$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bbe3e6e-78ce-3f11-8680-8dda51c84120.roa File: 5bbe3e6e-78ce-3f11-8680-8dda51c84120.roa (raw, json) Hash identifier: PbnRZknmOhcKBokBKCcrmXIl+FyBimLnNdRpgerOz9A= Subject key identifier: 78:83:BC:7A:55:AE:65:C5:26:AA:E7:3E:40:8D:84:2B:17:6B:0D:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A81D68E4CCDD3EA7FE7980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bbe3e6e-78ce-3f11-8680-8dda51c84120.roa Signing time: Fri 20 Jun 2025 09:31:14 +0000 ROA not before: Fri 20 Jun 2025 09:31:14 +0000 ROA not after: Thu 18 Sep 2025 09:31:14 +0000 asID: 22773 IP address blocks: 70.170.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:1d:68:e4:cc:dd:3e:a7:fe:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:14 2025 GMT Not After : Sep 18 09:31:14 2025 GMT Subject: CN=129e316a-85b0-49fa-afb5-0765e4aec43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:8b:1a:71:7a:44:f9:ca:19:92:c2:65:2c: ca:de:49:78:e1:01:1f:12:d4:cf:83:2e:68:9f:aa: 5f:b5:42:25:11:8f:7a:e5:aa:99:12:49:7f:22:28: 83:86:f2:79:e4:d8:d8:4c:be:a6:5d:3d:2e:2b:64: 2c:13:41:85:01:9b:4a:cb:c0:b2:24:03:02:e9:e1: 2a:93:ea:1a:b0:8d:a0:a5:1b:05:d6:ba:d2:04:88: ac:62:72:3b:92:f9:5e:c6:2c:b8:68:6e:66:8c:7d: d2:e4:6e:c1:c7:0b:37:8e:de:5b:96:42:dc:d0:f3: 2b:e3:ac:d1:4f:e8:35:f1:c5:e3:ef:2a:57:00:ec: 73:97:48:fc:b6:a4:be:9b:22:01:e3:88:02:1e:33: aa:b9:8a:60:27:7c:ea:44:21:0a:33:22:24:0b:65: 93:e8:32:4d:02:b3:85:19:1b:12:25:46:0d:fa:80: 97:a5:cc:71:ae:dd:04:51:b7:84:92:e9:51:8e:16: 8e:21:c6:f7:98:7c:7a:b3:40:c6:a9:91:06:58:90: b1:72:c8:3f:44:45:8e:56:80:1d:89:cf:61:ad:3d: 2b:6b:e1:5e:d5:24:fb:20:d0:ee:7f:25:36:b5:82: 49:7f:98:ff:29:c9:09:7a:9e:b1:0b:e4:0c:89:5c: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:83:BC:7A:55:AE:65:C5:26:AA:E7:3E:40:8D:84:2B:17:6B:0D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5bbe3e6e-78ce-3f11-8680-8dda51c84120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4e:c5:47:69:d2:40:38:41:cb:50:90:51:9a:63:10:65:d4: 43:46:c8:41:88:a4:35:6d:5e:c3:9c:74:08:9c:19:99:3d:09: 2a:31:fd:08:cd:6f:8f:fc:12:03:ff:82:cb:c7:a9:92:78:5d: c9:b4:33:14:61:7a:e1:ac:0d:2f:01:46:1b:5f:19:1c:24:dd: 7e:cb:a6:56:cb:3c:fa:bb:11:8d:0b:72:6a:64:09:ca:97:ec: 15:02:24:90:e2:bb:ef:62:ed:30:6a:0a:60:f2:c7:c8:16:4d: 2d:5d:8d:8f:71:3c:a8:a6:95:02:4a:cc:31:df:f1:24:ee:42: af:ba:ff:12:b2:a4:01:8a:11:d5:70:1d:80:4c:f1:c8:95:5a: ea:c4:87:d3:60:ab:7f:7c:ab:c1:91:bf:c5:cf:db:b5:d0:62: e9:29:46:8e:cc:38:c2:a7:a8:b7:fb:ab:6f:77:6b:11:a0:64: 60:c7:67:b4:bd:e1:ee:17:7a:23:f9:b8:3e:ee:8f:a8:ff:7e: 23:9b:67:b6:e8:ba:d9:38:32:b5:24:08:14:3c:b0:8b:c8:12: 99:88:7d:4a:1a:9e:45:d0:e2:72:3b:1c:0d:98:f4:39:d4:a5: 49:57:e2:ce:0f:ed:11:17:01:b0:45:c6:0e:52:10:f1:90:b6: ac:19:95:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqB1o5MzdPqf+eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzExNFoXDTI1MDkxODA5MzExNFowLzEtMCsGA1UEAxMk MTI5ZTMxNmEtODViMC00OWZhLWFmYjUtMDc2NWU0YWVjNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfaLGnF6RPnKGZLCZSzK3kl44QEfEtTPgy5o n6pftUIlEY965aqZEkl/IiiDhvJ55NjYTL6mXT0uK2QsE0GFAZtKy8CyJAMC6eEq k+oasI2gpRsF1rrSBIisYnI7kvlexiy4aG5mjH3S5G7Bxws3jt5blkLc0PMr46zR T+g18cXj7ypXAOxzl0j8tqS+myIB44gCHjOquYpgJ3zqRCEKMyIkC2WT6DJNArOF GRsSJUYN+oCXpcxxrt0EUbeEkulRjhaOIcb3mHx6s0DGqZEGWJCxcsg/REWOVoAd ic9hrT0ra+Fe1ST7INDufyU2tYJJf5j/KckJep6xC+QMiVzUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiDvHpVrmXFJqrnPkCNhCsXaw0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWJiZTNlNmUtNzhjZS0z ZjExLTg2ODAtOGRkYTUxYzg0MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqpeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5OxUdp0kA4QctQkFGaYxBl1ENGyEGIpDVtXsOcdAicGZk9CSox/QjN b4/8EgP/gsvHqZJ4Xcm0MxRheuGsDS8BRhtfGRwk3X7LplbLPPq7EY0LcmpkCcqX 7BUCJJDiu+9i7TBqCmDyx8gWTS1djY9xPKimlQJKzDHf8STuQq+6/xKypAGKEdVw HYBM8ciVWurEh9Ngq398q8GRv8XP27XQYukpRo7MOMKnqLf7q293axGgZGDHZ7S9 4e4XeiP5uD7uj6j/fiObZ7boutk4MrUkCBQ8sIvIEpmIfUoankXQ4nI7HA2Y9DnU pUlX4s4P7REXAbBFxg5SEPGQtqwZlbE= -----END CERTIFICATE-----Generated at Tue Jul 1 21:16:29 2025 by rpki-client