$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecf9a62-c18e-3b2c-8df3-ec1a1322ed5b.roa File: 8ecf9a62-c18e-3b2c-8df3-ec1a1322ed5b.roa (raw, json) Hash identifier: jBo4pVrvVfbVAC8HL9n3HssHD6es+4rHOmR+yT5sFCg= Subject key identifier: 4A:78:2F:32:8E:65:95:AA:F7:E1:01:13:98:66:56:82:48:60:02:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584965E97EC283BC94F22D760D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecf9a62-c18e-3b2c-8df3-ec1a1322ed5b.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 22773 IP address blocks: 70.174.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7e:c2:83:bc:94:f2:2d:76:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=f6060355-0dd9-4e6d-8203-313b3aadd3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:86:d6:34:91:27:94:b2:0c:47:f1:19:ac: a4:c5:5d:bc:0f:2f:2b:72:5f:76:bb:1a:59:3c:9e: bf:b9:c0:b6:1f:58:9c:30:66:9a:5f:d8:80:92:fb: eb:2c:5f:3e:76:10:e0:e2:bc:dc:c1:48:cb:ae:a0: c3:bd:ee:a2:67:fa:99:c4:02:ac:24:05:c2:f5:07: bb:00:b0:61:57:61:df:f9:3d:e0:38:d2:a8:29:c1: 9a:d4:0f:58:bf:f3:ac:07:73:ef:9c:0e:e5:25:2e: db:d7:a9:fa:6e:d3:5d:40:99:2d:f5:e2:30:04:8b: 3e:a5:e3:bd:4a:8d:86:45:a5:9e:77:e0:f0:d1:2a: 24:a9:48:da:1f:3b:fa:54:91:1b:dc:c7:9a:b8:fc: a2:53:3e:45:a5:0f:2c:26:e8:23:42:bf:55:c9:6c: e9:3f:7e:bf:1c:9f:e5:98:5b:8d:b6:03:84:62:98: 7e:fc:e9:62:89:f0:f2:6f:40:10:2b:31:20:0c:a6: 3d:48:91:ef:21:a6:cb:86:87:f1:83:1d:15:0f:63: 90:2d:b4:67:72:f3:25:ce:6a:fb:c0:79:b5:60:4a: 29:33:31:79:d4:35:19:17:19:63:6b:c9:db:f5:49: e5:ef:65:39:13:88:96:34:7b:ae:51:8b:30:bd:e0: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:78:2F:32:8E:65:95:AA:F7:E1:01:13:98:66:56:82:48:60:02:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecf9a62-c18e-3b2c-8df3-ec1a1322ed5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e4:68:48:be:9b:e2:d2:9f:6d:2f:46:c7:53:81:b9:67:cc: 67:59:12:18:07:eb:96:db:ed:80:6d:67:f1:42:9e:6a:48:f2: 84:26:d2:e7:33:52:c9:9f:8f:03:1d:53:12:b0:b4:c4:1f:93: d0:13:62:86:85:a8:54:8d:f8:d6:16:eb:64:73:5d:da:8e:88: af:d1:fa:db:62:8b:5a:11:5b:2f:53:59:2f:30:30:d6:e4:6f: de:af:2f:ab:7c:01:dd:75:94:c2:2a:d7:c9:3a:f4:8a:d1:07: cb:0b:7b:cf:96:96:c2:89:c9:ff:31:48:2f:64:b9:1c:c0:74: 71:4c:ec:91:0a:ea:c1:9f:ca:4d:b7:a6:29:5d:b2:45:6d:ae: a4:fe:fc:2e:b9:ac:6d:e7:d3:a5:0a:f6:97:29:35:62:c1:0a: 2e:4c:64:87:18:5f:e9:fc:75:b4:32:51:b5:e7:4e:17:ba:a9: 7f:55:cf:e6:22:bb:5c:45:e7:45:b7:cd:10:51:0d:59:b0:50: 9f:a6:b0:6d:44:94:52:63:2f:dd:7f:eb:03:63:40:5f:44:63: d9:f6:97:e3:e5:bb:42:4f:eb:1c:7d:03:09:96:23:8d:66:b2: 6e:bb:90:66:10:d0:ff:36:75:ae:b6:15:b7:63:8f:45:57:d1: 7e:ae:c7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X7Cg7yU8i12DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk ZjYwNjAzNTUtMGRkOS00ZTZkLTgyMDMtMzEzYjNhYWRkM2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne2G1jSRJ5SyDEfxGaykxV28Dy8rcl92uxpZ PJ6/ucC2H1icMGaaX9iAkvvrLF8+dhDg4rzcwUjLrqDDve6iZ/qZxAKsJAXC9Qe7 ALBhV2Hf+T3gONKoKcGa1A9Yv/OsB3PvnA7lJS7b16n6btNdQJkt9eIwBIs+peO9 So2GRaWed+Dw0SokqUjaHzv6VJEb3MeauPyiUz5FpQ8sJugjQr9VyWzpP36/HJ/l mFuNtgOEYph+/OliifDyb0AQKzEgDKY9SJHvIabLhofxgx0VD2OQLbRncvMlzmr7 wHm1YEopMzF51DUZFxlja8nb9Unl72U5E4iWNHuuUYswveB5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp4LzKOZZWq9+EBE5hmVoJIYAIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGVjZjlhNjItYzE4ZS0z YjJjLThkZjMtZWMxYTEzMjJlZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq68MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHkaEi+m+LSn20vRsdTgblnzGdZEhgH65bb7YBtZ/FCnmpI8oQm0ucz UsmfjwMdUxKwtMQfk9ATYoaFqFSN+NYW62RzXdqOiK/R+ttii1oRWy9TWS8wMNbk b96vL6t8Ad11lMIq18k69IrRB8sLe8+WlsKJyf8xSC9kuRzAdHFM7JEK6sGfyk23 pildskVtrqT+/C65rG3n06UK9pcpNWLBCi5MZIcYX+n8dbQyUbXnThe6qX9Vz+Yi u1xF50W3zRBRDVmwUJ+msG1ElFJjL91/6wNjQF9EY9n2l+Plu0JP6xx9AwmWI41m sm67kGYQ0P82da62Fbdjj0VX0X6ux2s= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:49 2025 by rpki-client