$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8477d77-0cdc-321e-8b25-ed5321022edc.roa File: a8477d77-0cdc-321e-8b25-ed5321022edc.roa (raw, json) Hash identifier: cHXrM6LOOwz2rswpcavV+7C3J6MtmDYCKCNLGhXkxIA= Subject key identifier: 80:79:CD:FB:3F:B4:18:FC:55:4C:45:7B:CA:5F:0B:F5:DD:48:65:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A879A6CE1F1728E46ADD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8477d77-0cdc-321e-8b25-ed5321022edc.roa Signing time: Fri 20 Jun 2025 09:31:57 +0000 ROA not before: Fri 20 Jun 2025 09:31:57 +0000 ROA not after: Thu 18 Sep 2025 09:31:57 +0000 asID: 22773 IP address blocks: 70.173.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:79:a6:ce:1f:17:28:e4:6a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:57 2025 GMT Not After : Sep 18 09:31:57 2025 GMT Subject: CN=561c4f9c-1c7a-49fb-a349-a4955f6fcdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:74:96:22:e8:3d:0e:2d:a1:15:b9:d7:f8: 6e:9e:f8:09:b7:c6:9b:55:28:b5:e2:63:31:f2:3d: f2:fa:fc:88:ee:62:93:94:f2:1a:ba:cb:97:b4:cf: 90:d9:1a:6c:8e:83:18:d1:d2:08:03:eb:e8:ba:ae: 4c:f2:d2:64:ba:31:a5:f1:cc:95:78:18:af:81:a4: da:9b:c1:65:ae:cf:c9:d5:5e:02:1c:77:35:f7:26: 15:86:9f:77:06:2c:29:b6:fb:c2:25:89:ab:b9:f7: ab:57:a8:77:bc:91:07:0e:01:2f:45:e5:6d:f3:8b: f7:82:d1:9b:9d:eb:90:91:71:28:c0:63:d6:19:8c: d8:fa:9b:03:c4:e6:72:34:1b:71:08:dc:6f:7f:57: ff:bb:f3:fe:31:9a:ea:b5:de:fe:81:89:52:17:c4: 7e:5e:61:b9:b7:07:4b:78:9c:9c:3f:50:70:e7:c5: f8:7f:eb:2d:2b:9b:aa:43:2b:4b:23:03:8a:e1:dd: 8c:87:58:e8:39:16:e7:d2:65:ad:7e:e5:f8:21:3e: 6f:81:df:e3:54:75:fe:50:31:c6:6f:79:5b:0f:ab: b8:e7:a3:db:5c:ff:5d:6b:fc:81:44:b8:86:d3:95: 3b:63:33:e9:fe:c5:40:21:6b:13:96:50:d3:c2:ab: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:CD:FB:3F:B4:18:FC:55:4C:45:7B:CA:5F:0B:F5:DD:48:65:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a8477d77-0cdc-321e-8b25-ed5321022edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d7:ee:45:ee:29:4e:9b:a9:e9:a0:34:38:b7:a9:ff:70:5e: b2:ed:9d:da:41:40:da:df:f8:f4:0f:f6:7b:b7:f3:bb:00:0f: 9f:ca:f4:1d:c1:f3:dd:de:46:e1:71:e7:e3:4d:8a:6c:dc:a2: 1e:d4:b3:69:4c:8c:74:0c:8b:52:a6:87:7e:56:56:9b:1e:bf: 21:5d:5d:f8:a7:91:28:5d:26:40:96:c6:f3:ac:ca:20:7f:24: 4a:34:33:78:7d:26:24:3e:75:00:d0:9c:1c:6b:82:5d:c1:b5: 41:89:5c:ba:2a:14:0b:e8:f8:d9:d4:e1:7e:f6:d3:71:4a:43: 12:49:f2:ce:c8:c2:e7:2a:1a:ca:32:f3:86:92:d8:d3:25:7d: 94:0a:d4:b3:44:46:42:c5:c5:85:1d:1d:7a:55:b7:4e:33:d1: 09:d3:b5:05:c0:40:de:a8:6f:59:6d:e0:4c:2e:60:aa:e8:3a: 2c:d8:f4:f4:1d:66:fb:8f:b9:8a:bc:d4:5a:fd:ae:22:25:42: 4c:39:4d:46:c3:80:ae:22:0f:b5:ca:89:02:c8:f4:d5:00:3f: cd:de:50:86:1f:1e:89:54:fe:e1:99:6c:4b:ec:0e:5b:46:71: 17:41:8b:64:c3:e9:f4:0f:65:71:29:dc:ea:a3:0d:21:30:aa: 98:0a:63:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHmmzh8XKORq3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1N1oXDTI1MDkxODA5MzE1N1owLzEtMCsGA1UEAxMk NTYxYzRmOWMtMWM3YS00OWZiLWEzNDktYTQ5NTVmNmZjZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpF0liLoPQ4toRW51/hunvgJt8abVSi14mMx 8j3y+vyI7mKTlPIausuXtM+Q2RpsjoMY0dIIA+vouq5M8tJkujGl8cyVeBivgaTa m8Flrs/J1V4CHHc19yYVhp93BiwptvvCJYmruferV6h3vJEHDgEvReVt84v3gtGb neuQkXEowGPWGYzY+psDxOZyNBtxCNxvf1f/u/P+MZrqtd7+gYlSF8R+XmG5twdL eJycP1Bw58X4f+stK5uqQytLIwOK4d2Mh1joORbn0mWtfuX4IT5vgd/jVHX+UDHG b3lbD6u456PbXP9da/yBRLiG05U7YzPp/sVAIWsTllDTwqu3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB5zfs/tBj8VUxFe8pfC/XdSGWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTg0NzdkNzctMGNkYy0z MjFlLThiMjUtZWQ1MzIxMDIyZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq1uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfX7kXuKU6bqemgNDi3qf9wXrLtndpBQNrf+PQP9nu387sAD5/K9B3B 893eRuFx5+NNimzcoh7Us2lMjHQMi1Kmh35WVpsevyFdXfinkShdJkCWxvOsyiB/ JEo0M3h9JiQ+dQDQnBxrgl3BtUGJXLoqFAvo+NnU4X7203FKQxJJ8s7IwucqGsoy 84aS2NMlfZQK1LNERkLFxYUdHXpVt04z0QnTtQXAQN6ob1lt4EwuYKroOizY9PQd ZvuPuYq81Fr9riIlQkw5TUbDgK4iD7XKiQLI9NUAP83eUIYfHolU/uGZbEvsDltG cRdBi2TD6fQPZXEp3OqjDSEwqpgKYyY= -----END CERTIFICATE-----Generated at Tue Jul 1 17:39:29 2025 by rpki-client