$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa File: 2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa (raw, json) Hash identifier: iKY0CNDAJNfz+118/7ecj4+heAzW0i/U+S1RuM1fVuM= Subject key identifier: FF:08:8A:95:27:FE:17:68:29:56:CC:6B:AD:C8:72:EF:9E:57:A2:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74ECCA9ABED80FAC9EF280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa Signing time: Thu 19 Jun 2025 14:36:28 +0000 ROA not before: Thu 19 Jun 2025 14:36:28 +0000 ROA not after: Wed 17 Sep 2025 14:36:28 +0000 asID: 22773 IP address blocks: 70.190.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:ec:ca:9a:be:d8:0f:ac:9e:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:28 2025 GMT Not After : Sep 17 14:36:28 2025 GMT Subject: CN=a19f8b8a-bcc4-4be4-9428-4214177a2494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:34:0c:92:55:4b:f1:7a:e1:ba:66:a8:d7: ef:5e:a8:18:d2:b5:ae:8e:53:7a:e8:22:44:ea:4f: 96:04:05:b3:f8:74:46:83:54:70:b1:0c:e2:7a:35: 64:e9:c3:83:bd:a3:76:34:04:63:88:b6:fc:0d:5c: 36:ab:3c:08:8a:c9:52:bf:bc:13:ac:c8:cc:f9:f7: 9b:df:9f:c7:49:b8:5c:39:1d:c0:ae:26:38:82:08: 94:be:78:2b:47:b6:19:bf:25:91:c2:d9:f6:30:76: 44:dc:d8:92:80:03:71:fd:87:9c:b6:2a:c7:45:43: 97:55:71:0e:d6:2c:e6:93:2b:3e:bc:64:8b:19:5d: a4:f7:4c:36:e8:fc:0e:dc:58:56:d8:4b:69:cf:bc: d1:65:40:2d:bd:bc:40:02:ce:5f:24:fc:35:b4:ba: 90:af:ca:4f:e3:47:c3:46:eb:6c:32:f4:9f:37:f9: 72:74:d6:d4:52:20:d6:72:e8:de:39:21:e8:ac:fa: 1f:be:57:bb:95:f1:d0:12:fd:0c:da:8f:5f:e0:72: 3e:e2:3d:91:96:07:77:e8:75:d3:90:c2:3d:30:17: e3:f9:19:2a:ea:be:32:07:b9:4e:f2:73:63:cc:a3: a6:f2:46:0b:01:e1:ce:92:a5:0c:78:d9:89:e5:d1: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:8A:95:27:FE:17:68:29:56:CC:6B:AD:C8:72:EF:9E:57:A2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:e8:c6:2f:9c:99:b4:a1:87:4d:62:8f:dc:09:40:59:08: c5:02:36:a3:9b:c8:ee:6f:b5:e7:69:65:ba:30:14:50:9c:df: b7:6a:36:71:c0:c5:ed:ce:c3:cb:c8:ed:e8:90:2c:09:7d:1f: 84:b8:97:bf:d4:47:db:bf:fe:c0:15:d2:f8:1d:53:8f:8f:0a: da:4b:15:17:bb:30:97:95:2f:a0:25:2f:08:30:de:aa:9b:36: 0d:1e:42:60:53:3b:97:87:f7:c9:ab:af:67:dc:75:b8:ae:33: 58:b3:5a:3d:0f:61:be:d7:d0:eb:1f:b0:72:c4:87:93:5d:37: a0:6f:30:b6:e3:15:7e:17:d8:3c:eb:e3:44:76:9e:f9:26:af: 01:27:c2:ac:67:da:a8:47:11:9a:cd:53:17:38:b5:d8:1c:bb: 8b:f2:69:9b:1c:65:0a:82:af:47:9d:7a:4a:12:4d:ca:7a:0f: c8:af:b6:ab:31:da:f3:4b:ee:5a:3b:58:69:40:4b:89:a7:68: 1d:c4:e4:4c:17:98:ac:44:6d:8b:26:0a:9a:38:ce:bc:00:42: 82:06:ba:38:f8:23:8a:91:76:90:1c:2a:3a:81:b6:e0:06:9a: 5e:38:04:29:73:2a:c0:53:e4:1d:63:65:b1:1e:08:fa:ce:51: f3:e7:9d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dOzKmr7YD6ye8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYyOFoXDTI1MDkxNzE0MzYyOFowLzEtMCsGA1UEAxMk YTE5ZjhiOGEtYmNjNC00YmU0LTk0MjgtNDIxNDE3N2EyNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpI0DJJVS/F64bpmqNfvXqgY0rWujlN66CJE 6k+WBAWz+HRGg1RwsQziejVk6cODvaN2NARjiLb8DVw2qzwIislSv7wTrMjM+feb 35/HSbhcOR3AriY4ggiUvngrR7YZvyWRwtn2MHZE3NiSgANx/YectirHRUOXVXEO 1izmkys+vGSLGV2k90w26PwO3FhW2Etpz7zRZUAtvbxAAs5fJPw1tLqQr8pP40fD RutsMvSfN/lydNbUUiDWcujeOSHorPofvle7lfHQEv0M2o9f4HI+4j2Rlgd36HXT kMI9MBfj+Rkq6r4yB7lO8nNjzKOm8kYLAeHOkqUMeNmJ5dGddQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8IipUn/hdoKVbMa63Icu+eV6JBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmYyYWNmYTAtMDc5Zi0z NmNlLWEwMWUtOGZlODU5NTI0M2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG086MYvnJm0oYdNYo/cCUBZCMUCNqObyO5vtedpZbowFFCc37dqNnHA xe3Ow8vI7eiQLAl9H4S4l7/UR9u//sAV0vgdU4+PCtpLFRe7MJeVL6AlLwgw3qqb Ng0eQmBTO5eH98mrr2fcdbiuM1izWj0PYb7X0OsfsHLEh5NdN6BvMLbjFX4X2Dzr 40R2nvkmrwEnwqxn2qhHEZrNUxc4tdgcu4vyaZscZQqCr0edekoSTcp6D8ivtqsx 2vNL7lo7WGlAS4mnaB3E5EwXmKxEbYsmCpo4zrwAQoIGujj4I4qRdpAcKjqBtuAG ml44BClzKsBT5B1jZbEeCPrOUfPnnSk= -----END CERTIFICATE-----Generated at Mon Jun 30 03:34:20 2025 by rpki-client