d:b0:50:f3:6a:e4:0d:9b:e2:b9:77:8b:f9:a5:7d:f6:b4:9a: 00:0a:d3:d6:5d:c5:f1:7f:85:3c:56:40:9c:c3:35:10:7d:35: 52:aa:61:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha/MEYsT+jKEvowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTc5M2MxNmUtZDcxOS00NDJhLWJlYmMtNmVhNDA4NzZmZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy21O4Dk1fP/XfZniXzEARSCSutCcb4749cdk Pc75sglrYjnEeu2OCW9AG+dEMJ4zjh5C35oNJ93N6dTA3Pi8WZkqy6iOxE+K9+8Q iWvdqgcIA1RD6lYXH8FNvSZAnMk+8cWTR2Ppn+dZoQHRm9U8fwNWvlYmPTFdlUjl 50Xxxcl64OfsVL+ypzvqf7bfKkjjWTwwD4SB/2CYiatb7lJoilymKswgI6IV3mUJ caPYYBEBmS+foy2uBNO0heCjLjuSSf3ZUOXJ0WyasZmgVFf/5qivOVusod7xknk3 +Mu6YSPgiVy//Zm5/vI8wMGKr/WASO74YEZyQNIBI81kk7CbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKstMddbt87bX5dMM+b9pJGUkQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTY5NmVkOGItNzk2Ny0z OTM2LTllNDUtMmE0YzE5NmNkNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqXRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWAHgJZ5KF3QUtw06flcFFhyJrYksQ5eAWUE7kspiKteodxP+bcb/JF 8sDk0DpOQ7OBkZikIdCDlFB0zJhVkyu7u07Gpf195hP5sHL9RaaYiaaHhJmkFM9P ztoK1QFZ+TWQFLnT3EeDmrI7+VYjjnE1+AF209BrDYGFDaPOHbcvtw0dAB9N8Ala UP/oyB8TZlF8ShYxS0SiKZDWFoQUh1YfbaIYsFwcGKiA4uVwn8qVPHj+806IYWDi vPHkQlwgh3vmQthvJL/XL2qoXyIoKz9uW10AZ7+oh52wUPNq5A2b4rl3i/mlffa0 mgAK09ZdxfF/hTxWQJzDNRB9NVKqYRM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:59 2025 by rpki-client