$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa File: aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa (raw, json) Hash identifier: IJIlHy5Tj/OKGwT6jHbRtPtI/rLHjuTFUcCuIkrLmTs= Subject key identifier: 27:95:E7:FC:C6:C2:5C:F9:56:7D:68:A8:56:42:85:44:87:B1:C5:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74DB6D5AE8DE00B54BCA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa Signing time: Thu 19 Jun 2025 14:36:20 +0000 ROA not before: Thu 19 Jun 2025 14:36:20 +0000 ROA not after: Wed 17 Sep 2025 14:36:20 +0000 asID: 22773 IP address blocks: 70.188.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:db:6d:5a:e8:de:00:b5:4b:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:20 2025 GMT Not After : Sep 17 14:36:20 2025 GMT Subject: CN=7cc55299-bfd7-4cff-aee2-79cd0e14dfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:05:c9:3e:c5:4c:30:30:7c:d7:68:f4:24: 97:9c:db:ab:56:22:c9:c0:c9:5a:6b:b2:81:13:28: a2:19:63:b7:ce:87:fe:04:69:c3:d5:f6:04:65:fd: a2:cf:e0:66:20:11:f1:3d:6e:37:8f:e6:58:d2:3b: 68:95:ab:12:cc:ab:50:c1:bc:12:fb:77:4b:84:0e: 57:00:07:69:29:7e:51:cf:06:9a:d5:58:96:1c:78: 3e:69:1b:1d:3a:9a:b5:0c:85:b2:98:49:4e:7b:04: ab:16:98:b3:c4:41:7d:bf:5d:a9:43:75:89:6f:09: 36:0c:91:83:05:bf:30:12:69:62:65:24:2f:7c:ea: 3d:c6:6c:b5:94:0c:15:21:a2:34:e0:09:80:c5:a5: c0:d0:8d:b2:c7:a5:72:3b:79:94:ea:a5:64:52:9e: 5b:ad:d0:2a:1f:68:b6:8e:3c:28:c4:c0:b6:19:0f: 0a:40:86:86:dc:bb:eb:b0:d8:c6:b6:64:83:38:d5: f2:11:82:60:60:64:05:a6:47:0e:4b:93:5c:2e:24: 13:b0:cb:ef:9a:df:db:7e:02:7f:eb:22:28:f7:fd: d9:50:ef:28:93:4f:05:03:97:bc:8e:ad:d2:92:88: 5c:89:e2:99:e8:ad:81:7e:b9:33:0d:5d:39:00:52: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:E7:FC:C6:C2:5C:F9:56:7D:68:A8:56:42:85:44:87:B1:C5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf11198-b12d-3efa-abd8-029fafbeaf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.188.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:ae:00:d2:16:ac:0a:cb:bf:bb:a1:38:5c:0d:32:38:73: 74:ef:df:25:08:74:d1:d4:37:96:9c:17:9d:85:1c:6d:aa:91: 7a:48:71:89:7a:2b:7c:48:7f:3c:78:95:84:cf:f2:6b:6b:20: 98:d7:d4:e1:cf:05:8b:3d:87:8b:98:83:38:2e:ca:c5:d9:76: e8:89:50:db:52:78:8b:f6:7e:29:ac:7d:b1:a7:b2:77:85:75: 9c:b3:ac:76:7b:f9:52:74:5c:5e:ce:18:b3:76:89:41:eb:23: 64:fe:98:c0:29:be:6a:c8:a2:e9:22:5c:09:c9:73:42:27:e9: aa:11:2c:89:15:95:66:bd:f5:79:47:37:ba:d5:39:38:58:b5: c0:3c:4c:67:70:02:a4:a8:7a:45:4e:7c:30:d8:78:9e:1a:53: d8:0c:e4:6d:0d:9d:c5:76:8e:e8:2e:0f:f7:9b:14:0a:fc:7b: e5:25:96:a6:d5:90:3e:72:1a:79:1b:64:f6:83:4e:b1:59:ec: bb:77:58:62:06:b8:9f:bc:be:02:42:57:2f:bd:42:36:2d:37: 91:d4:24:5f:f2:68:74:b6:3f:85:c9:b6:14:ee:ad:46:3d:39: 68:a3:97:97:f9:99:82:b8:7a:f9:95:6e:c9:c2:74:2a:2b:6b: 24:ec:eb:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dNttWujeALVLykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYyMFoXDTI1MDkxNzE0MzYyMFowLzEtMCsGA1UEAxMk N2NjNTUyOTktYmZkNy00Y2ZmLWFlZTItNzljZDBlMTRkZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7YFyT7FTDAwfNdo9CSXnNurViLJwMlaa7KB EyiiGWO3zof+BGnD1fYEZf2iz+BmIBHxPW43j+ZY0jtolasSzKtQwbwS+3dLhA5X AAdpKX5Rzwaa1ViWHHg+aRsdOpq1DIWymElOewSrFpizxEF9v12pQ3WJbwk2DJGD Bb8wEmliZSQvfOo9xmy1lAwVIaI04AmAxaXA0I2yx6VyO3mU6qVkUp5brdAqH2i2 jjwoxMC2GQ8KQIaG3LvrsNjGtmSDONXyEYJgYGQFpkcOS5NcLiQTsMvvmt/bfgJ/ 6yIo9/3ZUO8ok08FA5e8jq3SkohcieKZ6K2BfrkzDV05AFKTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeV5/zGwlz5Vn1oqFZChUSHscWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFmMTExOTgtYjEyZC0z ZWZhLWFiZDgtMDI5ZmFmYmVhZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrzHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOorgDSFqwKy7+7oThcDTI4c3Tv3yUIdNHUN5acF52FHG2qkXpIcYl6 K3xIfzx4lYTP8mtrIJjX1OHPBYs9h4uYgzguysXZduiJUNtSeIv2fimsfbGnsneF dZyzrHZ7+VJ0XF7OGLN2iUHrI2T+mMApvmrIoukiXAnJc0In6aoRLIkVlWa99XlH N7rVOThYtcA8TGdwAqSoekVOfDDYeJ4aU9gM5G0NncV2juguD/ebFAr8e+UllqbV kD5yGnkbZPaDTrFZ7Lt3WGIGuJ+8vgJCVy+9QjYtN5HUJF/yaHS2P4XJthTurUY9 OWijl5f5mYK4evmVbsnCdCorayTs64g= -----END CERTIFICATE-----Generated at Tue Jul 1 18:22:53 2025 by rpki-client