$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa File: 709e44f1-ab09-32fc-823f-6281d2b7af51.roa (raw, json) Hash identifier: RMlyjS7T1LE+LqcSttp6Pm1J8rpfMnSMCk6QJq8TBHg= Subject key identifier: 0E:D9:D1:A1:B8:26:FF:7E:3C:85:3F:25:98:1F:10:05:6E:91:88:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7FF5B5C9C7FF5B17C0D60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa Signing time: Fri 20 Jun 2025 09:30:59 +0000 ROA not before: Fri 20 Jun 2025 09:30:59 +0000 ROA not after: Thu 18 Sep 2025 09:30:59 +0000 asID: 22773 IP address blocks: 70.170.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:ff:5b:5c:9c:7f:f5:b1:7c:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:59 2025 GMT Not After : Sep 18 09:30:59 2025 GMT Subject: CN=a0a3fa9a-f64f-4f09-a6e7-bc2892e331e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:33:67:01:0f:8a:ab:67:35:2b:80:67:5c: b7:a1:c0:26:49:8e:5f:d2:4a:05:77:59:20:cb:91: ba:7c:e0:87:3c:63:14:c4:70:d4:8a:72:87:29:33: 34:80:5d:32:b3:cd:e3:4a:a9:e2:78:35:21:20:24: 1b:7d:b2:29:cb:06:7a:28:89:24:9d:91:11:eb:e9: 91:bf:34:8c:c2:24:ea:70:a6:a3:fa:84:25:75:bc: 29:3b:5d:83:da:39:85:f5:2d:2d:5e:a3:d9:28:72: d8:de:9e:8d:92:b1:50:b7:78:61:6e:e0:b6:17:d8: 7d:3b:8e:6d:97:b3:39:a3:01:60:e6:ce:fb:7b:d4: 71:d0:03:f5:f7:32:01:07:6b:eb:36:a8:ed:1e:f8: 8d:f2:55:de:bc:86:07:3a:c6:38:96:69:64:2e:08: a1:dd:40:e7:3c:85:9c:71:05:a5:f6:46:82:5d:5e: 78:08:c9:1b:22:16:71:fb:b4:d9:5c:07:dd:78:ba: 37:11:42:bd:8d:10:d8:60:e4:98:3c:06:9b:6a:6a: 4e:59:66:72:0a:85:dd:e7:a0:0e:ef:9d:21:98:95: c1:46:97:ac:f4:05:2a:06:c0:f3:5f:67:99:34:af: b4:38:5a:4b:dc:46:f5:73:bb:5a:4f:95:3a:a7:7d: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D9:D1:A1:B8:26:FF:7E:3C:85:3F:25:98:1F:10:05:6E:91:88:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/709e44f1-ab09-32fc-823f-6281d2b7af51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ed:c5:93:52:21:3a:07:0d:f6:6d:10:30:bd:34:e1:fc:64: 01:27:20:7f:a2:f2:bf:96:50:c2:dc:d1:98:b9:36:b7:54:13: 4e:b5:8b:1f:8a:fe:b1:0c:c9:49:ee:f8:7d:71:65:70:a6:02: 71:52:e7:43:ce:76:21:48:f7:c2:7b:f2:b4:e4:fd:39:77:d7: 22:d2:45:0b:03:cf:cf:cf:9d:e5:6b:86:78:b2:7b:b1:40:8c: 18:b4:fe:cb:78:bd:a5:82:e2:45:11:df:da:76:00:ed:3e:0e: 31:55:89:e4:8c:13:d0:2c:02:6c:27:84:5b:8a:30:44:c7:0f: a5:11:42:ea:33:91:d8:20:a5:08:1f:11:ed:de:f2:ac:28:e4: 53:87:2b:3b:93:dd:9d:4b:57:d7:94:72:73:22:ef:cb:72:d3: 76:d0:ec:b8:ec:c2:b9:4e:11:14:bd:d9:c1:db:50:a9:b9:67: d7:d0:ab:c9:11:17:16:c4:c7:ac:a3:a1:03:fa:7b:53:6c:a2: f2:68:88:92:8f:a7:a9:fb:dd:77:7a:23:fe:0f:80:00:c5:a1: 9f:39:9e:ad:1f:67:f9:83:04:15:52:83:ac:94:ee:6c:f5:ea: 37:bd:6d:07:1e:4a:01:79:64:f4:59:e5:a6:b7:99:08:94:04: ef:eb:c7:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp/9bXJx/9bF8DWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA1OVoXDTI1MDkxODA5MzA1OVowLzEtMCsGA1UEAxMk YTBhM2ZhOWEtZjY0Zi00ZjA5LWE2ZTctYmMyODkyZTMzMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLszZwEPiqtnNSuAZ1y3ocAmSY5f0koFd1kg y5G6fOCHPGMUxHDUinKHKTM0gF0ys83jSqnieDUhICQbfbIpywZ6KIkknZER6+mR vzSMwiTqcKaj+oQldbwpO12D2jmF9S0tXqPZKHLY3p6NkrFQt3hhbuC2F9h9O45t l7M5owFg5s77e9Rx0AP19zIBB2vrNqjtHviN8lXevIYHOsY4lmlkLgih3UDnPIWc cQWl9kaCXV54CMkbIhZx+7TZXAfdeLo3EUK9jRDYYOSYPAabampOWWZyCoXd56AO 750hmJXBRpes9AUqBsDzX2eZNK+0OFpL3Eb1c7taT5U6p30+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7Z0aG4Jv9+PIU/JZgfEAVukYifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzA5ZTQ0ZjEtYWIwOS0z MmZjLTgyM2YtNjI4MWQyYjdhZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTtxZNSIToHDfZtEDC9NOH8ZAEnIH+i8r+WUMLc0Zi5NrdUE061ix+K /rEMyUnu+H1xZXCmAnFS50POdiFI98J78rTk/Tl31yLSRQsDz8/PneVrhniye7FA jBi0/st4vaWC4kUR39p2AO0+DjFVieSME9AsAmwnhFuKMETHD6URQuozkdggpQgf Ee3e8qwo5FOHKzuT3Z1LV9eUcnMi78ty03bQ7LjswrlOERS92cHbUKm5Z9fQq8kR FxbEx6yjoQP6e1NsovJoiJKPp6n73Xd6I/4PgADFoZ85nq0fZ/mDBBVSg6yU7mz1 6je9bQceSgF5ZPRZ5aa3mQiUBO/rx88= -----END CERTIFICATE-----Generated at Mon Jun 30 12:33:12 2025 by rpki-client