$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8458489-3730-36b3-a5a7-25fc96b5fdd7.roa File: f8458489-3730-36b3-a5a7-25fc96b5fdd7.roa (raw, json) Hash identifier: fwEqz7pL75b65Y4lWTeR5A8A8AJ8RvOoGOiDjtz88Bg= Subject key identifier: 9F:FD:22:C5:2B:5D:70:A3:0A:02:9D:F5:90:16:60:BF:01:DD:92:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849198FB13F482194A1556F2E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8458489-3730-36b3-a5a7-25fc96b5fdd7.roa Signing time: Thu 06 Mar 2025 16:38:33 +0000 ROA not before: Thu 06 Mar 2025 16:38:33 +0000 ROA not after: Wed 04 Jun 2025 15:38:33 +0000 asID: 22773 IP address blocks: 70.174.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:8f:b1:3f:48:21:94:a1:55:6f:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 6 16:38:33 2025 GMT Not After : Jun 4 15:38:33 2025 GMT Subject: CN=86e0a724-1037-4a65-88fa-cf10f98c3796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:a7:db:4a:c1:e9:77:ca:cd:7c:d3:6b:f4: 56:98:22:76:a6:72:bc:93:93:cc:5c:52:b0:50:db: 05:1c:bd:df:4e:19:c5:c7:91:39:9b:bc:cc:32:bb: 74:02:b0:9e:da:67:96:cc:f8:56:1c:91:a9:1f:20: 82:7c:5a:46:04:c5:6b:9a:df:16:f5:3c:1e:78:61: 84:bb:49:d1:5b:43:01:b2:b4:18:c8:ea:c3:95:2b: 74:9f:11:72:47:c2:ce:ac:23:25:d2:f8:be:3f:56: 2f:c9:4b:a9:8f:fd:0a:41:29:a0:57:e4:e6:e9:44: 16:07:49:ed:f9:91:df:6f:fa:5c:f8:28:c9:0b:e7: 5f:b6:49:d9:46:0c:6d:a7:e7:27:5a:5e:d5:6c:ee: 5e:8f:c7:e1:70:66:28:36:63:4e:ee:bb:81:43:d7: dc:04:e6:bb:e1:ba:65:51:82:cb:ea:61:77:8d:27: db:cf:60:e8:d4:01:73:71:ba:74:3a:64:7e:0a:99: d8:a0:66:8d:e4:9f:68:10:87:2c:72:a1:3c:ca:eb: e6:cc:4b:c2:8b:84:13:9d:8f:f6:bd:0a:0a:bc:51: f5:2e:ad:17:1a:e5:ec:a1:52:40:58:49:a2:7f:bd: df:8f:a7:a9:f5:f2:99:0f:ea:59:13:60:9d:6d:ab: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FD:22:C5:2B:5D:70:A3:0A:02:9D:F5:90:16:60:BF:01:DD:92:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f8458489-3730-36b3-a5a7-25fc96b5fdd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1a:7c:12:73:7d:dd:74:1f:99:01:0b:8a:af:c4:3e:cc:7c: 3b:35:6e:71:ba:e3:74:71:04:ca:11:27:ef:80:94:2a:54:e4: 5e:37:80:f3:78:49:aa:40:85:f5:94:f2:97:14:d3:e9:31:dd: 48:21:67:b6:59:eb:21:bd:02:b2:f1:6c:05:ba:78:e5:80:2f: 0f:36:ea:02:98:1a:b5:24:88:4e:e1:9a:7a:8b:44:a0:d1:51: ea:dc:35:26:a7:23:80:a0:82:61:18:c5:c6:d2:7c:e4:3a:4b: 19:ef:b5:45:42:27:51:1b:ed:bf:ba:b6:c1:4e:3c:36:94:a4: 6a:07:47:a5:f6:01:b5:34:41:12:c8:92:ab:0b:2e:82:2e:dc: 8d:a5:96:93:04:87:bc:79:5f:3a:55:ba:56:eb:c9:4b:2a:54: f7:6e:50:20:74:05:c3:51:32:b9:5a:bc:c1:47:77:cf:6e:a7: 3c:3c:c3:85:31:17:26:68:4e:0b:65:85:9c:f6:59:cd:43:06: 36:e7:56:39:b7:b8:ff:0d:dd:70:6d:74:de:2b:b1:4a:42:2b: e7:4d:57:17:8f:f2:3b:24:98:5a:08:8f:da:78:76:4a:a3:73: 20:04:9a:34:57:1a:69:d0:1a:17:7c:b5:7a:56:45:0d:73:11: e5:de:4f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZj7E/SCGUoVVvLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwNjE2MzgzM1oXDTI1MDYwNDE1MzgzM1owLzEtMCsGA1UEAxMk ODZlMGE3MjQtMTAzNy00YTY1LTg4ZmEtY2YxMGY5OGMzNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc+n20rB6XfKzXzTa/RWmCJ2pnK8k5PMXFKw UNsFHL3fThnFx5E5m7zMMrt0ArCe2meWzPhWHJGpHyCCfFpGBMVrmt8W9TweeGGE u0nRW0MBsrQYyOrDlSt0nxFyR8LOrCMl0vi+P1YvyUupj/0KQSmgV+Tm6UQWB0nt +ZHfb/pc+CjJC+dftknZRgxtp+cnWl7VbO5ej8fhcGYoNmNO7ruBQ9fcBOa74bpl UYLL6mF3jSfbz2Do1AFzcbp0OmR+CpnYoGaN5J9oEIcscqE8yuvmzEvCi4QTnY/2 vQoKvFH1Lq0XGuXsoVJAWEmif73fj6ep9fKZD+pZE2Cdbau36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/9IsUrXXCjCgKd9ZAWYL8B3ZI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjg0NTg0ODktMzczMC0z NmIzLWE1YTctMjVmYzk2YjVmZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYafBJzfd10H5kBC4qvxD7MfDs1bnG643RxBMoRJ++AlCpU5F43gPN4 SapAhfWU8pcU0+kx3UghZ7ZZ6yG9ArLxbAW6eOWALw826gKYGrUkiE7hmnqLRKDR UercNSanI4CggmEYxcbSfOQ6SxnvtUVCJ1Eb7b+6tsFOPDaUpGoHR6X2AbU0QRLI kqsLLoIu3I2llpMEh7x5XzpVulbryUsqVPduUCB0BcNRMrlavMFHd89upzw8w4Ux FyZoTgtlhZz2Wc1DBjbnVjm3uP8N3XBtdN4rsUpCK+dNVxeP8jskmFoIj9p4dkqj cyAEmjRXGmnQGhd8tXpWRQ1zEeXeT+g= -----END CERTIFICATE-----Generated at Sun Apr 6 16:04:43 2025 by rpki-client