$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45a6b0b6-543a-3ff2-b32b-8cd3bf44aaca.roa File: 45a6b0b6-543a-3ff2-b32b-8cd3bf44aaca.roa (raw, json) Hash identifier: TKD05AX+RDSR4P5ef0PCkiyCC61lZGELB7MZ8UxOJpQ= Subject key identifier: E5:45:42:E9:DD:75:37:37:B1:BE:8B:82:39:47:E8:77:4A:AE:DB:6F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7524674452CC3387175000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45a6b0b6-543a-3ff2-b32b-8cd3bf44aaca.roa Signing time: Thu 19 Jun 2025 14:36:54 +0000 ROA not before: Thu 19 Jun 2025 14:36:54 +0000 ROA not after: Wed 17 Sep 2025 14:36:54 +0000 asID: 22773 IP address blocks: 70.190.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:24:67:44:52:cc:33:87:17:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:54 2025 GMT Not After : Sep 17 14:36:54 2025 GMT Subject: CN=4a17458f-a114-4dec-9200-1c778da99002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:85:ff:bb:4c:16:82:83:26:69:e7:34:5c: 0b:aa:63:ec:13:6f:8e:b0:5f:e0:e0:dc:f7:dd:99: 72:8a:b1:e5:78:e3:1b:f9:96:eb:35:28:81:a9:bd: b8:67:5d:29:72:8e:2c:9a:48:18:54:03:2a:ca:22: 2e:24:42:9d:51:2e:fd:30:15:25:8e:c6:43:76:b1: c2:08:51:91:a2:5c:6c:58:ba:2b:8e:0a:65:c4:09: 9f:5f:88:f1:07:80:c1:d3:92:76:de:b0:29:52:24: 63:76:49:54:3f:c3:d1:35:3c:d5:a2:c2:59:94:bb: 45:d7:8b:98:8d:d5:cd:9a:91:62:d1:75:8d:b7:ce: a9:93:94:22:a4:70:32:b7:34:08:4a:b7:47:bd:23: bd:28:5b:c3:9b:67:1d:50:3a:53:7e:6f:db:14:2e: 74:47:30:8b:04:3f:c7:63:06:46:f4:de:f5:2d:4e: 73:a9:cc:02:d4:b1:f8:1c:66:49:d2:27:f0:4a:0c: c1:e5:3b:08:1b:21:dd:e2:20:bc:9b:5c:72:45:1e: de:b9:2c:1e:f6:43:ac:ed:a8:4a:b2:e1:a8:00:0d: 82:fb:19:89:87:66:4b:67:bc:2b:99:71:b0:7e:53: d7:25:47:a3:2f:07:9b:a1:51:72:99:35:84:23:5a: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:45:42:E9:DD:75:37:37:B1:BE:8B:82:39:47:E8:77:4A:AE:DB:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45a6b0b6-543a-3ff2-b32b-8cd3bf44aaca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:18:7f:2e:30:d8:42:69:6f:9b:6c:36:87:d5:ae:ec:ac:8d: 4e:26:2b:e7:0b:bc:5e:24:06:11:c6:79:a2:f8:04:f8:74:d3: 77:93:99:f6:44:65:1f:70:62:2e:c3:1b:90:7a:bd:a7:c0:e4: 5c:c2:7b:ba:5d:66:f9:66:f1:47:c2:39:dd:1a:e5:43:91:6b: 70:d0:85:b3:0e:ca:ff:79:9a:19:ee:1f:9e:ae:89:88:ce:55: fb:91:56:16:66:99:06:8d:28:bd:7b:a0:a1:6a:04:6c:d9:47: ff:86:e9:5b:19:27:ed:0b:5b:bd:a6:cc:14:62:db:69:f2:86: dd:c7:70:f7:f8:5f:72:15:a3:b3:ea:32:66:7b:ca:f9:6f:5b: 1a:94:e8:d0:68:68:95:f0:05:c2:22:84:04:70:47:39:ac:33: 31:46:cb:29:c1:8f:dc:b2:77:61:06:82:05:95:72:43:01:2b: 3c:ac:29:e3:c8:ad:40:5b:27:e1:54:7c:f3:67:35:32:1d:97: ce:ef:82:57:97:8e:56:fa:15:7d:71:1f:1f:ed:64:c3:5f:a4: 0d:74:ff:76:6e:09:8c:29:da:00:01:a6:c1:78:39:09:86:a2: 2a:67:4a:bb:55:e3:26:96:b6:4b:01:25:f1:d8:a6:cb:d6:5d: de:d1:00:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dSRnRFLMM4cXUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzY1NFoXDTI1MDkxNzE0MzY1NFowLzEtMCsGA1UEAxMk NGExNzQ1OGYtYTExNC00ZGVjLTkyMDAtMWM3NzhkYTk5MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0WF/7tMFoKDJmnnNFwLqmPsE2+OsF/g4Nz3 3ZlyirHleOMb+ZbrNSiBqb24Z10pco4smkgYVAMqyiIuJEKdUS79MBUljsZDdrHC CFGRolxsWLorjgplxAmfX4jxB4DB05J23rApUiRjdklUP8PRNTzVosJZlLtF14uY jdXNmpFi0XWNt86pk5QipHAytzQISrdHvSO9KFvDm2cdUDpTfm/bFC50RzCLBD/H YwZG9N71LU5zqcwC1LH4HGZJ0ifwSgzB5TsIGyHd4iC8m1xyRR7euSwe9kOs7ahK suGoAA2C+xmJh2ZLZ7wrmXGwflPXJUejLweboVFymTWEI1pK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVFQunddTc3sb6LgjlH6HdKrttvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDVhNmIwYjYtNTQzYS0z ZmYyLWIzMmItOGNkM2JmNDRhYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcYfy4w2EJpb5tsNofVruysjU4mK+cLvF4kBhHGeaL4BPh003eTmfZE ZR9wYi7DG5B6vafA5FzCe7pdZvlm8UfCOd0a5UORa3DQhbMOyv95mhnuH56uiYjO VfuRVhZmmQaNKL17oKFqBGzZR/+G6VsZJ+0LW72mzBRi22nyht3HcPf4X3IVo7Pq MmZ7yvlvWxqU6NBoaJXwBcIihARwRzmsMzFGyynBj9yyd2EGggWVckMBKzysKePI rUBbJ+FUfPNnNTIdl87vgleXjlb6FX1xHx/tZMNfpA10/3ZuCYwp2gABpsF4OQmG oipnSrtV4yaWtksBJfHYpsvWXd7RAD8= -----END CERTIFICATE-----Generated at Mon Jun 30 21:05:40 2025 by rpki-client