$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa File: 10cd5b22-a764-3843-a802-62d0ac33e561.roa (raw, json) Hash identifier: ayk6XCRL6bOs4DPZhfuPGKcDKVouih6V67KimJ5JJYs= Subject key identifier: B7:51:9E:87:BD:EA:48:FF:EC:87:1D:C8:5A:8C:BC:50:BA:E6:5F:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8781FF921FF3776165080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa Signing time: Fri 20 Jun 2025 09:31:56 +0000 ROA not before: Fri 20 Jun 2025 09:31:56 +0000 ROA not after: Thu 18 Sep 2025 09:31:56 +0000 asID: 22773 IP address blocks: 70.173.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:78:1f:f9:21:ff:37:76:16:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:56 2025 GMT Not After : Sep 18 09:31:56 2025 GMT Subject: CN=2f7bc613-8067-403a-b76b-335685bbc9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:68:eb:99:bd:90:85:d0:4f:be:e3:49:a3: cb:0b:2f:20:9d:af:61:82:8b:e0:94:58:16:1c:45: 5c:aa:9a:c9:fd:aa:ac:63:60:5c:f0:c6:6e:36:5e: 32:b6:33:22:cf:4f:54:d8:9c:fc:4e:56:cb:5f:7f: a5:90:b9:49:7a:49:b1:b6:79:63:2e:ff:30:28:3f: 30:7a:05:44:4e:1f:1c:ac:4f:b0:33:03:15:6c:db: 56:ff:a4:1d:bd:c6:f1:ac:d9:4e:07:c4:9b:d0:1a: 15:04:87:63:b4:56:8a:ed:ee:66:9d:f2:ed:43:66: 98:b0:86:c8:be:50:1c:08:65:b8:24:b9:cd:96:5b: 60:17:f2:cc:2d:c0:37:88:53:c6:14:af:99:4c:0a: da:3b:be:12:b5:ce:47:49:e6:0f:0f:31:35:e9:6f: a6:54:33:cb:2d:4d:55:75:e6:fb:a0:51:dd:4c:6e: 2d:42:1e:76:01:cd:03:27:84:49:8b:ab:27:a8:29: c3:87:fd:9f:6e:fc:1d:ac:bb:8d:84:73:90:23:ab: ed:8b:4c:b5:08:0d:4a:4d:6b:5b:59:33:1e:87:71: 38:a9:6a:3b:8a:6b:ec:90:80:2a:1c:e1:49:f7:f2: 9d:27:78:b9:23:91:47:2f:7f:54:bc:23:4c:be:16: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:9E:87:BD:EA:48:FF:EC:87:1D:C8:5A:8C:BC:50:BA:E6:5F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10cd5b22-a764-3843-a802-62d0ac33e561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b4:03:21:d6:29:ab:a8:5e:74:8b:b8:d6:c4:f3:aa:39:ed: e0:f3:a6:ac:46:9f:00:a3:f7:f9:1e:13:43:42:02:86:09:57: 27:ad:29:0f:a5:ee:b4:46:2a:52:d7:9e:59:c1:b9:99:e0:2f: d1:c0:7f:74:86:38:66:2f:96:66:14:b3:be:cb:a4:36:d7:e8: 4b:b2:93:a0:42:bd:a1:a8:09:87:35:9b:ef:53:d2:09:be:98: 26:9f:3c:82:66:e1:39:d2:b2:03:36:c1:20:8e:9e:65:5d:bf: 68:19:f3:b8:63:42:54:88:37:ea:d8:6a:c3:0e:30:84:ac:92: d3:69:30:f8:f8:61:45:15:c5:dc:09:0b:29:ec:92:0e:e2:68: f7:4e:16:49:3a:45:e8:32:88:86:18:90:ee:b0:a7:9b:b3:f0: 4b:b4:83:92:cd:f5:fd:17:e7:0b:ba:f3:80:72:e7:02:4f:01: 78:6d:db:1c:fe:73:ef:94:9c:2a:11:c3:38:d4:91:e3:6e:23: 66:21:63:ca:78:02:e3:d8:30:3b:da:d0:2a:ba:fc:69:18:d6: e3:00:3b:d3:52:d3:bf:56:c0:62:cd:c9:8c:95:37:f5:47:db: 25:d5:34:45:15:69:58:95:b3:74:07:a0:0c:69:ee:2a:ef:e8: 83:fc:3f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHgf+SH/N3YWUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1NloXDTI1MDkxODA5MzE1NlowLzEtMCsGA1UEAxMk MmY3YmM2MTMtODA2Ny00MDNhLWI3NmItMzM1Njg1YmJjOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMJo65m9kIXQT77jSaPLCy8gna9hgovglFgW HEVcqprJ/aqsY2Bc8MZuNl4ytjMiz09U2Jz8TlbLX3+lkLlJekmxtnljLv8wKD8w egVETh8crE+wMwMVbNtW/6QdvcbxrNlOB8Sb0BoVBIdjtFaK7e5mnfLtQ2aYsIbI vlAcCGW4JLnNlltgF/LMLcA3iFPGFK+ZTAraO74Stc5HSeYPDzE16W+mVDPLLU1V deb7oFHdTG4tQh52Ac0DJ4RJi6snqCnDh/2fbvwdrLuNhHOQI6vti0y1CA1KTWtb WTMeh3E4qWo7imvskIAqHOFJ9/KdJ3i5I5FHL39UvCNMvhYlGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdRnoe96kj/7IcdyFqMvFC65l9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTBjZDViMjItYTc2NC0z ODQzLWE4MDItNjJkMGFjMzNlNTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS0AyHWKauoXnSLuNbE86o57eDzpqxGnwCj9/keE0NCAoYJVyetKQ+l 7rRGKlLXnlnBuZngL9HAf3SGOGYvlmYUs77LpDbX6Euyk6BCvaGoCYc1m+9T0gm+ mCafPIJm4TnSsgM2wSCOnmVdv2gZ87hjQlSIN+rYasMOMISsktNpMPj4YUUVxdwJ Cynskg7iaPdOFkk6RegyiIYYkO6wp5uz8Eu0g5LN9f0X5wu684By5wJPAXht2xz+ c++UnCoRwzjUkeNuI2YhY8p4AuPYMDva0Cq6/GkY1uMAO9NS079WwGLNyYyVN/VH 2yXVNEUVaViVs3QHoAxp7irv6IP8P2Y= -----END CERTIFICATE-----Generated at Tue Jul 1 13:09:15 2025 by rpki-client