$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/367bb93e-d931-3e6f-9a26-3bb2da2b0d48.roa File: 367bb93e-d931-3e6f-9a26-3bb2da2b0d48.roa (raw, json) Hash identifier: g1mRGEegTkgGYs2wxR8L5B6yJ6oeAvJNYFZ2VEmzh24= Subject key identifier: 8A:4F:CF:BD:35:C4:71:0A:94:A6:09:31:92:56:98:2F:1E:AF:EB:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8E82E4F3225297F7BFD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/367bb93e-d931-3e6f-9a26-3bb2da2b0d48.roa Signing time: Fri 20 Jun 2025 09:32:49 +0000 ROA not before: Fri 20 Jun 2025 09:32:49 +0000 ROA not after: Thu 18 Sep 2025 09:32:49 +0000 asID: 22773 IP address blocks: 70.189.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:e8:2e:4f:32:25:29:7f:7b:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:49 2025 GMT Not After : Sep 18 09:32:49 2025 GMT Subject: CN=31dd2acf-c96f-44d9-8e89-8b055e565fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:c4:62:6e:16:8a:55:39:01:36:56:f0:3a: 8a:31:e5:a5:08:3e:65:87:0d:ae:48:0f:bb:0f:33: 72:5d:0b:54:6b:f5:29:e5:14:8c:5f:17:38:63:23: 41:cf:06:06:d4:33:ed:c7:50:fd:ea:e2:58:72:13: 0e:0d:2b:d5:a6:7a:3e:99:3b:6e:87:d4:8f:17:f6: 33:8f:d0:08:c2:de:a1:c2:0c:18:7f:df:e2:00:8c: 07:95:59:1e:ec:d5:2e:b4:42:7a:f8:d6:36:30:fb: 25:83:8b:9a:0e:6a:ef:b5:7a:c7:7c:b2:06:eb:52: 24:5d:0d:4d:96:8d:e0:2b:a1:ca:34:28:76:fd:04: 49:a0:f8:8d:03:c3:d4:db:30:3f:e6:e7:f2:91:81: f3:04:94:a1:df:ba:e9:ce:64:6e:35:fd:43:a7:53: 1e:55:cc:9a:34:c9:bc:f6:3d:77:2d:0f:b2:77:10: cb:73:91:5d:f4:45:a8:02:d5:b6:62:34:70:d1:70: a6:f5:d8:27:22:f9:a6:0e:fa:64:94:00:15:79:35: 89:40:07:56:a7:e4:a9:ab:c6:4f:72:e0:e1:2b:32: 5d:13:6c:39:24:6d:0f:e1:a1:df:c5:6a:bd:0c:b6: 13:44:24:ea:9d:54:40:63:52:e0:bc:3c:eb:3d:e9: b1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4F:CF:BD:35:C4:71:0A:94:A6:09:31:92:56:98:2F:1E:AF:EB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/367bb93e-d931-3e6f-9a26-3bb2da2b0d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:40:d2:de:3a:3a:f3:ff:ea:52:ff:a0:7c:81:cd:4f:31:86: d0:34:fd:83:43:dd:b2:f0:d5:fc:30:2f:db:28:75:02:9d:99: 17:c1:d6:56:99:49:36:80:78:07:94:e3:38:cf:9b:e9:05:8f: 03:7d:ab:fb:a9:15:36:65:67:ad:de:6b:e5:49:8a:cf:77:5c: ae:7f:1b:05:49:39:2c:b2:b6:6f:b5:d1:58:c1:7b:46:3f:a8: dd:57:06:cd:38:23:9f:20:e7:04:15:ea:11:a1:44:8d:e1:b8: 08:02:74:76:8c:9c:75:97:b1:10:25:3c:80:71:0d:e9:fd:ce: 0e:0e:09:7f:6b:55:54:62:a5:d6:49:6c:b5:69:78:3d:30:3d: 8c:3c:60:53:2d:bd:92:e6:07:b8:85:8f:e0:a6:50:91:3f:de: 86:97:a0:f9:c5:74:c7:42:15:22:74:4b:8d:2c:89:83:26:5f: e0:8e:20:17:d1:b5:c0:b4:88:ba:46:bd:9e:2b:82:85:0f:ae: 4f:ef:1b:61:3f:00:00:3e:0d:99:84:ac:54:c1:c3:ac:7b:62: af:9d:88:0d:7a:6d:5a:bc:c7:b7:14:33:6f:21:4f:85:00:d6: e9:29:dc:3b:e2:8a:48:a1:00:ee:71:b5:5c:0c:20:db:7a:a5: a1:b7:ac:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqOguTzIlKX97/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0OVoXDTI1MDkxODA5MzI0OVowLzEtMCsGA1UEAxMk MzFkZDJhY2YtYzk2Zi00NGQ5LThlODktOGIwNTVlNTY1ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA7EYm4WilU5ATZW8DqKMeWlCD5lhw2uSA+7 DzNyXQtUa/Up5RSMXxc4YyNBzwYG1DPtx1D96uJYchMODSvVpno+mTtuh9SPF/Yz j9AIwt6hwgwYf9/iAIwHlVke7NUutEJ6+NY2MPslg4uaDmrvtXrHfLIG61IkXQ1N lo3gK6HKNCh2/QRJoPiNA8PU2zA/5ufykYHzBJSh37rpzmRuNf1Dp1MeVcyaNMm8 9j13LQ+ydxDLc5Fd9EWoAtW2YjRw0XCm9dgnIvmmDvpklAAVeTWJQAdWp+Spq8ZP cuDhKzJdE2w5JG0P4aHfxWq9DLYTRCTqnVRAY1LgvDzrPemxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpPz701xHEKlKYJMZJWmC8er+sPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY3YmI5M2UtZDkzMS0z ZTZmLTlhMjYtM2JiMmRhMmIwZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxA0t46OvP/6lL/oHyBzU8xhtA0/YND3bLw1fwwL9sodQKdmRfB1laZ STaAeAeU4zjPm+kFjwN9q/upFTZlZ63ea+VJis93XK5/GwVJOSyytm+10VjBe0Y/ qN1XBs04I58g5wQV6hGhRI3huAgCdHaMnHWXsRAlPIBxDen9zg4OCX9rVVRipdZJ bLVpeD0wPYw8YFMtvZLmB7iFj+CmUJE/3oaXoPnFdMdCFSJ0S40siYMmX+COIBfR tcC0iLpGvZ4rgoUPrk/vG2E/AAA+DZmErFTBw6x7Yq+diA16bVq8x7cUM28hT4UA 1ukp3DviikihAO5xtVwMINt6paG3rBA= -----END CERTIFICATE-----Generated at Mon Jun 30 20:29:49 2025 by rpki-client