$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa File: 499aa5bf-1b78-30fb-9cc6-654f68632119.roa (raw, json) Hash identifier: aEhespXbNmVewNJIwuVQcn96ghcgnGIIj8gcfsHhVUQ= Subject key identifier: DF:BA:B6:35:8C:24:CA:74:7C:4D:ED:F9:27:0D:F5:3F:A4:32:A1:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A88231151355AAC5A62540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa Signing time: Fri 20 Jun 2025 09:32:01 +0000 ROA not before: Fri 20 Jun 2025 09:32:01 +0000 ROA not after: Thu 18 Sep 2025 09:32:01 +0000 asID: 22773 IP address blocks: 70.173.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:82:31:15:13:55:aa:c5:a6:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:01 2025 GMT Not After : Sep 18 09:32:01 2025 GMT Subject: CN=0dc9fdd3-205b-4d35-8fb6-bb7acb762e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:80:aa:98:8a:fb:d9:e8:f0:af:c8:30:f2:c3: c2:63:96:39:c0:f2:f2:d8:d2:88:80:e0:ea:e2:de: fc:20:68:22:11:12:af:94:12:95:1d:4a:7b:1e:db: eb:bc:77:56:3e:8e:e0:9c:2f:14:d0:e3:50:0c:95: d6:2a:d6:a8:f2:dd:fb:25:4e:1b:46:61:71:61:2a: 83:cc:a2:a1:b2:eb:2d:77:83:44:df:3a:b5:17:42: 81:60:0d:0c:62:90:75:a3:ef:58:f8:a3:92:61:85: c3:69:53:1c:ed:2b:bc:ea:11:80:97:71:c7:68:70: a8:4e:0a:d2:90:cb:0d:9d:69:3d:58:0a:fd:a2:ab: 2c:69:c7:75:36:05:9c:41:b0:07:7b:b9:25:17:72: 0e:b0:63:f2:17:58:73:c1:5b:fc:13:b5:e8:d0:8c: bd:18:49:08:13:fc:1d:24:02:47:75:a0:fa:aa:d4: 4b:3f:a7:21:ca:27:e3:b7:20:67:c8:a4:45:04:50: ab:08:04:f1:45:4c:74:c4:b8:c4:44:05:7d:5f:59: 50:91:34:1c:81:c3:cb:2b:29:ac:9b:58:75:51:fc: b9:fe:4b:9c:15:9f:a9:d5:7e:16:76:ff:6f:40:bf: 4b:3c:97:d3:03:4e:11:a1:a6:f4:6d:b1:6f:1a:64: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:B6:35:8C:24:CA:74:7C:4D:ED:F9:27:0D:F5:3F:A4:32:A1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/499aa5bf-1b78-30fb-9cc6-654f68632119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5f:d9:da:57:98:c2:cc:af:1b:92:15:a7:9f:97:d1:a6:a9: 37:1e:a5:da:2e:74:2f:5a:bc:5c:e0:ab:13:d6:99:de:15:9b: d8:70:26:c5:a7:d0:14:36:0c:d3:9e:4d:8b:17:df:d3:82:27: 6a:61:6e:9e:de:17:4b:16:0b:c4:77:ef:be:72:22:75:90:0d: 73:91:aa:29:d9:5b:0a:01:c8:62:59:ed:ec:2c:46:3c:19:3a: 70:e6:4d:40:9b:f3:4f:6e:6c:3d:40:53:82:0a:d6:99:89:e3: 3a:ad:ef:49:8f:e1:4e:80:a8:6c:4c:f4:f0:49:3b:49:36:6d: 60:8e:c4:e4:e7:9f:36:c8:e5:5a:90:d7:8c:26:5e:18:77:8b: fd:b1:f2:ad:35:de:ad:ac:42:60:02:28:c5:f2:1f:ac:90:ab: 2b:20:d7:77:c0:f6:07:03:a8:8c:13:ea:42:b3:77:19:bf:9b: 7d:d1:01:49:6d:b6:5d:b9:03:cc:6a:59:cf:bf:8f:91:ec:ab: e8:ca:d1:67:40:e2:13:c4:bd:2f:5f:4f:7a:1f:a0:80:54:0f: 17:65:2b:25:f7:01:4d:0a:2d:64:32:cf:d8:b7:54:19:82:02: e4:fb:1c:fe:5e:6c:b8:9b:3e:17:93:49:c8:25:c9:de:e7:46: 46:26:27:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqIIxFRNVqsWmJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIwMVoXDTI1MDkxODA5MzIwMVowLzEtMCsGA1UEAxMk MGRjOWZkZDMtMjA1Yi00ZDM1LThmYjYtYmI3YWNiNzYyZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYCqmIr72ejwr8gw8sPCY5Y5wPLy2NKIgODq 4t78IGgiERKvlBKVHUp7HtvrvHdWPo7gnC8U0ONQDJXWKtao8t37JU4bRmFxYSqD zKKhsustd4NE3zq1F0KBYA0MYpB1o+9Y+KOSYYXDaVMc7Su86hGAl3HHaHCoTgrS kMsNnWk9WAr9oqssacd1NgWcQbAHe7klF3IOsGPyF1hzwVv8E7Xo0Iy9GEkIE/wd JAJHdaD6qtRLP6chyifjtyBnyKRFBFCrCATxRUx0xLjERAV9X1lQkTQcgcPLKyms m1h1Ufy5/kucFZ+p1X4Wdv9vQL9LPJfTA04Roab0bbFvGmRI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+6tjWMJMp0fE3t+ScN9T+kMqFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDk5YWE1YmYtMWI3OC0z MGZiLTljYzYtNjU0ZjY4NjMyMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtf2dpXmMLMrxuSFaefl9GmqTcepdoudC9avFzgqxPWmd4Vm9hwJsWn 0BQ2DNOeTYsX39OCJ2phbp7eF0sWC8R3775yInWQDXORqinZWwoByGJZ7ewsRjwZ OnDmTUCb809ubD1AU4IK1pmJ4zqt70mP4U6AqGxM9PBJO0k2bWCOxOTnnzbI5VqQ 14wmXhh3i/2x8q013q2sQmACKMXyH6yQqysg13fA9gcDqIwT6kKzdxm/m33RAUlt tl25A8xqWc+/j5Hsq+jK0WdA4hPEvS9fT3ofoIBUDxdlKyX3AU0KLWQyz9i3VBmC AuT7HP5ebLibPheTScglyd7nRkYmJ/I= -----END CERTIFICATE-----Generated at Tue Jul 1 20:25:55 2025 by rpki-client