$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa File: 653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa (raw, json) Hash identifier: L4XrMt0j4tPYGwzGSGGgMlYGSWG6P8nTknZCiX5BiXc= Subject key identifier: 57:0C:84:B7:37:F6:10:37:CE:A5:53:68:2B:D8:1C:83:D5:D0:67:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A84F745FA911EEDE78EE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa Signing time: Fri 20 Jun 2025 09:31:37 +0000 ROA not before: Fri 20 Jun 2025 09:31:37 +0000 ROA not after: Thu 18 Sep 2025 09:31:37 +0000 asID: 22773 IP address blocks: 70.173.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:4f:74:5f:a9:11:ee:de:78:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:37 2025 GMT Not After : Sep 18 09:31:37 2025 GMT Subject: CN=9af375aa-6660-42e6-8da6-ac265b9bce8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:4a:44:12:91:24:a1:38:96:58:b8:9c:81: 94:a0:c1:c4:9b:e5:52:cd:8e:64:87:ef:6e:26:5e: c7:9f:e6:d3:63:e4:e9:d9:7a:f9:bc:1e:7e:ae:89: 7b:b6:f1:9c:5c:20:1a:0a:4a:41:0c:3a:7d:18:9e: a8:55:7e:4e:a1:06:f3:e5:68:27:14:c8:08:f4:03: df:35:80:32:23:28:28:85:6e:12:81:97:2c:01:3b: 03:1b:97:fe:07:ae:86:3f:d3:ca:dc:d8:f0:dd:90: d8:1c:46:c1:b5:9f:92:f9:37:1e:8c:7e:70:0d:7f: 38:93:74:54:e0:65:53:1d:4a:87:bd:68:6e:ea:60: 36:71:26:c1:08:71:b9:c9:a6:85:53:7f:d8:8b:7c: 53:92:eb:0c:9a:df:b0:cd:43:38:58:5e:0a:84:91: c0:a1:03:ae:76:0d:8e:21:35:75:0d:94:6b:26:f2: 59:6b:37:c6:6e:26:e4:66:0d:c6:02:fc:e1:4d:15: c5:05:b2:53:53:f0:5e:59:ec:fc:76:5e:a1:7b:44: 6f:0d:f9:f3:ee:b2:82:cd:28:4d:84:8c:78:b5:ce: 2a:be:9e:96:50:a8:83:28:35:7a:15:d9:e8:f8:c5: 02:68:3e:39:9c:24:ae:f4:8d:c0:50:77:e0:ce:d0: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:84:B7:37:F6:10:37:CE:A5:53:68:2B:D8:1C:83:D5:D0:67:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/653c5f92-d341-3b25-b7ce-adc2a9f1ffce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bf:7a:36:a3:40:9f:76:89:40:ff:22:f7:58:c6:0d:62:29: 09:7c:81:b0:21:59:06:d4:95:5d:f1:60:8e:5b:c0:9a:27:44: 97:c8:7f:21:d6:2d:9b:70:20:f0:77:39:df:c5:1a:da:51:89: 9b:0d:83:58:ed:46:46:bb:96:a9:31:4c:6f:e5:4e:5d:e7:8c: 9b:0b:68:71:15:88:ff:39:73:61:19:2d:02:53:86:b9:e6:ed: 69:6e:7b:95:cb:33:8f:01:30:2e:a0:f7:cf:1e:58:e0:7c:0b: 0e:0c:29:23:ec:3e:26:d3:59:5d:dd:7f:cf:d3:cf:7a:68:21: 54:34:da:94:19:e4:17:80:19:e3:41:82:ea:b3:1b:ac:40:ac: 48:5e:e2:ce:b0:10:7a:8c:c4:0d:3e:6f:d5:92:d1:fe:b4:f4: ca:1e:10:05:e8:78:8a:3e:60:be:9e:06:e8:d9:ac:7a:2d:60: 43:c9:c6:74:37:95:bd:ce:a6:2c:38:69:5e:c3:1f:9c:42:27: 9b:85:8c:60:a3:0d:84:5b:c4:af:14:2d:98:fb:b3:b7:a6:fc: fa:0b:31:1c:53:27:e0:98:22:b1:30:da:83:33:fe:23:6a:4f: ad:40:76:05:13:38:76:44:d3:5f:ca:93:8d:9b:f9:a6:f7:ed: 0e:a7:90:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqE90X6kR7t547oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzN1oXDTI1MDkxODA5MzEzN1owLzEtMCsGA1UEAxMk OWFmMzc1YWEtNjY2MC00MmU2LThkYTYtYWMyNjViOWJjZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk1KRBKRJKE4lli4nIGUoMHEm+VSzY5kh+9u Jl7Hn+bTY+Tp2Xr5vB5+rol7tvGcXCAaCkpBDDp9GJ6oVX5OoQbz5WgnFMgI9APf NYAyIygohW4SgZcsATsDG5f+B66GP9PK3Njw3ZDYHEbBtZ+S+TcejH5wDX84k3RU 4GVTHUqHvWhu6mA2cSbBCHG5yaaFU3/Yi3xTkusMmt+wzUM4WF4KhJHAoQOudg2O ITV1DZRrJvJZazfGbibkZg3GAvzhTRXFBbJTU/BeWez8dl6he0RvDfnz7rKCzShN hIx4tc4qvp6WUKiDKDV6Fdno+MUCaD45nCSu9I3AUHfgztBv0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcMhLc39hA3zqVTaCvYHIPV0GflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUzYzVmOTItZDM0MS0z YjI1LWI3Y2UtYWRjMmE5ZjFmZmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy/ejajQJ92iUD/IvdYxg1iKQl8gbAhWQbUlV3xYI5bwJonRJfIfyHW LZtwIPB3Od/FGtpRiZsNg1jtRka7lqkxTG/lTl3njJsLaHEViP85c2EZLQJThrnm 7Wlue5XLM48BMC6g988eWOB8Cw4MKSPsPibTWV3df8/Tz3poIVQ02pQZ5BeAGeNB guqzG6xArEhe4s6wEHqMxA0+b9WS0f609MoeEAXoeIo+YL6eBujZrHotYEPJxnQ3 lb3Opiw4aV7DH5xCJ5uFjGCjDYRbxK8ULZj7s7em/PoLMRxTJ+CYIrEw2oMz/iNq T61AdgUTOHZE01/Kk42b+ab37Q6nkE4= -----END CERTIFICATE-----Generated at Tue Jul 1 17:56:45 2025 by rpki-client