$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b27e6cf-9d2e-3117-a45a-e641e26fc4a0.roa File: 5b27e6cf-9d2e-3117-a45a-e641e26fc4a0.roa (raw, json) Hash identifier: y8cWwlaGS95UH9gB24FMudMEuHARwLYxMhyNRAbUaOY= Subject key identifier: DF:61:22:B4:DB:29:D3:D5:20:28:40:AF:D3:3D:E0:72:4A:68:A1:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A812B749D0A25C1B5A9280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b27e6cf-9d2e-3117-a45a-e641e26fc4a0.roa Signing time: Fri 20 Jun 2025 09:31:09 +0000 ROA not before: Fri 20 Jun 2025 09:31:09 +0000 ROA not after: Thu 18 Sep 2025 09:31:09 +0000 asID: 22773 IP address blocks: 70.170.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:12:b7:49:d0:a2:5c:1b:5a:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:09 2025 GMT Not After : Sep 18 09:31:09 2025 GMT Subject: CN=3c1044b8-17d8-4632-8762-0d3f9e646ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:73:e4:31:76:56:9a:94:fa:8d:81:3b:06: e7:79:91:71:13:3f:6d:33:58:0d:bd:d9:d0:2c:d0: 69:c5:43:56:49:a5:6b:4f:d0:a7:60:d6:5d:63:d9: 56:7a:79:f4:7a:07:65:5a:9c:05:c4:f3:a3:d2:46: 0f:f6:38:1d:f6:ed:6c:01:43:db:0e:d7:20:e5:fe: 5a:7c:c3:0f:ed:51:e7:8a:a8:4b:49:f1:a1:8b:b7: cb:7d:96:8a:1c:7e:58:b6:9f:00:ec:43:04:d4:21: 93:84:0e:b5:5c:e6:53:d1:72:14:60:3a:fd:19:ec: cf:bf:96:5a:d5:c0:41:71:cc:fb:c4:b6:54:cd:ef: f3:b8:89:67:01:db:5a:c8:2d:51:36:b4:28:26:b1: 85:13:d9:00:38:ab:6b:05:d8:b8:13:46:3a:74:2c: 0c:d5:3e:ad:fc:1f:14:77:c0:90:d2:ed:dc:71:68: 39:8c:31:8f:78:0b:59:6e:da:c7:2a:d4:3a:06:d6: 6c:de:97:ae:38:d0:be:9d:d4:9d:b5:a4:16:21:3a: 33:ea:8b:94:3c:03:e5:23:de:81:2d:8e:b9:1f:7e: a9:eb:6f:20:f0:8b:be:fc:b1:44:7c:a7:87:e8:d6: 2b:24:20:bf:6d:90:97:72:25:02:4f:fb:f3:26:a3: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:22:B4:DB:29:D3:D5:20:28:40:AF:D3:3D:E0:72:4A:68:A1:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b27e6cf-9d2e-3117-a45a-e641e26fc4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:80:17:1b:d9:1e:52:3c:89:51:25:19:ab:83:07:6a:7f:56: f7:5f:fd:2e:4d:4a:9d:a8:53:91:04:c3:71:f8:ad:75:aa:6c: 55:38:c8:2a:3c:81:08:3c:b6:32:4e:48:28:9a:72:29:64:ba: 44:68:af:45:5b:02:a0:4b:a8:ba:50:0c:eb:ee:de:63:35:f6: 37:70:d0:f4:e0:a6:b0:a5:3a:c8:f0:4e:6e:ae:3c:1c:36:d6: ad:2a:fa:8e:11:6b:e4:70:29:8a:9b:d6:a8:82:b2:80:48:b0: 69:f2:a9:01:32:41:93:76:c9:6d:90:0c:46:8d:59:db:c8:da: 3a:31:18:58:af:ab:bc:de:ce:80:97:8a:f1:4e:d5:0c:cf:c9: af:d1:5c:c7:1f:43:e9:94:45:6d:9e:f8:20:5d:72:da:01:5d: af:46:69:34:51:40:4c:b4:3a:39:ac:13:51:da:56:26:f3:da: 3a:61:05:96:b4:18:aa:e5:c1:d0:41:a9:6d:54:f9:be:7a:60: ac:f2:4c:5d:03:c9:3a:e2:79:4a:fb:9a:ee:ae:66:34:a7:7d: 3f:95:a0:d0:74:0c:b6:c5:00:6f:25:4b:62:39:24:f2:e7:3e: 77:7b:f8:8a:00:5f:f8:25:10:8a:61:0e:e9:e9:06:18:76:89: f4:a6:bd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqBK3SdCiXBtakoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEwOVoXDTI1MDkxODA5MzEwOVowLzEtMCsGA1UEAxMk M2MxMDQ0YjgtMTdkOC00NjMyLTg3NjItMGQzZjllNjQ2ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF1z5DF2VpqU+o2BOwbneZFxEz9tM1gNvdnQ LNBpxUNWSaVrT9CnYNZdY9lWenn0egdlWpwFxPOj0kYP9jgd9u1sAUPbDtcg5f5a fMMP7VHniqhLSfGhi7fLfZaKHH5Ytp8A7EME1CGThA61XOZT0XIUYDr9GezPv5Za 1cBBccz7xLZUze/zuIlnAdtayC1RNrQoJrGFE9kAOKtrBdi4E0Y6dCwM1T6t/B8U d8CQ0u3ccWg5jDGPeAtZbtrHKtQ6BtZs3peuONC+ndSdtaQWIToz6ouUPAPlI96B LY65H36p628g8Iu+/LFEfKeH6NYrJCC/bZCXciUCT/vzJqMkaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9hIrTbKdPVIChAr9M94HJKaKEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWIyN2U2Y2YtOWQyZS0z MTE3LWE0NWEtZTY0MWUyNmZjNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiAFxvZHlI8iVElGauDB2p/Vvdf/S5NSp2oU5EEw3H4rXWqbFU4yCo8 gQg8tjJOSCiacilkukRor0VbAqBLqLpQDOvu3mM19jdw0PTgprClOsjwTm6uPBw2 1q0q+o4Ra+RwKYqb1qiCsoBIsGnyqQEyQZN2yW2QDEaNWdvI2joxGFivq7zezoCX ivFO1QzPya/RXMcfQ+mURW2e+CBdctoBXa9GaTRRQEy0OjmsE1HaVibz2jphBZa0 GKrlwdBBqW1U+b56YKzyTF0DyTrieUr7mu6uZjSnfT+VoNB0DLbFAG8lS2I5JPLn Pnd7+IoAX/glEIphDunpBhh2ifSmvZM= -----END CERTIFICATE-----Generated at Tue Jul 1 00:25:38 2025 by rpki-client