$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79c9af56-f51a-3c26-b138-ab67066d93bf.roa File: 79c9af56-f51a-3c26-b138-ab67066d93bf.roa (raw, json) Hash identifier: 70nVZHxDNQ7HCtLQGp8FNImRXWamir8wC5tlA31Qzgw= Subject key identifier: 02:33:E7:04:C3:53:32:9F:7A:50:AE:12:0F:EE:97:54:94:1F:57:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A903E8998C5C4EF3230C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79c9af56-f51a-3c26-b138-ab67066d93bf.roa Signing time: Fri 20 Jun 2025 09:33:02 +0000 ROA not before: Fri 20 Jun 2025 09:33:02 +0000 ROA not after: Thu 18 Sep 2025 09:33:02 +0000 asID: 22773 IP address blocks: 70.189.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:03:e8:99:8c:5c:4e:f3:23:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:02 2025 GMT Not After : Sep 18 09:33:02 2025 GMT Subject: CN=6993b895-8743-4d6f-83a3-27be5a8bde77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:d5:43:e9:a1:82:30:45:1c:ee:8e:cb:34: 49:c7:f9:71:82:a9:88:fa:c4:0b:00:11:41:dc:78: 3a:32:bd:6f:6f:62:d5:2a:12:d7:d8:df:ab:50:b5: b5:c0:3e:4e:fc:59:2f:4e:1d:8f:19:15:1d:c4:5d: e6:a2:eb:33:5e:eb:31:48:13:54:06:88:eb:f7:33: c1:6b:90:6d:25:b0:b5:bf:1f:4d:8f:74:c1:60:1c: 68:e6:08:89:df:0f:f4:ba:dd:1b:bb:6a:f2:d8:00: d5:45:53:84:9b:6e:bf:20:4b:aa:16:59:43:57:26: ac:ad:cc:e5:2f:7c:d8:fb:d3:68:95:3c:2e:32:8a: f1:fa:53:b6:c6:d3:7f:55:33:bb:a6:1b:4f:a0:a3: c4:50:5b:ff:8b:3b:60:24:30:91:1e:3b:97:07:10: fd:99:4e:ff:93:4f:7f:84:45:20:03:c4:fb:d6:40: 2a:f0:04:05:4e:ee:fa:0b:64:c6:7c:b2:59:e4:12: dc:f6:47:32:48:a5:d7:d5:6e:66:4e:29:e1:87:71: 64:86:f3:85:e0:4b:ab:25:10:a2:5e:c6:25:9c:4d: 8e:fc:92:1b:69:a6:2b:18:95:77:4c:e0:2a:7c:e7: f1:82:3e:52:1f:45:cd:d6:d0:4a:bf:5a:a2:80:2b: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:E7:04:C3:53:32:9F:7A:50:AE:12:0F:EE:97:54:94:1F:57:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79c9af56-f51a-3c26-b138-ab67066d93bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:59:aa:d8:b5:37:b8:b9:a8:76:8f:13:34:42:0d:16:fd:d9: e4:7d:74:50:cb:67:f8:00:00:d9:7a:39:c1:44:09:20:03:db: c8:08:9a:ea:c2:26:0c:84:1b:5a:b5:e9:90:92:6b:8f:7a:21: 6b:83:5c:c1:20:58:97:bc:19:9b:77:e6:00:e0:f8:cf:e3:07: c5:b5:fe:a8:4d:9a:96:3c:af:21:54:00:fc:8e:b9:8e:7f:8d: 6d:cd:f0:fb:a0:2f:88:60:9e:a0:c7:d5:d6:f9:c3:be:33:1e: 32:3e:99:b1:7e:79:c1:70:5a:d6:e0:f5:d7:48:41:4e:9c:d9: 48:b4:74:2b:32:ef:f9:36:d0:f7:79:96:c6:7c:5f:e3:d7:58: 0d:64:ad:56:5e:8d:96:cd:3a:3b:fd:fb:ad:be:68:cf:96:46: 68:9a:5f:cf:6a:ee:44:c3:bb:58:47:01:c0:e2:a6:fb:20:15: bc:0a:38:ba:5b:bf:cf:ba:82:3b:3e:75:f0:5c:cd:40:76:47: 2c:57:58:9f:2e:56:29:85:46:2e:2b:49:f1:13:2f:98:a4:89: 40:95:d8:d4:4a:74:ce:c0:9f:2d:81:c2:0a:9d:41:d5:0b:2b: 9c:f1:50:f4:2b:65:f3:b1:2b:2f:f4:0a:5d:d7:3c:7b:50:0b: 21:79:9c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqQPomYxcTvMjDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMwMloXDTI1MDkxODA5MzMwMlowLzEtMCsGA1UEAxMk Njk5M2I4OTUtODc0My00ZDZmLTgzYTMtMjdiZTVhOGJkZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixfVQ+mhgjBFHO6OyzRJx/lxgqmI+sQLABFB 3Hg6Mr1vb2LVKhLX2N+rULW1wD5O/FkvTh2PGRUdxF3mouszXusxSBNUBojr9zPB a5BtJbC1vx9Nj3TBYBxo5giJ3w/0ut0bu2ry2ADVRVOEm26/IEuqFllDVyasrczl L3zY+9NolTwuMorx+lO2xtN/VTO7phtPoKPEUFv/iztgJDCRHjuXBxD9mU7/k09/ hEUgA8T71kAq8AQFTu76C2TGfLJZ5BLc9kcySKXX1W5mTinhh3FkhvOF4EurJRCi XsYlnE2O/JIbaaYrGJV3TOAqfOfxgj5SH0XN1tBKv1qigCv9GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIz5wTDUzKfelCuEg/ul1SUH1dlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzljOWFmNTYtZjUxYS0z YzI2LWIxMzgtYWI2NzA2NmQ5M2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Zqti1N7i5qHaPEzRCDRb92eR9dFDLZ/gAANl6OcFECSAD28gImurC JgyEG1q16ZCSa496IWuDXMEgWJe8GZt35gDg+M/jB8W1/qhNmpY8ryFUAPyOuY5/ jW3N8PugL4hgnqDH1db5w74zHjI+mbF+ecFwWtbg9ddIQU6c2Ui0dCsy7/k20Pd5 lsZ8X+PXWA1krVZejZbNOjv9+62+aM+WRmiaX89q7kTDu1hHAcDipvsgFbwKOLpb v8+6gjs+dfBczUB2RyxXWJ8uVimFRi4rSfETL5ikiUCV2NRKdM7Any2BwgqdQdUL K5zxUPQrZfOxKy/0Cl3XPHtQCyF5nH4= -----END CERTIFICATE-----Generated at Tue Jul 1 13:16:24 2025 by rpki-client