$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86bbd6e-a8de-3c08-8312-21365690eee7.roa File: a86bbd6e-a8de-3c08-8312-21365690eee7.roa (raw, json) Hash identifier: SGJf/Hv/UHjTkmFtQURAUlrfRujitn9bDlJxEH+fZPw= Subject key identifier: 68:C5:D6:45:32:8E:F4:4C:9F:64:3A:80:77:C4:2A:17:A2:2B:59:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD86F0C7B9636E92CED4710 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86bbd6e-a8de-3c08-8312-21365690eee7.roa Signing time: Thu 19 Jun 2025 09:21:10 +0000 ROA not before: Thu 19 Jun 2025 09:21:10 +0000 ROA not after: Wed 17 Sep 2025 09:21:10 +0000 asID: 22773 IP address blocks: 70.176.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:6f:0c:7b:96:36:e9:2c:ed:47:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:10 2025 GMT Not After : Sep 17 09:21:10 2025 GMT Subject: CN=34f38264-84d9-44a9-96d8-c90b215b4b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:58:0f:01:05:80:c4:8a:b4:6d:f6:51:27: 81:7c:11:e8:f8:e8:e7:55:57:7d:d2:3c:4b:0c:71: 4f:60:53:7c:72:57:d2:69:b1:52:31:b7:a1:c3:9d: 38:1d:01:b9:60:57:ee:7b:3c:3c:69:30:51:29:ba: 9c:18:0c:40:53:7f:d4:34:2c:0b:a2:d7:91:7c:43: ec:07:b6:99:41:07:fa:bd:ee:69:0a:78:1e:43:bb: b5:bc:24:7d:db:ed:60:aa:ae:75:6d:3b:a8:9a:63: 13:36:ef:73:d0:5e:bc:c8:db:e8:2f:78:91:83:16: 62:9c:fe:b0:be:6e:f5:af:89:26:73:2b:c8:c1:0d: fc:11:0f:29:c7:54:3d:1d:ea:ef:1a:2c:aa:1d:36: 01:95:bc:07:48:95:71:3c:98:2c:e3:a8:41:37:e2: 5f:03:6e:0e:ee:9e:11:43:7f:af:f7:d0:8b:32:65: ab:d1:f6:90:de:c8:47:cd:ac:d1:55:e4:53:10:c3: d2:39:0c:a6:8e:34:e5:b3:f8:cf:d6:61:a6:85:0b: 9f:83:e5:14:1a:94:ec:3e:b4:b5:cd:88:f4:47:ab: d0:7c:66:f1:e9:9b:a1:6b:6d:40:63:c4:9a:88:40: 5d:de:85:1f:df:82:8f:5c:06:ce:db:af:68:6a:2c: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:D6:45:32:8E:F4:4C:9F:64:3A:80:77:C4:2A:17:A2:2B:59:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a86bbd6e-a8de-3c08-8312-21365690eee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:70:06:a3:ea:de:e6:00:a7:f5:9c:3c:ca:e4:ee:ad:31:f2: ed:14:d7:d4:5d:28:9d:21:93:45:38:97:08:a5:6a:fa:0d:43: b5:68:70:a9:7f:f8:e3:ca:01:15:16:4b:41:c0:5a:5d:69:f2: 96:fb:24:1a:9d:ad:3e:10:c8:5b:1f:a5:b2:ea:63:f8:a9:f0: d2:7a:dd:00:98:18:0b:f3:b0:7f:86:30:e2:c8:20:22:5f:db: 24:86:ce:0f:63:73:d3:9a:02:5c:b9:9f:14:98:98:9f:b7:74: a1:8f:a2:ee:ef:8f:b1:f7:92:20:cc:ce:9e:db:48:ea:19:33: 8c:f3:01:e5:6d:18:73:59:4c:21:2b:02:bf:43:bf:26:68:7c: 6b:df:26:0e:b4:b4:29:57:04:06:00:9b:78:00:c6:16:3f:f1: 5d:d6:a5:94:f6:6f:f4:bc:9d:03:91:56:3b:3b:97:d2:70:34: e0:11:ff:89:21:1e:4a:ff:4d:b8:12:29:4e:02:ed:1a:71:d4: 04:64:10:8b:0c:dd:28:28:63:d0:c0:9e:64:c4:dc:ca:29:a7: 48:23:b9:19:05:b4:c6:fd:a6:bc:d3:6b:df:01:19:d2:d1:f4: 0e:43:8a:38:33:2b:66:c3:0b:20:e6:e5:b1:a0:d9:54:27:1f: 1d:a2:12:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92G8Me5Y26SztRxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjExMFoXDTI1MDkxNzA5MjExMFowLzEtMCsGA1UEAxMk MzRmMzgyNjQtODRkOS00NGE5LTk2ZDgtYzkwYjIxNWI0YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuBYDwEFgMSKtG32USeBfBHo+OjnVVd90jxL DHFPYFN8clfSabFSMbehw504HQG5YFfuezw8aTBRKbqcGAxAU3/UNCwLoteRfEPs B7aZQQf6ve5pCngeQ7u1vCR92+1gqq51bTuommMTNu9z0F68yNvoL3iRgxZinP6w vm71r4kmcyvIwQ38EQ8px1Q9HervGiyqHTYBlbwHSJVxPJgs46hBN+JfA24O7p4R Q3+v99CLMmWr0faQ3shHzazRVeRTEMPSOQymjjTls/jP1mGmhQufg+UUGpTsPrS1 zYj0R6vQfGbx6Zuha21AY8SaiEBd3oUf34KPXAbO269oaixUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjF1kUyjvRMn2Q6gHfEKheiK1mcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTg2YmJkNmUtYThkZS0z YzA4LTgzMTItMjEzNjU2OTBlZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpwBqPq3uYAp/WcPMrk7q0x8u0U19RdKJ0hk0U4lwilavoNQ7VocKl/ +OPKARUWS0HAWl1p8pb7JBqdrT4QyFsfpbLqY/ip8NJ63QCYGAvzsH+GMOLIICJf 2ySGzg9jc9OaAly5nxSYmJ+3dKGPou7vj7H3kiDMzp7bSOoZM4zzAeVtGHNZTCEr Ar9DvyZofGvfJg60tClXBAYAm3gAxhY/8V3WpZT2b/S8nQORVjs7l9JwNOAR/4kh Hkr/TbgSKU4C7Rpx1ARkEIsM3SgoY9DAnmTE3Mopp0gjuRkFtMb9przTa98BGdLR 9A5DijgzK2bDCyDm5bGg2VQnHx2iEpk= -----END CERTIFICATE-----Generated at Mon Jun 30 21:42:20 2025 by rpki-client