$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25b7d07c-d05c-3ce7-8987-d24159806942.roa File: 25b7d07c-d05c-3ce7-8987-d24159806942.roa (raw, json) Hash identifier: HN7g2vkZtT+848ZCXodfUPJoU9x2N1CEnD/O0EOMDLA= Subject key identifier: E6:C9:08:24:0A:20:A3:3E:49:CA:7A:CE:8E:B8:C1:48:A2:9E:EE:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8A2B1D2B8715D12588B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25b7d07c-d05c-3ce7-8987-d24159806942.roa Signing time: Fri 20 Jun 2025 09:32:17 +0000 ROA not before: Fri 20 Jun 2025 09:32:17 +0000 ROA not after: Thu 18 Sep 2025 09:32:17 +0000 asID: 22773 IP address blocks: 70.173.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:a2:b1:d2:b8:71:5d:12:58:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:17 2025 GMT Not After : Sep 18 09:32:17 2025 GMT Subject: CN=fbc66e74-579c-467a-b94f-ef9fa466c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:83:4f:8b:7e:1a:47:35:86:dd:f7:fd:01: ac:38:49:f9:1f:ec:90:ca:9c:c2:d3:78:83:81:f4: 36:31:4a:1d:bf:66:f2:ed:f5:73:ca:d3:2f:d3:b8: 4a:3e:cd:cf:c9:cd:30:24:3e:2b:f9:5d:fa:90:3d: 32:cc:86:9b:58:d7:1b:ad:eb:b6:4a:88:64:7d:4b: 31:ce:47:91:32:9c:2b:94:27:e1:d1:6e:6d:6d:b4: ce:b7:69:a9:04:6d:2d:9f:6b:43:70:a1:63:12:fc: f1:f8:dd:5c:ff:a6:13:b5:07:71:04:4a:1c:6b:9b: 8b:d6:65:58:07:05:4c:68:4d:c0:55:9a:30:1c:30: 20:19:fd:97:8f:20:cf:37:01:fc:e5:6b:13:bc:ce: d4:be:39:c3:c0:08:d2:d5:fe:1c:56:97:66:55:13: c8:e2:e5:3b:56:49:78:df:b5:7a:91:71:98:2c:7d: d9:b8:69:63:fa:ab:b5:54:82:c1:3b:a9:1d:47:1f: 79:31:7d:00:9c:ae:e5:fe:f9:c6:b7:d1:44:bd:25: b7:3e:50:10:8b:38:bb:ee:05:22:15:a5:3e:4a:46: 6a:11:c8:33:1a:39:98:e6:2a:45:b7:8a:0c:55:f8: a6:e3:a6:9e:c4:0b:b6:be:8b:1e:b0:9d:dc:e8:0b: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C9:08:24:0A:20:A3:3E:49:CA:7A:CE:8E:B8:C1:48:A2:9E:EE:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25b7d07c-d05c-3ce7-8987-d24159806942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:eb:55:7a:11:9a:1f:f2:d9:c3:45:90:7f:2a:6e:b5:5d:19: ba:70:22:bc:ad:ec:ae:ef:1d:1d:17:05:40:f7:56:6c:52:58: 49:d9:16:e9:4f:97:7e:89:84:f2:90:a9:de:d2:03:12:4b:a7: 80:4d:72:84:ca:90:2f:6b:e4:d8:14:8c:a2:cd:d0:4d:83:5a: 1e:73:f5:5b:ec:85:ba:e4:ad:d5:00:b7:f3:c1:8d:6e:23:80: 2b:ba:fa:28:d9:39:fc:f6:59:03:cf:d8:df:5b:95:df:1d:8e: e6:97:70:9d:25:ed:ea:8d:52:18:33:00:92:a0:d7:b4:2b:3f: d5:64:10:3a:ba:43:d1:c7:95:b5:46:1f:1c:d7:c7:f2:61:95: 00:b3:e8:5b:78:e4:99:b0:8d:f8:f2:f2:ec:3f:c3:54:87:d3: 2c:8e:ea:64:1a:9a:17:04:0d:a9:c6:98:32:33:5b:44:7e:7c: 8d:7a:d2:2f:48:be:8e:a3:75:a3:00:1b:2b:e7:e3:bd:3b:f7: c1:23:60:ae:8b:f3:c1:5f:b7:3c:2f:2e:9f:cc:a9:80:e6:ab: d5:93:61:32:dc:ec:eb:2c:6a:ac:54:88:ac:a7:dd:f0:3e:91: 68:c5:1a:6f:0c:85:53:2a:a2:4f:be:06:52:1a:1c:73:35:bb: 5d:4f:1d:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqKKx0rhxXRJYiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIxN1oXDTI1MDkxODA5MzIxN1owLzEtMCsGA1UEAxMk ZmJjNjZlNzQtNTc5Yy00NjdhLWI5NGYtZWY5ZmE0NjZjMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzCDT4t+Gkc1ht33/QGsOEn5H+yQypzC03iD gfQ2MUodv2by7fVzytMv07hKPs3Pyc0wJD4r+V36kD0yzIabWNcbreu2SohkfUsx zkeRMpwrlCfh0W5tbbTOt2mpBG0tn2tDcKFjEvzx+N1c/6YTtQdxBEoca5uL1mVY BwVMaE3AVZowHDAgGf2XjyDPNwH85WsTvM7UvjnDwAjS1f4cVpdmVRPI4uU7Vkl4 37V6kXGYLH3ZuGlj+qu1VILBO6kdRx95MX0AnK7l/vnGt9FEvSW3PlAQizi77gUi FaU+SkZqEcgzGjmY5ipFt4oMVfim46aexAu2vosesJ3c6AuWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObJCCQKIKM+Scp6zo64wUiinu6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjViN2QwN2MtZDA1Yy0z Y2U3LTg5ODctZDI0MTU5ODA2OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETrVXoRmh/y2cNFkH8qbrVdGbpwIryt7K7vHR0XBUD3VmxSWEnZFulP l36JhPKQqd7SAxJLp4BNcoTKkC9r5NgUjKLN0E2DWh5z9VvshbrkrdUAt/PBjW4j gCu6+ijZOfz2WQPP2N9bld8djuaXcJ0l7eqNUhgzAJKg17QrP9VkEDq6Q9HHlbVG HxzXx/JhlQCz6Ft45Jmwjfjy8uw/w1SH0yyO6mQamhcEDanGmDIzW0R+fI160i9I vo6jdaMAGyvn470798EjYK6L88FftzwvLp/MqYDmq9WTYTLc7OssaqxUiKyn3fA+ kWjFGm8MhVMqok++BlIaHHM1u11PHdc= -----END CERTIFICATE-----Generated at Mon Jun 30 22:55:43 2025 by rpki-client