$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a08b409f-2bae-3b08-85c2-369f5734f2f5.roa File: a08b409f-2bae-3b08-85c2-369f5734f2f5.roa (raw, json) Hash identifier: 55/DFvOvucY6l7fN78LsCd7AOLbTUmouG041fBtHWg4= Subject key identifier: 3B:7E:B0:CF:57:34:0B:29:F9:BA:30:B8:A6:FE:F2:3C:70:74:63:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A850F4B7DBFCC84B50B500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a08b409f-2bae-3b08-85c2-369f5734f2f5.roa Signing time: Fri 20 Jun 2025 09:31:38 +0000 ROA not before: Fri 20 Jun 2025 09:31:38 +0000 ROA not after: Thu 18 Sep 2025 09:31:38 +0000 asID: 22773 IP address blocks: 70.173.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:50:f4:b7:db:fc:c8:4b:50:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:38 2025 GMT Not After : Sep 18 09:31:38 2025 GMT Subject: CN=d8b40788-518b-4be5-8abb-cedc9ad890f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:06:01:07:65:bd:89:35:60:30:80:d5:57: b7:c7:5f:48:87:4e:a5:a1:c7:b3:37:31:29:3b:71: bb:0e:84:b9:f4:24:3f:5a:a7:3c:5d:61:b4:15:ab: 4a:61:11:82:65:1f:fb:62:d5:05:8b:2c:ca:2b:dd: 2b:a5:ae:8c:51:be:e1:49:e4:d5:a5:c8:4e:ab:e3: 7f:cd:13:08:11:bf:3d:c6:4d:af:8b:1c:53:6a:c0: d0:51:94:07:48:b1:70:a4:a4:1b:bc:ed:75:44:13: 57:32:ba:f6:9d:ac:5d:b9:8a:82:d3:94:ee:a9:59: a7:11:d4:a0:c2:3b:67:92:14:32:79:f0:60:ab:83: 67:7c:29:03:a7:2f:f0:5e:7c:6b:8a:80:1e:da:1b: 09:fb:88:30:f5:01:09:1f:40:ac:b5:26:3b:35:0f: a6:b8:2c:4b:5d:d0:2c:f8:27:b2:91:28:ab:b0:8f: d7:33:5e:43:d8:bd:20:05:e9:a2:d8:fd:58:20:2b: a1:42:e6:13:5d:09:c5:71:d8:37:a0:e5:85:01:17: 9e:66:3f:d0:a2:e2:a4:30:a4:67:96:57:85:5d:a3: a3:df:96:e8:1d:ae:60:68:0a:6e:7e:fe:d7:18:46: e9:e2:d1:71:80:3b:4e:6c:67:28:0f:72:37:43:22: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:B0:CF:57:34:0B:29:F9:BA:30:B8:A6:FE:F2:3C:70:74:63:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a08b409f-2bae-3b08-85c2-369f5734f2f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3c:2e:15:f6:54:d3:dc:76:b8:06:71:c0:c1:11:05:da:a7: 99:cb:66:20:4c:d6:26:cb:81:74:3d:41:61:d1:30:92:5e:7f: 4c:ce:d6:8a:31:53:ae:fd:17:96:9e:90:08:04:86:69:af:23: c6:a6:1d:ca:d4:09:12:2e:cf:be:17:ec:7e:69:22:ae:a4:b7: 46:86:6f:f9:76:67:68:ac:df:ca:d9:6d:ac:1c:9c:3e:58:34: 91:74:4f:67:71:1c:9a:71:3c:de:55:39:7b:cb:59:26:ab:32: f6:f0:79:7a:04:df:b5:d6:dd:39:6c:a3:57:e7:ba:f7:bb:de: 94:50:16:2c:b0:59:98:14:41:d1:dc:b7:94:1c:4e:fe:02:2a: 9d:e0:a3:f8:f3:40:1b:cb:79:d7:5d:60:e1:34:e5:83:1a:ee: b0:8f:4c:08:cc:6d:84:73:83:86:86:3c:f8:9c:61:0c:c1:88: a0:66:0f:94:55:56:c9:bf:e8:a6:a0:f3:0d:32:79:4d:b5:a1: d5:3d:ce:66:5c:a2:c7:d3:b9:0f:19:7a:f8:71:32:dd:50:a5: cd:08:72:b7:a4:1d:be:b1:02:1a:de:42:e3:a6:59:7e:03:3a: 49:11:cc:68:5d:5b:80:29:cc:a2:15:e4:8d:d8:49:6b:af:7a: 2c:4e:e4:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqFD0t9v8yEtQtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzOFoXDTI1MDkxODA5MzEzOFowLzEtMCsGA1UEAxMk ZDhiNDA3ODgtNTE4Yi00YmU1LThhYmItY2VkYzlhZDg5MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YwGAQdlvYk1YDCA1Ve3x19Ih06locezNzEp O3G7DoS59CQ/Wqc8XWG0FatKYRGCZR/7YtUFiyzKK90rpa6MUb7hSeTVpchOq+N/ zRMIEb89xk2vixxTasDQUZQHSLFwpKQbvO11RBNXMrr2naxduYqC05TuqVmnEdSg wjtnkhQyefBgq4NnfCkDpy/wXnxrioAe2hsJ+4gw9QEJH0CstSY7NQ+muCxLXdAs +CeykSirsI/XM15D2L0gBemi2P1YICuhQuYTXQnFcdg3oOWFAReeZj/QouKkMKRn lleFXaOj35boHa5gaApufv7XGEbp4tFxgDtObGcoD3I3QyJ3rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt+sM9XNAsp+bowuKb+8jxwdGM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTA4YjQwOWYtMmJhZS0z YjA4LTg1YzItMzY5ZjU3MzRmMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE8LhX2VNPcdrgGccDBEQXap5nLZiBM1ibLgXQ9QWHRMJJef0zO1oox U679F5aekAgEhmmvI8amHcrUCRIuz74X7H5pIq6kt0aGb/l2Z2is38rZbawcnD5Y NJF0T2dxHJpxPN5VOXvLWSarMvbweXoE37XW3Tlso1fnuve73pRQFiywWZgUQdHc t5QcTv4CKp3go/jzQBvLedddYOE05YMa7rCPTAjMbYRzg4aGPPicYQzBiKBmD5RV Vsm/6Kag8w0yeU21odU9zmZcosfTuQ8ZevhxMt1Qpc0IcrekHb6xAhreQuOmWX4D OkkRzGhdW4ApzKIV5I3YSWuveixO5CQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:31:56 2025 by rpki-client