$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa File: 40f708c4-1a86-3068-95d7-34df5e65fcc4.roa (raw, json) Hash identifier: 6fuGzK3JG1MNIT5ECtF2rFYu99PFOtNwi+rbhKx3K/0= Subject key identifier: 76:9E:93:BF:7C:5D:0D:69:A2:76:42:BF:0C:53:FA:E0:E5:AF:42:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD76BEF5E5C47EE58E5E6C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa Signing time: Thu 19 Jun 2025 09:19:07 +0000 ROA not before: Thu 19 Jun 2025 09:19:07 +0000 ROA not after: Wed 17 Sep 2025 09:19:07 +0000 asID: 22773 IP address blocks: 70.162.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:6b:ef:5e:5c:47:ee:58:e5:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:07 2025 GMT Not After : Sep 17 09:19:07 2025 GMT Subject: CN=6f20929a-a9bb-418d-a97b-a7fbafd1ee11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:6f:93:e8:bd:a2:3e:3d:92:c7:4a:93:df: 21:41:1a:01:fc:28:7b:56:75:81:0f:35:cf:77:07: 43:3e:1d:b2:8b:8b:8a:a3:c7:af:ec:e2:33:ec:6a: e8:53:47:a9:4b:c6:d9:99:dd:9e:e8:e8:87:f7:83: cc:96:a8:d5:ba:30:a3:42:af:49:1c:f1:3c:4d:c1: 27:81:aa:7c:dc:c9:74:28:c6:17:45:3f:4e:82:c8: b4:2f:3a:ff:6a:d5:62:ba:3a:0a:79:09:09:45:7b: 95:2c:31:dd:74:2a:c1:f6:bf:09:1f:d4:66:0b:54: 5b:10:57:06:42:82:cb:cd:85:74:2b:6f:11:c1:7c: ca:b5:f3:54:74:ed:75:f7:50:19:24:44:78:a2:4e: a6:47:bd:4a:6e:fe:e1:90:74:d0:d2:fd:16:15:f9: 01:66:ca:b1:e5:3e:54:87:97:3f:4f:20:58:4f:59: 28:32:ae:1a:87:f2:07:9a:1e:79:7c:eb:be:50:3e: 9f:11:f2:38:01:42:97:ec:5b:8a:a8:2c:69:8a:c0: 0a:3c:54:5c:ee:5d:c3:43:1c:8c:c1:d2:b9:aa:0e: 41:b5:f4:af:9f:08:dd:8f:ec:46:d7:86:d9:d7:ce: 34:32:fd:69:34:b1:94:6e:63:bc:0d:af:e8:57:c7: 88:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9E:93:BF:7C:5D:0D:69:A2:76:42:BF:0C:53:FA:E0:E5:AF:42:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40f708c4-1a86-3068-95d7-34df5e65fcc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:20:ec:ae:b1:ff:d1:96:50:70:0f:1c:d8:c9:fd:d5:93:dd: ca:6b:79:cf:f6:11:25:01:cc:63:6b:eb:30:cb:d8:c3:a3:09: a2:cb:dd:47:36:a5:13:ec:2d:ef:8a:fe:b0:98:92:25:04:34: 6b:d6:2a:4b:db:5b:3b:f6:4a:39:01:e5:44:9f:fa:f4:5e:ec: 61:59:1b:5e:51:7e:59:88:81:ae:6e:c8:d4:dc:50:c9:2c:f2: 61:69:83:b4:ad:54:0d:a6:cb:79:a1:32:ba:d1:e2:42:41:50: 49:eb:2a:ad:8f:98:bd:c0:5d:04:a9:b7:af:d8:4a:29:cc:e9: ba:2b:9f:1c:ce:79:6f:d6:ff:fd:89:79:6e:9f:60:da:ef:d2: 81:77:84:cc:16:62:fb:14:da:90:fe:2c:28:d9:76:bd:c5:75: 17:97:13:61:87:03:78:88:69:72:dc:b1:53:13:67:2b:87:e9: a5:2e:40:78:a5:74:92:d6:3c:0e:8e:cf:59:b7:5b:73:11:4c: a2:cb:b4:09:61:93:d4:be:51:c7:34:24:63:6f:ea:3e:db:28: 3f:b5:56:3b:5b:fc:ff:f2:51:2c:a4:63:72:8e:1d:a5:5a:b0: ff:3e:2a:6a:60:c4:cc:bd:41:f4:e0:72:c1:cc:90:c0:69:10: 8b:08:b8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo912vvXlxH7ljl5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkwN1oXDTI1MDkxNzA5MTkwN1owLzEtMCsGA1UEAxMk NmYyMDkyOWEtYTliYi00MThkLWE5N2ItYTdmYmFmZDFlZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKNvk+i9oj49ksdKk98hQRoB/Ch7VnWBDzXP dwdDPh2yi4uKo8ev7OIz7GroU0epS8bZmd2e6OiH94PMlqjVujCjQq9JHPE8TcEn gap83Ml0KMYXRT9Ogsi0Lzr/atViujoKeQkJRXuVLDHddCrB9r8JH9RmC1RbEFcG QoLLzYV0K28RwXzKtfNUdO1191AZJER4ok6mR71Kbv7hkHTQ0v0WFfkBZsqx5T5U h5c/TyBYT1koMq4ah/IHmh55fOu+UD6fEfI4AUKX7FuKqCxpisAKPFRc7l3DQxyM wdK5qg5BtfSvnwjdj+xG14bZ1840Mv1pNLGUbmO8Da/oV8eIgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaek798XQ1ponZCvwxT+uDlr0J0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDBmNzA4YzQtMWE4Ni0z MDY4LTk1ZDctMzRkZjVlNjVmY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMg7K6x/9GWUHAPHNjJ/dWT3cprec/2ESUBzGNr6zDL2MOjCaLL3Uc2 pRPsLe+K/rCYkiUENGvWKkvbWzv2SjkB5USf+vRe7GFZG15RflmIga5uyNTcUMks 8mFpg7StVA2my3mhMrrR4kJBUEnrKq2PmL3AXQSpt6/YSinM6bornxzOeW/W//2J eW6fYNrv0oF3hMwWYvsU2pD+LCjZdr3FdReXE2GHA3iIaXLcsVMTZyuH6aUuQHil dJLWPA6Oz1m3W3MRTKLLtAlhk9S+Ucc0JGNv6j7bKD+1Vjtb/P/yUSykY3KOHaVa sP8+KmpgxMy9QfTgcsHMkMBpEIsIuJc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:20:00 2025 by rpki-client