$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa File: 0ff6af81-9112-3d31-b21c-6fd467b60608.roa (raw, json) Hash identifier: C4icz0GzgsarEH/YLLewXPv/uFKUmFYwuR4aerYDkyM= Subject key identifier: 84:6E:A9:79:54:36:C2:49:19:C0:5E:EC:DD:4C:47:55:87:47:8D:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7F2CBA2220E753F9CCFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa Signing time: Thu 19 Jun 2025 09:20:11 +0000 ROA not before: Thu 19 Jun 2025 09:20:11 +0000 ROA not after: Wed 17 Sep 2025 09:20:11 +0000 asID: 22773 IP address blocks: 70.172.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:f2:cb:a2:22:0e:75:3f:9c:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:11 2025 GMT Not After : Sep 17 09:20:11 2025 GMT Subject: CN=bba1f1ba-fe74-46ba-b6ce-bd09f3bf0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:95:06:7e:d4:b0:32:04:40:9e:ec:9e:e4: cb:0f:8c:65:50:46:04:bc:19:bb:98:96:8d:59:b0: bf:9b:ef:66:a1:c0:fe:b9:79:ea:fb:dc:b1:7b:f3: de:88:a2:3e:6f:f1:0a:e6:1a:b3:b1:17:cb:42:ce: 45:0b:70:0f:4f:1a:88:2e:21:35:76:19:10:0d:9b: 52:c8:94:e0:73:38:86:bb:bf:25:fa:f8:95:7e:4f: 8c:0a:a7:65:72:04:85:ad:e5:b9:3c:99:8a:08:6e: 1f:15:d3:ea:ea:ef:5f:f8:dd:eb:35:6d:1d:fb:be: e6:53:9c:a4:41:f0:1f:e2:4d:5a:36:81:cc:16:7f: 92:a6:43:65:4c:78:f8:92:04:c3:4e:86:92:74:a3: af:fb:1c:8b:59:5f:98:d1:94:6d:ce:0f:9b:02:f4: 48:7a:8d:a6:33:76:13:5f:e1:fa:62:f9:e7:1f:61: 8a:38:44:63:1c:44:46:b1:ce:ef:aa:fb:d9:86:70: 93:d0:72:12:6d:03:05:36:8b:ef:70:55:f9:e9:b4: 3e:02:2e:7c:ac:c2:d0:a6:96:bb:62:f3:bf:18:37: 2a:2d:7c:52:3d:c2:5a:a5:c7:e8:6e:fe:8b:75:d5: 6e:51:aa:ff:04:2f:87:1e:51:2a:bc:e7:5c:b1:bd: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6E:A9:79:54:36:C2:49:19:C0:5E:EC:DD:4C:47:55:87:47:8D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ff6af81-9112-3d31-b21c-6fd467b60608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c1:53:a4:80:10:6a:13:e5:1e:c1:3a:78:e7:47:1b:42:92: 0c:a3:c5:57:77:a7:4b:a7:d7:95:ce:9a:2e:1c:aa:c1:11:1f: 35:21:ed:3c:a4:4f:61:0f:76:3f:df:b2:6c:f5:2d:f4:8a:1d: 61:12:8d:ee:78:b7:b4:38:4b:d0:0b:af:fc:3e:4e:d8:d9:17: 19:a4:26:d1:88:30:1c:e4:d5:7f:ba:29:0c:f9:c4:31:f4:52: d3:52:42:49:77:e6:8a:ce:7d:4c:55:cc:60:df:92:59:bb:f1: b7:05:dd:fa:9e:de:9a:6f:7a:d1:74:35:03:f7:ef:b6:01:64: e7:92:be:6f:05:3b:9d:0d:d8:33:75:34:6e:10:2d:79:82:e1: bd:dd:d7:04:86:80:b5:66:09:23:88:58:59:76:d3:3a:07:d3: 02:35:9a:0c:94:2d:f1:7a:bf:a5:7c:ae:b5:6a:78:15:e4:9a: 9a:7e:ec:d3:40:3e:ba:d3:e7:5b:56:ab:72:cd:88:3b:37:8c: 58:1b:fe:aa:4b:a8:84:bf:8d:51:4e:9f:2d:5e:19:90:49:47: 2a:26:97:af:86:37:7f:d4:45:69:b8:bf:c0:95:48:08:43:3a: e7:88:2c:e9:eb:cb:cd:53:1e:83:b8:2a:24:0f:8c:17:e6:55: 62:db:8a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91/LLoiIOdT+cz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAxMVoXDTI1MDkxNzA5MjAxMVowLzEtMCsGA1UEAxMk YmJhMWYxYmEtZmU3NC00NmJhLWI2Y2UtYmQwOWYzYmYwZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9mVBn7UsDIEQJ7snuTLD4xlUEYEvBm7mJaN WbC/m+9mocD+uXnq+9yxe/PeiKI+b/EK5hqzsRfLQs5FC3APTxqILiE1dhkQDZtS yJTgcziGu78l+viVfk+MCqdlcgSFreW5PJmKCG4fFdPq6u9f+N3rNW0d+77mU5yk QfAf4k1aNoHMFn+SpkNlTHj4kgTDToaSdKOv+xyLWV+Y0ZRtzg+bAvRIeo2mM3YT X+H6YvnnH2GKOERjHERGsc7vqvvZhnCT0HISbQMFNovvcFX56bQ+Ai58rMLQppa7 YvO/GDcqLXxSPcJapcfobv6LddVuUar/BC+HHlEqvOdcsb1aCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRuqXlUNsJJGcBe7N1MR1WHR427MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmNmFmODEtOTExMi0z ZDMxLWIyMWMtNmZkNDY3YjYwNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLBU6SAEGoT5R7BOnjnRxtCkgyjxVd3p0un15XOmi4cqsERHzUh7Tyk T2EPdj/fsmz1LfSKHWESje54t7Q4S9ALr/w+TtjZFxmkJtGIMBzk1X+6KQz5xDH0 UtNSQkl35orOfUxVzGDfklm78bcF3fqe3ppvetF0NQP377YBZOeSvm8FO50N2DN1 NG4QLXmC4b3d1wSGgLVmCSOIWFl20zoH0wI1mgyULfF6v6V8rrVqeBXkmpp+7NNA PrrT51tWq3LNiDs3jFgb/qpLqIS/jVFOny1eGZBJRyoml6+GN3/URWm4v8CVSAhD OueILOnry81THoO4KiQPjBfmVWLbip8= -----END CERTIFICATE-----Generated at Tue Jul 1 20:48:24 2025 by rpki-client