$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa File: 1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa (raw, json) Hash identifier: bQ3OX4EYwwJoCwkwkTHXMj+moZWdwohe9Zhx4LmOcgU= Subject key identifier: EC:A0:9D:96:F8:F8:1B:47:68:4E:43:D1:DE:63:FC:61:0D:0E:D9:88 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A832D9A186A3421956FA90 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa Signing time: Fri 20 Jun 2025 09:31:24 +0000 ROA not before: Fri 20 Jun 2025 09:31:24 +0000 ROA not after: Thu 18 Sep 2025 09:31:24 +0000 asID: 22773 IP address blocks: 70.170.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:32:d9:a1:86:a3:42:19:56:fa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:24 2025 GMT Not After : Sep 18 09:31:24 2025 GMT Subject: CN=4dd2f324-18cd-4037-9ff0-de2f2bfec3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:54:b3:0b:e0:ce:09:49:c1:cd:0e:a7:d4: 97:bc:68:20:44:fa:81:bc:1c:3a:28:bd:34:1b:8d: 4b:41:b5:93:a6:3e:c5:fd:82:62:f5:25:1f:fe:c1: 84:71:8c:72:ae:04:28:53:5f:a5:1a:40:be:d9:de: 18:91:03:9a:d3:23:81:ec:51:67:1c:dd:6c:80:c8: 23:20:b8:c3:90:e1:ee:06:99:88:19:19:fa:7e:79: df:69:c6:5f:23:59:83:79:35:c1:7e:35:60:9e:53: e0:72:ff:ee:fb:cf:99:36:fd:5c:aa:7c:ca:8a:63: 91:62:fa:8b:cf:22:77:ca:39:8a:1e:3d:00:f1:5c: 9b:e3:70:88:89:6b:9e:ff:7a:47:44:b0:cd:ef:a7: 39:20:53:ea:14:d2:d2:a7:3c:66:5e:34:96:a4:18: d2:3d:ca:99:eb:b9:7b:e7:c7:3f:7c:2c:01:01:6e: 01:e4:33:2a:19:59:24:18:d5:0f:89:1f:e5:c9:16: c4:37:6b:e9:08:9e:2b:41:84:4c:c1:f1:ee:22:e4: b4:ec:63:8f:54:e3:d3:6b:64:8e:04:f9:35:49:3c: 98:66:3f:1f:3a:79:31:a3:d0:3d:c9:7a:96:37:49: 6f:aa:df:02:b7:84:b1:83:14:59:46:bc:81:42:e0: a9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A0:9D:96:F8:F8:1B:47:68:4E:43:D1:DE:63:FC:61:0D:0E:D9:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a9d09ac-5aea-3990-a438-bdb2b2e3d4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a4:33:a0:58:82:94:93:5a:1a:2d:ba:75:71:d5:30:61:71: 58:25:1f:a5:f9:27:5d:4d:5a:4e:26:c7:86:7c:c7:42:6d:4c: 7d:9a:f2:b9:6f:cb:11:eb:e1:03:3f:d1:d8:c7:4a:ac:06:49: dc:23:c2:eb:07:04:6a:32:1f:03:96:f1:c9:91:d2:06:4b:25: f9:99:ed:da:d9:e2:e5:52:bf:56:b2:ea:ed:a4:0c:75:30:56: c8:98:13:77:df:56:d2:a3:42:ad:d5:0d:f2:98:64:44:89:5c: 3f:9f:1e:17:86:6c:8e:02:aa:29:05:fa:72:7a:81:29:94:12: ff:a3:27:df:60:27:68:bd:1c:31:d5:c4:9c:1f:42:d3:a3:52: 95:34:ea:ba:d8:e9:4e:49:15:5a:01:3d:87:24:96:d9:6a:cb: 4f:bf:87:a9:02:c6:73:80:a7:c2:f3:53:d1:60:3f:fb:14:20: 33:e8:74:65:4c:01:eb:9b:e6:dd:a3:58:be:ca:a1:91:8f:12: d4:34:58:53:05:aa:02:13:2f:2c:d6:7a:c1:a9:a7:e8:3d:fb: ce:4b:02:7e:80:72:28:15:74:f8:fa:c2:0b:aa:5a:be:3d:a2: 95:53:d0:78:05:5d:0d:9e:5e:16:20:1e:83:77:6c:3b:75:e5: 06:77:7d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqDLZoYajQhlW+pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEyNFoXDTI1MDkxODA5MzEyNFowLzEtMCsGA1UEAxMk NGRkMmYzMjQtMThjZC00MDM3LTlmZjAtZGUyZjJiZmVjM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY9UswvgzglJwc0Op9SXvGggRPqBvBw6KL00 G41LQbWTpj7F/YJi9SUf/sGEcYxyrgQoU1+lGkC+2d4YkQOa0yOB7FFnHN1sgMgj ILjDkOHuBpmIGRn6fnnfacZfI1mDeTXBfjVgnlPgcv/u+8+ZNv1cqnzKimORYvqL zyJ3yjmKHj0A8Vyb43CIiWue/3pHRLDN76c5IFPqFNLSpzxmXjSWpBjSPcqZ67l7 58c/fCwBAW4B5DMqGVkkGNUPiR/lyRbEN2vpCJ4rQYRMwfHuIuS07GOPVOPTa2SO BPk1STyYZj8fOnkxo9A9yXqWN0lvqt8Ct4SxgxRZRryBQuCp5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOygnZb4+BtHaE5D0d5j/GENDtmIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWE5ZDA5YWMtNWFlYS0z OTkwLWE0MzgtYmRiMmIyZTNkNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESkM6BYgpSTWhotunVx1TBhcVglH6X5J11NWk4mx4Z8x0JtTH2a8rlv yxHr4QM/0djHSqwGSdwjwusHBGoyHwOW8cmR0gZLJfmZ7drZ4uVSv1ay6u2kDHUw VsiYE3ffVtKjQq3VDfKYZESJXD+fHheGbI4CqikF+nJ6gSmUEv+jJ99gJ2i9HDHV xJwfQtOjUpU06rrY6U5JFVoBPYckltlqy0+/h6kCxnOAp8LzU9FgP/sUIDPodGVM Aeub5t2jWL7KoZGPEtQ0WFMFqgITLyzWesGpp+g9+85LAn6AcigVdPj6wguqWr49 opVT0HgFXQ2eXhYgHoN3bDt15QZ3fTY= -----END CERTIFICATE-----Generated at Tue Jul 1 01:08:06 2025 by rpki-client