$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/368c8021-a05c-3d81-81a0-f67c819607ce.roa File: 368c8021-a05c-3d81-81a0-f67c819607ce.roa (raw, json) Hash identifier: yMjVHt6IScMmG6C28KkVq6N8yoemicr6engpBxlfnZU= Subject key identifier: 90:5D:26:8A:A3:DE:FB:51:E1:B8:5D:32:77:8C:3D:B3:48:45:93:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7F8C4E3564B09285D0CE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/368c8021-a05c-3d81-81a0-f67c819607ce.roa Signing time: Fri 20 Jun 2025 09:30:56 +0000 ROA not before: Fri 20 Jun 2025 09:30:56 +0000 ROA not after: Thu 18 Sep 2025 09:30:56 +0000 asID: 22773 IP address blocks: 70.170.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:f8:c4:e3:56:4b:09:28:5d:0c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:56 2025 GMT Not After : Sep 18 09:30:56 2025 GMT Subject: CN=efcb7ef9-fcf3-4e0f-9712-80bd51596ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:a2:e6:14:29:b6:f8:0d:9b:64:de:35:1d: c0:43:de:a4:45:53:bf:89:24:df:7e:c5:37:14:a3: 95:b1:0b:12:ba:59:81:06:f2:cd:51:46:8b:72:61: 68:01:23:4c:8d:ec:66:e3:82:a9:f4:3f:95:cb:79: 1a:c3:8d:46:2a:82:fb:0f:7e:6a:54:1e:04:8a:08: af:be:29:63:d7:c6:86:9a:a6:f7:af:ed:b8:34:a0: 47:08:91:27:61:5a:25:cc:06:be:f6:66:95:0d:6f: ea:92:4b:63:08:7b:9d:19:a5:ef:ab:7f:ab:5c:da: f8:09:c5:71:3c:4d:bf:24:9d:e9:e7:d9:cd:2f:f4: 69:54:67:63:5a:39:34:16:bf:bc:38:75:e9:99:68: 4e:5e:b0:7a:d1:7c:fd:90:44:16:33:be:bb:10:4b: e6:33:e0:01:fc:d0:62:d5:ce:31:00:43:de:3b:0a: 67:c2:29:de:a0:a5:c1:39:4f:87:ea:0b:81:8b:3b: d1:33:d9:ab:cc:ac:32:6e:8e:b9:bf:2b:a7:7a:44: 93:15:df:25:00:7b:92:d7:32:4d:f7:35:a0:76:38: 40:58:38:1f:5c:2f:fd:56:b0:ae:f0:7e:e7:d8:fe: 7f:4f:fc:0a:47:cc:c4:3f:98:54:e9:c6:af:c3:2b: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5D:26:8A:A3:DE:FB:51:E1:B8:5D:32:77:8C:3D:B3:48:45:93:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/368c8021-a05c-3d81-81a0-f67c819607ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d9:5a:69:5f:1d:53:2a:11:19:65:b5:63:cd:23:ae:f5:c5: 77:48:99:4c:ff:b2:9c:a5:6e:73:73:14:54:8b:33:c2:54:80: 8e:d4:e5:41:07:d6:43:42:71:df:85:e5:79:cb:1e:c8:a7:7a: 6e:65:f0:79:5a:91:e5:78:7b:78:e8:08:58:72:a4:c3:8a:dc: 63:03:09:b5:f0:bb:d1:e7:b5:01:a1:e3:6f:b5:50:c8:8e:21: 55:a6:94:18:86:c7:f2:20:3d:c8:28:b2:74:2b:bb:0d:ee:01: ec:53:16:be:8a:ac:e4:18:24:29:88:60:52:5e:04:dc:39:1f: f6:dc:fe:4b:20:98:d2:e2:2c:8a:bf:b3:4b:eb:ba:37:06:84: a4:0f:68:ae:54:23:6b:65:18:83:36:c0:af:cf:40:c6:69:f5: a9:91:42:45:65:28:0b:4f:cc:fc:a9:66:34:33:f2:d2:fe:35: 02:10:06:bb:2c:38:0a:4b:ee:30:42:7d:7c:4b:a4:46:58:29: 11:83:6e:52:45:ef:11:1d:65:e8:16:84:23:fc:81:c6:98:95: 7c:22:d8:06:20:7f:27:dd:59:db:47:44:b2:1a:80:26:e5:c1: b2:f0:6b:2d:78:6f:91:fd:77:f3:8b:81:0c:ce:56:2e:9f:7a: a4:c8:5e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp/jE41ZLCShdDOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA1NloXDTI1MDkxODA5MzA1NlowLzEtMCsGA1UEAxMk ZWZjYjdlZjktZmNmMy00ZTBmLTk3MTItODBiZDUxNTk2Y2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDei5hQptvgNm2TeNR3AQ96kRVO/iSTffsU3 FKOVsQsSulmBBvLNUUaLcmFoASNMjexm44Kp9D+Vy3kaw41GKoL7D35qVB4Eigiv vilj18aGmqb3r+24NKBHCJEnYVolzAa+9maVDW/qkktjCHudGaXvq3+rXNr4CcVx PE2/JJ3p59nNL/RpVGdjWjk0Fr+8OHXpmWhOXrB60Xz9kEQWM767EEvmM+AB/NBi 1c4xAEPeOwpnwineoKXBOU+H6guBizvRM9mrzKwybo65vyunekSTFd8lAHuS1zJN 9zWgdjhAWDgfXC/9VrCu8H7n2P5/T/wKR8zEP5hU6cavwytvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBdJoqj3vtR4bhdMneMPbNIRZP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY4YzgwMjEtYTA1Yy0z ZDgxLTgxYTAtZjY3YzgxOTYwN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3ZWmlfHVMqERlltWPNI671xXdImUz/spylbnNzFFSLM8JUgI7U5UEH 1kNCcd+F5XnLHsinem5l8HlakeV4e3joCFhypMOK3GMDCbXwu9HntQGh42+1UMiO IVWmlBiGx/IgPcgosnQruw3uAexTFr6KrOQYJCmIYFJeBNw5H/bc/ksgmNLiLIq/ s0vrujcGhKQPaK5UI2tlGIM2wK/PQMZp9amRQkVlKAtPzPypZjQz8tL+NQIQBrss OApL7jBCfXxLpEZYKRGDblJF7xEdZegWhCP8gcaYlXwi2AYgfyfdWdtHRLIagCbl wbLway14b5H9d/OLgQzOVi6feqTIXv4= -----END CERTIFICATE-----Generated at Mon Jun 30 15:01:18 2025 by rpki-client