$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa File: 986bedf2-146c-3a6c-bb6a-54c5379ced92.roa (raw, json) Hash identifier: 3q6XwWpsJTF+Ws1edC8iIyqMcXY26hdWc0YkRmKqLEM= Subject key identifier: A1:31:34:59:11:D0:DD:5B:0F:8E:46:43:4A:3B:D1:75:7F:A1:5A:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A851BE638904E6F73AA780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa Signing time: Fri 20 Jun 2025 09:31:38 +0000 ROA not before: Fri 20 Jun 2025 09:31:38 +0000 ROA not after: Thu 18 Sep 2025 09:31:38 +0000 asID: 22773 IP address blocks: 70.173.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:51:be:63:89:04:e6:f7:3a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:38 2025 GMT Not After : Sep 18 09:31:38 2025 GMT Subject: CN=cd57d6be-1083-4e80-941c-a4ec26628f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:00:eb:f8:d5:a8:65:5d:29:18:33:a2:41: 0d:48:2c:a5:75:63:91:7d:ac:05:45:a0:a0:ae:27: cc:f8:38:fa:e8:9f:e2:fa:1a:45:e7:52:b8:81:62: e2:14:3d:55:54:e4:4d:dc:6b:44:6a:08:be:d2:00: a3:26:30:3c:6f:3b:ce:45:fa:8e:b8:a6:52:83:d1: 7a:5e:d1:1e:cb:69:c7:79:8a:2d:6c:0b:2c:f2:38: a8:58:19:03:e4:d0:d3:b0:e6:31:52:9e:06:3d:f3: 87:30:54:95:77:58:fb:37:b3:7e:a6:c6:70:42:3d: 5d:c4:cb:4c:77:e4:76:83:46:02:9e:24:34:f9:f5: f4:79:6c:c6:88:c8:4e:55:53:37:68:4b:19:9f:c1: 9c:09:e9:ae:d0:b3:0e:ca:dd:35:70:94:87:02:51: ea:a8:47:c7:51:46:b5:1c:c8:ba:07:57:e9:ff:2b: f5:60:5e:c7:cd:7b:eb:87:29:6b:07:80:3c:a8:67: 5c:f4:4f:d9:5c:f5:43:22:01:07:b2:b8:fa:84:1f: b3:c0:a4:34:30:07:7d:96:ab:b0:67:d6:2b:30:40: 23:d2:54:af:55:11:01:79:ad:63:a7:10:80:2b:9c: 69:04:64:5a:2d:9a:70:3e:49:10:cf:93:aa:0e:bc: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:34:59:11:D0:DD:5B:0F:8E:46:43:4A:3B:D1:75:7F:A1:5A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f0:da:ef:5c:fe:2e:0f:5b:fb:46:75:e7:5b:51:05:de:c6: 71:83:a3:ec:04:11:91:7d:e0:b3:07:da:1c:45:2d:bd:ea:07: 68:e9:d8:4e:25:7d:f7:28:7f:90:62:a4:d4:80:6b:9b:91:1a: 6d:83:e8:29:12:d5:35:e4:4a:68:b1:07:62:e7:b0:fc:31:9f: ed:50:05:d6:21:c5:88:35:fd:17:29:9c:9e:2e:c2:20:37:a8: 55:dc:99:3c:7b:7b:7d:ea:57:99:90:ec:9a:4c:4c:a1:95:59: 09:54:23:02:18:f6:ce:d6:7d:5e:3e:d8:70:88:bc:d6:4d:65: 18:80:20:b6:49:b0:dd:52:49:dc:72:69:bb:6b:e4:ce:4c:cd: 2d:94:91:21:f4:5d:dc:ad:06:d9:0f:ca:74:32:ad:f7:69:7d: d7:ae:24:e9:48:06:2e:07:d2:67:38:69:91:b0:ff:93:4d:99: 8b:b2:ac:1e:c0:3f:17:7d:c9:2a:bc:2c:96:f4:bf:9e:8c:76: 3f:bd:74:f2:97:c5:4e:40:56:57:70:fd:0a:20:df:9d:ad:ca: ee:92:c4:5e:3e:25:53:9d:93:55:96:25:07:52:5f:0f:6e:e6: 1b:3f:1a:1b:21:6a:0a:65:64:fe:fa:39:9f:04:7b:78:2c:7a: f1:7c:8e:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqFG+Y4kE5vc6p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzOFoXDTI1MDkxODA5MzEzOFowLzEtMCsGA1UEAxMk Y2Q1N2Q2YmUtMTA4My00ZTgwLTk0MWMtYTRlYzI2NjI4ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmoA6/jVqGVdKRgzokENSCyldWORfawFRaCg rifM+Dj66J/i+hpF51K4gWLiFD1VVORN3GtEagi+0gCjJjA8bzvORfqOuKZSg9F6 XtEey2nHeYotbAss8jioWBkD5NDTsOYxUp4GPfOHMFSVd1j7N7N+psZwQj1dxMtM d+R2g0YCniQ0+fX0eWzGiMhOVVM3aEsZn8GcCemu0LMOyt01cJSHAlHqqEfHUUa1 HMi6B1fp/yv1YF7HzXvrhylrB4A8qGdc9E/ZXPVDIgEHsrj6hB+zwKQ0MAd9lquw Z9YrMEAj0lSvVREBea1jpxCAK5xpBGRaLZpwPkkQz5OqDry0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKExNFkR0N1bD45GQ0o70XV/oVoSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTg2YmVkZjItMTQ2Yy0z YTZjLWJiNmEtNTRjNTM3OWNlZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnw2u9c/i4PW/tGdedbUQXexnGDo+wEEZF94LMH2hxFLb3qB2jp2E4l ffcof5BipNSAa5uRGm2D6CkS1TXkSmixB2LnsPwxn+1QBdYhxYg1/RcpnJ4uwiA3 qFXcmTx7e33qV5mQ7JpMTKGVWQlUIwIY9s7WfV4+2HCIvNZNZRiAILZJsN1SSdxy abtr5M5MzS2UkSH0XdytBtkPynQyrfdpfdeuJOlIBi4H0mc4aZGw/5NNmYuyrB7A Pxd9ySq8LJb0v56Mdj+9dPKXxU5AVldw/Qog352tyu6SxF4+JVOdk1WWJQdSXw9u 5hs/GhshagplZP76OZ8Ee3gsevF8jjw= -----END CERTIFICATE-----Generated at Wed Jul 2 00:46:07 2025 by rpki-client