$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa File: 7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa (raw, json) Hash identifier: hEtJoOQazIMmYxhsq0THI2n/8ETAUHhIgrcYGaaJvZo= Subject key identifier: 25:78:AA:54:5A:90:03:38:5B:59:82:3B:7D:C9:73:93:C4:88:21:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8EC1703A096DBA855F040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa Signing time: Fri 20 Jun 2025 09:32:51 +0000 ROA not before: Fri 20 Jun 2025 09:32:51 +0000 ROA not after: Thu 18 Sep 2025 09:32:51 +0000 asID: 22773 IP address blocks: 70.189.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:ec:17:03:a0:96:db:a8:55:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:51 2025 GMT Not After : Sep 18 09:32:51 2025 GMT Subject: CN=e4f21d8c-86ac-4abe-85e6-d93222b9ca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:c3:26:02:70:4e:4a:66:fa:f9:ec:ba:a7: df:f7:0c:76:24:55:35:d6:10:5f:47:7f:7d:89:a0: 21:67:30:ae:51:20:3a:11:30:f4:31:20:a7:41:b4: dc:b1:ff:a5:84:f2:04:5e:95:0f:ba:6e:1a:c1:ae: 61:3d:cf:1c:26:13:6e:e6:e1:7a:48:1e:02:5c:e3: dc:db:ed:f1:46:c1:d1:9d:91:5e:f7:16:8c:11:01: f9:12:a6:c4:8e:6d:69:a4:da:e5:22:c5:d9:43:67: 10:1e:00:43:21:15:75:71:da:13:7b:b0:a6:30:a3: ae:e7:20:9c:ed:b1:76:76:ee:b4:3a:e9:8b:a9:5d: c7:ce:8f:d5:5e:33:33:f4:a2:5c:09:ce:0b:d9:61: a3:cb:2c:dd:cd:58:c3:b2:fb:b4:f1:d6:52:35:db: 79:23:8b:eb:d0:3b:d4:c8:9f:04:4c:0c:04:88:05: 6f:16:36:e2:45:4f:f3:06:8c:0c:30:a7:0c:80:98: 4b:67:26:03:59:98:57:fc:3f:37:d4:22:37:8f:72: 95:1b:88:4a:24:c4:29:a2:83:6b:f8:2c:e2:31:3f: 1d:09:40:10:3d:55:3e:a9:34:44:5c:e8:8b:6f:9b: 2c:c3:ef:4a:af:0d:dc:e6:d9:d6:79:7f:d3:0b:d1: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:78:AA:54:5A:90:03:38:5B:59:82:3B:7D:C9:73:93:C4:88:21:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7cd0f6f7-737b-36de-ac20-a8e2a6cffe72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:24:e2:ff:b7:4f:0c:61:f1:ac:5d:d5:ae:d2:25:79:3e:13: 9c:5c:c2:e1:a2:0c:d7:b1:86:b6:b7:5b:ce:94:8a:e5:c8:b9: 7d:dc:f1:43:1b:5f:2d:1f:d8:37:42:67:9f:df:40:71:78:72: d1:d1:82:19:a3:b4:d5:23:64:ec:95:4b:02:8d:47:23:10:77: ea:50:b6:4b:a1:87:3f:70:fb:8e:aa:26:73:51:9a:d8:c9:51: 1b:d3:86:90:aa:d0:92:78:49:43:a3:66:15:f9:93:a2:53:bd: f6:b0:7a:d1:bd:eb:e2:03:2c:67:e3:41:db:c8:c2:f2:b7:4c: 4a:9b:b5:25:ba:81:76:f8:97:93:09:74:21:a6:67:19:e7:3e: d8:ec:8c:89:51:e4:0c:73:e3:bd:eb:de:21:ef:24:88:5b:ea: ea:c3:72:63:95:ec:c8:1f:04:90:46:d8:ca:22:0d:7e:44:e3: f2:81:ec:ad:d3:67:d7:66:90:f6:b1:73:5e:37:8d:f0:90:a4: 16:a6:6e:28:c2:79:29:e0:1a:81:48:82:ef:cf:ee:7e:fa:27: eb:24:c5:0e:0a:54:d0:40:74:b5:cc:4c:e9:60:6c:09:54:24: 37:32:82:67:47:5b:be:3a:52:a4:6e:d3:41:ad:88:ec:94:81: 75:29:a9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqOwXA6CW26hV8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI1MVoXDTI1MDkxODA5MzI1MVowLzEtMCsGA1UEAxMk ZTRmMjFkOGMtODZhYy00YWJlLTg1ZTYtZDkzMjIyYjljYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqLDJgJwTkpm+vnsuqff9wx2JFU11hBfR399 iaAhZzCuUSA6ETD0MSCnQbTcsf+lhPIEXpUPum4awa5hPc8cJhNu5uF6SB4CXOPc 2+3xRsHRnZFe9xaMEQH5EqbEjm1ppNrlIsXZQ2cQHgBDIRV1cdoTe7CmMKOu5yCc 7bF2du60OumLqV3Hzo/VXjMz9KJcCc4L2WGjyyzdzVjDsvu08dZSNdt5I4vr0DvU yJ8ETAwEiAVvFjbiRU/zBowMMKcMgJhLZyYDWZhX/D831CI3j3KVG4hKJMQpooNr +CziMT8dCUAQPVU+qTREXOiLb5ssw+9Krw3c5tnWeX/TC9HSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCV4qlRakAM4W1mCO33Jc5PEiCEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2NkMGY2ZjctNzM3Yi0z NmRlLWFjMjAtYThlMmE2Y2ZmZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwk4v+3Twxh8axd1a7SJXk+E5xcwuGiDNexhra3W86UiuXIuX3c8UMb Xy0f2DdCZ5/fQHF4ctHRghmjtNUjZOyVSwKNRyMQd+pQtkuhhz9w+46qJnNRmtjJ URvThpCq0JJ4SUOjZhX5k6JTvfawetG96+IDLGfjQdvIwvK3TEqbtSW6gXb4l5MJ dCGmZxnnPtjsjIlR5Axz473r3iHvJIhb6urDcmOV7MgfBJBG2MoiDX5E4/KB7K3T Z9dmkPaxc143jfCQpBambijCeSngGoFIgu/P7n76J+skxQ4KVNBAdLXMTOlgbAlU JDcygmdHW746UqRu00GtiOyUgXUpqdA= -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:14 2025 by rpki-client