$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0ef524-b62b-3af8-b1f5-b9a1f8f4e685.roa File: 1a0ef524-b62b-3af8-b1f5-b9a1f8f4e685.roa (raw, json) Hash identifier: VudaYFmJauMhodFKHgw8r2uGwauG2FAeyFCS7JIaCpA= Subject key identifier: F3:C6:2B:8E:08:12:4D:A1:11:CA:74:A5:F6:7E:26:A1:25:25:2F:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8BB51E8DAA5ADE3863200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0ef524-b62b-3af8-b1f5-b9a1f8f4e685.roa Signing time: Fri 20 Jun 2025 09:32:28 +0000 ROA not before: Fri 20 Jun 2025 09:32:28 +0000 ROA not after: Thu 18 Sep 2025 09:32:28 +0000 asID: 22773 IP address blocks: 70.180.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:bb:51:e8:da:a5:ad:e3:86:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:28 2025 GMT Not After : Sep 18 09:32:28 2025 GMT Subject: CN=e26145ca-f143-4726-b606-09c885195399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:86:5f:d3:4d:4c:ab:a7:a9:b3:64:24:0e: 77:71:c2:91:51:03:9f:58:ad:96:e7:de:4d:ef:75: 7a:23:13:36:fb:15:5d:40:39:87:e8:f4:a5:24:61: 0e:11:a7:41:9c:cc:b0:51:dd:21:b6:93:9e:7e:c0: 92:35:2b:98:05:52:45:b0:86:a3:42:b0:10:fb:54: 06:b3:1d:80:9b:4f:17:ce:fa:54:63:8f:b3:6a:18: ca:4c:78:e3:a1:e5:9f:f9:90:66:b8:28:41:ad:20: 87:5c:fd:f3:b1:c9:c1:3f:3a:e5:cb:c0:06:f9:da: 44:63:c9:46:0a:fc:9c:59:80:cd:af:f6:d5:cf:98: de:2f:a4:84:8d:bb:a2:59:41:84:4b:12:b3:10:14: b2:62:ee:6c:78:fb:b1:65:5e:9e:65:33:7c:7e:c8: 86:20:44:f3:0c:67:ac:94:85:7f:00:51:bc:e1:3b: aa:12:80:29:f1:68:24:0c:cb:ce:ca:a5:a6:50:26: d6:fb:b3:f4:07:85:68:84:48:36:44:b0:3b:3f:1e: 65:38:d7:71:8b:33:8f:cc:28:56:45:9b:2e:c3:8e: 92:c4:a2:8e:b9:bd:be:03:bd:3a:d8:11:7b:94:13: 2e:b3:13:92:a5:21:c5:4a:da:42:13:93:a9:99:c3: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:2B:8E:08:12:4D:A1:11:CA:74:A5:F6:7E:26:A1:25:25:2F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0ef524-b62b-3af8-b1f5-b9a1f8f4e685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a7:2f:5a:8f:d1:2c:32:6c:92:17:30:98:ae:13:6a:d3:46: f6:30:b9:a3:ce:39:94:86:1d:3b:be:dc:42:63:0e:9c:dd:7e: ce:87:12:3b:1a:57:ed:a3:f7:6b:22:5a:6e:7e:2c:19:69:2a: 73:7b:4e:8c:54:8e:95:df:c1:54:f3:1a:c5:ae:31:10:dc:8b: 58:76:53:6f:41:ef:fa:f0:6c:2f:2a:69:9d:86:cd:a7:eb:02: ca:65:6f:6e:9c:3c:c7:4c:dd:6f:8a:9b:72:8e:d5:1a:09:81: cc:dd:14:e7:f3:a9:b4:bf:32:6e:ff:b5:81:c5:8a:da:bf:5a: 2b:b5:5c:58:03:58:2e:e0:d7:77:3e:ca:a8:65:d0:86:77:8d: 87:41:f6:0d:ca:f5:ee:04:a1:9e:78:f7:90:01:64:a3:81:06: 41:23:1b:3a:a8:03:e1:fa:c2:b1:b7:dd:0b:1a:21:a6:8b:f4: 94:7a:35:f5:00:ab:bb:01:a9:37:fb:0b:70:7a:9f:fa:47:8a: 43:6f:2b:fa:79:de:93:bb:17:94:83:8c:d2:44:1f:eb:c4:3b: bc:34:62:50:e0:5d:16:17:f3:31:f6:ab:b7:4b:3b:df:98:3c: c2:9b:aa:1b:72:0e:7e:7a:79:cb:c6:59:13:eb:29:ed:ef:0f: 6b:28:d8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqLtR6NqlreOGMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIyOFoXDTI1MDkxODA5MzIyOFowLzEtMCsGA1UEAxMk ZTI2MTQ1Y2EtZjE0My00NzI2LWI2MDYtMDljODg1MTk1Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt6GX9NNTKunqbNkJA53ccKRUQOfWK2W595N 73V6IxM2+xVdQDmH6PSlJGEOEadBnMywUd0htpOefsCSNSuYBVJFsIajQrAQ+1QG sx2Am08XzvpUY4+zahjKTHjjoeWf+ZBmuChBrSCHXP3zscnBPzrly8AG+dpEY8lG CvycWYDNr/bVz5jeL6SEjbuiWUGESxKzEBSyYu5sePuxZV6eZTN8fsiGIETzDGes lIV/AFG84TuqEoAp8WgkDMvOyqWmUCbW+7P0B4VohEg2RLA7Px5lONdxizOPzChW RZsuw46SxKKOub2+A7062BF7lBMusxOSpSHFStpCE5OpmcP3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPGK44IEk2hEcp0pfZ+JqElJS+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWEwZWY1MjQtYjYyYi0z YWY4LWIxZjUtYjlhMWY4ZjRlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrSaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACunL1qP0SwybJIXMJiuE2rTRvYwuaPOOZSGHTu+3EJjDpzdfs6HEjsa V+2j92siWm5+LBlpKnN7ToxUjpXfwVTzGsWuMRDci1h2U29B7/rwbC8qaZ2Gzafr Asplb26cPMdM3W+Km3KO1RoJgczdFOfzqbS/Mm7/tYHFitq/Wiu1XFgDWC7g13c+ yqhl0IZ3jYdB9g3K9e4EoZ5495ABZKOBBkEjGzqoA+H6wrG33QsaIaaL9JR6NfUA q7sBqTf7C3B6n/pHikNvK/p53pO7F5SDjNJEH+vEO7w0YlDgXRYX8zH2q7dLO9+Y PMKbqhtyDn56ecvGWRPrKe3vD2so2EY= -----END CERTIFICATE-----Generated at Tue Jul 1 09:54:12 2025 by rpki-client