$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa File: a273715c-621b-34c1-8bd8-9c7a52985b50.roa (raw, json) Hash identifier: sH4QGVgNnVKzvbzIj+wLEaaKEK50Xv3aXzSnmnYcaV0= Subject key identifier: E3:FE:A3:1F:B7:AA:66:CA:D5:BA:14:3B:60:22:2F:E7:C9:7E:7B:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7D6AFC519A6ACEBD89AB0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa Signing time: Thu 19 Jun 2025 09:19:58 +0000 ROA not before: Thu 19 Jun 2025 09:19:58 +0000 ROA not after: Wed 17 Sep 2025 09:19:58 +0000 asID: 22773 IP address blocks: 70.171.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:d6:af:c5:19:a6:ac:eb:d8:9a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:58 2025 GMT Not After : Sep 17 09:19:58 2025 GMT Subject: CN=4f58ce77-e5b8-44cb-9d1e-16d1bdf4b4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1a:59:58:c6:12:83:80:44:5d:7b:96:e6:17: bf:59:cf:94:a0:2a:07:7f:2d:27:da:59:df:0b:cd: 60:c6:3f:86:86:9f:45:ca:48:85:37:d4:a9:24:cf: 7f:1e:27:83:33:66:8f:c2:82:ec:4c:d4:a1:af:6b: 19:33:4a:4c:1e:b6:d4:fc:c2:b3:31:83:66:1c:54: b3:8e:c1:78:f5:ba:a1:14:70:a3:4e:78:d6:a9:e4: cd:8f:d7:96:79:34:e6:07:39:42:8a:fa:1d:fd:31: bb:24:61:35:c4:b8:84:8f:6e:d6:c6:61:b2:b3:89: f6:33:a0:a4:d8:01:70:d5:16:ab:ba:b9:11:af:16: a8:03:fa:12:d3:71:ab:c4:3e:62:bf:71:b8:14:69: e3:38:e9:fa:2b:b3:d7:fa:4d:9e:33:b4:39:23:e6: 4c:df:57:0e:89:fa:ea:1a:49:77:cd:a6:8a:80:de: 50:b3:cd:de:9f:07:86:5d:0f:7f:79:6e:6c:e9:f1: a9:51:f9:da:6c:26:a7:f2:17:30:15:58:51:7f:80: 45:d3:13:d5:e9:55:33:c3:e2:d1:e3:98:6a:17:6e: d2:e8:5f:a3:ae:c9:a4:8a:d3:d4:03:c9:3d:88:8d: 69:72:03:73:35:21:a8:00:04:c3:d8:34:8d:7b:63: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FE:A3:1F:B7:AA:66:CA:D5:BA:14:3B:60:22:2F:E7:C9:7E:7B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a273715c-621b-34c1-8bd8-9c7a52985b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d8:00:e3:63:a8:41:d5:04:99:ee:69:a9:dd:6d:82:fc:62: 95:e5:9b:6d:fe:52:4b:2f:3d:de:a7:e1:93:c4:88:d8:d5:3a: 28:c8:20:f6:9b:92:6d:c2:de:51:36:10:96:6d:23:d5:a6:67: c8:f8:2d:c2:71:df:d9:46:4c:9d:95:11:37:41:4d:f4:01:0f: 65:6c:98:2b:ed:52:cc:c7:5e:b8:17:0b:1e:4c:0b:af:4a:e7: 21:5b:8c:7c:76:db:97:2e:dc:a0:0d:d1:a0:36:27:9b:4a:3d: 56:7d:42:33:04:59:b0:8b:bb:09:1c:d2:cf:0e:40:95:44:e1: f2:90:66:fa:24:26:05:82:b8:d6:f3:55:26:50:e9:46:89:fc: 9d:38:f5:2b:44:78:4b:12:32:55:4e:c3:25:7b:6c:8f:ad:c4: c2:07:69:82:46:28:54:81:17:5a:bd:60:c5:10:bc:81:70:75: a6:a0:2c:32:34:32:87:bc:3a:dc:8f:be:da:6b:e9:ae:04:df: 88:37:b5:6d:01:46:bd:2d:b3:d2:d2:cb:1b:f1:6d:7b:49:00: ef:4d:15:46:86:23:a2:50:9c:b9:5c:1c:f4:e3:cb:eb:32:68: 04:04:13:d0:52:b2:a9:fe:bb:e4:cf:14:0c:50:fe:d8:20:f3: fe:fc:29:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo919avxRmmrOvYmrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk1OFoXDTI1MDkxNzA5MTk1OFowLzEtMCsGA1UEAxMk NGY1OGNlNzctZTViOC00NGNiLTlkMWUtMTZkMWJkZjRiNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixpZWMYSg4BEXXuW5he/Wc+UoCoHfy0n2lnf C81gxj+Ghp9FykiFN9SpJM9/HieDM2aPwoLsTNShr2sZM0pMHrbU/MKzMYNmHFSz jsF49bqhFHCjTnjWqeTNj9eWeTTmBzlCivod/TG7JGE1xLiEj27WxmGys4n2M6Ck 2AFw1RarurkRrxaoA/oS03GrxD5iv3G4FGnjOOn6K7PX+k2eM7Q5I+ZM31cOifrq Gkl3zaaKgN5Qs83enweGXQ9/eW5s6fGpUfnabCan8hcwFVhRf4BF0xPV6VUzw+LR 45hqF27S6F+jrsmkitPUA8k9iI1pcgNzNSGoAATD2DSNe2MHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP+ox+3qmbK1boUO2AiL+fJfnsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTI3MzcxNWMtNjIxYi0z NGMxLThiZDgtOWM3YTUyOTg1YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjYAONjqEHVBJnuaandbYL8YpXlm23+UksvPd6n4ZPEiNjVOijIIPab km3C3lE2EJZtI9WmZ8j4LcJx39lGTJ2VETdBTfQBD2VsmCvtUszHXrgXCx5MC69K 5yFbjHx225cu3KAN0aA2J5tKPVZ9QjMEWbCLuwkc0s8OQJVE4fKQZvokJgWCuNbz VSZQ6UaJ/J049StEeEsSMlVOwyV7bI+txMIHaYJGKFSBF1q9YMUQvIFwdaagLDI0 Moe8OtyPvtpr6a4E34g3tW0BRr0ts9LSyxvxbXtJAO9NFUaGI6JQnLlcHPTjy+sy aAQEE9BSsqn+u+TPFAxQ/tgg8/78Kac= -----END CERTIFICATE-----Generated at Tue Jul 1 15:30:43 2025 by rpki-client