$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/965d17af-3741-3184-8ead-5cb5e753b614.roa File: 965d17af-3741-3184-8ead-5cb5e753b614.roa (raw, json) Hash identifier: 1N+R9GJOG71ZC5rJZXyEtzMk6JdV5f6EZa8JCw9bjsI= Subject key identifier: 41:B4:B8:52:B9:7D:01:F1:90:D4:97:E9:7B:C8:4A:BE:05:F4:53:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8C3EE198C29CB6A55FC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/965d17af-3741-3184-8ead-5cb5e753b614.roa Signing time: Fri 20 Jun 2025 09:32:32 +0000 ROA not before: Fri 20 Jun 2025 09:32:32 +0000 ROA not after: Thu 18 Sep 2025 09:32:32 +0000 asID: 22773 IP address blocks: 70.180.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:c3:ee:19:8c:29:cb:6a:55:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:32 2025 GMT Not After : Sep 18 09:32:32 2025 GMT Subject: CN=b858fe10-03f2-4e79-b2e9-3d4132e8f8c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:24:ff:b0:49:6b:1b:8c:55:b9:ad:7c:de:05: 84:96:8d:c7:14:7e:b0:56:ca:ee:cf:a8:c2:4c:26: fe:f9:ec:dc:80:b2:68:72:9b:01:3c:91:4a:22:81: 90:15:b4:80:34:b5:8a:d0:5c:65:61:af:ab:b7:e9: f7:02:dd:4e:1a:e0:22:02:55:f2:44:68:5f:79:ff: d4:b8:dc:3f:4a:8f:46:03:00:be:4e:2c:1b:ed:25: 9e:4b:bc:9f:5d:84:1a:fb:16:9e:3c:92:23:03:91: 71:53:38:fd:e3:e2:08:91:89:ed:02:8c:e6:91:4f: 77:4b:32:59:0f:f5:99:86:14:2e:8a:74:b8:1c:38: 62:7d:85:18:a2:55:4c:3f:28:60:6f:3a:2b:7f:99: c2:1e:0a:c2:30:6c:6c:bb:d9:d4:fb:20:c0:e3:8d: cd:39:1a:81:6a:b6:2e:ea:ef:01:63:de:ba:14:15: 13:02:9a:8b:51:a9:2e:57:26:0e:cf:2d:f3:e7:4c: 80:7e:31:cb:2f:fd:67:e4:3f:e9:57:15:75:d6:65: 6e:f2:84:1e:c8:12:7f:43:5d:72:a0:42:5c:64:ac: 10:d4:a5:fa:2e:e6:57:7a:dd:b6:51:4f:4b:73:31: 36:86:3b:9b:44:f2:7c:19:b1:78:41:9f:64:5a:2d: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:B8:52:B9:7D:01:F1:90:D4:97:E9:7B:C8:4A:BE:05:F4:53:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/965d17af-3741-3184-8ead-5cb5e753b614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ee:ca:b9:a5:52:c9:a5:8a:d8:33:17:6f:fe:64:ba:cf:53: 8d:ed:7b:ab:ef:ec:36:a2:26:fa:ac:bf:b6:fb:72:be:ae:2a: 9d:ff:3e:84:54:72:68:5e:79:eb:2c:c2:eb:a9:bf:00:22:7c: b0:f7:7b:aa:97:c2:b8:8d:0a:4e:6f:9b:6f:79:cd:d4:38:af: 61:52:c3:28:70:0f:4c:09:f1:ec:0f:9a:98:10:6d:21:79:9b: 6f:35:9a:b8:d9:86:3c:39:9d:eb:f5:02:c1:54:9a:7d:3b:81: a7:33:e6:ee:15:a2:1d:56:fa:99:bb:a7:34:fa:58:57:36:03: 7f:e1:d7:69:3a:79:fb:2b:4e:53:86:1f:4c:74:f7:bb:ce:e9: 77:3d:e9:d4:c3:31:09:77:5f:2f:fa:36:63:29:a3:70:74:e5: b6:79:55:91:b5:34:e1:fc:06:25:c7:54:5f:aa:c7:d7:aa:17: cd:01:86:ff:d2:06:8b:fa:86:7b:39:cf:54:d1:19:e3:71:d2: 80:91:a8:97:ca:15:ca:73:6c:75:e2:06:9d:e5:ed:da:79:63: 61:97:e6:4f:e5:6a:e5:b1:f2:20:df:80:d0:52:0e:a0:3e:73: be:46:29:88:21:11:a4:a0:be:d0:2e:40:ad:f0:dc:3b:f2:49: 01:82:b8:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqMPuGYwpy2pV/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIzMloXDTI1MDkxODA5MzIzMlowLzEtMCsGA1UEAxMk Yjg1OGZlMTAtMDNmMi00ZTc5LWIyZTktM2Q0MTMyZThmOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApST/sElrG4xVua183gWElo3HFH6wVsruz6jC TCb++ezcgLJocpsBPJFKIoGQFbSANLWK0FxlYa+rt+n3At1OGuAiAlXyRGhfef/U uNw/So9GAwC+Tiwb7SWeS7yfXYQa+xaePJIjA5FxUzj94+IIkYntAozmkU93SzJZ D/WZhhQuinS4HDhifYUYolVMPyhgbzorf5nCHgrCMGxsu9nU+yDA443NORqBarYu 6u8BY966FBUTApqLUakuVyYOzy3z50yAfjHLL/1n5D/pVxV11mVu8oQeyBJ/Q11y oEJcZKwQ1KX6LuZXet22UU9LczE2hjubRPJ8GbF4QZ9kWi2b3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG0uFK5fQHxkNSX6XvISr4F9FPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTY1ZDE3YWYtMzc0MS0z MTg0LThlYWQtNWNiNWU3NTNiNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3uyrmlUsmlitgzF2/+ZLrPU43te6vv7DaiJvqsv7b7cr6uKp3/PoRU cmheeesswuupvwAifLD3e6qXwriNCk5vm295zdQ4r2FSwyhwD0wJ8ewPmpgQbSF5 m281mrjZhjw5nev1AsFUmn07gacz5u4Voh1W+pm7pzT6WFc2A3/h12k6efsrTlOG H0x097vO6Xc96dTDMQl3Xy/6NmMpo3B05bZ5VZG1NOH8BiXHVF+qx9eqF80Bhv/S Bov6hns5z1TRGeNx0oCRqJfKFcpzbHXiBp3l7dp5Y2GX5k/lauWx8iDfgNBSDqA+ c75GKYghEaSgvtAuQK3w3DvySQGCuGM= -----END CERTIFICATE-----Generated at Wed Jul 2 23:52:44 2025 by rpki-client