$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67033fd2-a3ec-33dc-8c6a-acb8f89ab37e.roa File: 67033fd2-a3ec-33dc-8c6a-acb8f89ab37e.roa (raw, json) Hash identifier: i4lXvgqUGqplH3VGrA9nt/fRx7aFBYD0UT7UKRNw5Xc= Subject key identifier: EE:E6:46:24:31:93:7D:E3:C2:A4:5E:A0:60:85:77:96:8A:AB:73:00 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8489C4BB51B3CC4EEFD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67033fd2-a3ec-33dc-8c6a-acb8f89ab37e.roa Signing time: Fri 20 Jun 2025 09:31:34 +0000 ROA not before: Fri 20 Jun 2025 09:31:34 +0000 ROA not after: Thu 18 Sep 2025 09:31:34 +0000 asID: 22773 IP address blocks: 70.170.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:48:9c:4b:b5:1b:3c:c4:ee:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:34 2025 GMT Not After : Sep 18 09:31:34 2025 GMT Subject: CN=a6ec0515-3372-445f-a90c-5c792b28cb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:ae:8b:17:91:64:ff:5d:69:ea:c2:d5:26: c6:56:c3:77:8a:15:45:6f:79:7f:d2:33:dd:73:2a: 59:95:1f:ff:e2:bd:30:d5:bc:cc:74:d1:a1:c8:0f: 8c:4d:a1:dc:f3:10:9b:60:6c:b0:5e:c8:2b:43:cb: 76:58:3e:22:7b:d8:0a:6d:8f:a7:75:8a:a8:11:bc: a4:9f:44:22:ad:53:42:ac:7f:8e:04:00:c7:19:55: c6:95:e5:6e:7f:8d:ca:b0:eb:d9:70:64:dd:af:c2: 8f:a8:5b:da:06:7c:8f:c0:ba:b7:29:de:90:5a:61: 77:02:3c:90:52:0a:63:f1:8d:4c:6c:87:e5:bc:17: fd:c0:0d:a1:32:b6:65:cf:6e:ee:b2:a8:95:a8:02: c1:ff:dc:67:fc:85:37:64:1c:ea:b0:e2:40:05:09: f7:9c:08:3e:07:da:79:34:73:73:c2:d5:a8:38:12: c1:d3:67:3b:2a:a3:6b:09:58:ca:23:0c:e1:d7:c3: 03:ad:09:a2:ee:46:22:49:03:f0:54:2b:c7:2d:dc: bc:51:56:93:b8:30:19:f6:fd:db:11:3c:e2:ab:f7: 87:35:c7:11:c1:54:3f:fe:d4:19:8e:2f:27:f1:e0: 15:78:86:64:bc:43:43:ec:6d:bc:11:46:78:1e:99: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:46:24:31:93:7D:E3:C2:A4:5E:A0:60:85:77:96:8A:AB:73:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67033fd2-a3ec-33dc-8c6a-acb8f89ab37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a6:ea:24:66:d0:53:bb:6f:19:8b:63:02:1c:f9:e0:8b:e6: de:f3:83:44:d6:63:f5:5e:a6:39:9b:9a:38:bf:be:16:6e:35: 5b:1d:e2:42:83:fc:42:b5:e8:e1:a9:56:e2:81:d5:5f:3e:2b: e2:e9:08:f2:0a:18:e9:e4:94:b4:95:77:c5:41:16:de:20:3b: 97:87:a4:73:81:ed:9d:0e:40:68:67:2d:0f:8a:62:f6:49:2a: fb:9d:7a:69:5a:3e:5a:44:c9:e2:9b:9f:1b:7d:b2:1a:11:10: a6:80:68:43:c6:00:7d:6c:79:e2:47:c5:2c:52:73:7b:e7:11: 34:d7:8d:63:96:a7:df:0f:46:ac:14:60:a9:10:8c:fb:84:2c: b4:ab:2f:a4:aa:cf:80:b4:a0:37:a0:a4:f5:a8:7c:f2:69:61: b0:85:e8:06:58:30:52:2d:22:68:30:e1:b4:d1:6f:5e:cf:7a: 2f:16:9c:db:6d:ea:be:09:56:71:98:b8:51:02:bb:3b:03:e7: 0a:10:a6:bc:4c:95:46:af:c1:b0:e7:37:8f:e6:50:65:36:61: 04:55:7a:e0:11:74:81:5d:c9:d9:6f:3f:2c:19:2c:0b:db:0f: 4a:08:d2:92:51:f6:94:bc:39:c3:95:d0:35:12:22:71:db:19: ca:da:05:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqEicS7UbPMTu/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzNFoXDTI1MDkxODA5MzEzNFowLzEtMCsGA1UEAxMk YTZlYzA1MTUtMzM3Mi00NDVmLWE5MGMtNWM3OTJiMjhjYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyWuixeRZP9daerC1SbGVsN3ihVFb3l/0jPd cypZlR//4r0w1bzMdNGhyA+MTaHc8xCbYGywXsgrQ8t2WD4ie9gKbY+ndYqoEbyk n0QirVNCrH+OBADHGVXGleVuf43KsOvZcGTdr8KPqFvaBnyPwLq3Kd6QWmF3AjyQ Ugpj8Y1MbIflvBf9wA2hMrZlz27usqiVqALB/9xn/IU3ZBzqsOJABQn3nAg+B9p5 NHNzwtWoOBLB02c7KqNrCVjKIwzh18MDrQmi7kYiSQPwVCvHLdy8UVaTuDAZ9v3b ETziq/eHNccRwVQ//tQZji8n8eAVeIZkvEND7G28EUZ4HplciQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7mRiQxk33jwqReoGCFd5aKq3MAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjcwMzNmZDItYTNlYy0z M2RjLThjNmEtYWNiOGY4OWFiMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqrmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHem6iRm0FO7bxmLYwIc+eCL5t7zg0TWY/Vepjmbmji/vhZuNVsd4kKD /EK16OGpVuKB1V8+K+LpCPIKGOnklLSVd8VBFt4gO5eHpHOB7Z0OQGhnLQ+KYvZJ KvudemlaPlpEyeKbnxt9shoREKaAaEPGAH1seeJHxSxSc3vnETTXjWOWp98PRqwU YKkQjPuELLSrL6Sqz4C0oDegpPWofPJpYbCF6AZYMFItImgw4bTRb17Pei8WnNtt 6r4JVnGYuFECuzsD5woQprxMlUavwbDnN4/mUGU2YQRVeuARdIFdydlvPywZLAvb D0oI0pJR9pS8OcOV0DUSInHbGcraBXs= -----END CERTIFICATE-----Generated at Tue Jul 1 10:35:56 2025 by rpki-client