$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a28975aa-9e29-3ede-9a03-6b017ae3f9d5.roa File: a28975aa-9e29-3ede-9a03-6b017ae3f9d5.roa (raw, json) Hash identifier: 2xH+eLm6QU9QKH7C5hqIEW8vdEQpFI+XvEBkH3PS9G4= Subject key identifier: 5F:B3:10:38:5D:8E:DE:74:34:63:26:CD:E0:84:17:1B:D0:9C:24:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8CA2B176BB7C716C36610 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a28975aa-9e29-3ede-9a03-6b017ae3f9d5.roa Signing time: Fri 20 Jun 2025 09:32:35 +0000 ROA not before: Fri 20 Jun 2025 09:32:35 +0000 ROA not after: Thu 18 Sep 2025 09:32:35 +0000 asID: 22773 IP address blocks: 70.180.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:ca:2b:17:6b:b7:c7:16:c3:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:35 2025 GMT Not After : Sep 18 09:32:35 2025 GMT Subject: CN=3dd5a409-b2f2-423f-b340-e42f59793557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:7a:da:1e:7d:e9:3c:d6:fc:de:31:ce:5b: 25:3f:2e:56:41:8f:ad:88:ef:3d:a0:e5:40:ca:04: 7c:a6:c5:24:00:8e:38:d3:d0:2b:73:75:fe:e6:37: fd:58:47:91:02:2c:f1:9f:7c:7f:a5:b9:ea:1b:56: 2c:e9:e0:42:45:85:f6:12:18:40:25:0f:38:0d:7d: 55:7f:6b:d8:82:8f:e9:d1:69:f3:3e:44:05:08:28: 69:61:0c:47:f4:ed:cb:28:b2:f3:a7:59:40:e1:2d: 8d:02:0b:8c:e6:3e:20:6c:52:2c:12:91:13:25:e1: 14:d0:7d:df:a2:17:4b:ab:48:1d:5c:35:2a:5d:ef: 45:77:2f:61:69:1c:8f:08:32:3c:36:08:b9:ad:4d: 52:1f:8e:f2:5d:cc:68:5e:54:26:be:8c:54:64:5d: 42:4e:da:67:88:60:b3:6d:68:c1:8b:66:1e:4b:1b: 1c:35:02:9b:f4:94:ed:aa:cd:c9:fe:7e:3e:5a:3a: 5f:d5:6b:2f:87:53:47:01:6f:51:fe:89:1e:d8:a6: 9c:9f:54:46:63:95:28:c8:a0:79:7c:8d:e5:81:05: 59:eb:5e:60:34:e5:88:d3:35:db:c3:6e:f0:4f:a2: 29:3d:1e:9d:4a:f0:b2:23:d9:bd:4f:46:69:06:30: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B3:10:38:5D:8E:DE:74:34:63:26:CD:E0:84:17:1B:D0:9C:24:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a28975aa-9e29-3ede-9a03-6b017ae3f9d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c2:14:15:5a:f9:4b:a3:68:91:d9:a9:15:06:c8:6d:70:bc: 44:0d:21:b0:5e:d0:c8:d0:ad:07:8c:4f:92:6d:82:38:a1:77: 11:0d:ab:78:d2:db:de:cf:61:b8:02:95:2f:fd:a9:80:a3:74: d2:3d:fe:aa:21:0b:50:c4:25:5d:6a:2f:b9:d8:ba:c1:41:1e: 51:f8:8b:cb:ba:28:d7:1c:ac:a0:b9:b7:aa:a3:d8:c4:56:94: 28:cb:a5:eb:92:58:75:0d:f7:d7:73:12:6a:05:47:9e:42:8e: 6f:6d:42:28:db:02:9c:47:d2:8d:5e:fe:2f:4f:eb:14:5e:cd: 35:f3:01:f5:28:83:4f:b9:8c:a5:e8:e0:08:a1:93:30:fa:35: 59:a4:49:2e:4f:3f:93:42:09:a8:29:4c:25:a1:9c:b0:4a:ad: 9c:77:b9:e7:23:44:7d:68:02:7a:22:39:99:f7:82:53:99:98: b9:3f:0c:01:16:54:d0:54:86:8b:63:0a:78:62:9c:eb:52:ec: 40:8a:46:59:7d:76:42:a7:01:ca:17:48:d1:26:32:7d:e8:02: 10:50:60:d4:0c:1d:6b:7b:e5:a7:72:4f:42:aa:67:82:99:13: 35:ec:31:a0:33:1e:11:02:84:56:18:45:a7:17:6b:96:31:41: be:1a:75:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqMorF2u3xxbDZhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIzNVoXDTI1MDkxODA5MzIzNVowLzEtMCsGA1UEAxMk M2RkNWE0MDktYjJmMi00MjNmLWIzNDAtZTQyZjU5NzkzNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxx62h596TzW/N4xzlslPy5WQY+tiO89oOVA ygR8psUkAI4409Arc3X+5jf9WEeRAizxn3x/pbnqG1Ys6eBCRYX2EhhAJQ84DX1V f2vYgo/p0WnzPkQFCChpYQxH9O3LKLLzp1lA4S2NAguM5j4gbFIsEpETJeEU0H3f ohdLq0gdXDUqXe9Fdy9haRyPCDI8Ngi5rU1SH47yXcxoXlQmvoxUZF1CTtpniGCz bWjBi2YeSxscNQKb9JTtqs3J/n4+Wjpf1Wsvh1NHAW9R/oke2Kacn1RGY5UoyKB5 fI3lgQVZ615gNOWI0zXbw27wT6IpPR6dSvCyI9m9T0ZpBjAxdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+zEDhdjt50NGMmzeCEFxvQnCR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTI4OTc1YWEtOWUyOS0z ZWRlLTlhMDMtNmIwMTdhZTNmOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3CFBVa+UujaJHZqRUGyG1wvEQNIbBe0MjQrQeMT5JtgjihdxENq3jS 297PYbgClS/9qYCjdNI9/qohC1DEJV1qL7nYusFBHlH4i8u6KNccrKC5t6qj2MRW lCjLpeuSWHUN99dzEmoFR55Cjm9tQijbApxH0o1e/i9P6xRezTXzAfUog0+5jKXo 4AihkzD6NVmkSS5PP5NCCagpTCWhnLBKrZx3uecjRH1oAnoiOZn3glOZmLk/DAEW VNBUhotjCnhinOtS7ECKRll9dkKnAcoXSNEmMn3oAhBQYNQMHWt75adyT0KqZ4KZ EzXsMaAzHhEChFYYRacXa5YxQb4adbA= -----END CERTIFICATE-----Generated at Wed Jul 2 13:45:34 2025 by rpki-client