$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa File: 6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa (raw, json) Hash identifier: rooQqdBLFqski8bRQ7aujIinE6nX6CsCE+7jCCYqwIY= Subject key identifier: AA:CF:A0:2C:63:07:2A:3E:9B:15:7C:1B:D4:D1:76:9A:D8:55:0A:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5F4CEDE6D7280F667640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 70.166.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:5f:4c:ed:e6:d7:28:0f:66:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=ec975b93-13fd-49b3-83ec-6bbb9e736e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:22:8f:ca:35:4a:f9:ba:76:09:1a:32:77: 4e:f8:54:67:b8:cc:15:c6:d9:b5:d9:bc:fe:3a:c3: 3b:b5:26:34:63:d8:b5:46:d5:63:01:2b:d8:35:0f: 2a:49:f8:8b:6d:c3:b5:06:6c:53:a8:68:5a:d7:c1: 41:a1:6f:ac:a5:2a:77:81:f2:ad:f3:85:dc:90:1d: a4:59:69:38:d0:d0:e4:09:6e:57:30:22:2e:13:d0: be:ce:91:64:b6:83:b7:98:ea:86:08:8a:8b:1e:09: 66:65:1d:69:c1:b9:0f:91:a3:ec:75:da:64:a6:9c: 75:72:ac:0c:26:de:d1:e7:70:ce:ea:41:01:56:dc: 2d:4d:24:11:39:63:0f:9a:db:06:47:45:6d:23:7f: f5:0e:17:f8:61:bd:e5:da:be:d6:37:8f:c5:a7:96: 1f:f8:d2:fd:7b:d3:b8:c6:f4:b5:84:9e:3e:98:c1: 60:41:df:96:f8:6c:d5:9a:21:f2:75:71:12:90:5a: 66:4b:14:21:df:fc:ba:9c:d3:10:8f:91:6d:c5:d7: 7a:c7:b8:00:94:1f:f5:1e:91:20:a8:a8:bf:0c:5a: bd:7b:cb:72:ff:6b:ac:e5:25:0e:14:4a:4e:f6:c7: 35:db:b4:4e:34:82:d3:9b:13:08:37:d9:f4:2f:c9: 7c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:A0:2C:63:07:2A:3E:9B:15:7C:1B:D4:D1:76:9A:D8:55:0A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ac2a45b-c4fe-39f2-b163-49fd7a096422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.166.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a7:03:80:db:60:9d:2c:c7:cd:b6:8b:35:d7:2b:7d:7e:e2: 6a:22:22:52:dc:8f:6d:7c:da:bc:e9:87:68:a8:c3:36:70:9d: 84:8e:40:19:69:39:d5:ff:c0:b2:29:6f:31:a5:27:09:78:fe: 84:9e:60:12:2a:89:f1:1e:3c:16:0f:a2:99:06:fe:41:41:5e: 3e:5c:b1:e0:86:c0:56:e9:93:9a:68:51:b2:52:26:12:ce:de: 34:d5:f0:76:0d:48:fa:9d:f7:cd:d2:63:02:87:59:de:f4:64: 36:97:a3:52:cb:8f:7c:e2:7a:85:65:fa:94:73:5f:59:41:f1: 92:b8:b2:98:85:2b:51:01:6a:38:8e:dd:8a:c8:d3:2d:bc:3f: 15:d2:49:61:e0:6d:9c:d8:d4:66:3d:de:e9:fb:4e:9b:65:df: f1:0d:09:e8:46:04:62:ce:72:ad:b4:67:5b:cc:6c:10:8e:b2: 49:0c:8f:ba:cc:42:41:7c:4c:1c:02:bc:67:cf:b6:33:06:5c: f1:86:b4:c1:17:0c:40:79:4f:85:b8:8b:5e:a3:c3:cf:d3:f4: c1:d3:23:38:48:23:e7:0b:6a:2e:24:ce:32:1c:b3:22:64:34: 9c:b8:bb:ab:67:74:53:0d:c0:c9:ab:cd:72:75:19:2d:0e:0b: 16:a6:00:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6l9M7ebXKA9mdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZWM5NzViOTMtMTNmZC00OWIzLTgzZWMtNmJiYjllNzM2ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKEij8o1Svm6dgkaMndO+FRnuMwVxtm12bz+ OsM7tSY0Y9i1RtVjASvYNQ8qSfiLbcO1BmxTqGha18FBoW+spSp3gfKt84XckB2k WWk40NDkCW5XMCIuE9C+zpFktoO3mOqGCIqLHglmZR1pwbkPkaPsddpkppx1cqwM Jt7R53DO6kEBVtwtTSQROWMPmtsGR0VtI3/1Dhf4Yb3l2r7WN4/Fp5Yf+NL9e9O4 xvS1hJ4+mMFgQd+W+GzVmiHydXESkFpmSxQh3/y6nNMQj5Ftxdd6x7gAlB/1HpEg qKi/DFq9e8ty/2us5SUOFEpO9sc127RONILTmxMIN9n0L8l8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrPoCxjByo+mxV8G9TRdprYVQqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmFjMmE0NWItYzRmZS0z OWYyLWIxNjMtNDlmZDdhMDk2NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGynA4DbYJ0sx822izXXK31+4moiIlLcj2182rzph2iowzZwnYSOQBlp OdX/wLIpbzGlJwl4/oSeYBIqifEePBYPopkG/kFBXj5cseCGwFbpk5poUbJSJhLO 3jTV8HYNSPqd983SYwKHWd70ZDaXo1LLj3zieoVl+pRzX1lB8ZK4spiFK1EBajiO 3YrI0y28PxXSSWHgbZzY1GY93un7Tptl3/ENCehGBGLOcq20Z1vMbBCOskkMj7rM QkF8TBwCvGfPtjMGXPGGtMEXDEB5T4W4i16jw8/T9MHTIzhII+cLai4kzjIcsyJk NJy4u6tndFMNwMmrzXJ1GS0OCxamAAg= -----END CERTIFICATE-----Generated at Tue Jul 1 09:38:30 2025 by rpki-client