$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95bbd978-3232-3704-906a-0c8697560978.roa File: 95bbd978-3232-3704-906a-0c8697560978.roa (raw, json) Hash identifier: 4qx49hbO/XQ5cK98lZ+3vISW578VqFRGsG8d7p261Yw= Subject key identifier: BD:F4:95:6B:8B:9D:55:C3:28:C2:29:D9:F6:C9:27:5D:F8:49:0C:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A875DCFB4BEC6078A03B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95bbd978-3232-3704-906a-0c8697560978.roa Signing time: Fri 20 Jun 2025 09:31:55 +0000 ROA not before: Fri 20 Jun 2025 09:31:55 +0000 ROA not after: Thu 18 Sep 2025 09:31:55 +0000 asID: 22773 IP address blocks: 70.173.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:75:dc:fb:4b:ec:60:78:a0:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:55 2025 GMT Not After : Sep 18 09:31:55 2025 GMT Subject: CN=7780f52f-8cf6-48d6-867f-85dc3a82f9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:bb:2a:70:49:fb:84:e6:e8:42:42:54:8b: d4:91:3c:7b:73:d0:ae:e4:e2:0f:7c:02:82:ad:e1: 5e:f0:60:d5:05:40:5e:73:98:12:7b:5c:7d:a2:7f: 8d:ce:9c:89:30:3c:f6:ce:cb:70:9e:9a:2d:07:f6: c8:51:42:a5:b3:14:63:35:9a:e9:f7:f5:20:47:0b: f4:80:09:0b:61:47:f4:fc:18:62:c8:56:a7:ef:41: c0:30:dd:4b:ad:97:df:3b:0a:c6:74:25:07:93:33: 6e:da:a5:42:c3:e6:7e:bd:74:1d:ae:be:7b:7c:2d: 13:ab:ef:34:96:28:b0:1a:c6:10:89:ae:87:1f:ed: c3:94:69:36:af:aa:83:6f:7e:e2:89:a7:5e:df:be: 00:47:cc:31:32:2b:0f:c8:bc:28:9b:f8:32:be:b1: 04:54:c3:82:7f:20:d8:e2:26:cd:ab:9a:ae:3a:d8: 60:e2:32:7b:46:a2:19:6d:ef:15:78:c4:6e:7d:19: 2b:be:de:48:a7:45:f2:2d:95:7d:34:1c:8f:47:51: db:1e:23:f5:57:30:14:23:4f:57:3b:bf:39:47:f6: 36:c4:95:60:ea:0a:b5:5a:fe:fb:ab:27:98:6e:33: 3e:aa:4b:36:dc:e0:39:22:a2:e1:71:69:b9:63:32: 27:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:95:6B:8B:9D:55:C3:28:C2:29:D9:F6:C9:27:5D:F8:49:0C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95bbd978-3232-3704-906a-0c8697560978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9e:41:95:b2:ee:08:a7:77:a9:28:6b:c6:22:2e:54:f9:ed: 81:83:a4:64:f6:99:73:a9:b2:c7:bb:59:d9:f0:2c:99:cb:9e: 00:5f:d0:6a:d3:93:bd:05:ac:08:e0:b9:d3:73:65:47:63:13: a8:97:44:69:3a:03:d9:82:c2:19:70:de:3c:65:96:56:53:95: 17:a1:09:49:1d:5b:68:9f:c8:43:49:e6:af:e3:30:17:99:d3: 3c:ca:5e:97:fe:05:27:03:98:27:34:1f:35:7a:03:3f:dc:9a: df:34:3b:5c:0c:76:78:45:1c:79:89:0b:91:81:81:cc:ed:71: 2e:5c:f4:a4:ca:f9:9c:3c:05:7c:88:58:49:ce:9d:d8:ae:1d: b0:e8:dd:c4:7d:0f:c5:fd:05:21:e7:97:27:0b:a8:68:ec:34: 70:74:c3:41:e0:09:eb:c2:f7:be:0e:d2:94:0c:69:26:05:22: 17:b4:02:54:e6:96:02:ac:93:46:6e:a4:80:1e:5d:18:45:d7: 4f:10:f8:e1:22:98:42:88:8d:e4:48:84:10:b3:99:5e:e4:a3: b9:8e:90:80:9f:5a:11:0a:e2:68:30:14:92:92:4f:23:27:b3: 03:c9:b2:1d:de:04:77:5f:d9:d3:31:65:2f:5c:56:43:eb:9a: 1e:f4:75:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHXc+0vsYHigO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1NVoXDTI1MDkxODA5MzE1NVowLzEtMCsGA1UEAxMk Nzc4MGY1MmYtOGNmNi00OGQ2LTg2N2YtODVkYzNhODJmOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs67KnBJ+4Tm6EJCVIvUkTx7c9Cu5OIPfAKC reFe8GDVBUBec5gSe1x9on+NzpyJMDz2zstwnpotB/bIUUKlsxRjNZrp9/UgRwv0 gAkLYUf0/BhiyFan70HAMN1LrZffOwrGdCUHkzNu2qVCw+Z+vXQdrr57fC0Tq+80 liiwGsYQia6HH+3DlGk2r6qDb37iiade374AR8wxMisPyLwom/gyvrEEVMOCfyDY 4ibNq5quOthg4jJ7RqIZbe8VeMRufRkrvt5Ip0XyLZV9NByPR1HbHiP1VzAUI09X O785R/Y2xJVg6gq1Wv77qyeYbjM+qks23OA5IqLhcWm5YzIn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL30lWuLnVXDKMIp2fbJJ134SQzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTViYmQ5NzgtMzIzMi0z NzA0LTkwNmEtMGM4Njk3NTYwOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHueQZWy7gind6koa8YiLlT57YGDpGT2mXOpsse7WdnwLJnLngBf0GrT k70FrAjgudNzZUdjE6iXRGk6A9mCwhlw3jxlllZTlRehCUkdW2ifyENJ5q/jMBeZ 0zzKXpf+BScDmCc0HzV6Az/cmt80O1wMdnhFHHmJC5GBgcztcS5c9KTK+Zw8BXyI WEnOndiuHbDo3cR9D8X9BSHnlycLqGjsNHB0w0HgCevC974O0pQMaSYFIhe0AlTm lgKsk0ZupIAeXRhF108Q+OEimEKIjeRIhBCzmV7ko7mOkICfWhEK4mgwFJKSTyMn swPJsh3eBHdf2dMxZS9cVkPrmh70dVI= -----END CERTIFICATE-----Generated at Wed Jul 2 07:05:18 2025 by rpki-client