$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e8c4ecd-0955-3a8b-a434-2d148596e394.roa File: 0e8c4ecd-0955-3a8b-a434-2d148596e394.roa (raw, json) Hash identifier: IROgg1lju4+o0eR2/1hiWTpwZQaSG6qUaVFuLToAmHo= Subject key identifier: 55:F5:5D:C8:A8:AD:6A:DD:67:3A:E3:53:74:A3:76:1B:05:6E:97:C7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8199D696B0DA014223CF0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e8c4ecd-0955-3a8b-a434-2d148596e394.roa Signing time: Fri 20 Jun 2025 09:31:12 +0000 ROA not before: Fri 20 Jun 2025 09:31:12 +0000 ROA not after: Thu 18 Sep 2025 09:31:12 +0000 asID: 22773 IP address blocks: 70.170.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:19:9d:69:6b:0d:a0:14:22:3c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:12 2025 GMT Not After : Sep 18 09:31:12 2025 GMT Subject: CN=b82cf16e-7400-4742-892f-d36a75c8c7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b1:54:ee:41:b7:46:c3:60:e7:97:a5:20:18: 12:de:93:bc:4e:97:70:ba:28:5e:31:ab:bf:f7:b3: a0:30:f1:c7:ef:c5:61:a4:6e:fd:d3:e2:d8:58:b6: 1f:91:9b:c6:71:ec:01:57:35:9b:d5:64:d8:e8:72: b8:a2:b6:78:04:64:6c:09:28:49:47:62:c5:36:7f: 17:22:1b:23:44:7b:1e:6c:79:5e:72:fe:ff:ab:4b: c9:ff:59:94:20:85:72:18:65:65:fb:7d:60:1e:e5: c9:10:62:5d:e9:88:9a:d3:72:99:ae:01:10:ef:f5: 8e:0b:69:61:cf:f1:4c:41:1c:9f:ee:fd:fe:7f:1f: a0:c9:9a:72:51:46:84:7f:29:be:2a:c6:94:6c:9c: 60:e8:cb:43:e4:54:94:cd:23:02:47:cb:ed:2b:57: 27:b8:cb:d0:4e:73:16:c4:d4:b8:e7:7f:c6:21:6a: f2:b2:fd:5a:9c:ef:51:60:61:e7:74:c7:fd:02:c5: 5f:1d:36:d1:b6:a8:f6:98:b0:25:4b:cf:0b:3f:3a: 2b:3d:7c:c5:03:7b:09:6d:86:41:a3:41:48:d0:9e: 8a:61:95:67:2a:68:0d:22:87:f9:9c:96:1b:da:f8: 80:f8:8a:e5:cf:65:a8:d3:a1:ea:fa:d1:36:81:6c: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:5D:C8:A8:AD:6A:DD:67:3A:E3:53:74:A3:76:1B:05:6E:97:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e8c4ecd-0955-3a8b-a434-2d148596e394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:92:81:31:59:31:df:24:ac:ba:54:23:db:21:09:45:37:bc: 1d:d2:e7:af:6c:a8:2d:7c:36:77:b4:6c:4e:67:71:0b:e0:02: 13:b8:a6:95:3a:a3:92:30:b9:d5:f3:5c:11:a6:73:f4:4b:d0: 50:d1:60:a4:4c:07:a9:d0:b9:08:5d:8a:c1:c5:83:19:b2:33: 47:1b:7d:46:8f:b9:5c:80:c3:a4:4f:9b:30:30:64:d8:ac:28: 0e:3b:8f:63:4e:93:42:9f:bf:f2:f3:e3:57:19:b9:dc:4a:da: 57:02:77:f8:ec:15:3d:d1:cc:01:8b:c1:03:48:3a:55:4b:9d: 65:a5:e5:20:9d:e2:09:d8:6a:85:31:51:56:e1:40:03:23:2d: 27:61:eb:af:a5:d6:0b:8b:d9:f5:71:43:cc:45:95:f1:ea:94: c4:d7:fe:41:6b:eb:ca:56:0c:f3:6f:81:e6:d2:66:4b:d1:b8: 28:c9:86:ae:56:ba:18:b2:cb:3b:d7:ea:76:af:c0:67:9e:9f: 37:79:ef:d6:f7:ee:cb:cc:48:5c:35:c0:c5:bf:e0:cb:ca:35: fa:3e:12:3f:f9:d6:79:ee:01:9e:93:1c:72:87:fb:ed:64:89: c4:59:1c:24:85:da:ba:d3:14:ea:23:9e:aa:5e:3a:fc:71:c1: db:92:36:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqBmdaWsNoBQiPPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzExMloXDTI1MDkxODA5MzExMlowLzEtMCsGA1UEAxMk YjgyY2YxNmUtNzQwMC00NzQyLTg5MmYtZDM2YTc1YzhjN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bFU7kG3RsNg55elIBgS3pO8TpdwuiheMau/ 97OgMPHH78VhpG790+LYWLYfkZvGcewBVzWb1WTY6HK4orZ4BGRsCShJR2LFNn8X IhsjRHsebHlecv7/q0vJ/1mUIIVyGGVl+31gHuXJEGJd6Yia03KZrgEQ7/WOC2lh z/FMQRyf7v3+fx+gyZpyUUaEfym+KsaUbJxg6MtD5FSUzSMCR8vtK1cnuMvQTnMW xNS453/GIWrysv1anO9RYGHndMf9AsVfHTbRtqj2mLAlS88LPzorPXzFA3sJbYZB o0FI0J6KYZVnKmgNIof5nJYb2viA+Irlz2Wo06Hq+tE2gWwnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFX1XciorWrdZzrjU3SjdhsFbpfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU4YzRlY2QtMDk1NS0z YThiLWE0MzQtMmQxNDg1OTZlMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqpWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSSgTFZMd8krLpUI9shCUU3vB3S569sqC18Nne0bE5ncQvgAhO4ppU6 o5IwudXzXBGmc/RL0FDRYKRMB6nQuQhdisHFgxmyM0cbfUaPuVyAw6RPmzAwZNis KA47j2NOk0Kfv/Lz41cZudxK2lcCd/jsFT3RzAGLwQNIOlVLnWWl5SCd4gnYaoUx UVbhQAMjLSdh66+l1guL2fVxQ8xFlfHqlMTX/kFr68pWDPNvgebSZkvRuCjJhq5W uhiyyzvX6navwGeenzd579b37svMSFw1wMW/4MvKNfo+Ej/51nnuAZ6THHKH++1k icRZHCSF2rrTFOojnqpeOvxxwduSNpQ= -----END CERTIFICATE-----Generated at Mon Jun 30 21:44:22 2025 by rpki-client