$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120d4768-1ca5-334d-bf31-079a7a7a11ad.roa File: 120d4768-1ca5-334d-bf31-079a7a7a11ad.roa (raw, json) Hash identifier: +GxILNllptcBx6OFP7QHvW0O1/9+reHDJe+ErFIKnd0= Subject key identifier: C5:7B:52:9A:8D:4B:85:61:9F:86:52:15:F7:D0:B2:8B:FE:F5:12:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD8B2F1E2C5E216A66C66C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120d4768-1ca5-334d-bf31-079a7a7a11ad.roa Signing time: Thu 19 Jun 2025 09:21:42 +0000 ROA not before: Thu 19 Jun 2025 09:21:42 +0000 ROA not after: Wed 17 Sep 2025 09:21:42 +0000 asID: 22773 IP address blocks: 70.177.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:b2:f1:e2:c5:e2:16:a6:6c:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:42 2025 GMT Not After : Sep 17 09:21:42 2025 GMT Subject: CN=b975513a-ddaf-4435-b244-033141c35c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:d3:90:f2:75:00:cf:67:83:4b:46:8d:4c: cb:04:70:b5:da:13:be:03:13:27:f7:3f:13:0d:bb: 80:72:ce:cf:d3:dd:29:d3:71:73:d4:f9:b3:44:43: 62:22:65:5f:4e:c3:54:c0:0e:da:d4:2e:ee:d9:a6: 4e:30:38:b9:6b:1c:6b:c7:27:25:f2:64:40:96:ad: 86:cf:df:24:32:4b:17:32:54:90:38:f7:55:f0:88: 5a:0e:9c:33:87:d2:16:fb:70:ed:e0:e7:ad:50:2d: a3:de:07:2e:b7:8d:53:18:50:1e:6f:99:3d:d5:32: a6:e1:b1:a0:12:3c:05:06:8b:41:92:76:97:69:07: 48:44:ce:1e:47:4e:56:a3:7f:66:49:e2:5e:a6:d7: 8d:7b:d5:92:47:c1:15:4b:ed:6a:6c:cb:4c:5d:59: d6:c9:c7:64:04:8e:5b:c8:fe:4f:80:47:bd:c9:d9: 33:79:42:df:d2:75:cb:f1:6a:0c:66:51:d9:d8:ab: 5c:90:d4:12:d6:3c:6c:1f:f8:aa:61:40:b0:df:87: 4c:c6:86:ec:07:52:f8:26:8b:ec:f7:83:d3:33:6a: 9e:63:05:9a:ac:b9:a7:60:c3:83:2a:4c:81:20:f5: 38:d4:c7:f0:38:59:e9:78:f4:65:75:55:2b:64:68: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7B:52:9A:8D:4B:85:61:9F:86:52:15:F7:D0:B2:8B:FE:F5:12:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120d4768-1ca5-334d-bf31-079a7a7a11ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.177.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:dd:ba:e3:68:09:87:a1:a3:45:f0:ad:6a:f8:e0:1e:b1:46: f9:a8:65:bc:cd:6f:fb:10:be:dc:f8:a4:bf:39:8f:0e:a9:30: ce:4c:2a:e1:c0:fe:71:70:81:20:84:39:59:1d:15:90:1e:5d: 93:50:b7:d5:00:8c:d8:b6:f6:e7:bd:68:ab:7e:32:21:d8:b4: 19:27:2d:c9:67:ff:89:80:e3:e0:4b:aa:10:0c:1b:af:1d:2e: 54:fe:2b:4c:79:57:43:71:f0:b1:91:57:bb:92:5f:b7:0e:f1: d3:27:97:e4:c3:3c:64:5b:ae:e9:55:99:ac:c3:f4:5b:71:e3: 2a:0d:5f:4f:a5:3a:dc:47:8d:06:a7:8b:1b:63:3d:38:15:73: e9:dd:60:40:d0:7e:e1:41:da:77:a7:a6:7b:06:94:25:d3:d8: 65:f9:cf:65:41:3f:4e:50:f6:74:38:20:39:07:30:6e:77:e6: c4:00:fb:4f:73:1d:0a:9a:eb:c9:e8:26:1d:e0:d5:75:64:0a: a1:b2:c5:af:93:78:1b:03:73:3a:a0:be:3c:48:27:48:8a:07: a1:1f:a4:be:76:44:51:cc:b3:04:bc:01:15:e4:43:50:5d:9c: cf:0c:2f:22:40:0d:4e:4e:1f:b7:b4:77:32:b6:a0:72:6c:75: 32:47:c1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92LLx4sXiFqZsZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjE0MloXDTI1MDkxNzA5MjE0MlowLzEtMCsGA1UEAxMk Yjk3NTUxM2EtZGRhZi00NDM1LWIyNDQtMDMzMTQxYzM1YzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7TkPJ1AM9ng0tGjUzLBHC12hO+AxMn9z8T DbuAcs7P090p03Fz1PmzRENiImVfTsNUwA7a1C7u2aZOMDi5axxrxycl8mRAlq2G z98kMksXMlSQOPdV8IhaDpwzh9IW+3Dt4OetUC2j3gcut41TGFAeb5k91TKm4bGg EjwFBotBknaXaQdIRM4eR05Wo39mSeJepteNe9WSR8EVS+1qbMtMXVnWycdkBI5b yP5PgEe9ydkzeULf0nXL8WoMZlHZ2KtckNQS1jxsH/iqYUCw34dMxobsB1L4Jovs 94PTM2qeYwWarLmnYMODKkyBIPU41MfwOFnpePRldVUrZGjUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV7UpqNS4Vhn4ZSFffQsov+9RKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIwZDQ3NjgtMWNhNS0z MzRkLWJmMzEtMDc5YTdhN2ExMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvduuNoCYeho0XwrWr44B6xRvmoZbzNb/sQvtz4pL85jw6pMM5MKuHA /nFwgSCEOVkdFZAeXZNQt9UAjNi29ue9aKt+MiHYtBknLcln/4mA4+BLqhAMG68d LlT+K0x5V0Nx8LGRV7uSX7cO8dMnl+TDPGRbrulVmazD9Ftx4yoNX0+lOtxHjQan ixtjPTgVc+ndYEDQfuFB2nenpnsGlCXT2GX5z2VBP05Q9nQ4IDkHMG535sQA+09z HQqa68noJh3g1XVkCqGyxa+TeBsDczqgvjxIJ0iKB6EfpL52RFHMswS8ARXkQ1Bd nM8MLyJADU5OH7e0dzK2oHJsdTJHwRQ= -----END CERTIFICATE-----Generated at Tue Jul 1 15:08:13 2025 by rpki-client