$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed36ca1b-bdd3-395e-8ba4-6dae7fca6368.roa File: ed36ca1b-bdd3-395e-8ba4-6dae7fca6368.roa (raw, json) Hash identifier: a1twPTAXHNn1yC6VnvDYyC+IdpWRySd8Jo7oS+w14ik= Subject key identifier: FB:BD:8C:7E:2A:BB:F0:18:E3:7C:5D:AE:B5:CD:E4:BD:60:83:A6:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858495EEED63856640AB69521D300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed36ca1b-bdd3-395e-8ba4-6dae7fca6368.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 22773 IP address blocks: 70.174.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:d6:38:56:64:0a:b6:95:21:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=789bf589-3219-422b-94dc-b89867323b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:60:73:87:64:57:6d:f1:c5:43:98:63:1a: 3a:bb:b7:d1:1e:5c:c2:5c:ba:2c:f1:03:98:8b:4d: d6:13:3a:2e:94:a9:78:c3:98:ac:dd:80:c5:0d:d5: 14:2c:31:c8:9d:08:d5:6e:93:35:5c:cf:30:10:d6: 58:ac:d2:d9:5e:96:3b:20:38:e9:29:83:7d:2a:7f: cc:37:1e:0f:fb:6b:26:14:85:f0:b4:d0:72:7e:05: d7:92:e0:d1:2a:1f:ff:46:62:e3:ef:ff:47:52:3a: 4b:30:e7:cb:48:f3:08:32:5f:6e:46:27:ca:c9:30: 7a:d2:1b:de:e7:dc:b1:cf:83:cf:f2:70:44:e3:4f: b6:7c:bd:f0:9c:43:e0:8a:6d:9d:29:b3:40:a8:1f: b6:65:57:6a:29:29:77:3f:cc:25:76:71:7f:c1:aa: 04:b3:a8:0b:18:66:73:80:09:da:20:7e:15:e8:8f: da:dc:31:ed:1e:42:fb:7e:cc:81:5d:9e:29:86:6f: e2:3c:8c:e2:5c:d8:e0:97:f1:3d:7a:5a:80:38:b3: d6:23:a9:b6:06:95:2c:6e:da:f4:07:41:9e:1e:9f: b7:c3:6b:4f:14:80:7d:76:21:56:42:8e:cc:f0:63: 89:79:d3:13:8d:c3:83:52:d2:71:5b:f6:36:5e:79: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:8C:7E:2A:BB:F0:18:E3:7C:5D:AE:B5:CD:E4:BD:60:83:A6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ed36ca1b-bdd3-395e-8ba4-6dae7fca6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:2a:7e:76:19:35:f1:a9:42:03:62:4e:20:c4:43:4b:65:4b: 05:13:0a:3a:ed:4a:fc:10:9f:1c:d4:d9:ea:05:a7:72:71:10: c4:fa:5e:28:76:1e:2b:97:bb:fe:9d:dc:05:ca:01:a4:65:91: 68:9b:49:66:46:07:0b:bb:90:e4:96:8e:c4:10:d5:d1:49:69: 28:4d:19:9c:3d:77:a3:4d:d1:48:fe:de:d6:db:52:0a:63:6c: f2:01:6d:cd:da:23:13:ae:b4:cd:74:c7:17:80:ef:d1:34:48: 11:16:74:97:9f:89:12:6b:50:0d:d5:1a:a4:48:db:8e:e3:8a: 38:9a:a4:fe:98:b0:9b:78:7a:07:ba:47:d1:91:b1:8d:72:09: 92:ec:3c:e8:66:8e:81:98:8b:0a:2f:dd:b2:c3:3f:9f:b6:47: 95:49:0c:fc:3b:ca:02:75:33:75:92:42:01:6a:d1:74:49:f0: 6e:79:0d:0c:ce:15:93:42:d4:40:8d:ae:dd:b4:28:2a:fc:e3: cf:1d:0c:10:4f:4a:6e:1b:6b:ab:dd:87:5b:fb:0e:1e:31:06: db:e5:17:e7:6d:82:80:c2:f3:0f:f7:d7:3a:53:3b:be:20:6f: 0b:54:1c:b5:96:df:d2:66:ee:ed:c1:65:6a:a0:d4:bb:25:2d: e3:04:04:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7tY4VmQKtpUh0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk Nzg5YmY1ODktMzIxOS00MjJiLTk0ZGMtYjg5ODY3MzIzYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4dgc4dkV23xxUOYYxo6u7fRHlzCXLos8QOY i03WEzoulKl4w5is3YDFDdUULDHInQjVbpM1XM8wENZYrNLZXpY7IDjpKYN9Kn/M Nx4P+2smFIXwtNByfgXXkuDRKh//RmLj7/9HUjpLMOfLSPMIMl9uRifKyTB60hve 59yxz4PP8nBE40+2fL3wnEPgim2dKbNAqB+2ZVdqKSl3P8wldnF/waoEs6gLGGZz gAnaIH4V6I/a3DHtHkL7fsyBXZ4phm/iPIziXNjgl/E9elqAOLPWI6m2BpUsbtr0 B0GeHp+3w2tPFIB9diFWQo7M8GOJedMTjcODUtJxW/Y2XnmVPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu9jH4qu/AY43xdrrXN5L1gg6anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWQzNmNhMWItYmRkMy0z OTVlLThiYTQtNmRhZTdmY2E2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYqfnYZNfGpQgNiTiDEQ0tlSwUTCjrtSvwQnxzU2eoFp3JxEMT6Xih2 HiuXu/6d3AXKAaRlkWibSWZGBwu7kOSWjsQQ1dFJaShNGZw9d6NN0Uj+3tbbUgpj bPIBbc3aIxOutM10xxeA79E0SBEWdJefiRJrUA3VGqRI247jijiapP6YsJt4ege6 R9GRsY1yCZLsPOhmjoGYiwov3bLDP5+2R5VJDPw7ygJ1M3WSQgFq0XRJ8G55DQzO FZNC1ECNrt20KCr8488dDBBPSm4ba6vdh1v7Dh4xBtvlF+dtgoDC8w/31zpTO74g bwtUHLWW39Jm7u3BZWqg1LslLeMEBH4= -----END CERTIFICATE-----Generated at Sun Apr 27 03:48:56 2025 by rpki-client