$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98e2d9dd-bea9-3d90-b38b-7345f5e27c76.roa File: 98e2d9dd-bea9-3d90-b38b-7345f5e27c76.roa (raw, json) Hash identifier: 3EMWDm7GsuQsOqL8AdXPalKSkjM2B5G3g7ArT+p+wN0= Subject key identifier: 19:64:69:2F:D7:57:F9:1D:24:79:15:08:8E:A0:32:CF:2D:A2:A6:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8EE76B95ABC55C564CC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98e2d9dd-bea9-3d90-b38b-7345f5e27c76.roa Signing time: Fri 20 Jun 2025 09:32:52 +0000 ROA not before: Fri 20 Jun 2025 09:32:52 +0000 ROA not after: Thu 18 Sep 2025 09:32:52 +0000 asID: 22773 IP address blocks: 70.189.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:ee:76:b9:5a:bc:55:c5:64:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:52 2025 GMT Not After : Sep 18 09:32:52 2025 GMT Subject: CN=eb2aefe3-9b50-4551-8ab5-21993d4d8639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:11:2e:2e:b8:9f:a6:8d:68:d3:17:c6:51: 42:75:aa:46:7e:f6:4c:5e:f1:ce:4e:ea:ef:eb:88: c5:c9:8c:2f:a1:72:95:be:62:d6:21:b5:39:3b:8f: 74:fe:aa:55:9c:cf:a6:c5:6b:41:f1:1c:ba:1c:d8: 67:1a:16:2c:51:ae:5e:5b:19:03:b8:a3:9a:15:88: b9:f0:37:35:0d:2e:68:60:70:2c:a4:22:13:a4:3f: 1f:28:48:71:49:79:b3:fb:c9:96:04:f6:d2:29:25: eb:61:a2:c6:b3:67:74:0d:96:a5:40:3d:c0:42:5d: e1:33:5f:b8:41:7b:34:6e:eb:fc:59:d6:82:1d:7f: 5b:b8:bd:7f:ad:a9:8f:cd:ce:91:14:b9:16:61:a2: f2:e5:4d:83:ca:81:45:0e:ba:8b:7c:d2:cd:91:25: 39:f3:b3:ab:63:24:57:6d:b6:b2:ac:4d:74:d1:60: d3:b9:78:43:d5:69:d6:8d:a8:95:85:70:89:8b:5e: 6f:50:3e:ec:f0:46:de:20:7b:4b:b5:07:1c:49:1a: c6:7a:54:8e:bd:ce:3c:6f:61:9c:16:15:77:4b:30: 86:b8:9f:6c:82:50:dd:b8:b3:b4:ba:36:91:6a:a1: c0:5e:35:50:90:8b:5f:61:5a:f0:e1:00:25:96:5c: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:64:69:2F:D7:57:F9:1D:24:79:15:08:8E:A0:32:CF:2D:A2:A6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/98e2d9dd-bea9-3d90-b38b-7345f5e27c76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:10:5f:bd:09:37:3b:90:f9:b6:34:b0:f8:cd:a0:a5:c5:d2: 6b:96:ad:a0:5c:a0:18:31:33:08:c0:45:eb:48:ba:c4:08:27: d3:c5:62:72:9e:e1:a1:15:2e:49:8c:f2:37:44:66:29:00:60: 0c:35:53:2c:e1:e1:a2:c4:4d:5f:f2:6a:9a:99:a1:55:08:ec: 0f:fc:91:87:ee:1f:8f:96:e5:3e:34:0a:0e:4f:b8:2a:52:fd: 2f:bf:f5:4b:e4:cd:f4:77:d5:05:2c:e6:72:56:94:f9:08:67: 98:c3:ea:7b:4f:07:db:28:cc:02:81:d9:17:71:1a:13:62:43: 46:8b:84:c6:a8:26:33:12:90:ed:42:6f:ab:7a:54:a2:ac:f7: c1:9b:a1:bc:59:86:94:12:6d:ea:f3:2d:85:8c:b6:9a:d1:6b: b3:29:96:08:74:99:c1:3d:71:23:23:7e:32:ea:e9:b7:a2:bf: 20:3e:9f:c1:99:e2:61:99:01:76:07:f4:ca:a1:95:0b:9a:f6: 68:5e:7e:1f:8d:77:c1:a6:b8:18:80:b9:73:9d:f2:1f:e7:f6: 5a:00:b8:df:10:da:97:fe:52:07:e7:cf:c6:58:78:c0:2d:53: f6:c9:60:39:38:c9:cb:f1:e7:d9:8e:49:c3:c5:55:58:16:55: e7:50:d2:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqO52uVq8VcVkzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI1MloXDTI1MDkxODA5MzI1MlowLzEtMCsGA1UEAxMk ZWIyYWVmZTMtOWI1MC00NTUxLThhYjUtMjE5OTNkNGQ4NjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvcRLi64n6aNaNMXxlFCdapGfvZMXvHOTurv 64jFyYwvoXKVvmLWIbU5O490/qpVnM+mxWtB8Ry6HNhnGhYsUa5eWxkDuKOaFYi5 8Dc1DS5oYHAspCITpD8fKEhxSXmz+8mWBPbSKSXrYaLGs2d0DZalQD3AQl3hM1+4 QXs0buv8WdaCHX9buL1/ramPzc6RFLkWYaLy5U2DyoFFDrqLfNLNkSU587OrYyRX bbayrE100WDTuXhD1WnWjaiVhXCJi15vUD7s8EbeIHtLtQccSRrGelSOvc48b2Gc FhV3SzCGuJ9sglDduLO0ujaRaqHAXjVQkItfYVrw4QAlllw4rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlkaS/XV/kdJHkVCI6gMs8toqbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOThlMmQ5ZGQtYmVhOS0z ZDkwLWIzOGItNzM0NWY1ZTI3Yzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIQX70JNzuQ+bY0sPjNoKXF0muWraBcoBgxMwjARetIusQIJ9PFYnKe 4aEVLkmM8jdEZikAYAw1Uyzh4aLETV/yapqZoVUI7A/8kYfuH4+W5T40Cg5PuCpS /S+/9UvkzfR31QUs5nJWlPkIZ5jD6ntPB9sozAKB2RdxGhNiQ0aLhMaoJjMSkO1C b6t6VKKs98GbobxZhpQSberzLYWMtprRa7Mplgh0mcE9cSMjfjLq6beivyA+n8GZ 4mGZAXYH9MqhlQua9mhefh+Nd8GmuBiAuXOd8h/n9loAuN8Q2pf+Ugfnz8ZYeMAt U/bJYDk4ycvx59mOScPFVVgWVedQ0iE= -----END CERTIFICATE-----Generated at Mon Jun 30 20:28:47 2025 by rpki-client