$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dc6dd58-706c-3393-bcd3-d12e2a393b43.roa File: 4dc6dd58-706c-3393-bcd3-d12e2a393b43.roa (raw, json) Hash identifier: ECenKG5z5rafgWIoSaJwBJgQkgtCeu7qHuz6CSxYZWQ= Subject key identifier: 1B:51:6F:B1:64:37:D4:41:F9:CA:10:7E:09:27:D4:7D:63:79:0C:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7B6876B6A9F66632DABAC Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dc6dd58-706c-3393-bcd3-d12e2a393b43.roa Signing time: Thu 19 Jun 2025 09:19:42 +0000 ROA not before: Thu 19 Jun 2025 09:19:42 +0000 ROA not after: Wed 17 Sep 2025 09:19:42 +0000 asID: 22773 IP address blocks: 70.163.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:b6:87:6b:6a:9f:66:63:2d:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:42 2025 GMT Not After : Sep 17 09:19:42 2025 GMT Subject: CN=4c503d8b-8e43-4468-a3af-b8e38ed37974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:ba:e2:6d:de:13:af:1a:ca:79:3e:58:de: 05:ee:26:98:09:b5:b5:32:ce:ec:da:99:4a:78:a1: c5:20:bc:38:80:56:89:51:5e:69:b1:51:d9:4d:f6: a3:6c:08:d7:2e:47:88:71:21:8d:ce:27:51:e3:74: 4b:2b:86:0a:9b:78:29:50:a7:9e:61:69:fd:09:a7: 6f:8f:49:93:27:30:f1:5f:0a:e7:7f:5e:27:7c:41: a1:18:42:c4:7a:46:ff:57:91:81:6f:54:1c:1e:af: 19:77:42:aa:ef:c1:b4:4c:fc:ea:64:f1:dd:64:0c: ad:1e:f6:92:a3:94:d0:06:9b:b8:b1:d2:ed:e5:29: 00:e4:cf:dc:07:f8:f8:49:4a:87:36:8a:65:9d:e2: f6:e6:6a:7c:21:57:67:aa:bb:0c:36:62:8e:79:85: 32:8b:c2:ee:2f:2c:8c:3d:77:4f:83:84:ec:0d:ed: 4f:96:2c:c2:3a:04:d1:0e:6b:67:44:f3:a1:d1:37: 81:6c:74:0e:e9:93:4f:9d:37:1e:47:d8:50:5a:9e: a0:61:f0:ae:3d:1d:bd:25:86:03:0f:53:cd:2b:d7: c2:d0:0c:27:7f:bb:5d:69:80:53:ef:0e:f9:63:90: 8d:14:bd:61:7d:59:b7:5c:1d:3b:ac:14:ce:db:47: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:6F:B1:64:37:D4:41:F9:CA:10:7E:09:27:D4:7D:63:79:0C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dc6dd58-706c-3393-bcd3-d12e2a393b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fb:d9:7c:82:a3:6b:21:b2:4b:0a:03:b1:ef:7e:9c:2d:18: e4:dd:79:55:51:09:87:28:1e:d5:aa:6e:a0:9e:89:ef:01:a4: 43:26:c2:9f:67:ac:2a:e8:33:4f:6c:fc:be:99:73:ab:22:97: 27:49:d6:dc:7c:d4:4c:34:00:56:51:36:0c:05:b0:46:56:f8: 96:eb:54:da:8f:f3:fe:eb:cc:72:68:dd:e0:26:a6:86:e2:6a: 09:90:02:87:63:bd:6b:5c:11:3e:c8:dc:29:58:77:dc:8f:2e: 19:07:dc:1a:52:ff:8f:d3:68:b9:dd:09:c2:63:45:9d:03:36: 44:6c:66:51:4d:41:71:20:2e:db:49:8e:0a:5f:06:ff:0d:ad: 7e:e8:0a:b2:6e:2b:68:17:be:10:68:8a:ec:36:15:72:3c:8b: a3:b2:f6:0a:06:d9:f6:e2:ef:bc:5b:25:cc:73:e2:a4:0c:d3: a4:a5:aa:61:11:b7:73:3e:65:fa:9a:c9:68:09:63:94:92:65: b4:30:f6:17:6c:1f:df:d5:a8:03:95:31:72:a1:f8:8a:f1:7b: 3a:31:dd:ef:79:03:fd:1d:7c:74:e7:d8:6b:3c:57:e7:75:6b: 2e:91:d0:83:11:a3:c3:51:08:a7:42:21:10:ab:3c:c6:25:be: c8:24:b2:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo917aHa2qfZmMtq6wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk0MloXDTI1MDkxNzA5MTk0MlowLzEtMCsGA1UEAxMk NGM1MDNkOGItOGU0My00NDY4LWEzYWYtYjhlMzhlZDM3OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RG64m3eE68aynk+WN4F7iaYCbW1Ms7s2plK eKHFILw4gFaJUV5psVHZTfajbAjXLkeIcSGNzidR43RLK4YKm3gpUKeeYWn9Cadv j0mTJzDxXwrnf14nfEGhGELEekb/V5GBb1QcHq8Zd0Kq78G0TPzqZPHdZAytHvaS o5TQBpu4sdLt5SkA5M/cB/j4SUqHNoplneL25mp8IVdnqrsMNmKOeYUyi8LuLyyM PXdPg4TsDe1PlizCOgTRDmtnRPOh0TeBbHQO6ZNPnTceR9hQWp6gYfCuPR29JYYD D1PNK9fC0Awnf7tdaYBT7w75Y5CNFL1hfVm3XB07rBTO20e8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtRb7FkN9RB+coQfgkn1H1jeQywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRjNmRkNTgtNzA2Yy0z MzkzLWJjZDMtZDEyZTJhMzkzYjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj72XyCo2shsksKA7HvfpwtGOTdeVVRCYcoHtWqbqCeie8BpEMmwp9n rCroM09s/L6Zc6silydJ1tx81Ew0AFZRNgwFsEZW+JbrVNqP8/7rzHJo3eAmpobi agmQAodjvWtcET7I3ClYd9yPLhkH3BpS/4/TaLndCcJjRZ0DNkRsZlFNQXEgLttJ jgpfBv8NrX7oCrJuK2gXvhBoiuw2FXI8i6Oy9goG2fbi77xbJcxz4qQM06SlqmER t3M+ZfqayWgJY5SSZbQw9hdsH9/VqAOVMXKh+Irxezox3e95A/0dfHTn2Gs8V+d1 ay6R0IMRo8NRCKdCIRCrPMYlvsgkslo= -----END CERTIFICATE-----Generated at Tue Jul 1 18:24:43 2025 by rpki-client