$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa File: 39fca48b-3fdd-3abb-9b6b-035a005fe758.roa (raw, json) Hash identifier: DL8Xw5ycZE3BE9oHy9NzZXK9P9DT4JFgwrMw+bZw7DY= Subject key identifier: 69:14:79:7C:EA:CE:24:0A:D4:FF:BB:B1:25:80:BB:8F:EC:A9:69:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD804F30F67F00CF126C480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa Signing time: Thu 19 Jun 2025 09:20:19 +0000 ROA not before: Thu 19 Jun 2025 09:20:19 +0000 ROA not after: Wed 17 Sep 2025 09:20:19 +0000 asID: 22773 IP address blocks: 70.172.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:04:f3:0f:67:f0:0c:f1:26:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:19 2025 GMT Not After : Sep 17 09:20:19 2025 GMT Subject: CN=ac0a4560-ec6f-4a40-bfd2-6bbafdaf56e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:d7:d6:4c:dd:a3:59:af:e4:bb:09:01:d3: ac:65:95:85:ae:24:fe:06:89:b4:8d:15:18:94:f9: 7d:df:9f:0c:50:8b:5f:e5:39:5d:bc:5d:ab:05:55: 12:fa:e8:02:22:b5:0c:23:f8:3a:7e:dc:cf:4f:31: ee:a1:9b:79:18:46:7b:59:f8:04:08:73:59:bc:08: 45:2e:b1:96:cd:b3:4c:34:e3:4f:46:13:06:59:80: 8b:c4:84:a7:23:9b:a2:5a:20:69:95:42:7b:6a:6d: 49:f9:f2:5e:17:dd:73:45:52:d1:b7:36:78:8c:53: 71:53:d8:e7:7f:cb:1f:7c:e5:ee:1a:bf:83:a5:ee: 06:e7:58:69:6b:f9:8f:a5:19:e5:53:70:1d:d1:ee: d6:2a:ef:92:da:d8:12:e7:7b:c0:e3:20:b0:ef:e1: 51:39:c8:ad:24:fe:87:8f:e6:07:f5:2e:f7:77:fd: bb:73:3a:91:64:5c:6c:49:5b:60:2a:76:ec:7b:ed: 96:50:06:f9:5f:9b:83:1b:31:b9:e5:12:dc:2c:2b: 11:75:f5:cd:77:7b:cd:8f:ea:43:5e:35:9b:5a:6e: ea:fa:70:8e:d8:55:89:d9:e8:b9:03:41:de:47:2a: 92:7d:2d:49:ab:ae:e4:e2:00:c2:59:57:aa:30:a0: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:14:79:7C:EA:CE:24:0A:D4:FF:BB:B1:25:80:BB:8F:EC:A9:69:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ca:64:a6:72:71:5f:0d:fc:31:6b:08:66:21:88:7d:f7:3c: 68:00:c2:88:06:59:36:c3:3d:6b:f4:0a:9b:1b:39:63:98:cf: ff:d5:c8:18:a8:ce:f0:84:70:1f:d3:cd:d0:a1:b0:b6:ec:b6: 93:38:b5:5b:ef:4c:df:f3:2e:18:e4:e4:8f:9d:db:ce:2a:a0: 9f:34:ef:40:58:16:4d:e8:f4:39:86:cc:13:0e:fd:b5:16:07: 35:31:07:a2:26:30:56:de:c8:f4:55:27:53:d4:c5:14:b8:d1: 28:b7:96:86:48:f9:b7:8e:6d:f2:e9:fa:f2:a4:05:61:55:16: 8d:41:3b:18:ea:68:a0:06:21:30:76:dd:5d:84:f1:e7:40:db: 9c:fd:8a:21:ca:fa:0a:7e:09:ca:3f:43:7d:4f:ee:03:7a:1c: 18:df:35:a8:33:89:2a:48:2d:dc:01:72:7c:47:6a:6d:2f:06: 03:53:c5:89:5f:34:09:b6:ca:16:05:34:fc:04:72:06:17:b4: a1:65:6d:22:91:a4:62:91:74:92:11:34:d6:f6:c6:29:09:c1: 19:f5:71:8e:75:11:e6:ba:b1:c2:5b:c7:fe:61:fe:5c:3e:b4: fb:31:f6:3d:99:21:b8:e3:7d:6e:de:92:51:b6:68:c3:4b:c6: 33:6a:a7:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92ATzD2fwDPEmxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAxOVoXDTI1MDkxNzA5MjAxOVowLzEtMCsGA1UEAxMk YWMwYTQ1NjAtZWM2Zi00YTQwLWJmZDItNmJiYWZkYWY1NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFnX1kzdo1mv5LsJAdOsZZWFriT+Bom0jRUY lPl9358MUItf5TldvF2rBVUS+ugCIrUMI/g6ftzPTzHuoZt5GEZ7WfgECHNZvAhF LrGWzbNMNONPRhMGWYCLxISnI5uiWiBplUJ7am1J+fJeF91zRVLRtzZ4jFNxU9jn f8sffOXuGr+Dpe4G51hpa/mPpRnlU3Ad0e7WKu+S2tgS53vA4yCw7+FROcitJP6H j+YH9S73d/27czqRZFxsSVtgKnbse+2WUAb5X5uDGzG55RLcLCsRdfXNd3vNj+pD XjWbWm7q+nCO2FWJ2ei5A0HeRyqSfS1Jq67k4gDCWVeqMKBBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkUeXzqziQK1P+7sSWAu4/sqWlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzlmY2E0OGItM2ZkZC0z YWJiLTliNmItMDM1YTAwNWZlNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvKZKZycV8N/DFrCGYhiH33PGgAwogGWTbDPWv0CpsbOWOYz//VyBio zvCEcB/TzdChsLbstpM4tVvvTN/zLhjk5I+d284qoJ8070BYFk3o9DmGzBMO/bUW BzUxB6ImMFbeyPRVJ1PUxRS40Si3loZI+beObfLp+vKkBWFVFo1BOxjqaKAGITB2 3V2E8edA25z9iiHK+gp+Cco/Q31P7gN6HBjfNagziSpILdwBcnxHam0vBgNTxYlf NAm2yhYFNPwEcgYXtKFlbSKRpGKRdJIRNNb2xikJwRn1cY51Eea6scJbx/5h/lw+ tPsx9j2ZIbjjfW7eklG2aMNLxjNqp00= -----END CERTIFICATE-----Generated at Tue Jul 1 18:09:19 2025 by rpki-client