$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3790d7e5-0cb4-3dd5-932a-d0de2f8393fe.roa File: 3790d7e5-0cb4-3dd5-932a-d0de2f8393fe.roa (raw, json) Hash identifier: DWi0Sg1XyN0NZvYg9T7EzouRasyXUaLqtypOBVX4EyM= Subject key identifier: 76:62:24:C9:5A:CA:0E:67:34:9C:59:06:79:E9:F9:CD:2B:49:B0:DE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A86417B185424547BF5000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3790d7e5-0cb4-3dd5-932a-d0de2f8393fe.roa Signing time: Fri 20 Jun 2025 09:31:47 +0000 ROA not before: Fri 20 Jun 2025 09:31:47 +0000 ROA not after: Thu 18 Sep 2025 09:31:47 +0000 asID: 22773 IP address blocks: 70.173.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:64:17:b1:85:42:45:47:bf:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:47 2025 GMT Not After : Sep 18 09:31:47 2025 GMT Subject: CN=f8496db6-2e59-4508-ab86-dcee009a84af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:b5:81:73:45:ee:2f:25:f6:b8:e9:9b:ab: 52:f4:1d:8c:6b:f6:c3:30:b2:c4:63:8c:88:c6:fd: aa:f4:e7:d7:f4:4b:c1:92:46:9c:32:aa:cc:9a:98: f6:3e:39:86:67:47:86:9a:c1:26:50:32:dc:34:f6: ab:cf:9a:db:fc:ab:67:5a:00:89:63:89:72:19:19: 61:2e:79:aa:f1:6e:49:88:26:a9:4a:a5:1e:e0:87: 6d:e2:73:95:cb:23:f6:e8:f6:15:42:a0:27:ca:a5: 87:db:c3:e9:88:d4:6d:a6:3a:49:d3:57:78:77:69: 10:b5:dd:2e:66:4c:88:3e:60:ec:6e:0b:74:01:a2: b2:bb:4c:08:06:ea:a2:07:e5:a2:7d:a4:8a:1d:06: d8:dc:89:72:17:23:b7:48:af:18:cd:9a:21:c4:0d: a1:d1:9e:b0:07:18:e8:78:72:9d:ca:b8:da:f3:42: bb:55:87:dd:7b:94:66:87:eb:41:02:18:1e:4e:97: 06:75:85:17:ed:26:c5:8b:2c:69:a0:21:7a:d5:36: 67:ec:37:b9:18:f6:60:c2:a2:77:68:f8:a3:83:5e: fa:ef:24:81:3e:a5:ae:b7:af:a6:a3:a1:91:89:52: 03:1a:4e:aa:0a:bb:c0:87:3f:1c:a3:4d:71:ea:00: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:62:24:C9:5A:CA:0E:67:34:9C:59:06:79:E9:F9:CD:2B:49:B0:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3790d7e5-0cb4-3dd5-932a-d0de2f8393fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:98:06:89:3b:19:32:3d:c9:56:e6:ff:41:a6:85:46:5a:c4: 71:25:08:8e:98:ce:59:b3:b3:dd:47:33:3f:38:e0:76:b4:fb: 06:ff:01:c6:3c:58:f3:91:2c:99:cc:48:76:8e:79:53:25:ee: e8:c7:4f:83:11:09:72:c4:d2:6b:45:46:6d:fb:95:d5:38:00: 26:84:14:e8:77:70:15:4b:64:ca:ca:f7:19:c2:15:ec:39:d7: 9e:9a:43:33:3a:6f:72:c4:aa:cf:7c:e2:9b:29:07:a5:b9:23: bf:17:da:4d:cc:a4:f4:f7:e3:b0:3c:b7:3d:67:7c:ab:86:ab: 06:8a:9d:89:7d:bb:48:0c:af:d1:93:0d:e4:82:5a:b0:b6:2e: d4:3d:c1:9d:a3:d3:6a:46:6e:9b:4d:21:a8:15:8e:95:8a:2f: e5:d3:8b:fc:b8:9b:ec:40:ef:4e:8f:cf:f9:17:c5:d3:c2:37: ae:50:6b:83:9b:2b:84:68:7a:91:81:04:88:fa:52:52:cf:71: 1d:14:8c:74:a6:9e:d5:09:00:c8:bb:13:87:0a:0c:12:4c:e0: 6b:d4:07:29:5d:86:ec:ae:05:c2:f4:e5:a7:cc:67:61:d8:50: f6:a6:25:9c:d8:79:31:28:a7:6b:66:0e:84:a6:56:a1:0e:b3: 0c:07:7a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqGQXsYVCRUe/UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE0N1oXDTI1MDkxODA5MzE0N1owLzEtMCsGA1UEAxMk Zjg0OTZkYjYtMmU1OS00NTA4LWFiODYtZGNlZTAwOWE4NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllm1gXNF7i8l9rjpm6tS9B2Ma/bDMLLEY4yI xv2q9OfX9EvBkkacMqrMmpj2PjmGZ0eGmsEmUDLcNParz5rb/KtnWgCJY4lyGRlh Lnmq8W5JiCapSqUe4Idt4nOVyyP26PYVQqAnyqWH28PpiNRtpjpJ01d4d2kQtd0u ZkyIPmDsbgt0AaKyu0wIBuqiB+WifaSKHQbY3IlyFyO3SK8YzZohxA2h0Z6wBxjo eHKdyrja80K7VYfde5Rmh+tBAhgeTpcGdYUX7SbFiyxpoCF61TZn7De5GPZgwqJ3 aPijg1767ySBPqWut6+mo6GRiVIDGk6qCrvAhz8co01x6gAYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZiJMlayg5nNJxZBnnp+c0rSbDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzc5MGQ3ZTUtMGNiNC0z ZGQ1LTkzMmEtZDBkZTJmODM5M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWYBok7GTI9yVbm/0GmhUZaxHElCI6Yzlmzs91HMz844Ha0+wb/AcY8 WPORLJnMSHaOeVMl7ujHT4MRCXLE0mtFRm37ldU4ACaEFOh3cBVLZMrK9xnCFew5 156aQzM6b3LEqs984pspB6W5I78X2k3MpPT347A8tz1nfKuGqwaKnYl9u0gMr9GT DeSCWrC2LtQ9wZ2j02pGbptNIagVjpWKL+XTi/y4m+xA706Pz/kXxdPCN65Qa4Ob K4RoepGBBIj6UlLPcR0UjHSmntUJAMi7E4cKDBJM4GvUByldhuyuBcL05afMZ2HY UPamJZzYeTEop2tmDoSmVqEOswwHemM= -----END CERTIFICATE-----Generated at Tue Jul 1 16:10:20 2025 by rpki-client