$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa File: 36cdd71c-e6e4-373c-9924-21f004f01e6a.roa (raw, json) Hash identifier: 8ClG2Xn6X+FM3ctwBY8XnVVN8p3sWFXi7sGXjMBhwnA= Subject key identifier: 06:3C:2B:04:0D:7C:75:7F:84:14:05:3C:57:53:E5:61:B6:24:E0:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7EB1A2E337DA30C31FC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa Signing time: Thu 19 Jun 2025 09:20:07 +0000 ROA not before: Thu 19 Jun 2025 09:20:07 +0000 ROA not after: Wed 17 Sep 2025 09:20:07 +0000 asID: 22773 IP address blocks: 70.172.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:eb:1a:2e:33:7d:a3:0c:31:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:07 2025 GMT Not After : Sep 17 09:20:07 2025 GMT Subject: CN=8dea0e86-5f70-4859-9bf6-f6a56ceba0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:ef:bb:b0:12:61:90:ea:6d:4d:ef:d2:75: b4:f4:26:be:17:ca:6f:42:38:c7:49:dd:91:98:00: 3b:72:b6:e7:29:5b:fa:43:93:6a:d8:b5:01:d6:65: 38:aa:1f:37:c7:28:f0:61:06:90:30:cb:3d:f0:b1: 4d:8d:23:35:1d:db:9f:0f:fe:85:0e:b4:47:47:f4: 30:17:5e:6d:79:80:1f:72:03:2c:52:86:cb:34:ab: ac:3b:4e:13:cb:e9:07:b0:4a:27:44:4c:1f:7a:dd: 73:ae:f0:8e:95:e5:53:06:f4:1c:02:2f:d3:0c:66: 56:9b:b7:00:90:18:08:51:3b:d2:0a:1c:6c:1b:af: 01:0f:4b:e5:2c:54:b7:26:89:e5:7d:9b:cd:0c:e4: f1:19:41:5c:13:e1:d1:f1:b3:18:2a:c6:f9:76:49: fb:61:c7:b9:47:bb:3d:53:e7:7a:76:a7:9f:c3:69: ff:15:a4:0c:8d:c9:26:b8:42:a8:78:11:d5:1e:96: 99:02:bb:89:1d:d5:1e:37:b6:9d:18:79:b9:ea:66: d9:67:81:7b:18:70:9a:32:02:ea:ac:41:62:c0:17: f2:60:30:61:98:04:16:f3:47:dd:dc:b4:24:21:21: 15:12:2a:36:de:82:a1:d9:91:77:90:5a:81:8d:3f: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3C:2B:04:0D:7C:75:7F:84:14:05:3C:57:53:E5:61:B6:24:E0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36cdd71c-e6e4-373c-9924-21f004f01e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:04:d8:2e:79:cc:c2:86:5a:ba:5b:e4:31:f6:c9:ea:ae:7b: 72:e2:06:d4:2e:95:cc:d3:bc:99:09:79:55:5b:4a:6b:13:ab: c1:8d:16:03:aa:4e:08:2a:a3:85:4a:57:52:c9:19:26:97:8d: fd:d7:65:b1:b8:ab:ab:ee:bc:11:47:1e:14:8d:27:15:29:79: da:5e:47:47:b6:a5:70:e7:9a:84:3a:be:79:40:7b:00:3e:8d: 0d:95:76:a5:32:ac:ca:f9:9e:33:24:3b:a5:bd:2e:db:5d:e2: 0d:80:33:93:e6:3d:bf:b2:a0:f6:b5:75:6f:6e:b8:5b:6c:18: 94:5a:6b:52:ec:16:d4:04:12:9d:35:a6:8b:3b:f1:19:dd:65: 47:f0:3e:4c:fb:a7:49:3a:01:41:62:a6:df:54:e8:d0:9a:65: d5:88:46:c6:4a:b3:6d:0c:4d:a9:47:26:50:42:7f:c3:7c:d7: 66:95:80:98:bb:54:40:95:3b:6d:1b:6b:b4:b3:8a:15:33:2f: ad:c7:cc:3b:5b:61:ba:83:b2:52:90:f6:0c:59:bf:e1:c7:21: b4:3d:13:5b:c6:b1:e4:2e:31:a9:67:db:de:f6:4d:8c:6f:54: 94:0d:e7:df:a7:9c:1c:b0:00:a4:e3:87:af:06:77:66:2b:59: a6:95:74:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91+saLjN9owwx/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAwN1oXDTI1MDkxNzA5MjAwN1owLzEtMCsGA1UEAxMk OGRlYTBlODYtNWY3MC00ODU5LTliZjYtZjZhNTZjZWJhMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLnvu7ASYZDqbU3v0nW09Ca+F8pvQjjHSd2R mAA7crbnKVv6Q5Nq2LUB1mU4qh83xyjwYQaQMMs98LFNjSM1HdufD/6FDrRHR/Qw F15teYAfcgMsUobLNKusO04Ty+kHsEonREwfet1zrvCOleVTBvQcAi/TDGZWm7cA kBgIUTvSChxsG68BD0vlLFS3JonlfZvNDOTxGUFcE+HR8bMYKsb5dkn7Yce5R7s9 U+d6dqefw2n/FaQMjckmuEKoeBHVHpaZAruJHdUeN7adGHm56mbZZ4F7GHCaMgLq rEFiwBfyYDBhmAQW80fd3LQkISEVEio23oKh2ZF3kFqBjT/SiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY8KwQNfHV/hBQFPFdT5WG2JOBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZjZGQ3MWMtZTZlNC0z NzNjLTk5MjQtMjFmMDA0ZjAxZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwE2C55zMKGWrpb5DH2yeque3LiBtQulczTvJkJeVVbSmsTq8GNFgOq Tggqo4VKV1LJGSaXjf3XZbG4q6vuvBFHHhSNJxUpedpeR0e2pXDnmoQ6vnlAewA+ jQ2VdqUyrMr5njMkO6W9Lttd4g2AM5PmPb+yoPa1dW9uuFtsGJRaa1LsFtQEEp01 pos78RndZUfwPkz7p0k6AUFipt9U6NCaZdWIRsZKs20MTalHJlBCf8N812aVgJi7 VECVO20ba7SzihUzL63HzDtbYbqDslKQ9gxZv+HHIbQ9E1vGseQuMaln2972TYxv VJQN59+nnBywAKTjh68Gd2YrWaaVdME= -----END CERTIFICATE-----Generated at Mon Jun 30 15:00:01 2025 by rpki-client