$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afde90a7-9f89-3438-976a-f5c6e57e9c11.roa File: afde90a7-9f89-3438-976a-f5c6e57e9c11.roa (raw, json) Hash identifier: kezZeFlr/U+aK3yrmrZyKd5v+vIzFpZNqKj1yhjNWIQ= Subject key identifier: 8A:37:19:9D:13:B4:37:6C:B5:18:DD:8D:CD:48:03:2E:51:11:82:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD74EA1D148A123E1846D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afde90a7-9f89-3438-976a-f5c6e57e9c11.roa Signing time: Thu 19 Jun 2025 09:18:53 +0000 ROA not before: Thu 19 Jun 2025 09:18:53 +0000 ROA not after: Wed 17 Sep 2025 09:18:53 +0000 asID: 22773 IP address blocks: 70.162.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:4e:a1:d1:48:a1:23:e1:84:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:18:53 2025 GMT Not After : Sep 17 09:18:53 2025 GMT Subject: CN=899d5096-bd2b-4aa5-a3d5-1a0082a7b8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:b1:dc:b0:82:11:54:fb:17:3e:44:57:b0: ca:b1:c4:47:0b:b0:a7:52:7a:b8:d6:cb:f5:34:47: a3:17:3a:61:da:20:f0:da:9e:f9:8d:79:02:8f:3e: 6a:45:53:c0:cd:33:0b:9f:08:35:01:da:94:07:eb: 71:1e:00:90:ab:16:c0:4b:4f:ad:59:d1:d0:0b:40: d4:de:d8:14:86:65:b7:1c:ac:5e:a5:34:af:79:09: 2e:73:71:45:42:fe:e9:d5:aa:e2:51:fe:d8:6d:af: 9b:84:e9:57:1a:af:86:b7:54:7f:0c:dd:70:43:b2: e4:9a:f0:db:84:53:09:3d:5e:69:c3:a0:b8:6c:f6: 40:9f:90:54:52:34:d3:a5:fe:04:27:d7:86:e0:b5: 94:3a:b5:70:bd:fe:69:ad:9a:15:8d:63:0c:ab:82: 88:2d:2c:e1:de:72:c7:d1:4b:fd:4e:62:3d:dc:77: 09:42:06:fd:60:19:a6:f6:20:4a:2e:f2:8f:ce:aa: d9:07:a9:f3:0b:84:f1:57:ee:c4:c3:e1:50:cc:58: 74:2a:bc:5c:19:bf:7e:f6:1c:73:c2:5e:37:00:a5: 07:66:ff:04:86:9e:85:ab:3e:3c:11:cc:8c:67:4d: 89:a3:de:60:d5:7c:ca:00:23:9e:2a:48:1e:5a:54: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:19:9D:13:B4:37:6C:B5:18:DD:8D:CD:48:03:2E:51:11:82:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afde90a7-9f89-3438-976a-f5c6e57e9c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f1:15:fe:ef:57:ab:e4:70:01:3f:e3:65:31:da:44:26:14: 92:85:5b:51:97:14:07:ec:d9:bb:77:4a:80:c5:d4:38:6a:16: 27:78:99:0d:ed:c9:a1:03:1d:57:6f:d6:ad:16:5e:3c:d2:d9: 66:ec:61:2b:34:5e:2c:8f:b9:8f:df:f0:37:0d:59:71:64:54: 5b:eb:e6:85:a1:05:18:a5:b0:fa:c7:74:f8:7b:b2:06:a2:09: fd:d2:2d:75:8a:dd:91:a5:ac:b2:d5:6b:5b:60:07:8d:7f:7a: 3a:e0:09:2f:96:4a:da:e6:30:92:2d:6f:89:d1:98:8b:0b:dc: 63:b7:b1:8b:61:7f:59:b0:b5:09:46:40:b7:ef:55:12:5c:06: cb:1a:c5:31:98:99:43:01:2b:3c:63:8c:7d:a6:9e:8b:eb:cb: 85:72:ea:e8:5a:c9:5a:56:28:1c:12:2c:2f:90:39:e8:08:f6: 51:b8:01:09:a9:92:a3:f5:c4:bd:35:54:28:a9:bf:26:4a:86: 96:d8:e4:3c:b1:8f:2e:5c:23:fe:a0:41:56:17:7c:77:a8:d9: 7b:bb:ba:7e:0d:b8:16:55:d0:4c:9b:7e:e3:c1:84:9b:41:a1: d4:92:5c:71:9e:ef:b4:04:f7:7c:f1:31:9a:11:33:79:e8:ab: 08:77:9d:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9106h0UihI+GEbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTg1M1oXDTI1MDkxNzA5MTg1M1owLzEtMCsGA1UEAxMk ODk5ZDUwOTYtYmQyYi00YWE1LWEzZDUtMWEwMDgyYTdiOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuSx3LCCEVT7Fz5EV7DKscRHC7CnUnq41sv1 NEejFzph2iDw2p75jXkCjz5qRVPAzTMLnwg1AdqUB+txHgCQqxbAS0+tWdHQC0DU 3tgUhmW3HKxepTSveQkuc3FFQv7p1ariUf7Yba+bhOlXGq+Gt1R/DN1wQ7LkmvDb hFMJPV5pw6C4bPZAn5BUUjTTpf4EJ9eG4LWUOrVwvf5prZoVjWMMq4KILSzh3nLH 0Uv9TmI93HcJQgb9YBmm9iBKLvKPzqrZB6nzC4TxV+7Ew+FQzFh0KrxcGb9+9hxz wl43AKUHZv8Ehp6Fqz48EcyMZ02Jo95g1XzKACOeKkgeWlTPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo3GZ0TtDdstRjdjc1IAy5REYKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZkZTkwYTctOWY4OS0z NDM4LTk3NmEtZjVjNmU1N2U5YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDxFf7vV6vkcAE/42Ux2kQmFJKFW1GXFAfs2bt3SoDF1DhqFid4mQ3t yaEDHVdv1q0WXjzS2WbsYSs0XiyPuY/f8DcNWXFkVFvr5oWhBRilsPrHdPh7sgai Cf3SLXWK3ZGlrLLVa1tgB41/ejrgCS+WStrmMJItb4nRmIsL3GO3sYthf1mwtQlG QLfvVRJcBssaxTGYmUMBKzxjjH2mnovry4Vy6uhayVpWKBwSLC+QOegI9lG4AQmp kqP1xL01VCipvyZKhpbY5Dyxjy5cI/6gQVYXfHeo2Xu7un4NuBZV0EybfuPBhJtB odSSXHGe77QE93zxMZoRM3noqwh3nQU= -----END CERTIFICATE-----Generated at Tue Jul 1 15:25:07 2025 by rpki-client