$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa File: 8eaa2db0-f3db-356a-8492-e717d0600e6e.roa (raw, json) Hash identifier: Qa0HRILGJIqAfdk4FUW3TVN1YXZoOg8UAL/SCqoWbCg= Subject key identifier: C3:F4:2B:11:AE:34:1B:3D:7C:38:E6:46:74:4C:4B:34:8E:C4:34:77 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD760A8288DC34D65E7B740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa Signing time: Thu 19 Jun 2025 09:19:02 +0000 ROA not before: Thu 19 Jun 2025 09:19:02 +0000 ROA not after: Wed 17 Sep 2025 09:19:02 +0000 asID: 22773 IP address blocks: 70.162.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:60:a8:28:8d:c3:4d:65:e7:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:02 2025 GMT Not After : Sep 17 09:19:02 2025 GMT Subject: CN=43aed86f-7c9e-49a7-bc99-0aff9b10ea99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:6c:bd:8b:2a:c8:48:fb:97:8d:f9:2d:a6: 50:99:bb:9e:5b:33:33:7e:82:9f:b1:64:46:e8:cd: b8:c2:0c:1f:e4:8d:e1:5d:45:b1:3e:1f:b2:a8:19: 5b:3f:21:bc:f3:3a:21:34:2d:c0:42:13:a7:95:a0: 7a:e1:11:e1:62:d2:b3:37:34:1a:88:53:fc:ce:06: 2d:0f:87:ae:96:16:a5:f9:1b:47:8c:5e:a0:86:cb: af:00:6b:6a:80:06:e9:17:91:7a:a0:78:50:43:f7: c9:b2:08:2a:43:99:0c:92:ca:e0:d1:14:0f:44:95: 50:db:0c:5b:d5:cf:c0:7f:41:09:39:89:bf:f1:26: 9d:7b:0d:27:10:d8:85:d4:5e:d8:fc:09:ee:88:c5: 4b:f3:da:10:f5:e4:d0:fc:a7:88:da:a7:11:6b:b5: 7c:09:dd:98:09:e4:44:b7:7b:08:83:94:28:c0:6e: 2b:81:07:99:e6:69:fd:d3:54:be:2c:31:0a:84:e7: 4d:ca:bc:77:ad:09:ea:f0:ec:62:00:9a:73:42:02: af:99:50:4a:24:8f:12:5c:7a:3d:f2:39:b1:b5:97: d4:aa:c6:8c:f9:a4:7a:33:6e:2c:9d:a0:fc:4c:ce: 8d:17:1e:ab:6f:c5:6c:a7:2b:38:ff:c5:39:4a:7a: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F4:2B:11:AE:34:1B:3D:7C:38:E6:46:74:4C:4B:34:8E:C4:34:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8eaa2db0-f3db-356a-8492-e717d0600e6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dd:68:72:9e:d6:58:25:14:55:5f:49:a4:2b:3b:1b:28:75: 09:d3:ae:30:43:cc:82:0b:5b:a2:1b:64:3f:35:2f:9a:07:26: 1e:18:b1:40:d6:70:b2:4c:91:43:d1:9a:41:b3:03:2d:28:0e: 1f:5a:2f:9b:de:91:1a:31:bb:94:5a:97:06:b6:8d:8b:65:d0: 9a:af:80:06:31:ec:91:69:f5:60:64:2b:f1:98:c9:91:bf:61: d1:9a:c3:22:a0:13:29:69:08:7d:a9:d9:dd:5a:b6:c0:f2:ba: 38:b9:08:1d:89:09:09:65:93:73:3c:2c:1b:4d:8b:8b:de:da: 3f:cc:1a:7c:c2:59:46:33:c9:a8:a0:1e:47:02:41:8d:8a:09: 14:9e:df:6b:d8:28:b0:f5:79:5f:c4:8c:5b:85:97:a8:85:b1: 4a:4a:4d:7c:d9:2b:ba:3f:15:b4:c6:b2:e5:cb:f5:85:0d:15: 4c:8a:a9:0d:0b:94:00:bb:77:06:8f:25:0c:dc:4b:de:51:a7: 08:22:87:e4:9a:98:08:23:e8:34:0e:7c:09:19:5c:29:1a:e7: eb:f7:f3:74:fc:f0:fa:80:59:4e:bd:b3:b3:d7:48:ea:51:78: b8:35:7c:ed:e8:6b:ff:c2:f7:b3:ed:43:a3:7c:94:29:f5:ae: 19:bd:6f:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo912CoKI3DTWXnt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkwMloXDTI1MDkxNzA5MTkwMlowLzEtMCsGA1UEAxMk NDNhZWQ4NmYtN2M5ZS00OWE3LWJjOTktMGFmZjliMTBlYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIlsvYsqyEj7l435LaZQmbueWzMzfoKfsWRG 6M24wgwf5I3hXUWxPh+yqBlbPyG88zohNC3AQhOnlaB64RHhYtKzNzQaiFP8zgYt D4eulhal+RtHjF6ghsuvAGtqgAbpF5F6oHhQQ/fJsggqQ5kMksrg0RQPRJVQ2wxb 1c/Af0EJOYm/8Sadew0nENiF1F7Y/AnuiMVL89oQ9eTQ/KeI2qcRa7V8Cd2YCeRE t3sIg5QowG4rgQeZ5mn901S+LDEKhOdNyrx3rQnq8OxiAJpzQgKvmVBKJI8SXHo9 8jmxtZfUqsaM+aR6M24snaD8TM6NFx6rb8Vspys4/8U5SnpMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP0KxGuNBs9fDjmRnRMSzSOxDR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGVhYTJkYjAtZjNkYi0z NTZhLTg0OTItZTcxN2QwNjAwZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACndaHKe1lglFFVfSaQrOxsodQnTrjBDzIILW6IbZD81L5oHJh4YsUDW cLJMkUPRmkGzAy0oDh9aL5vekRoxu5Ralwa2jYtl0JqvgAYx7JFp9WBkK/GYyZG/ YdGawyKgEylpCH2p2d1atsDyuji5CB2JCQllk3M8LBtNi4ve2j/MGnzCWUYzyaig HkcCQY2KCRSe32vYKLD1eV/EjFuFl6iFsUpKTXzZK7o/FbTGsuXL9YUNFUyKqQ0L lAC7dwaPJQzcS95Rpwgih+SamAgj6DQOfAkZXCka5+v383T88PqAWU69s7PXSOpR eLg1fO3oa//C97PtQ6N8lCn1rhm9b8Q= -----END CERTIFICATE-----Generated at Mon Jun 30 09:52:27 2025 by rpki-client