$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/233a0d66-1760-33e3-9e44-41f4b337fd6e.roa File: 233a0d66-1760-33e3-9e44-41f4b337fd6e.roa (raw, json) Hash identifier: kGR/2jFE3Cw76b1WBOwziE0oDL02IFbSJ76fU1Tz0bg= Subject key identifier: 20:5E:3A:C4:D6:19:E1:FA:4C:5F:82:3C:D1:A0:1E:15:8A:FE:6B:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A893F88CC763FE65DC63B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/233a0d66-1760-33e3-9e44-41f4b337fd6e.roa Signing time: Fri 20 Jun 2025 09:32:10 +0000 ROA not before: Fri 20 Jun 2025 09:32:10 +0000 ROA not after: Thu 18 Sep 2025 09:32:10 +0000 asID: 22773 IP address blocks: 70.173.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:93:f8:8c:c7:63:fe:65:dc:63:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:10 2025 GMT Not After : Sep 18 09:32:10 2025 GMT Subject: CN=425d871c-086d-4822-be4a-d6041ced1ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:d2:f9:81:9b:85:12:1f:8c:d4:13:b9:d7: c9:94:96:55:e6:13:3b:35:96:5c:42:30:83:d2:d9: db:e4:1a:fe:20:34:cc:7d:54:0f:c1:7f:b4:65:21: 6b:56:bf:7b:50:af:a1:8f:a5:bf:45:a4:e9:2e:73: b6:bc:01:b6:bf:ad:a0:60:47:3a:42:3d:6a:7a:35: 95:c0:f6:ad:c3:72:cf:11:af:b1:04:89:9e:87:16: 6a:b4:42:b6:fa:81:22:da:96:a8:09:5f:bd:64:f6: 97:25:30:b9:58:a5:25:5e:b0:e3:84:98:2e:9b:cf: 7a:61:5c:8c:17:28:af:75:15:4b:a9:38:d5:af:2a: 8e:3f:f1:06:71:27:45:ef:7d:c9:d7:eb:55:69:0e: b5:5a:a9:40:7e:55:3c:e8:f9:d7:3b:71:f7:e4:44: c7:84:c5:f6:2e:1a:4e:09:72:cf:21:78:3f:a1:8a: 8d:49:5a:a4:14:ad:3d:12:1f:f5:56:1a:e0:7d:27: 5d:17:a7:c3:21:56:e4:7f:0a:98:56:e7:e1:05:7b: f1:cc:43:e3:93:8b:7d:e7:ef:8c:38:72:3d:91:0b: 82:7d:13:03:3f:79:ff:d6:f9:97:5d:8c:a1:ea:7a: e8:08:4a:88:22:ee:ab:d9:3d:ab:e2:42:d8:e7:da: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:3A:C4:D6:19:E1:FA:4C:5F:82:3C:D1:A0:1E:15:8A:FE:6B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/233a0d66-1760-33e3-9e44-41f4b337fd6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:59:24:86:52:d1:f0:88:12:a2:53:b0:2b:3e:dc:c4:08:65: 8c:1f:ee:14:d7:86:92:3c:81:80:20:1a:81:c7:2c:42:52:80: 19:0a:80:60:44:dc:0b:b6:ba:3d:8e:93:26:0e:d6:98:8a:27: a2:1d:cb:31:80:b5:89:c2:11:3a:ce:e1:74:ed:35:db:5f:81: b3:cf:6c:25:c3:63:f7:ad:ab:68:bc:82:9a:dd:76:fa:e9:f1: c7:ed:3b:f0:85:09:a9:52:d5:85:9e:94:6a:b9:81:4d:3f:37: 20:35:8b:90:a6:49:62:d4:84:fa:ec:04:c8:94:7c:59:3e:8d: 6d:4b:94:ed:4e:b9:3b:00:b9:7f:6e:dc:9a:98:c6:29:cf:4c: c1:17:d4:57:d3:d3:06:fc:fa:4a:d1:8f:64:9e:56:6d:84:aa: cd:4d:11:0d:fd:2b:63:bd:c6:0c:72:ed:67:16:02:9a:2d:0d: ab:40:71:19:95:1c:8f:92:c9:30:01:e4:f1:99:bd:ce:79:3b: c6:ee:f3:8c:0a:53:09:50:92:e0:6d:65:9c:5d:6f:c5:db:c8: d3:09:e0:64:34:e7:d4:4f:0d:a6:3c:e2:a1:ca:54:25:52:58: 9d:2d:33:34:c7:0b:ae:78:ce:98:ee:c0:b0:1e:cd:56:40:33: 22:af:47:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqJP4jMdj/mXcY7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIxMFoXDTI1MDkxODA5MzIxMFowLzEtMCsGA1UEAxMk NDI1ZDg3MWMtMDg2ZC00ODIyLWJlNGEtZDYwNDFjZWQxY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLS+YGbhRIfjNQTudfJlJZV5hM7NZZcQjCD 0tnb5Br+IDTMfVQPwX+0ZSFrVr97UK+hj6W/RaTpLnO2vAG2v62gYEc6Qj1qejWV wPatw3LPEa+xBImehxZqtEK2+oEi2paoCV+9ZPaXJTC5WKUlXrDjhJgum896YVyM FyivdRVLqTjVryqOP/EGcSdF733J1+tVaQ61WqlAflU86PnXO3H35ETHhMX2LhpO CXLPIXg/oYqNSVqkFK09Eh/1VhrgfSddF6fDIVbkfwqYVufhBXvxzEPjk4t95++M OHI9kQuCfRMDP3n/1vmXXYyh6nroCEqIIu6r2T2r4kLY59oqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBeOsTWGeH6TF+CPNGgHhWK/mvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMzYTBkNjYtMTc2MC0z M2UzLTllNDQtNDFmNGIzMzdmZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1ZJIZS0fCIEqJTsCs+3MQIZYwf7hTXhpI8gYAgGoHHLEJSgBkKgGBE 3Au2uj2OkyYO1piKJ6IdyzGAtYnCETrO4XTtNdtfgbPPbCXDY/etq2i8gprddvrp 8cftO/CFCalS1YWelGq5gU0/NyA1i5CmSWLUhPrsBMiUfFk+jW1LlO1OuTsAuX9u 3JqYxinPTMEX1FfT0wb8+krRj2SeVm2Eqs1NEQ39K2O9xgxy7WcWApotDatAcRmV HI+SyTAB5PGZvc55O8bu84wKUwlQkuBtZZxdb8XbyNMJ4GQ059RPDaY84qHKVCVS WJ0tMzTHC654zpjuwLAezVZAMyKvRwM= -----END CERTIFICATE-----Generated at Tue Jul 1 21:26:48 2025 by rpki-client