$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ac2c61-2ec0-3de8-8f7e-d1d6267d75c2.roa File: 86ac2c61-2ec0-3de8-8f7e-d1d6267d75c2.roa (raw, json) Hash identifier: fpq6sjL/QfVLtgXMdY2u699qKHcH31q2s23L5yy6/KU= Subject key identifier: BE:B1:E5:D5:26:76:29:52:81:99:F8:5B:DF:A4:3C:AC:51:82:77:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8E7523B290AB077926180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ac2c61-2ec0-3de8-8f7e-d1d6267d75c2.roa Signing time: Fri 20 Jun 2025 09:32:49 +0000 ROA not before: Fri 20 Jun 2025 09:32:49 +0000 ROA not after: Thu 18 Sep 2025 09:32:49 +0000 asID: 22773 IP address blocks: 70.189.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:e7:52:3b:29:0a:b0:77:92:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:49 2025 GMT Not After : Sep 18 09:32:49 2025 GMT Subject: CN=bac275e7-2659-4daa-84ba-31de449ffa3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:ec:a6:2c:c3:e0:79:65:17:69:11:64:10: c4:34:07:f6:96:ac:3b:d3:5c:94:7f:8b:64:3d:ac: 0c:a9:3e:cd:6c:e8:8e:6d:48:b4:7e:a6:5d:dd:ea: 1a:44:e8:a1:a5:8e:08:0e:cc:9e:35:7f:d1:6e:d8: 94:b4:60:96:e5:08:58:ac:9c:b3:f9:0f:dc:d3:25: 27:f4:ec:35:83:5f:74:27:c5:fb:2c:f0:cc:2c:b3: 2a:b0:9c:75:12:3e:55:4f:df:79:7c:35:76:21:d3: 0c:3e:56:96:db:a3:80:a8:8b:c3:89:ce:98:d7:d2: b6:82:2b:27:3f:5b:d8:e2:a0:41:24:cb:ab:0f:00: 24:fd:8a:9d:67:d9:1c:76:05:4c:08:bd:d9:e7:0e: 05:1b:5a:54:e6:82:61:85:46:d6:d6:cc:32:c0:01: 01:35:4d:15:a6:3f:75:c7:25:5c:97:6d:f3:5f:fd: 48:ef:b5:b5:35:93:2e:65:70:cc:b3:b5:5e:15:19: fd:e0:69:48:c1:83:17:b2:71:63:76:65:ea:30:b3: 9f:0e:9d:90:8e:fe:71:8a:13:22:f8:3e:8f:df:32: 4a:10:3e:73:1e:1b:63:38:2d:59:de:91:f5:f5:ef: c1:f0:c8:0f:99:54:8b:32:8d:3e:44:fa:85:a4:b2: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B1:E5:D5:26:76:29:52:81:99:F8:5B:DF:A4:3C:AC:51:82:77:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86ac2c61-2ec0-3de8-8f7e-d1d6267d75c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bf:5b:18:09:a9:c1:bd:46:0e:48:0e:15:a2:9d:fd:96:58: e7:ca:1d:94:7f:cf:72:84:bc:00:d2:54:16:87:80:1a:cd:27: aa:16:cc:00:2f:4f:eb:7c:63:93:3a:1e:57:7c:65:e1:3e:fd: 53:31:40:14:f4:9a:ba:c7:6e:54:f1:e4:08:43:f7:5d:eb:98: 44:44:97:b0:4a:d6:87:e5:31:11:1e:e8:a0:8d:57:5c:b2:c5: 60:df:6e:ca:72:d8:4f:45:fb:a3:63:5e:78:02:35:e8:9b:5a: 4a:9b:7d:47:f6:5b:ba:df:7a:91:f6:e7:59:9c:c4:f1:ec:75: eb:db:3c:de:a9:0c:5f:c2:17:4c:ce:8b:53:b4:c6:27:96:b1: fa:47:96:46:c9:cc:44:81:38:2b:ee:d5:8a:de:ea:ac:bc:99: e7:d2:2c:71:24:34:4c:c3:cc:11:95:c1:e9:25:8a:44:34:11: 65:d5:49:c2:06:64:5c:e6:ed:76:33:64:02:d1:3b:f4:22:48: 69:01:ee:60:14:70:fb:d2:4a:bd:ea:0c:1f:5b:28:41:28:c3: 6e:73:bc:47:4e:f5:2c:19:fd:c2:31:b3:55:c2:3f:0b:59:83: 97:92:69:7f:f4:35:a9:59:1d:04:0d:03:92:f3:f2:0f:d1:57: 0c:ad:d0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqOdSOykKsHeSYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0OVoXDTI1MDkxODA5MzI0OVowLzEtMCsGA1UEAxMk YmFjMjc1ZTctMjY1OS00ZGFhLTg0YmEtMzFkZTQ0OWZmYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2nspizD4HllF2kRZBDENAf2lqw701yUf4tk PawMqT7NbOiObUi0fqZd3eoaROihpY4IDsyeNX/RbtiUtGCW5QhYrJyz+Q/c0yUn 9Ow1g190J8X7LPDMLLMqsJx1Ej5VT995fDV2IdMMPlaW26OAqIvDic6Y19K2gisn P1vY4qBBJMurDwAk/YqdZ9kcdgVMCL3Z5w4FG1pU5oJhhUbW1swywAEBNU0Vpj91 xyVcl23zX/1I77W1NZMuZXDMs7VeFRn94GlIwYMXsnFjdmXqMLOfDp2Qjv5xihMi +D6P3zJKED5zHhtjOC1Z3pH19e/B8MgPmVSLMo0+RPqFpLIsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6x5dUmdilSgZn4W9+kPKxRgnfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZhYzJjNjEtMmVjMC0z ZGU4LThmN2UtZDFkNjI2N2Q3NWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW/WxgJqcG9Rg5IDhWinf2WWOfKHZR/z3KEvADSVBaHgBrNJ6oWzAAv T+t8Y5M6Hld8ZeE+/VMxQBT0mrrHblTx5AhD913rmEREl7BK1oflMREe6KCNV1yy xWDfbspy2E9F+6NjXngCNeibWkqbfUf2W7rfepH251mcxPHsdevbPN6pDF/CF0zO i1O0xieWsfpHlkbJzESBOCvu1Yre6qy8mefSLHEkNEzDzBGVweklikQ0EWXVScIG ZFzm7XYzZALRO/QiSGkB7mAUcPvSSr3qDB9bKEEow25zvEdO9SwZ/cIxs1XCPwtZ g5eSaX/0NalZHQQNA5Lz8g/RVwyt0JE= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:49 2025 by rpki-client