$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3ffc60-0183-3539-abeb-a8e51643d6cc.roa File: 4a3ffc60-0183-3539-abeb-a8e51643d6cc.roa (raw, json) Hash identifier: eRK9mgzsVAI+Ucs4BYKT3/gxtPRucbMgK6j8vVR9N7g= Subject key identifier: 15:D6:E7:90:4F:55:D3:44:01:CE:A3:42:E6:49:0E:09:B9:A0:C3:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9025BC4C96EBA20DB5E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3ffc60-0183-3539-abeb-a8e51643d6cc.roa Signing time: Fri 20 Jun 2025 09:33:02 +0000 ROA not before: Fri 20 Jun 2025 09:33:02 +0000 ROA not after: Thu 18 Sep 2025 09:33:02 +0000 asID: 22773 IP address blocks: 70.189.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:02:5b:c4:c9:6e:ba:20:db:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:02 2025 GMT Not After : Sep 18 09:33:02 2025 GMT Subject: CN=d6c6761c-e53b-4d92-8e83-4837110730a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:98:35:a7:1f:f6:a5:5f:ea:68:85:a7:99: 73:bb:86:45:90:98:3a:f9:bf:34:b5:fd:a5:d2:08: 73:f8:91:f7:b5:9b:0e:37:00:c2:25:0c:0a:68:7d: 9d:39:5a:fc:df:26:9c:86:d8:9d:17:2f:f8:80:36: 5b:eb:eb:b2:fe:68:a5:cb:7c:86:f4:be:aa:03:46: 5c:c8:81:42:76:0f:28:61:50:46:da:61:71:bf:c8: e2:c3:74:b4:61:d7:ad:a6:08:63:08:1a:4f:90:39: f2:a6:c1:00:6d:8e:ff:ed:0a:3a:ba:cb:c1:e3:d7: a6:29:17:3b:85:0f:4f:5c:f4:2c:f5:7b:23:03:8d: 84:b4:2e:23:76:83:cd:41:b5:c5:e4:d8:43:90:29: 1f:32:5c:74:f6:f6:d2:a0:ca:7a:0c:2e:53:9d:ef: 1c:12:d2:f6:64:67:b0:8a:a1:49:b8:d1:e4:d0:2e: e4:53:2f:2f:1b:61:3e:47:c3:b2:09:e2:61:06:c8: c1:3c:40:76:d5:64:27:a7:a0:61:fc:8f:aa:a6:1a: 29:2c:dc:4e:ad:2f:55:6e:3a:1e:0d:0d:99:93:1a: a7:5e:80:6e:68:bc:a8:75:c4:bd:c3:ae:f1:b2:8c: 25:dd:5c:54:c4:9c:dc:2f:6b:ef:e9:d0:73:54:80: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D6:E7:90:4F:55:D3:44:01:CE:A3:42:E6:49:0E:09:B9:A0:C3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3ffc60-0183-3539-abeb-a8e51643d6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:ec:3f:15:3e:30:3d:50:62:93:c2:aa:63:2b:cf:fc:37: e5:c2:ba:4a:9d:0b:86:52:93:6a:59:24:29:5d:00:ac:aa:13: f5:75:91:a7:3a:af:c8:b4:80:68:00:25:f8:05:95:6d:d8:92: 94:96:d1:5c:49:16:b0:4b:4e:99:27:92:8b:06:35:05:af:61: 96:43:7a:59:23:7a:42:3a:28:06:71:9e:a3:88:20:ab:6d:ec: 58:9b:76:3a:d1:03:6a:15:f5:60:cf:84:e0:bf:22:1f:0a:6b: df:7c:d2:2a:42:30:7a:d2:d6:f0:f8:e8:1f:70:99:55:72:dd: df:bf:1e:55:19:39:53:c5:24:c9:13:23:4e:77:65:61:95:d9: 25:f0:5b:f6:fa:4c:f8:c4:5b:2b:59:52:dc:2a:66:28:1d:15: 22:bc:69:85:e2:1a:68:02:de:f6:18:87:bc:d9:1c:20:fc:6e: 0b:0c:b1:36:73:49:d4:1c:37:6c:f0:ad:02:5c:72:69:0b:60: 07:87:31:d6:82:7b:a4:cd:c9:46:fb:b6:06:ec:96:c7:0f:0d: 59:73:df:d4:c2:6b:b4:dc:7c:49:db:93:4c:96:b8:bf:bf:2b: b0:0e:b5:c5:6f:65:13:71:df:ad:6e:be:30:a3:8f:d1:48:19: 6e:b2:3b:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqQJbxMluuiDbXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMwMloXDTI1MDkxODA5MzMwMlowLzEtMCsGA1UEAxMk ZDZjNjc2MWMtZTUzYi00ZDkyLThlODMtNDgzNzExMDczMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikmYNacf9qVf6miFp5lzu4ZFkJg6+b80tf2l 0ghz+JH3tZsONwDCJQwKaH2dOVr83yachtidFy/4gDZb6+uy/mily3yG9L6qA0Zc yIFCdg8oYVBG2mFxv8jiw3S0YdetpghjCBpPkDnypsEAbY7/7Qo6usvB49emKRc7 hQ9PXPQs9XsjA42EtC4jdoPNQbXF5NhDkCkfMlx09vbSoMp6DC5Tne8cEtL2ZGew iqFJuNHk0C7kUy8vG2E+R8OyCeJhBsjBPEB21WQnp6Bh/I+qphopLNxOrS9Vbjoe DQ2ZkxqnXoBuaLyodcS9w67xsowl3VxUxJzcL2vv6dBzVIAvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXW55BPVdNEAc6jQuZJDgm5oMOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGEzZmZjNjAtMDE4My0z NTM5LWFiZWItYThlNTE2NDNkNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI737D8VPjA9UGKTwqpjK8/8N+XCukqdC4ZSk2pZJCldAKyqE/V1kac6 r8i0gGgAJfgFlW3YkpSW0VxJFrBLTpknkosGNQWvYZZDelkjekI6KAZxnqOIIKtt 7FibdjrRA2oV9WDPhOC/Ih8Ka9980ipCMHrS1vD46B9wmVVy3d+/HlUZOVPFJMkT I053ZWGV2SXwW/b6TPjEWytZUtwqZigdFSK8aYXiGmgC3vYYh7zZHCD8bgsMsTZz SdQcN2zwrQJccmkLYAeHMdaCe6TNyUb7tgbslscPDVlz39TCa7TcfEnbk0yWuL+/ K7AOtcVvZRNx361uvjCjj9FIGW6yOx4= -----END CERTIFICATE-----Generated at Tue Jul 1 11:03:45 2025 by rpki-client