$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa File: a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa (raw, json) Hash identifier: fveTKSouEeTCK6iW8PCTgpIDdhlKCUNsY0zjiG572XM= Subject key identifier: 73:A9:C3:F0:1A:CA:FD:98:E0:B7:38:C4:AF:78:A6:3E:94:49:EE:40 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7ED5B824D653945B405E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa Signing time: Thu 19 Jun 2025 09:20:08 +0000 ROA not before: Thu 19 Jun 2025 09:20:08 +0000 ROA not after: Wed 17 Sep 2025 09:20:08 +0000 asID: 22773 IP address blocks: 70.172.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:ed:5b:82:4d:65:39:45:b4:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:08 2025 GMT Not After : Sep 17 09:20:08 2025 GMT Subject: CN=a7258249-0927-42ae-aff0-9a23f9cec5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:22:f3:a0:6b:1e:b7:20:62:6d:28:7e:e2:c0: c2:ed:5c:f4:89:ae:da:5e:22:aa:e9:f3:5d:b5:9d: c7:63:3d:81:61:af:bd:8c:4f:a8:e8:31:7d:bf:fa: bd:a0:65:76:78:3a:fa:57:ba:b7:45:77:5a:1d:ca: 15:66:75:40:d2:82:1a:55:89:d9:4c:a2:66:de:94: 2f:be:98:92:1d:36:06:be:86:ce:14:61:05:32:27: 4f:c9:e3:50:b1:8d:ac:6e:79:c6:05:6f:6f:1c:6b: d0:82:19:71:f5:64:a6:d0:67:b8:22:b5:ca:17:79: 87:43:dd:6c:26:57:4c:5e:90:e6:13:06:94:6c:95: 3f:9b:aa:01:ad:2f:1b:ff:0c:c6:03:2d:72:90:cc: ca:f6:89:29:83:29:09:23:37:f9:ca:a4:c9:45:8b: 21:f6:3f:8f:cb:7b:d8:03:62:ec:9b:f8:c1:78:26: f4:8e:6a:5b:97:0f:ba:37:69:ec:13:c0:9f:1a:84: 5b:26:0d:6c:26:d2:f1:a5:5e:e0:28:83:91:9d:cd: 21:8f:44:79:ac:86:c5:42:d6:a8:52:d9:8c:6b:dd: e4:27:83:81:f1:f9:da:d3:ed:df:63:51:ee:e0:3e: 01:90:6a:7c:c0:0e:ed:dc:34:4d:fc:09:cc:77:05: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:C3:F0:1A:CA:FD:98:E0:B7:38:C4:AF:78:A6:3E:94:49:EE:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2bbb39c-28e3-3a3d-9a2e-6597ee086d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c2:8e:d8:bc:47:0e:7b:c0:ba:4c:4c:e0:ca:e0:84:7f:44: e9:db:1d:bd:07:de:11:1a:0b:bc:72:2f:9b:45:57:2b:b2:ba: c8:51:0d:1f:e5:99:29:7a:e1:06:b6:31:d5:4c:18:eb:4a:d1: 98:06:1d:c7:07:3c:f8:a0:8c:85:50:11:0b:14:4b:5a:6c:a1: 7d:c7:77:af:63:13:be:03:b1:30:d5:e5:bb:fe:3c:39:7c:de: 40:10:29:4a:ed:07:eb:ce:7f:2e:0d:f1:c6:6b:b0:c7:6b:f0: c6:48:d3:4b:63:93:44:cc:b6:ab:20:f4:70:7d:50:b9:01:ca: 18:f6:bc:ec:ed:9e:c0:ba:5d:4e:d4:5c:21:1d:45:18:fd:5a: d0:39:c0:8e:ce:12:af:d0:4c:1e:6d:30:9e:94:5a:38:28:c5: bc:c0:85:e6:91:98:6e:4a:90:c1:e8:de:8c:1b:3f:93:25:6b: f9:80:45:8f:c3:52:38:d9:96:2f:56:b0:5b:33:d7:54:7c:f8: c6:e3:4e:42:07:6e:80:67:9a:ad:83:68:fa:e5:fb:bc:c2:63: f1:7e:d1:5a:21:c3:29:f2:79:49:d1:d9:3e:a9:5f:af:4d:07: 0e:34:7b:ec:6b:0c:cb:f9:90:de:70:bc:a7:46:64:a7:21:fd: 23:26:9b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91+1bgk1lOUW0BeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAwOFoXDTI1MDkxNzA5MjAwOFowLzEtMCsGA1UEAxMk YTcyNTgyNDktMDkyNy00MmFlLWFmZjAtOWEyM2Y5Y2VjNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCLzoGsetyBibSh+4sDC7Vz0ia7aXiKq6fNd tZ3HYz2BYa+9jE+o6DF9v/q9oGV2eDr6V7q3RXdaHcoVZnVA0oIaVYnZTKJm3pQv vpiSHTYGvobOFGEFMidPyeNQsY2sbnnGBW9vHGvQghlx9WSm0Ge4IrXKF3mHQ91s JldMXpDmEwaUbJU/m6oBrS8b/wzGAy1ykMzK9okpgykJIzf5yqTJRYsh9j+Py3vY A2Lsm/jBeCb0jmpblw+6N2nsE8CfGoRbJg1sJtLxpV7gKIORnc0hj0R5rIbFQtao UtmMa93kJ4OB8fna0+3fY1Hu4D4BkGp8wA7t3DRN/AnMdwUP2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOpw/Aayv2Y4Lc4xK94pj6USe5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJiYmIzOWMtMjhlMy0z YTNkLTlhMmUtNjU5N2VlMDg2ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLCjti8Rw57wLpMTODK4IR/ROnbHb0H3hEaC7xyL5tFVyuyushRDR/l mSl64Qa2MdVMGOtK0ZgGHccHPPigjIVQEQsUS1psoX3Hd69jE74DsTDV5bv+PDl8 3kAQKUrtB+vOfy4N8cZrsMdr8MZI00tjk0TMtqsg9HB9ULkByhj2vOztnsC6XU7U XCEdRRj9WtA5wI7OEq/QTB5tMJ6UWjgoxbzAheaRmG5KkMHo3owbP5Mla/mARY/D UjjZli9WsFsz11R8+MbjTkIHboBnmq2DaPrl+7zCY/F+0VohwynyeUnR2T6pX69N Bw40e+xrDMv5kN5wvKdGZKch/SMmmxE= -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:20 2025 by rpki-client