$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b2be481-5932-3362-82d8-924a101c3b2f.roa File: 9b2be481-5932-3362-82d8-924a101c3b2f.roa (raw, json) Hash identifier: UzVSMlqZ713VJj8cmqjcU7eT9kuXxq6fP5sr7LjtXPI= Subject key identifier: AB:B5:9F:45:A9:0A:CB:A8:43:8C:0D:CB:B6:00:18:83:F6:DA:80:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A872C3E1200BFF6CD907C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b2be481-5932-3362-82d8-924a101c3b2f.roa Signing time: Fri 20 Jun 2025 09:31:54 +0000 ROA not before: Fri 20 Jun 2025 09:31:54 +0000 ROA not after: Thu 18 Sep 2025 09:31:54 +0000 asID: 22773 IP address blocks: 70.173.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:72:c3:e1:20:0b:ff:6c:d9:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:54 2025 GMT Not After : Sep 18 09:31:54 2025 GMT Subject: CN=800a082a-cd00-4473-a5e1-3d321b3bcc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d6:42:ea:d2:35:0b:df:a4:17:4f:5a:08:e5: f9:cb:46:d9:bc:85:1a:3f:1b:70:ca:cd:b9:67:31: 42:c3:e7:38:48:9f:a4:b1:81:61:8d:99:65:dd:d4: 67:dc:62:60:42:62:59:29:78:68:15:d1:8d:8a:ee: 9b:be:19:02:67:3f:21:bc:69:65:48:64:dc:0b:63: 0c:38:a3:07:4f:b0:3b:c8:03:02:69:37:b6:80:aa: 11:48:2d:6b:4f:fc:08:57:45:0a:8e:c5:b1:3b:4f: 91:fb:45:eb:20:9b:ea:bb:e0:0f:1a:1f:c5:c9:42: d4:cc:17:02:34:7d:a4:4c:57:7d:64:d5:52:6f:c9: 2b:ac:0e:0e:e3:a6:52:a9:78:bd:1d:14:a4:e0:b6: 1b:44:e9:4c:3f:f8:e2:25:7e:ee:94:89:12:ce:fa: 0b:48:55:07:3c:a1:6a:f5:0c:59:f5:cd:88:aa:1d: ce:f2:f2:e4:fb:20:dc:68:6d:62:af:ff:db:8c:3b: 8b:88:26:bb:21:ee:7f:35:f5:42:a9:ad:7d:1a:34: 13:6b:db:fe:45:ca:3d:4d:66:c7:a2:1f:ce:c8:ac: fc:ba:8f:96:e1:37:ec:be:a1:59:1e:7c:72:14:0a: 56:54:27:98:ed:95:08:8f:35:50:c0:b9:87:4b:66: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:9F:45:A9:0A:CB:A8:43:8C:0D:CB:B6:00:18:83:F6:DA:80:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9b2be481-5932-3362-82d8-924a101c3b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:40:a3:32:9a:c1:db:1a:0a:1b:52:8e:1f:16:c5:04:c3:9c: 60:16:5e:21:8a:32:d5:60:3f:03:08:50:4a:ea:23:ff:75:81: 90:53:87:86:bc:c4:92:20:49:f4:c3:76:1f:72:be:70:75:95: d7:d5:a7:ea:ce:f6:32:de:19:e7:73:f8:83:b1:03:31:9a:88: 83:45:ed:d8:e1:79:cc:42:93:dd:9e:6d:e0:e5:fb:46:ff:8b: 05:93:2e:d2:d1:97:19:4a:00:fa:c0:82:34:2d:0a:e0:be:61: 6d:31:76:d1:96:d6:94:9e:ad:86:01:12:e5:97:b7:03:63:2d: d8:12:fb:ac:fc:4e:c7:a7:7d:c4:cf:80:f2:64:98:13:3e:0d: 69:ef:23:c8:b3:c7:56:87:ed:8f:a5:e4:1b:df:11:73:06:55: 93:3e:26:39:44:33:16:e2:08:25:4c:c1:90:30:38:41:25:07: 3f:9c:0f:14:29:8c:c0:9f:f1:28:3d:88:66:d2:94:4c:c6:4c: 0a:14:76:c9:e1:cd:a3:b5:08:5a:68:7d:7e:b8:1a:6f:35:11: 6b:da:6a:df:5c:a4:54:45:05:dd:72:35:7c:1e:60:20:a9:a8: e2:56:24:c0:36:c9:77:f3:33:2a:93:f0:34:c3:bc:54:83:5a: 43:59:bf:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHLD4SAL/2zZB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1NFoXDTI1MDkxODA5MzE1NFowLzEtMCsGA1UEAxMk ODAwYTA4MmEtY2QwMC00NDczLWE1ZTEtM2QzMjFiM2JjYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdZC6tI1C9+kF09aCOX5y0bZvIUaPxtwys25 ZzFCw+c4SJ+ksYFhjZll3dRn3GJgQmJZKXhoFdGNiu6bvhkCZz8hvGllSGTcC2MM OKMHT7A7yAMCaTe2gKoRSC1rT/wIV0UKjsWxO0+R+0XrIJvqu+APGh/FyULUzBcC NH2kTFd9ZNVSb8krrA4O46ZSqXi9HRSk4LYbROlMP/jiJX7ulIkSzvoLSFUHPKFq 9QxZ9c2Iqh3O8vLk+yDcaG1ir//bjDuLiCa7Ie5/NfVCqa19GjQTa9v+Rco9TWbH oh/OyKz8uo+W4TfsvqFZHnxyFApWVCeY7ZUIjzVQwLmHS2Y7ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKu1n0WpCsuoQ4wNy7YAGIP22oAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWIyYmU0ODEtNTkzMi0z MzYyLTgyZDgtOTI0YTEwMWMzYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxAozKawdsaChtSjh8WxQTDnGAWXiGKMtVgPwMIUErqI/91gZBTh4a8 xJIgSfTDdh9yvnB1ldfVp+rO9jLeGedz+IOxAzGaiINF7djhecxCk92ebeDl+0b/ iwWTLtLRlxlKAPrAgjQtCuC+YW0xdtGW1pSerYYBEuWXtwNjLdgS+6z8TsenfcTP gPJkmBM+DWnvI8izx1aH7Y+l5BvfEXMGVZM+JjlEMxbiCCVMwZAwOEElBz+cDxQp jMCf8Sg9iGbSlEzGTAoUdsnhzaO1CFpofX64Gm81EWvaat9cpFRFBd1yNXweYCCp qOJWJMA2yXfzMyqT8DTDvFSDWkNZv6U= -----END CERTIFICATE-----Generated at Fri Jul 4 06:55:40 2025 by rpki-client