$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa File: a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa (raw, json) Hash identifier: 09Nva3OkWVKNf6x+hWUatfnoMh69eFoYEMK/xMVFZ9I= Subject key identifier: B7:58:84:3A:62:3E:A4:0C:89:74:DC:0A:07:0E:3F:B4:53:43:B8:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584929E3DCB962928A743E322A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 62957 IP address blocks: 70.165.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:dc:b9:62:92:8a:74:3e:32:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=2867a0b2-9e60-4ffc-ac32-f4ad759771c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:91:4f:2c:81:04:90:33:43:67:e5:99:74: ef:27:59:aa:71:e0:58:91:e0:00:8a:b9:9e:87:8c: 6e:a3:c5:50:a6:54:55:a9:7d:30:e4:41:e8:32:64: bd:96:54:5a:d1:71:7b:18:af:d8:a8:60:35:86:80: b8:85:f1:e4:64:49:bf:a3:87:f7:1a:50:69:ce:95: d8:a4:c8:47:59:64:ba:52:3c:69:fd:3a:d2:7e:b6: b7:22:bc:eb:a4:0f:c5:bb:48:23:74:fc:1a:44:2d: de:ae:4b:40:d6:f8:98:73:28:fc:f0:54:75:d8:36: 6e:6e:d8:39:11:98:00:97:37:5e:7e:d3:8f:51:c5: a0:34:7b:73:71:2c:a5:16:59:b3:be:6a:8c:8f:6e: 8f:39:c4:4e:7e:a0:26:2c:e0:6b:58:7c:1c:1c:35: 41:3d:e2:fd:1f:3e:66:b2:64:b9:14:28:0a:03:2c: e3:e5:b4:6a:32:a0:09:7d:e9:a7:c9:75:0d:56:64: f3:95:82:c3:a1:c9:68:10:61:73:1f:52:81:7a:47: f0:67:2c:74:d8:b2:ca:f5:0f:e6:28:d6:ee:6e:4c: f8:e4:1e:ff:f9:df:b7:1d:a9:c6:29:06:92:63:05: 2f:f6:fd:22:e4:73:90:5c:1a:fa:fd:03:c7:4f:25: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:58:84:3A:62:3E:A4:0C:89:74:DC:0A:07:0E:3F:B4:53:43:B8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f06a1f-58f9-3e80-b6fd-0730845c2b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:26:60:1d:2d:66:3a:e3:a7:d5:ab:54:bf:fd:15:02:2a:23: 24:b8:1c:6a:d1:e1:a0:d4:c2:f2:ef:9b:aa:d0:8a:ea:79:12: 76:3b:db:ec:cf:2d:9f:5d:8e:38:ec:38:aa:11:a8:f7:49:54: ed:59:3b:58:dc:37:af:f8:58:f7:b0:9d:65:9c:6a:f0:39:8c: 85:c7:02:be:11:c3:0a:46:f8:26:6c:12:72:90:a2:a3:2c:0a: 96:90:42:79:5e:a7:da:82:af:c8:0e:f4:b0:91:4e:93:88:1a: c3:60:2c:53:3a:5c:ff:a9:65:ac:45:25:0b:ee:42:ae:8e:c2: 74:73:16:e7:ef:95:75:cc:40:a1:49:e5:4a:47:f0:23:06:2c: 31:31:95:e9:7b:f9:2a:f2:93:a6:9a:47:cf:35:84:63:b2:a3: cb:43:18:d6:5a:0b:18:47:33:28:22:f4:e0:d5:1b:b1:04:00: 89:37:50:86:04:8a:09:d9:ce:5c:b6:dc:83:2c:7c:0b:ca:ed: f9:a1:00:32:e2:5f:9f:3c:4a:c0:da:3a:2c:33:3a:64:bd:7e: 72:f2:74:3d:bf:15:cc:18:9c:6d:bd:ba:8b:b3:e3:42:12:9e: 57:10:83:eb:5c:d4:ca:3a:db:c3:2f:aa:78:fc:ad:0e:8d:fc: 4f:f0:55:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp49y5YpKKdD4yKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk Mjg2N2EwYjItOWU2MC00ZmZjLWFjMzItZjRhZDc1OTc3MWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5GRTyyBBJAzQ2flmXTvJ1mqceBYkeAAirme h4xuo8VQplRVqX0w5EHoMmS9llRa0XF7GK/YqGA1hoC4hfHkZEm/o4f3GlBpzpXY pMhHWWS6Ujxp/TrSfra3IrzrpA/Fu0gjdPwaRC3erktA1viYcyj88FR12DZubtg5 EZgAlzdeftOPUcWgNHtzcSylFlmzvmqMj26POcROfqAmLOBrWHwcHDVBPeL9Hz5m smS5FCgKAyzj5bRqMqAJfemnyXUNVmTzlYLDocloEGFzH1KBekfwZyx02LLK9Q/m KNbubkz45B7/+d+3HanGKQaSYwUv9v0i5HOQXBr6/QPHTyU/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdYhDpiPqQMiXTcCgcOP7RTQ7isMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdmMDZhMWYtNThmOS0z ZTgwLWI2ZmQtMDczMDg0NWMyYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRqWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEmYB0tZjrjp9WrVL/9FQIqIyS4HGrR4aDUwvLvm6rQiup5EnY72+zP LZ9djjjsOKoRqPdJVO1ZO1jcN6/4WPewnWWcavA5jIXHAr4RwwpG+CZsEnKQoqMs CpaQQnlep9qCr8gO9LCRTpOIGsNgLFM6XP+pZaxFJQvuQq6OwnRzFufvlXXMQKFJ 5UpH8CMGLDExlel7+Sryk6aaR881hGOyo8tDGNZaCxhHMygi9ODVG7EEAIk3UIYE ignZzly23IMsfAvK7fmhADLiX588SsDaOiwzOmS9fnLydD2/FcwYnG29uouz40IS nlcQg+tc1Mo628Mvqnj8rQ6N/E/wVfc= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:49 2025 by rpki-client