$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cc6fb71-51bf-3600-89aa-63afe0fc6544.roa File: 0cc6fb71-51bf-3600-89aa-63afe0fc6544.roa (raw, json) Hash identifier: tXyppIQACVR0jcc7XZB0MrgSsS1ht/PNVTb45ZYtVEc= Subject key identifier: 51:57:99:65:76:74:1B:7E:7A:42:07:A5:BA:42:15:00:6C:F7:22:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A885F57AD87BA8F92506E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cc6fb71-51bf-3600-89aa-63afe0fc6544.roa Signing time: Fri 20 Jun 2025 09:32:03 +0000 ROA not before: Fri 20 Jun 2025 09:32:03 +0000 ROA not after: Thu 18 Sep 2025 09:32:03 +0000 asID: 22773 IP address blocks: 70.173.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:85:f5:7a:d8:7b:a8:f9:25:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:03 2025 GMT Not After : Sep 18 09:32:03 2025 GMT Subject: CN=2651003d-ff86-4a19-8ede-fdbb32424fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:39:ba:b1:16:ad:eb:ad:44:70:88:88:e2:8d: 97:f2:e4:17:f1:7d:c6:f1:54:0e:9f:2b:89:4c:13: 8b:4e:0a:3e:e1:61:7e:56:e3:52:10:23:b7:1f:64: b3:c6:74:85:4e:29:8e:fd:61:a3:64:37:18:83:89: fe:e4:cb:7d:5e:b5:9d:59:8f:19:e0:ee:23:0e:a6: 60:2e:36:16:97:28:39:b9:65:5e:f4:29:dd:ac:62: 18:df:ac:b1:0c:0e:47:73:44:0b:fe:4c:01:95:8a: be:17:41:b5:5a:27:56:6e:50:35:f9:b1:19:db:5e: 14:69:eb:24:45:03:ce:ed:86:2f:ee:48:d6:1b:ae: 7b:db:59:f3:e2:95:f3:6a:f9:6f:7d:51:0a:6d:3b: 6c:5a:b0:59:56:0d:f7:9e:fd:95:7d:5a:b9:31:67: 18:f7:7c:9a:04:c5:42:35:f4:2e:85:aa:f7:3f:18: 48:aa:b0:0c:e4:e6:73:4b:15:ee:02:37:96:f3:87: f6:98:aa:d7:17:c3:43:0c:15:6f:38:2e:81:08:2c: be:f0:76:1f:2d:9d:4f:f6:47:4e:c7:bb:77:e7:96: 1e:cd:a5:1f:9a:d3:69:e6:4e:31:00:ba:12:d8:1b: a4:8f:8a:07:ed:a9:65:9a:3a:f3:83:1b:96:01:57: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:57:99:65:76:74:1B:7E:7A:42:07:A5:BA:42:15:00:6C:F7:22:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cc6fb71-51bf-3600-89aa-63afe0fc6544.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e6:28:cf:01:ef:68:72:97:e7:8a:fd:00:2b:3a:80:7b:cc: f8:1e:67:ec:af:89:b3:fd:b5:3f:02:ea:a0:6b:30:9e:7b:a8: f0:cf:e5:e8:48:a9:f3:b8:67:67:f6:10:36:1c:03:6e:ca:3b: 6e:7b:93:74:c6:fb:99:50:4d:57:19:cc:34:65:a5:c9:b9:6c: 77:f5:7e:79:30:86:55:5e:27:21:e5:e9:74:5d:76:98:6e:44: 2e:a9:60:f5:18:3f:cf:55:13:52:97:82:28:e0:3d:7a:96:06: 0d:35:7a:6b:1d:ca:b7:49:d7:39:72:79:3b:f4:bb:99:5d:4a: 69:ff:6c:be:92:ab:2a:e3:cd:92:1a:bd:c0:23:c1:d1:2e:5c: 78:47:cd:c4:e6:9b:98:2c:51:6e:f0:75:a4:f1:16:96:67:30: f2:b5:a2:86:f2:8b:23:ca:a3:38:c4:ca:89:b9:b6:60:36:a4: 23:d5:9b:ce:66:d7:b9:30:66:14:a7:e3:78:b0:9d:03:ed:29: 8d:ab:13:5d:9e:24:d6:f9:61:c9:87:79:21:79:97:5e:db:a2: b3:46:e1:73:60:90:c7:a0:54:30:37:80:a6:25:a5:ca:f9:a8: a1:18:af:2e:63:46:5d:14:7b:ed:50:c4:a7:20:b1:09:43:28: 66:c6:63:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqIX1eth7qPklBuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIwM1oXDTI1MDkxODA5MzIwM1owLzEtMCsGA1UEAxMk MjY1MTAwM2QtZmY4Ni00YTE5LThlZGUtZmRiYjMyNDI0ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjm6sRat661EcIiI4o2X8uQX8X3G8VQOnyuJ TBOLTgo+4WF+VuNSECO3H2SzxnSFTimO/WGjZDcYg4n+5Mt9XrWdWY8Z4O4jDqZg LjYWlyg5uWVe9CndrGIY36yxDA5Hc0QL/kwBlYq+F0G1WidWblA1+bEZ214Uaesk RQPO7YYv7kjWG65721nz4pXzavlvfVEKbTtsWrBZVg33nv2VfVq5MWcY93yaBMVC NfQuhar3PxhIqrAM5OZzSxXuAjeW84f2mKrXF8NDDBVvOC6BCCy+8HYfLZ1P9kdO x7t355YezaUfmtNp5k4xALoS2Bukj4oH7allmjrzgxuWAVddfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFXmWV2dBt+ekIHpbpCFQBs9yIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNjNmZiNzEtNTFiZi0z NjAwLTg5YWEtNjNhZmUwZmM2NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq2SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnmKM8B72hyl+eK/QArOoB7zPgeZ+yvibP9tT8C6qBrMJ57qPDP5ehI qfO4Z2f2EDYcA27KO257k3TG+5lQTVcZzDRlpcm5bHf1fnkwhlVeJyHl6XRddphu RC6pYPUYP89VE1KXgijgPXqWBg01emsdyrdJ1zlyeTv0u5ldSmn/bL6SqyrjzZIa vcAjwdEuXHhHzcTmm5gsUW7wdaTxFpZnMPK1oobyiyPKozjEyom5tmA2pCPVm85m 17kwZhSn43iwnQPtKY2rE12eJNb5YcmHeSF5l17borNG4XNgkMegVDA3gKYlpcr5 qKEYry5jRl0Ue+1QxKcgsQlDKGbGYys= -----END CERTIFICATE-----Generated at Thu Jul 3 00:30:44 2025 by rpki-client