$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0a2ca0c-90d7-3351-ae5a-4ac6b43976e5.roa File: a0a2ca0c-90d7-3351-ae5a-4ac6b43976e5.roa (raw, json) Hash identifier: c8eBuqy9P0Fbc+r3leDz9YFdGjfXk+o1t8dh3Yt+ARo= Subject key identifier: 61:62:6A:09:4E:AF:CE:1E:67:E4:ED:08:F6:C0:19:EB:BC:6F:49:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A878E6E99A12098DBD0F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0a2ca0c-90d7-3351-ae5a-4ac6b43976e5.roa Signing time: Fri 20 Jun 2025 09:31:57 +0000 ROA not before: Fri 20 Jun 2025 09:31:57 +0000 ROA not after: Thu 18 Sep 2025 09:31:57 +0000 asID: 22773 IP address blocks: 70.173.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:78:e6:e9:9a:12:09:8d:bd:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:57 2025 GMT Not After : Sep 18 09:31:57 2025 GMT Subject: CN=bff0379a-c637-4fc2-a715-46d5ad10a3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:b2:78:74:11:f2:9f:8e:12:ac:5e:b4:1f: 4e:46:61:f1:22:ff:c8:fa:82:c6:64:fc:15:73:dd: c8:31:cb:b1:4e:c0:e6:21:f4:d3:21:d8:ef:fc:4b: 63:ac:1b:0b:84:23:e3:3a:61:4b:ad:55:be:26:52: a9:f2:7f:c1:d5:81:fc:1e:3e:b6:a9:45:5b:59:aa: d4:11:d8:54:1c:ee:c5:62:52:03:4b:ce:97:b9:bb: 52:a3:81:78:16:6e:25:8a:3a:91:e2:1d:94:0f:b4: 7c:75:36:ac:15:fc:a9:9e:f8:2e:a7:2d:39:a0:85: d1:3a:6b:05:d5:d5:18:d2:77:3a:13:57:ec:d5:b2: 69:09:be:f7:14:d2:0d:bb:f0:5c:24:c0:e8:da:8e: a2:57:60:66:06:bd:32:94:74:85:87:f7:df:f1:55: 17:76:99:05:5b:cb:bd:bb:3f:47:4b:09:bf:e1:d1: 09:db:0c:14:31:42:60:12:c4:d7:ff:21:7c:55:28: 2e:82:df:c9:b5:2e:46:82:0d:5d:49:67:12:6b:66: ff:4b:1d:8b:1f:c7:3b:65:d8:aa:a9:fa:fe:02:97: 09:14:15:c0:46:7d:52:a5:6d:6c:de:b5:6e:94:7a: b8:38:78:b7:b6:da:6e:09:95:b3:e8:ef:83:31:44: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:6A:09:4E:AF:CE:1E:67:E4:ED:08:F6:C0:19:EB:BC:6F:49:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0a2ca0c-90d7-3351-ae5a-4ac6b43976e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:88:2b:ac:86:c0:3e:39:61:00:d1:6b:25:a2:96:ff:2c:13: c6:51:5d:a4:76:53:b3:f3:cd:bc:76:84:35:c3:d6:70:88:9b: 35:de:cb:f6:22:b3:32:9d:5f:93:3a:67:3d:b9:76:fb:9f:99: 19:6e:05:42:7c:2d:ec:19:40:a8:13:2a:9d:6d:24:3c:e5:80: 83:0a:65:5e:a5:89:77:f5:75:a6:f9:94:04:bb:52:a8:61:ee: c5:00:72:73:c3:72:ff:10:4a:b5:48:d5:19:72:5f:bd:b6:80: 83:dd:bf:42:98:a2:0a:94:3c:fc:ea:40:ea:3b:84:6b:c2:77: d5:85:ce:77:25:db:79:00:8d:08:69:35:93:d1:d0:f3:19:f2: 84:77:b6:1f:75:a3:d5:be:0d:18:4b:51:b6:9b:7b:7f:4f:0e: 7c:0c:a3:1e:6e:d8:41:9d:47:13:24:01:b9:7d:5c:a5:5f:23: ee:2f:88:b2:1e:60:1d:c2:d9:30:24:d7:47:a5:8e:a8:3c:30: d9:02:41:0b:1a:da:29:2a:c1:92:ed:35:a8:0c:07:3d:a9:9e: 95:19:b4:9b:05:51:25:df:e0:76:96:f2:ce:52:0e:b1:79:47: 81:41:af:fc:fe:b8:89:cb:7c:4e:b3:f6:10:84:cd:01:fc:40: db:bd:66:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHjm6ZoSCY29D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1N1oXDTI1MDkxODA5MzE1N1owLzEtMCsGA1UEAxMk YmZmMDM3OWEtYzYzNy00ZmMyLWE3MTUtNDZkNWFkMTBhM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQCyeHQR8p+OEqxetB9ORmHxIv/I+oLGZPwV c93IMcuxTsDmIfTTIdjv/EtjrBsLhCPjOmFLrVW+JlKp8n/B1YH8Hj62qUVbWarU EdhUHO7FYlIDS86XubtSo4F4Fm4lijqR4h2UD7R8dTasFfypnvgupy05oIXROmsF 1dUY0nc6E1fs1bJpCb73FNINu/BcJMDo2o6iV2BmBr0ylHSFh/ff8VUXdpkFW8u9 uz9HSwm/4dEJ2wwUMUJgEsTX/yF8VSgugt/JtS5Ggg1dSWcSa2b/Sx2LH8c7Zdiq qfr+ApcJFBXARn1SpW1s3rVulHq4OHi3ttpuCZWz6O+DMUQcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFiaglOr84eZ+TtCPbAGeu8b0mlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBhMmNhMGMtOTBkNy0z MzUxLWFlNWEtNGFjNmI0Mzk3NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCIK6yGwD45YQDRayWilv8sE8ZRXaR2U7Pzzbx2hDXD1nCImzXey/Yi szKdX5M6Zz25dvufmRluBUJ8LewZQKgTKp1tJDzlgIMKZV6liXf1dab5lAS7Uqhh 7sUAcnPDcv8QSrVI1RlyX722gIPdv0KYogqUPPzqQOo7hGvCd9WFzncl23kAjQhp NZPR0PMZ8oR3th91o9W+DRhLUbabe39PDnwMox5u2EGdRxMkAbl9XKVfI+4viLIe YB3C2TAk10eljqg8MNkCQQsa2ikqwZLtNagMBz2pnpUZtJsFUSXf4HaW8s5SDrF5 R4FBr/z+uInLfE6z9hCEzQH8QNu9ZnM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:07 2025 by rpki-client