$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2907687a-8060-3a65-a1fb-795d7687b553.roa File: 2907687a-8060-3a65-a1fb-795d7687b553.roa (raw, json) Hash identifier: bgk5Fi1E7hqMENVfh2i9zLwTgO04S75ij0njzLh5oMk= Subject key identifier: 7B:DD:C4:7A:31:93:C4:DD:0A:6A:35:7C:6A:BE:3B:F7:68:8F:D1:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA1E4228AC239F736895A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2907687a-8060-3a65-a1fb-795d7687b553.roa Signing time: Fri 20 Jun 2025 09:35:16 +0000 ROA not before: Fri 20 Jun 2025 09:35:16 +0000 ROA not after: Thu 18 Sep 2025 09:35:16 +0000 asID: 22773 IP address blocks: 174.67.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:1e:42:28:ac:23:9f:73:68:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:16 2025 GMT Not After : Sep 18 09:35:16 2025 GMT Subject: CN=8e59d131-5c5f-4bfa-aeaf-43c9f5f2cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ea:28:34:8c:c4:83:6e:13:e5:4c:c1:7d:54: 24:b4:9c:e5:bb:e9:87:91:34:a2:82:5c:dd:0a:59: ab:76:70:f9:52:5d:58:a5:11:6e:a1:c3:1c:24:47: fc:6d:21:d7:90:c4:b2:78:25:c8:2b:54:89:9b:b5: 8b:9a:46:d6:e0:1a:ec:5a:dd:9a:49:39:98:9b:a7: ba:7c:f6:a2:73:1e:e6:98:ac:ba:65:a8:a2:8f:d1: 6f:14:bf:2a:3b:40:25:87:2f:71:39:f6:01:48:71: e8:e7:cf:27:60:c2:00:88:fa:b1:2a:18:db:ba:92: 76:6b:c3:73:4f:e7:07:32:3c:18:89:9d:2e:dd:9e: b1:75:6a:70:a3:c2:7a:e2:7d:4d:41:a9:19:bb:34: a8:e5:c5:10:02:9a:a8:9c:c5:e9:b9:cd:e7:f3:4b: 3d:76:71:6b:98:a2:d4:91:e4:25:3e:5c:1d:4f:b4: 00:4d:c6:51:27:b1:08:a4:a1:a5:38:08:17:f1:23: 5e:01:0c:15:93:f4:db:97:58:ac:6a:06:b6:01:18: 76:68:de:69:17:6b:ac:af:7e:85:48:ba:bf:a1:f5: 03:2d:30:6d:ff:4f:6c:c2:09:74:cd:ea:0c:3e:f6: 82:55:4e:e7:83:36:db:04:7b:8b:c6:0a:d6:58:ba: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DD:C4:7A:31:93:C4:DD:0A:6A:35:7C:6A:BE:3B:F7:68:8F:D1:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2907687a-8060-3a65-a1fb-795d7687b553.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.67.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7a:bb:62:9f:a7:1d:f3:41:fe:fc:86:47:78:47:8b:85:4e: f6:9f:58:ac:f7:4e:a9:90:71:b2:70:da:19:a0:86:72:7a:a2: 08:1f:55:1b:26:f9:c5:46:aa:48:4a:20:de:a0:af:12:3d:53: 09:53:84:1e:d5:c6:a3:c5:0e:3d:9b:7d:86:08:95:47:90:8e: 7c:91:da:e1:50:af:e5:5d:43:5c:3c:2e:b5:17:d1:d4:cd:14: 26:b4:30:c2:eb:46:e2:4f:00:b9:4e:b8:82:74:6b:49:fb:1a: 40:9d:1b:cb:3e:bf:00:50:6c:cd:22:e8:6c:cf:9c:28:52:e3: 02:bf:92:72:e8:bb:52:23:7c:68:b4:f6:2f:cd:c7:df:f3:7f: 40:2e:63:59:2c:30:b3:50:cf:30:2c:e9:67:5d:bf:29:74:0d: 63:c9:25:28:c5:cc:d2:b3:96:fe:2b:6d:5f:1a:fd:b4:6b:d3: c9:69:f6:58:ba:1d:ac:cb:f8:d2:f5:17:58:cb:4e:84:e6:4f: 0e:39:87:5a:00:a0:6c:ed:2f:5e:b4:75:e0:fe:1b:de:6e:33: ae:d3:bc:94:b3:47:78:5c:4b:46:ca:f2:d4:95:a7:ef:a3:42: 3c:f8:6c:d3:9e:5d:91:17:d0:a3:e5:27:3b:d0:ec:33:c9:cb: e5:63:82:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqh5CKKwjn3NolaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxNloXDTI1MDkxODA5MzUxNlowLzEtMCsGA1UEAxMk OGU1OWQxMzEtNWM1Zi00YmZhLWFlYWYtNDNjOWY1ZjJjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eooNIzEg24T5UzBfVQktJzlu+mHkTSiglzd ClmrdnD5Ul1YpRFuocMcJEf8bSHXkMSyeCXIK1SJm7WLmkbW4BrsWt2aSTmYm6e6 fPaicx7mmKy6Zaiij9FvFL8qO0Alhy9xOfYBSHHo588nYMIAiPqxKhjbupJ2a8Nz T+cHMjwYiZ0u3Z6xdWpwo8J64n1NQakZuzSo5cUQApqonMXpuc3n80s9dnFrmKLU keQlPlwdT7QATcZRJ7EIpKGlOAgX8SNeAQwVk/Tbl1isaga2ARh2aN5pF2usr36F SLq/ofUDLTBt/09swgl0zeoMPvaCVU7ngzbbBHuLxgrWWLonHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvdxHoxk8TdCmo1fGq+O/doj9HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkwNzY4N2EtODA2MC0z YTY1LWExZmItNzk1ZDc2ODdiNTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp6u2Kfpx3zQf78hkd4R4uFTvafWKz3TqmQcbJw2hmghnJ6oggfVRsm +cVGqkhKIN6grxI9UwlThB7VxqPFDj2bfYYIlUeQjnyR2uFQr+VdQ1w8LrUX0dTN FCa0MMLrRuJPALlOuIJ0a0n7GkCdG8s+vwBQbM0i6GzPnChS4wK/knLou1IjfGi0 9i/Nx9/zf0AuY1ksMLNQzzAs6Wddvyl0DWPJJSjFzNKzlv4rbV8a/bRr08lp9li6 HazL+NL1F1jLToTmTw45h1oAoGztL160deD+G95uM67TvJSzR3hcS0bK8tSVp++j Qjz4bNOeXZEX0KPlJzvQ7DPJy+Vjgh8= -----END CERTIFICATE-----Generated at Wed Jul 2 07:00:02 2025 by rpki-client