$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af015f85-0004-30ed-8bb6-3409f55a92f2.roa File: af015f85-0004-30ed-8bb6-3409f55a92f2.roa (raw, json) Hash identifier: 5eoL0CSGWWVY79vvNeomgNjpc7HCOsJ3HuiLKRtc6Ls= Subject key identifier: 62:64:C5:6A:90:8A:E8:AA:FC:85:8F:84:AA:F9:8A:A6:D4:5C:5C:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD8677EDB61EB3B3BB49280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af015f85-0004-30ed-8bb6-3409f55a92f2.roa Signing time: Thu 19 Jun 2025 09:21:06 +0000 ROA not before: Thu 19 Jun 2025 09:21:06 +0000 ROA not after: Wed 17 Sep 2025 09:21:06 +0000 asID: 22773 IP address blocks: 70.176.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:67:7e:db:61:eb:3b:3b:b4:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:06 2025 GMT Not After : Sep 17 09:21:06 2025 GMT Subject: CN=f83cae84-eb9c-4184-80ed-fd9a1875a7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c0:f9:45:60:dc:df:ac:29:93:58:8a:e8:34: 32:67:1f:98:be:f0:b4:5a:36:7e:76:45:56:b3:d6: d5:fc:60:c1:98:42:c4:0d:94:f0:31:6f:53:87:c7: 6f:78:58:9a:9d:0d:b4:37:b4:66:16:58:77:29:4c: 50:90:64:cf:3f:6d:a2:a8:14:bd:7e:1d:5b:ce:23: 6c:0e:63:e9:df:c9:f9:d7:24:71:5b:e3:93:04:44: 86:a5:3a:55:23:1e:b9:8e:4e:78:68:a9:41:93:b1: 61:40:84:ec:bf:59:09:65:74:f4:87:03:16:40:67: 70:25:26:8c:86:07:48:09:22:41:03:5c:c0:85:44: 79:49:af:7c:a3:08:8a:07:53:2c:e6:6b:94:48:5c: e2:c8:d3:c4:7b:f5:ee:07:50:8a:5f:5f:48:c7:ea: 12:62:0a:84:c3:1d:24:0a:05:e0:51:e6:84:74:e1: 31:4e:c8:58:70:bc:4f:26:ed:4c:46:73:ff:c3:4e: db:9d:86:48:14:ab:c2:0a:fb:24:21:f9:b3:2a:23: b6:49:e6:7e:51:90:4b:58:e4:98:51:c0:aa:92:01: 16:ed:c1:cc:e6:89:8a:30:8d:bd:fc:85:1f:30:2e: 7a:b5:b0:84:6b:2a:60:ec:5f:72:a2:3c:eb:66:87: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:64:C5:6A:90:8A:E8:AA:FC:85:8F:84:AA:F9:8A:A6:D4:5C:5C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af015f85-0004-30ed-8bb6-3409f55a92f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4a:29:d8:ec:31:ab:3c:e4:73:43:44:e9:60:ea:df:3a:b8: 1e:c1:a9:49:a3:e3:b3:80:82:3d:9d:66:d7:75:12:37:fd:df: 29:91:09:94:f6:11:94:37:3e:13:9c:ad:82:7b:30:85:aa:23: 94:1e:22:51:b4:a3:0b:c9:cb:36:3c:ee:22:fe:a5:60:d9:68: 39:f6:9f:69:fc:d5:c1:0d:42:c1:05:cd:42:dd:8c:d2:e8:91: 6f:8a:1d:60:4b:39:f7:82:2b:86:73:94:12:21:3f:e9:57:5a: 26:da:8b:f4:05:98:b3:53:be:fd:63:d2:a7:6f:51:c7:2f:ba: e0:b7:78:b1:8e:bb:1e:0c:bd:f6:1d:62:97:d7:4c:46:19:12: b4:09:d3:43:64:9d:f7:26:9f:65:27:4e:ab:10:d1:48:7c:78: 3c:3f:44:4f:dd:d9:1f:ee:cb:5a:6c:1b:90:88:09:0c:f8:ea: 47:0c:6a:39:0b:d5:00:30:62:90:43:b5:8d:b1:dc:3f:2e:52: e1:26:c3:df:50:0c:9c:76:33:b0:eb:e1:0f:4b:a8:94:8d:d1: 96:59:3d:ec:78:81:fa:ee:0a:7b:ad:69:f7:fb:6b:bb:1f:8e: 45:4a:20:ba:0d:e3:77:a3:23:8f:16:86:39:f2:5b:ab:73:6d: 70:2b:b8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92Gd+22HrOzu0koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjEwNloXDTI1MDkxNzA5MjEwNlowLzEtMCsGA1UEAxMk ZjgzY2FlODQtZWI5Yy00MTg0LTgwZWQtZmQ5YTE4NzVhN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8D5RWDc36wpk1iK6DQyZx+YvvC0WjZ+dkVW s9bV/GDBmELEDZTwMW9Th8dveFianQ20N7RmFlh3KUxQkGTPP22iqBS9fh1bziNs DmPp38n51yRxW+OTBESGpTpVIx65jk54aKlBk7FhQITsv1kJZXT0hwMWQGdwJSaM hgdICSJBA1zAhUR5Sa98owiKB1Ms5muUSFziyNPEe/XuB1CKX19Ix+oSYgqEwx0k CgXgUeaEdOExTshYcLxPJu1MRnP/w07bnYZIFKvCCvskIfmzKiO2SeZ+UZBLWOSY UcCqkgEW7cHM5omKMI29/IUfMC56tbCEaypg7F9yojzrZofEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJkxWqQiuiq/IWPhKr5iqbUXFyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYwMTVmODUtMDAwNC0z MGVkLThiYjYtMzQwOWY1NWE5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJKKdjsMas85HNDROlg6t86uB7BqUmj47OAgj2dZtd1Ejf93ymRCZT2 EZQ3PhOcrYJ7MIWqI5QeIlG0owvJyzY87iL+pWDZaDn2n2n81cENQsEFzULdjNLo kW+KHWBLOfeCK4ZzlBIhP+lXWibai/QFmLNTvv1j0qdvUccvuuC3eLGOux4MvfYd YpfXTEYZErQJ00Nknfcmn2UnTqsQ0Uh8eDw/RE/d2R/uy1psG5CICQz46kcMajkL 1QAwYpBDtY2x3D8uUuEmw99QDJx2M7Dr4Q9LqJSN0ZZZPex4gfruCnutaff7a7sf jkVKILoN43ejI48WhjnyW6tzbXAruNE= -----END CERTIFICATE-----Generated at Wed Jul 2 06:11:23 2025 by rpki-client