$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa File: 2c289e55-f642-3025-b60e-b5d58f65be69.roa (raw, json) Hash identifier: KcLXRtDrzxGzuWezLw9HSJPaXkD8mKTezYaoK9Dm3NA= Subject key identifier: 5D:99:47:03:0E:FF:E1:4A:22:03:C5:30:99:53:E9:37:E6:72:9F:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD878B023E111A9A9453660 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa Signing time: Thu 19 Jun 2025 09:21:14 +0000 ROA not before: Thu 19 Jun 2025 09:21:14 +0000 ROA not after: Wed 17 Sep 2025 09:21:14 +0000 asID: 22773 IP address blocks: 70.176.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:78:b0:23:e1:11:a9:a9:45:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:14 2025 GMT Not After : Sep 17 09:21:14 2025 GMT Subject: CN=b00a0c7f-e4c9-4af2-b11a-1200f419a52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:bf:6d:b0:11:87:e6:ba:83:7e:bc:29:ef: b0:93:67:e7:47:c1:6b:42:1d:7b:0d:28:76:b8:00: d6:c5:24:43:89:b2:a6:86:93:e9:45:06:1c:bd:d0: 0c:94:f9:a6:06:c8:71:45:2d:db:d7:4e:59:c2:af: d3:53:86:ba:ca:0b:cc:ed:c5:f7:7d:ef:46:d3:d4: cf:47:92:89:e0:b3:05:fd:af:b6:49:9e:03:11:de: c6:74:13:36:89:6f:80:b7:97:33:cb:bb:e5:02:79: d9:a8:bb:a0:6f:96:cd:2e:d9:ed:76:92:61:8b:fb: c8:a0:5d:e4:0c:ea:6e:73:94:12:19:aa:c6:8b:a3: 31:a1:8f:7f:52:2c:eb:46:c8:76:0e:23:cf:fd:d2: 23:0d:ec:18:37:e8:59:91:18:0b:e5:b6:e2:61:08: 14:f4:d2:3d:77:d3:31:f4:dd:6a:6b:77:aa:e6:73: 98:87:4b:72:82:45:dd:69:06:ff:a1:f4:b2:b2:89: eb:1a:f3:3d:d9:fe:39:1a:6e:fd:98:7a:6d:1b:1c: ca:69:de:ae:3d:e7:94:62:55:4a:88:79:b4:49:ba: 81:87:f0:be:6a:6a:36:c3:d8:90:99:23:f5:f7:fa: d4:03:98:29:ec:61:0a:3b:4c:49:48:1e:29:9c:8e: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:99:47:03:0E:FF:E1:4A:22:03:C5:30:99:53:E9:37:E6:72:9F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c289e55-f642-3025-b60e-b5d58f65be69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1c:3b:87:f1:60:ad:d0:91:a1:25:43:4d:16:8e:42:f3:63: c1:b8:9c:ec:9a:c2:3f:7f:4f:59:63:fe:85:75:03:04:9c:ae: 10:a5:1b:3f:c3:72:d9:a2:ea:b6:be:68:5c:ad:71:2d:0a:65: 3a:fe:7b:ec:cf:56:c7:1a:67:f9:6a:71:0c:f8:c6:86:f4:a8: 79:33:2c:79:f9:38:62:e2:f7:20:d7:da:04:36:0c:9c:de:c4: 89:60:2a:55:ca:86:8e:6a:08:63:8e:cb:a3:7d:8f:3e:6d:69: 22:2a:a0:cc:d5:59:04:f7:e6:b1:ef:dc:38:cf:c3:84:d7:0c: 4b:48:43:e1:f5:ee:32:9d:e1:58:a9:2e:95:a8:60:d8:c9:e6: 65:91:de:ca:7f:27:4d:35:d0:65:6d:f3:c3:65:9a:49:ac:dc: aa:a9:1f:53:b2:04:cd:97:77:a3:0f:e3:f5:14:a5:a1:27:1f: bf:b6:58:34:75:9d:58:26:f9:78:71:ab:e2:1d:2f:a7:31:2b: 49:58:c2:64:83:fb:9d:80:1e:49:25:f7:f1:3a:e8:e3:76:99: 4a:bd:37:96:89:b7:4e:75:04:50:e6:74:21:1c:e7:77:0c:8d: e8:03:ae:bb:49:80:a7:72:81:3e:56:a6:17:20:98:47:56:27: 1b:ab:e4:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92HiwI+ERqalFNmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjExNFoXDTI1MDkxNzA5MjExNFowLzEtMCsGA1UEAxMk YjAwYTBjN2YtZTRjOS00YWYyLWIxMWEtMTIwMGY0MTlhNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0S/bbARh+a6g368Ke+wk2fnR8FrQh17DSh2 uADWxSRDibKmhpPpRQYcvdAMlPmmBshxRS3b105Zwq/TU4a6ygvM7cX3fe9G09TP R5KJ4LMF/a+2SZ4DEd7GdBM2iW+At5czy7vlAnnZqLugb5bNLtntdpJhi/vIoF3k DOpuc5QSGarGi6MxoY9/UizrRsh2DiPP/dIjDewYN+hZkRgL5bbiYQgU9NI9d9Mx 9N1qa3eq5nOYh0tygkXdaQb/ofSysonrGvM92f45Gm79mHptGxzKad6uPeeUYlVK iHm0SbqBh/C+amo2w9iQmSP19/rUA5gp7GEKO0xJSB4pnI6L6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2ZRwMO/+FKIgPFMJlT6Tfmcp+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmMyODllNTUtZjY0Mi0z MDI1LWI2MGUtYjVkNThmNjViZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAcO4fxYK3QkaElQ00WjkLzY8G4nOyawj9/T1lj/oV1AwScrhClGz/D ctmi6ra+aFytcS0KZTr+e+zPVscaZ/lqcQz4xob0qHkzLHn5OGLi9yDX2gQ2DJze xIlgKlXKho5qCGOOy6N9jz5taSIqoMzVWQT35rHv3DjPw4TXDEtIQ+H17jKd4Vip LpWoYNjJ5mWR3sp/J0010GVt88Nlmkms3KqpH1OyBM2Xd6MP4/UUpaEnH7+2WDR1 nVgm+Xhxq+IdL6cxK0lYwmSD+52AHkkl9/E66ON2mUq9N5aJt051BFDmdCEc53cM jegDrrtJgKdygT5WphcgmEdWJxur5P0= -----END CERTIFICATE-----Generated at Wed Jul 2 01:35:47 2025 by rpki-client