$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa File: d27650cd-0adc-3814-aa99-9684950b953e.roa (raw, json) Hash identifier: Ew8n8ZRCgLjb8oZfDfGzKgIWZLB4+1YET6OWO0xrESE= Subject key identifier: 64:44:26:2F:96:DD:D4:93:19:24:94:E5:E8:6F:BE:18:78:DD:E1:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858490CB1770D3ED885D7FDE61700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 22773 IP address blocks: 70.165.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:77:0d:3e:d8:85:d7:fd:e6:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=e149e3bb-b1b4-45ec-9c04-1947121c33b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:b5:2d:71:42:2d:51:d6:40:ff:d1:bb:6b: d5:9e:27:34:45:76:29:85:8b:20:04:d0:1e:98:4f: 07:aa:5e:cb:79:37:c9:8a:93:b0:53:e9:f1:a7:0f: dd:27:5e:be:f6:19:b6:b4:c4:b6:2f:85:36:79:81: ea:f0:c3:64:bf:fe:3c:bb:ed:c1:a9:6a:27:76:9a: 00:2f:48:91:28:33:23:a3:eb:aa:34:2f:1f:41:83: 58:df:72:eb:40:a0:57:2a:93:81:81:f6:53:ba:ab: 7c:6b:85:49:cd:84:cb:cb:fd:dd:b1:34:2c:d9:aa: b7:c8:16:d2:71:3f:ee:c7:1e:88:54:b9:f6:62:e7: 04:ee:2d:94:ed:c3:81:f6:9c:0c:bd:59:8b:29:bd: 98:90:a9:d4:3c:31:f3:e1:3e:9d:09:a2:d0:e0:b4: ac:04:8d:b4:32:b8:2a:4f:4e:30:d2:f5:8a:17:fa: 90:54:68:8f:1a:2d:4a:9b:2e:c9:dd:d6:ab:49:e7: d6:c6:2e:a5:02:3a:73:6b:36:ef:b0:8c:1e:d3:d2: 6e:7e:55:b1:65:e2:7b:3c:22:1c:78:bb:15:93:52: 0a:13:a9:1e:6a:7e:72:da:98:83:e1:31:5e:f2:70: be:1c:cc:36:18:67:d6:f0:69:42:30:a8:33:79:8d: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:44:26:2F:96:DD:D4:93:19:24:94:E5:E8:6F:BE:18:78:DD:E1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bc:ad:54:ea:bb:4f:4b:3c:3d:f7:15:b2:0c:57:78:83:48: ef:05:3e:bd:92:97:d2:3a:cb:56:85:18:a3:b3:fc:ce:ab:77: d4:18:46:b4:c4:90:b1:a8:97:f1:0f:2c:ff:e3:df:30:ca:b3: 5c:4f:6d:84:a2:42:a0:99:f6:c5:0b:b0:e0:e0:23:41:67:db: 43:19:97:12:67:eb:cb:13:b5:1e:1d:7e:ad:31:9d:dd:13:70: 09:ea:22:f1:3e:fa:5c:57:16:e9:73:8e:ed:bc:7a:55:64:d9: 46:84:9b:f6:e1:eb:2f:c6:48:75:50:95:fe:fe:d7:84:6c:a0: 9a:86:05:34:0a:81:cb:0b:78:7d:20:10:3f:18:63:0d:18:f2: 2c:dd:4f:4a:6d:22:f3:f0:b3:d4:d2:29:82:d3:b0:3b:83:a2: 14:64:61:cb:92:15:74:67:d3:f7:cf:63:50:72:46:a7:d3:e6: 3e:f6:68:a3:75:a6:88:e7:c0:8f:f1:b9:9b:b8:fe:ce:21:32: f2:4c:e1:cf:b7:66:22:76:b5:5f:76:d0:52:69:92:33:b4:0f: 5c:2a:b1:4d:94:b2:9c:87:59:68:e2:0e:60:ca:7f:dc:38:4d: 22:92:24:a3:f5:64:ed:43:20:66:98:37:15:df:97:a5:86:dd: 57:e3:84:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsXcNPtiF1/3mFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk ZTE0OWUzYmItYjFiNC00NWVjLTljMDQtMTk0NzEyMWMzM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gy1LXFCLVHWQP/Ru2vVnic0RXYphYsgBNAe mE8Hql7LeTfJipOwU+nxpw/dJ16+9hm2tMS2L4U2eYHq8MNkv/48u+3BqWondpoA L0iRKDMjo+uqNC8fQYNY33LrQKBXKpOBgfZTuqt8a4VJzYTLy/3dsTQs2aq3yBbS cT/uxx6IVLn2YucE7i2U7cOB9pwMvVmLKb2YkKnUPDHz4T6dCaLQ4LSsBI20Mrgq T04w0vWKF/qQVGiPGi1Kmy7J3darSefWxi6lAjpzazbvsIwe09JuflWxZeJ7PCIc eLsVk1IKE6kean5y2piD4TFe8nC+HMw2GGfW8GlCMKgzeY3NBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGREJi+W3dSTGSSU5ehvvhh43eGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDI3NjUwY2QtMGFkYy0z ODE0LWFhOTktOTY4NDk1MGI5NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe8rVTqu09LPD33FbIMV3iDSO8FPr2Sl9I6y1aFGKOz/M6rd9QYRrTE kLGol/EPLP/j3zDKs1xPbYSiQqCZ9sULsODgI0Fn20MZlxJn68sTtR4dfq0xnd0T cAnqIvE++lxXFulzju28elVk2UaEm/bh6y/GSHVQlf7+14RsoJqGBTQKgcsLeH0g ED8YYw0Y8izdT0ptIvPws9TSKYLTsDuDohRkYcuSFXRn0/fPY1ByRqfT5j72aKN1 pojnwI/xuZu4/s4hMvJM4c+3ZiJ2tV920FJpkjO0D1wqsU2UspyHWWjiDmDKf9w4 TSKSJKP1ZO1DIGaYNxXfl6WG3VfjhJ0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:24:11 2025 by rpki-client