$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29e5ad7a-dd3c-3bad-91a7-7a357118f499.roa File: 29e5ad7a-dd3c-3bad-91a7-7a357118f499.roa (raw, json) Hash identifier: ooy8giZaheTximkz0Czmy0byD+j5blqLtPL4+PExT6M= Subject key identifier: 29:5E:D4:77:8D:26:DE:E6:9B:F7:D1:09:DB:26:41:30:7E:19:9D:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7CAF7484FECB1C6C4B800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29e5ad7a-dd3c-3bad-91a7-7a357118f499.roa Signing time: Thu 19 Jun 2025 09:19:52 +0000 ROA not before: Thu 19 Jun 2025 09:19:52 +0000 ROA not after: Wed 17 Sep 2025 09:19:52 +0000 asID: 65009 IP address blocks: 70.167.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:ca:f7:48:4f:ec:b1:c6:c4:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:52 2025 GMT Not After : Sep 17 09:19:52 2025 GMT Subject: CN=82ed63b2-7fee-4104-8e1a-a1f9587a5537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:c4:6c:c7:c1:7e:69:52:2c:aa:b2:d8:f2:3c: b6:67:a2:ba:3e:5a:e1:f7:29:b7:d2:76:06:cf:7e: 30:72:d8:ad:b0:c5:02:4f:e0:10:a2:8b:c6:d7:e4: 7d:38:18:d4:01:b9:a4:0f:46:c4:ad:b4:cd:7d:dd: f9:76:9d:cc:85:4e:d9:21:fa:c5:61:43:79:5a:51: b7:5b:b5:09:cb:3e:a1:70:fb:e4:34:7a:55:5b:47: f8:26:61:5b:17:9b:97:37:9b:3d:0a:60:65:b1:90: 5f:87:6f:fe:f3:9f:50:e6:f6:e1:6d:61:a7:cb:81: 69:d4:4d:4d:05:d2:58:f0:81:f1:0e:64:27:cd:51: b9:e6:fc:b1:2c:4d:41:ba:4c:d5:81:74:62:4e:61: ab:00:b8:85:3c:2f:06:ab:d1:07:3f:2e:18:a7:57: 05:d7:1b:aa:54:6d:a1:d8:74:87:c6:55:e4:d7:6a: 72:74:40:fe:a1:0c:64:cd:bd:ec:49:73:71:74:f2: 44:7d:6c:69:b7:7e:61:22:50:c8:da:da:d1:fa:75: 61:ad:dd:98:9d:c1:cd:08:20:5f:1d:06:3a:b3:49: 89:96:3d:cf:6f:c3:02:4f:2b:05:9f:9a:ea:e7:22: 70:05:e2:2c:5f:80:fc:6e:ac:d6:c1:3f:30:1b:16: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5E:D4:77:8D:26:DE:E6:9B:F7:D1:09:DB:26:41:30:7E:19:9D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29e5ad7a-dd3c-3bad-91a7-7a357118f499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.167.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a1:b2:99:03:68:fa:3d:97:b7:a3:65:c2:50:83:f0:b3:ca: c1:e3:47:e3:2e:0b:fa:3d:db:cd:b9:d2:72:3d:06:30:1b:42: c4:90:39:2f:1f:36:2a:a0:61:4a:45:94:50:af:23:c9:dd:97: a0:d6:59:3d:20:3f:66:5b:25:da:1c:97:1c:3d:6c:84:9b:12: f0:8e:25:09:fb:a7:ee:1c:4c:1c:08:65:7a:d7:e9:c4:c7:88: 1a:d0:42:45:ba:f4:f4:24:0a:a8:95:b7:80:6e:70:d9:cd:e0: 75:90:ce:81:11:b7:c4:82:3e:04:2a:39:02:0e:3a:f8:09:70: 6f:c2:5d:d3:51:95:eb:78:d1:38:63:47:c6:b8:ea:87:38:3e: 7f:ec:96:f8:b8:72:a8:6c:95:94:d9:b1:03:8f:2f:3f:04:d9: d8:57:38:4e:89:ac:ed:0d:3d:86:b3:ec:43:fb:01:82:1a:cd: 41:2c:13:52:1b:27:71:15:a2:c8:91:64:72:de:0a:8f:5e:1b: 0f:aa:55:6f:7b:56:5c:5d:e9:1a:d4:d7:dd:64:a8:04:c5:32: ec:8c:b0:33:ca:5d:cd:e6:0a:e8:b0:5a:c8:93:88:cd:d0:34: 5a:ae:3a:14:2d:82:c3:1e:d0:fe:23:17:36:5d:7b:4c:2b:49: 2b:b5:66:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo918r3SE/sscbEuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk1MloXDTI1MDkxNzA5MTk1MlowLzEtMCsGA1UEAxMk ODJlZDYzYjItN2ZlZS00MTA0LThlMWEtYTFmOTU4N2E1NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/8Rsx8F+aVIsqrLY8jy2Z6K6Plrh9ym30nYG z34wctitsMUCT+AQoovG1+R9OBjUAbmkD0bErbTNfd35dp3MhU7ZIfrFYUN5WlG3 W7UJyz6hcPvkNHpVW0f4JmFbF5uXN5s9CmBlsZBfh2/+859Q5vbhbWGny4Fp1E1N BdJY8IHxDmQnzVG55vyxLE1BukzVgXRiTmGrALiFPC8Gq9EHPy4Yp1cF1xuqVG2h 2HSHxlXk12pydED+oQxkzb3sSXNxdPJEfWxpt35hIlDI2trR+nVhrd2YncHNCCBf HQY6s0mJlj3Pb8MCTysFn5rq5yJwBeIsX4D8bqzWwT8wGxa2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCle1HeNJt7mm/fRCdsmQTB+GZ30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjllNWFkN2EtZGQzYy0z YmFkLTkxYTctN2EzNTcxMThmNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqeOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWhspkDaPo9l7ejZcJQg/CzysHjR+MuC/o928250nI9BjAbQsSQOS8f NiqgYUpFlFCvI8ndl6DWWT0gP2ZbJdoclxw9bISbEvCOJQn7p+4cTBwIZXrX6cTH iBrQQkW69PQkCqiVt4BucNnN4HWQzoERt8SCPgQqOQIOOvgJcG/CXdNRlet40Thj R8a46oc4Pn/slvi4cqhslZTZsQOPLz8E2dhXOE6JrO0NPYaz7EP7AYIazUEsE1Ib J3EVosiRZHLeCo9eGw+qVW97Vlxd6RrU191kqATFMuyMsDPKXc3mCuiwWsiTiM3Q NFquOhQtgsMe0P4jFzZde0wrSSu1Zhk= -----END CERTIFICATE-----Generated at Thu Jul 3 03:43:43 2025 by rpki-client