$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf35009-0f2a-3628-951f-09ba0505fedb.roa File: aaf35009-0f2a-3628-951f-09ba0505fedb.roa (raw, json) Hash identifier: VfTgI/M5Uu9yPPylbh5Qf/03ds3G1yky6v6lmwShlbo= Subject key identifier: 68:D5:42:07:04:98:AB:86:C2:43:DE:89:B6:D0:B1:48:8C:B8:21:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74BBC467798F8491A2E240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf35009-0f2a-3628-951f-09ba0505fedb.roa Signing time: Thu 19 Jun 2025 14:36:05 +0000 ROA not before: Thu 19 Jun 2025 14:36:05 +0000 ROA not after: Wed 17 Sep 2025 14:36:05 +0000 asID: 22773 IP address blocks: 70.180.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:bb:c4:67:79:8f:84:91:a2:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:05 2025 GMT Not After : Sep 17 14:36:05 2025 GMT Subject: CN=6a0d5d77-3092-46e0-93aa-fd66ea30938b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:d7:ff:ae:28:27:9b:70:0f:f9:1d:22:15: b8:5e:67:ca:1d:98:5a:38:57:c6:d7:3b:49:86:87: bc:eb:f4:a0:ef:3e:04:19:09:3a:74:d3:8d:ff:7e: 08:ce:33:50:db:f4:dc:88:34:01:6d:7f:2f:b4:33: df:37:89:4b:ae:10:62:08:6e:80:97:80:b7:58:87: 14:91:37:b7:52:1f:97:fa:40:1b:15:10:6a:43:42: e8:95:54:a4:58:6f:f6:64:ed:b3:fc:58:8e:fc:88: da:95:63:9c:e3:38:19:0f:37:24:79:4e:6c:4e:ec: f7:a1:01:86:65:64:2d:83:9e:5a:7f:3a:ac:1a:58: dc:57:9f:56:8f:3e:85:85:cd:8d:25:cf:7e:0f:4d: d1:e4:5b:5c:be:ad:ae:57:74:a9:3f:5f:8c:5b:ff: 25:ff:94:96:63:95:8e:85:5c:99:68:05:9c:e6:80: 82:45:18:75:d9:57:3d:20:32:cc:43:02:66:32:0f: 5f:1d:92:9d:58:86:59:f1:3d:a1:ff:17:56:8b:71: 1a:be:32:11:3b:24:31:33:df:92:d1:0c:95:67:31: b9:d7:07:74:1e:4f:f2:18:36:a6:de:f4:73:7a:2d: be:93:2a:51:99:ee:6b:ef:cd:1d:b7:84:c7:02:4b: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D5:42:07:04:98:AB:86:C2:43:DE:89:B6:D0:B1:48:8C:B8:21:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf35009-0f2a-3628-951f-09ba0505fedb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:20:5c:cf:e6:dd:63:e5:62:e6:cc:e5:67:2f:3a:18:b8:7b: 4f:c7:5f:f7:4e:f0:a0:5f:38:ee:50:41:69:c0:2e:42:0d:0c: 54:9c:54:13:a7:72:72:56:96:4b:70:d3:8e:76:a3:7a:bd:fd: 71:01:54:2d:38:9b:33:d2:90:59:96:78:a9:5e:5b:56:61:69: 3e:ba:0a:29:07:0c:b1:48:e5:ca:f5:56:8a:62:9c:5b:d7:32: 4f:e0:a7:80:08:ff:8c:3d:27:5d:04:a6:16:f1:d4:e3:8b:c3: 23:0b:26:c7:25:97:b3:8a:f2:6a:35:e2:eb:85:a2:0c:c3:6a: 81:e1:8a:b1:68:55:00:aa:f9:93:b0:7f:c3:87:28:6b:29:ac: 23:0c:b7:60:7d:6c:75:96:b4:90:65:23:b8:45:e5:a8:bd:67: 3c:87:07:42:17:5f:3d:ec:77:0d:3b:50:0e:81:87:a5:ad:ed: a6:e9:a5:f0:e4:d4:4a:10:3b:86:04:22:ab:f4:de:96:67:f0: 9e:36:ce:fb:bf:70:fa:44:c7:e7:c0:68:76:6a:d7:6f:7a:8a: 56:25:d6:bf:91:cd:9d:16:8f:d7:7e:aa:e9:92:65:f5:7c:ec: 2f:db:cf:3f:e0:d1:5c:2a:56:cc:31:24:26:51:b2:42:55:8f: 35:9c:04:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dLvEZ3mPhJGi4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYwNVoXDTI1MDkxNzE0MzYwNVowLzEtMCsGA1UEAxMk NmEwZDVkNzctMzA5Mi00NmUwLTkzYWEtZmQ2NmVhMzA5MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBrX/64oJ5twD/kdIhW4XmfKHZhaOFfG1ztJ hoe86/Sg7z4EGQk6dNON/34IzjNQ2/TciDQBbX8vtDPfN4lLrhBiCG6Al4C3WIcU kTe3Uh+X+kAbFRBqQ0LolVSkWG/2ZO2z/FiO/IjalWOc4zgZDzckeU5sTuz3oQGG ZWQtg55afzqsGljcV59Wjz6Fhc2NJc9+D03R5Ftcvq2uV3SpP1+MW/8l/5SWY5WO hVyZaAWc5oCCRRh12Vc9IDLMQwJmMg9fHZKdWIZZ8T2h/xdWi3EavjIROyQxM9+S 0QyVZzG51wd0Hk/yGDam3vRzei2+kypRme5r780dt4THAku1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjVQgcEmKuGwkPeibbQsUiMuCEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFmMzUwMDktMGYyYS0z NjI4LTk1MWYtMDliYTA1MDVmZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrQJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4gXM/m3WPlYubM5WcvOhi4e0/HX/dO8KBfOO5QQWnALkINDFScVBOn cnJWlktw0452o3q9/XEBVC04mzPSkFmWeKleW1ZhaT66CikHDLFI5cr1VopinFvX Mk/gp4AI/4w9J10Ephbx1OOLwyMLJscll7OK8mo14uuFogzDaoHhirFoVQCq+ZOw f8OHKGsprCMMt2B9bHWWtJBlI7hF5ai9ZzyHB0IXXz3sdw07UA6Bh6Wt7abppfDk 1EoQO4YEIqv03pZn8J42zvu/cPpEx+fAaHZq1296ilYl1r+RzZ0Wj9d+qumSZfV8 7C/bzz/g0VwqVswxJCZRskJVjzWcBDg= -----END CERTIFICATE-----Generated at Wed Jul 2 12:24:57 2025 by rpki-client