$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40befab1-17b6-380b-a31b-1368d9982814.roa File: 40befab1-17b6-380b-a31b-1368d9982814.roa (raw, json) Hash identifier: 3RFp9D+mbYVuqeRLHDEZ6KDtCvXzHa2vLzJ81P7Tnpo= Subject key identifier: E0:6D:EE:8A:B7:CA:36:02:12:47:25:31:44:8B:4D:A6:04:F4:A1:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F57C638D5A5000F233CD2E Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40befab1-17b6-380b-a31b-1368d9982814.roa Signing time: Thu 01 May 2025 17:09:46 +0000 ROA not before: Thu 01 May 2025 17:09:46 +0000 ROA not after: Wed 30 Jul 2025 17:09:46 +0000 asID: 22773 IP address blocks: 70.172.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:7c:63:8d:5a:50:00:f2:33:cd:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:09:46 2025 GMT Not After : Jul 30 17:09:46 2025 GMT Subject: CN=9e1f84d6-8264-439e-8c97-3b07d0092023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:cd:43:ef:5e:69:6c:3a:d1:74:2e:62:3e: a3:5b:d1:9d:12:1e:3c:75:83:4a:62:c4:e3:92:f9: ce:41:2f:2b:92:4e:96:4f:6f:71:26:12:21:22:b7: 6f:4f:46:b4:0e:26:52:ae:67:c8:6c:f9:02:02:71: 60:59:ab:80:11:f4:16:48:67:c6:aa:a5:5a:70:4a: 7a:14:68:98:02:63:f5:c2:b5:e8:92:f4:0c:18:dd: e6:b3:c3:37:2a:05:e7:eb:a4:0f:bd:cf:47:90:a0: 65:e9:b1:bd:bb:87:34:73:eb:a6:12:1d:08:81:fb: dd:6b:9d:af:f0:fa:f3:86:83:6e:d1:9f:b9:f2:93: a5:3c:35:a9:74:f1:c3:72:21:24:0d:6f:44:09:23: 8a:9c:9f:87:72:a9:91:28:85:ac:60:8d:9d:dc:a3: 4d:b3:fd:ee:03:47:6e:35:11:34:f4:d5:ad:27:c8: c9:4f:64:ea:7c:59:de:bc:35:48:c0:47:cf:7b:f7: 7e:32:c8:18:92:e1:f2:e9:31:5a:2f:66:30:c5:d7: fb:89:b3:40:3d:f3:14:48:6e:42:9f:92:f6:57:06: 29:eb:4f:69:0f:38:64:ab:db:a2:af:95:98:7a:34: 5a:57:52:12:40:cc:d4:ab:48:cd:4f:98:1d:0b:dc: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6D:EE:8A:B7:CA:36:02:12:47:25:31:44:8B:4D:A6:04:F4:A1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40befab1-17b6-380b-a31b-1368d9982814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:48:d0:67:38:83:f7:c4:63:43:4f:cf:aa:d3:d1:9d:c8:6c: ff:cf:02:6e:2d:19:0e:51:c8:d7:89:13:4d:de:58:0c:81:f9: 2c:5b:8f:fe:ff:2e:8d:04:f4:5c:60:40:ba:aa:83:be:95:1c: e0:df:11:87:47:74:3f:ed:1a:ca:3e:d8:e7:ce:57:01:18:a4: 86:2d:99:2c:55:fe:43:37:19:49:a7:5e:3d:c6:0f:87:94:ba: b8:ad:0b:f0:d5:44:1a:35:5b:ef:73:74:aa:9a:9c:62:63:d2: 91:14:a4:36:6c:e8:58:8a:9e:15:b2:64:80:51:a3:90:92:c9: 5b:d4:22:55:ba:8b:5a:fd:17:31:18:21:ac:74:f3:02:d5:22: 1c:e6:1c:79:d9:f8:77:65:76:5b:2f:22:77:0f:a7:67:94:c4: 79:37:da:37:b1:e6:44:eb:4f:cd:93:65:0a:48:db:b7:f5:7f: 97:61:a3:cd:36:70:b2:1a:88:96:38:e0:b7:9f:1c:c2:9e:1c: d2:b4:08:b2:10:7a:95:87:65:cc:c2:a1:7a:93:63:2c:23:be: aa:11:64:ca:cf:dd:b1:57:f1:2e:b6:c9:cd:7b:87:51:3d:38: c1:d5:fa:28:54:65:79:41:a7:0e:dc:da:af:8c:36:bb:d2:03: 05:78:8a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19XxjjVpQAPIzzS4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MDk0NloXDTI1MDczMDE3MDk0NlowLzEtMCsGA1UEAxMk OWUxZjg0ZDYtODI2NC00MzllLThjOTctM2IwN2QwMDkyMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLNQ+9eaWw60XQuYj6jW9GdEh48dYNKYsTj kvnOQS8rkk6WT29xJhIhIrdvT0a0DiZSrmfIbPkCAnFgWauAEfQWSGfGqqVacEp6 FGiYAmP1wrXokvQMGN3ms8M3KgXn66QPvc9HkKBl6bG9u4c0c+umEh0Igfvda52v 8PrzhoNu0Z+58pOlPDWpdPHDciEkDW9ECSOKnJ+HcqmRKIWsYI2d3KNNs/3uA0du NRE09NWtJ8jJT2TqfFnevDVIwEfPe/d+MsgYkuHy6TFaL2Ywxdf7ibNAPfMUSG5C n5L2VwYp609pDzhkq9uir5WYejRaV1ISQMzUq0jNT5gdC9w2pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBt7oq3yjYCEkclMUSLTaYE9KESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDBiZWZhYjEtMTdiNi0z ODBiLWEzMWItMTM2OGQ5OTgyODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdI0Gc4g/fEY0NPz6rT0Z3IbP/PAm4tGQ5RyNeJE03eWAyB+Sxbj/7/ Lo0E9FxgQLqqg76VHODfEYdHdD/tGso+2OfOVwEYpIYtmSxV/kM3GUmnXj3GD4eU uritC/DVRBo1W+9zdKqanGJj0pEUpDZs6FiKnhWyZIBRo5CSyVvUIlW6i1r9FzEY Iax08wLVIhzmHHnZ+HdldlsvIncPp2eUxHk32jex5kTrT82TZQpI27f1f5dho802 cLIaiJY44LefHMKeHNK0CLIQepWHZczCoXqTYywjvqoRZMrP3bFX8S62yc17h1E9 OMHV+ihUZXlBpw7c2q+MNrvSAwV4imo= -----END CERTIFICATE-----Generated at Wed Jul 2 03:41:14 2025 by rpki-client