$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1de2f7d0-ac03-3be7-ac81-10451bd158d8.roa File: 1de2f7d0-ac03-3be7-ac81-10451bd158d8.roa (raw, json) Hash identifier: yWhrqYbFBPueobupTNl4kGsdo8kfJ123YwP13JkqccQ= Subject key identifier: BC:B1:86:DE:A3:69:08:EC:F7:E0:66:59:7E:E7:3D:50:28:F5:9D:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75118F19991BBB37E53880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1de2f7d0-ac03-3be7-ac81-10451bd158d8.roa Signing time: Thu 19 Jun 2025 14:36:46 +0000 ROA not before: Thu 19 Jun 2025 14:36:46 +0000 ROA not after: Wed 17 Sep 2025 14:36:46 +0000 asID: 22773 IP address blocks: 70.190.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:11:8f:19:99:1b:bb:37:e5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:46 2025 GMT Not After : Sep 17 14:36:46 2025 GMT Subject: CN=2f67e17d-7bd9-4fdc-8d22-9a5d422469dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:b8:a2:fe:55:65:78:0d:ff:c6:57:8a:24: 16:e2:79:02:aa:7e:bd:94:6e:fd:d6:65:7b:23:9f: 97:be:e7:d6:95:d0:09:90:ab:81:3e:35:a0:2a:07: b8:5b:f0:dc:22:e6:b1:4d:cd:b0:f7:27:e9:31:7a: a7:5e:3e:29:c0:0e:6e:97:b1:72:dc:8a:28:06:69: a0:e2:53:5f:14:5f:ae:fb:d5:43:90:4f:ef:36:72: 12:40:39:10:99:39:3a:32:f3:16:23:7f:80:e6:50: 38:22:94:74:0b:4b:fd:d7:e9:f3:ff:29:ec:f9:f8: f0:74:fd:28:9f:24:ea:6a:63:7d:5f:53:5e:fe:12: 54:7a:a0:91:3f:95:e4:45:6b:5a:ca:28:a0:b4:87: 81:f0:cc:c3:d0:b4:5d:42:9c:58:d6:6a:ad:b1:c9: 32:2f:fc:5b:1c:3f:71:32:db:ee:d8:e3:a3:77:0c: 20:58:da:38:bc:c6:ff:87:af:08:84:60:0f:d8:40: 04:c4:f6:01:e9:ec:95:ba:f3:d6:32:08:22:25:eb: 0f:0c:fd:19:2c:3f:82:26:6d:fb:f8:fd:0f:7d:b8: e7:69:6b:5c:08:30:b0:72:ab:8c:8c:1c:1d:00:90: da:89:b0:65:c2:19:8a:c4:14:3b:2a:51:c7:72:15: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:86:DE:A3:69:08:EC:F7:E0:66:59:7E:E7:3D:50:28:F5:9D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1de2f7d0-ac03-3be7-ac81-10451bd158d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a4:06:d0:3f:72:96:cf:c3:9f:6e:02:36:46:21:88:0a:64: f2:6c:87:63:59:1a:1c:61:9f:3d:90:c8:de:90:47:06:90:18: a1:c1:96:33:3f:5a:3b:88:3c:65:4c:e8:10:b4:7d:da:e4:25: a2:32:c6:18:b7:3e:84:42:c9:6d:56:33:73:2a:51:4c:51:e8: 68:39:48:d7:4f:46:4d:ad:c5:31:dc:f0:47:f5:67:97:a2:01: 98:13:c9:8c:23:03:0b:49:a4:cd:46:cb:99:59:be:ea:21:44: d4:3b:c9:7a:cb:63:d6:9f:cf:82:90:49:81:a5:0d:b8:e6:b1: ec:ca:a0:68:57:95:b5:cf:1c:e4:98:5f:3f:03:a2:ea:57:46: 1a:fc:e6:b8:21:53:71:21:c7:fd:d8:5c:0b:1d:59:83:25:ef: fe:e7:d9:b2:48:f5:41:04:9d:76:1d:74:64:d2:61:85:e5:72: fc:68:af:fb:c7:21:27:bd:a4:d8:1a:fc:0c:67:e2:84:b8:8d: 10:db:1f:ca:a1:a4:67:b6:da:46:eb:53:76:e1:0a:bd:ed:1a: ed:53:f4:02:fe:54:7e:97:6f:b0:43:7d:1b:f7:8b:32:b6:08: 05:ad:2c:86:4f:72:14:99:29:6a:66:3e:f0:9b:c4:e1:55:63: 07:da:73:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dRGPGZkbuzflOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzY0NloXDTI1MDkxNzE0MzY0NlowLzEtMCsGA1UEAxMk MmY2N2UxN2QtN2JkOS00ZmRjLThkMjItOWE1ZDQyMjQ2OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS24ov5VZXgN/8ZXiiQW4nkCqn69lG791mV7 I5+XvufWldAJkKuBPjWgKge4W/DcIuaxTc2w9yfpMXqnXj4pwA5ul7Fy3IooBmmg 4lNfFF+u+9VDkE/vNnISQDkQmTk6MvMWI3+A5lA4IpR0C0v91+nz/yns+fjwdP0o nyTqamN9X1Ne/hJUeqCRP5XkRWtayiigtIeB8MzD0LRdQpxY1mqtsckyL/xbHD9x Mtvu2OOjdwwgWNo4vMb/h68IhGAP2EAExPYB6eyVuvPWMggiJesPDP0ZLD+CJm37 +P0PfbjnaWtcCDCwcquMjBwdAJDaibBlwhmKxBQ7KlHHchX4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyxht6jaQjs9+BmWX7nPVAo9Z3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRlMmY3ZDAtYWMwMy0z YmU3LWFjODEtMTA0NTFiZDE1OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABekBtA/cpbPw59uAjZGIYgKZPJsh2NZGhxhnz2QyN6QRwaQGKHBljM/ WjuIPGVM6BC0fdrkJaIyxhi3PoRCyW1WM3MqUUxR6Gg5SNdPRk2txTHc8Ef1Z5ei AZgTyYwjAwtJpM1Gy5lZvuohRNQ7yXrLY9afz4KQSYGlDbjmsezKoGhXlbXPHOSY Xz8DoupXRhr85rghU3Ehx/3YXAsdWYMl7/7n2bJI9UEEnXYddGTSYYXlcvxor/vH ISe9pNga/Axn4oS4jRDbH8qhpGe22kbrU3bhCr3tGu1T9AL+VH6Xb7BDfRv3izK2 CAWtLIZPchSZKWpmPvCbxOFVYwfac5Q= -----END CERTIFICATE-----Generated at Tue Jul 1 01:08:17 2025 by rpki-client