$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa File: aaf95949-9957-3f4d-a851-c4b5791c2d31.roa (raw, json) Hash identifier: c/ZAm4bkAf0pvCrSOe1Mtv/wh1AJJJtL3AFWRBPF4fI= Subject key identifier: AB:82:9E:2F:B7:59:33:25:A1:9F:B0:A8:AB:EA:F3:B5:E9:70:27:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD763D298631107D1B52900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa Signing time: Thu 19 Jun 2025 09:19:03 +0000 ROA not before: Thu 19 Jun 2025 09:19:03 +0000 ROA not after: Wed 17 Sep 2025 09:19:03 +0000 asID: 22773 IP address blocks: 70.162.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:63:d2:98:63:11:07:d1:b5:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:03 2025 GMT Not After : Sep 17 09:19:03 2025 GMT Subject: CN=f541c869-fe2a-4826-8cf4-6bcbf43380e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:28:b2:a5:15:66:09:06:f4:cd:c4:31:c0:e4: ca:73:c6:18:53:b3:39:76:dc:70:29:11:9e:9f:66: e1:27:04:8f:c4:a9:51:7c:56:5a:af:33:3c:b7:93: ff:2a:48:3c:41:bc:59:00:8b:e8:d7:e6:f3:59:f8: fa:bf:33:07:8d:e5:ab:de:30:5e:b7:71:4c:50:3d: a1:97:2e:78:d6:08:d9:74:ec:23:b3:24:48:63:40: 26:5b:a3:df:91:01:11:e3:92:0f:28:26:05:20:84: cd:78:91:38:68:b1:5d:52:99:29:97:e2:0d:97:b4: 3d:f3:2d:b7:a5:24:d2:b3:df:5c:da:ce:30:79:e5: 4a:0c:c6:7a:07:35:8c:61:25:64:c2:e5:01:ae:08: 36:ae:cc:0a:f3:ba:d2:ff:a5:e2:18:02:71:ea:6e: db:3b:17:31:ff:6b:0e:43:77:12:7e:83:c0:9c:26: d6:94:be:9c:a9:6c:1e:c5:22:a8:b1:31:db:6a:41: 03:20:a6:98:8e:f4:9e:b8:28:97:9c:62:d3:ba:bf: fe:d0:dd:60:f9:11:67:b4:28:d8:35:c4:c2:ed:64: c5:23:49:5a:32:75:a1:2a:52:44:80:76:5a:b8:1d: 3c:08:fc:49:6b:23:38:29:a8:81:4a:c8:82:9e:8e: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:9E:2F:B7:59:33:25:A1:9F:B0:A8:AB:EA:F3:B5:E9:70:27:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d6:bc:ff:a1:e9:39:70:66:9d:a4:20:39:2d:43:99:1f:ea: c1:d4:da:a6:2b:c0:ef:93:f4:05:e8:4c:7f:09:9f:2c:6b:78: 72:19:5d:4b:fe:d7:13:a2:f0:d1:c0:78:7a:3c:cf:72:7b:fd: 49:d8:58:8a:0f:3c:07:3a:59:62:b8:f6:47:6d:30:df:75:8e: 29:b0:d1:06:c0:5c:7e:38:51:2f:3f:a2:67:c8:95:29:ba:d2: 4a:f0:cf:15:59:99:77:b1:d2:89:43:ab:4b:7d:82:05:5b:5c: d2:ef:fa:1f:30:98:2a:cc:44:1f:09:c8:0c:f9:c9:ed:b3:19: f8:de:2c:d2:aa:a7:84:5d:22:65:c7:cc:7a:20:92:7c:c7:ea: 0d:ca:57:90:0d:ee:73:f3:39:03:5e:51:0b:12:7b:bf:fb:a3: 1f:82:f9:77:9c:d3:5b:ab:a0:33:a4:59:6b:69:94:50:85:fe: a5:57:fa:17:38:b6:0c:26:68:43:43:60:d6:7a:e0:f9:c8:4f: 68:02:9b:fe:52:65:07:c3:64:6a:43:25:d6:15:68:29:30:2e: 82:5f:6d:3c:a4:1d:9b:d5:fe:69:84:87:da:e7:48:4d:01:d3: d1:ba:93:d5:9d:9d:d6:16:fa:a2:af:5a:90:50:56:0a:f4:97: d5:c3:59:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo912PSmGMRB9G1KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkwM1oXDTI1MDkxNzA5MTkwM1owLzEtMCsGA1UEAxMk ZjU0MWM4NjktZmUyYS00ODI2LThjZjQtNmJjYmY0MzM4MGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyiypRVmCQb0zcQxwOTKc8YYU7M5dtxwKRGe n2bhJwSPxKlRfFZarzM8t5P/Kkg8QbxZAIvo1+bzWfj6vzMHjeWr3jBet3FMUD2h ly541gjZdOwjsyRIY0AmW6PfkQER45IPKCYFIITNeJE4aLFdUpkpl+INl7Q98y23 pSTSs99c2s4weeVKDMZ6BzWMYSVkwuUBrgg2rswK87rS/6XiGAJx6m7bOxcx/2sO Q3cSfoPAnCbWlL6cqWwexSKosTHbakEDIKaYjvSeuCiXnGLTur/+0N1g+RFntCjY NcTC7WTFI0laMnWhKlJEgHZauB08CPxJayM4KaiBSsiCno7uswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuCni+3WTMloZ+wqKvq87XpcCeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFmOTU5NDktOTk1Ny0z ZjRkLWE4NTEtYzRiNTc5MWMyZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvWvP+h6TlwZp2kIDktQ5kf6sHU2qYrwO+T9AXoTH8JnyxreHIZXUv+ 1xOi8NHAeHo8z3J7/UnYWIoPPAc6WWK49kdtMN91jimw0QbAXH44US8/omfIlSm6 0krwzxVZmXex0olDq0t9ggVbXNLv+h8wmCrMRB8JyAz5ye2zGfjeLNKqp4RdImXH zHogknzH6g3KV5AN7nPzOQNeUQsSe7/7ox+C+Xec01uroDOkWWtplFCF/qVX+hc4 tgwmaENDYNZ64PnIT2gCm/5SZQfDZGpDJdYVaCkwLoJfbTykHZvV/mmEh9rnSE0B 09G6k9WdndYW+qKvWpBQVgr0l9XDWSU= -----END CERTIFICATE-----Generated at Tue Jul 1 13:52:17 2025 by rpki-client