$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/affdac38-5a2a-3673-beef-f92685640f5a.roa File: affdac38-5a2a-3673-beef-f92685640f5a.roa (raw, json) Hash identifier: 6BnNcxBMP8+h657xn3xgTy/0k5Tmt49Fq2RQu1vnzC8= Subject key identifier: 6E:3B:BC:35:A0:49:8E:3C:DB:8F:9D:3E:85:C8:ED:9A:3B:74:3F:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74BC8AD1C5C81157B30380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/affdac38-5a2a-3673-beef-f92685640f5a.roa Signing time: Thu 19 Jun 2025 14:36:05 +0000 ROA not before: Thu 19 Jun 2025 14:36:05 +0000 ROA not after: Wed 17 Sep 2025 14:36:05 +0000 asID: 22773 IP address blocks: 70.180.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:bc:8a:d1:c5:c8:11:57:b3:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:05 2025 GMT Not After : Sep 17 14:36:05 2025 GMT Subject: CN=a57f59d3-21f7-4d78-83f0-56a660207488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:b7:0f:32:b8:4a:f1:ce:01:13:e1:48:83: 79:d8:e9:f3:47:e9:39:46:a1:53:94:76:95:f4:9c: 33:8a:f7:3c:15:fc:ed:d4:87:44:05:b2:ed:f6:a2: a6:dd:cb:f1:90:5b:83:72:a9:60:ea:59:87:3c:43: cf:6b:76:7c:1a:3e:81:1f:61:fd:00:67:64:30:b0: 0e:76:f9:78:f8:73:f4:0e:fd:ea:02:c2:5c:e4:f5: 9a:73:79:a8:b8:0a:da:e6:3c:4f:03:82:80:1c:cb: 3c:9e:b5:66:c6:1a:bf:6e:eb:52:35:23:a7:0b:19: 8f:0d:52:8c:16:34:86:fa:a5:a9:de:1b:39:e8:ef: 3c:2e:7a:98:de:4d:b2:d5:49:d7:1c:74:54:74:a1: e6:0a:5e:36:0b:ee:93:77:ea:67:5e:7a:c6:d6:de: 88:0c:ff:80:5d:f8:1e:0a:c4:06:f9:53:f8:a2:9b: 9b:bf:71:0a:a3:08:e3:c3:13:49:12:61:d6:c3:55: 43:c4:db:71:91:0b:38:f1:dc:38:b4:1a:e2:80:51: 22:7f:19:e9:d1:a3:51:63:44:9a:cc:a6:0b:bb:c9: 04:f4:a2:b6:c1:35:a7:3e:45:05:0d:2a:f7:7f:ee: 8f:aa:84:a8:b5:21:29:9d:d3:f9:83:77:94:a5:0c: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3B:BC:35:A0:49:8E:3C:DB:8F:9D:3E:85:C8:ED:9A:3B:74:3F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/affdac38-5a2a-3673-beef-f92685640f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c5:d4:46:a3:d9:7a:49:d5:c3:49:87:80:e8:18:81:20:55: 61:3e:f8:b6:79:f9:0a:41:f5:4b:b4:dd:19:8c:8d:9f:94:44: 69:16:db:1f:c3:ac:3d:82:f2:0f:85:d7:d4:ba:60:0c:31:8e: 95:d5:f1:49:ea:8b:d4:22:0d:b8:22:5f:68:af:5f:a9:3f:63: 4a:2e:65:2f:b0:89:50:93:88:59:ec:b8:05:50:04:f4:0e:ac: a7:5b:d5:ab:cb:6d:c3:ac:8d:49:75:5d:34:b2:60:6c:04:d2: 62:cb:dd:16:d2:36:1e:6e:cc:0b:a0:54:20:4f:83:a1:b4:54: ef:00:31:5b:76:59:55:c8:10:ac:29:a4:7e:84:98:e2:3f:39: 66:6e:ba:7b:8e:8d:37:44:cf:85:23:b7:23:a5:96:39:80:c8: d8:68:71:8e:b7:85:a8:4a:13:1f:e3:6b:fd:31:b5:de:c9:85: 8e:1e:f2:0c:d1:8b:22:7f:99:64:d1:1b:57:4e:b2:58:fe:8d: 4e:fa:8b:f6:9e:b1:36:c2:5b:f7:c3:c1:b9:f3:23:8a:df:77: 41:f6:73:c8:50:c4:a8:72:7f:7d:2b:4d:ba:7f:83:4e:c2:38: b6:a9:17:36:a1:30:a9:29:4a:1d:c2:9d:f9:ff:ae:86:0a:f3: 3d:9a:22:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dLyK0cXIEVezA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYwNVoXDTI1MDkxNzE0MzYwNVowLzEtMCsGA1UEAxMk YTU3ZjU5ZDMtMjFmNy00ZDc4LTgzZjAtNTZhNjYwMjA3NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbO3DzK4SvHOARPhSIN52OnzR+k5RqFTlHaV 9Jwzivc8Ffzt1IdEBbLt9qKm3cvxkFuDcqlg6lmHPEPPa3Z8Gj6BH2H9AGdkMLAO dvl4+HP0Dv3qAsJc5PWac3mouAra5jxPA4KAHMs8nrVmxhq/butSNSOnCxmPDVKM FjSG+qWp3hs56O88LnqY3k2y1UnXHHRUdKHmCl42C+6Td+pnXnrG1t6IDP+AXfge CsQG+VP4opubv3EKowjjwxNJEmHWw1VDxNtxkQs48dw4tBrigFEifxnp0aNRY0Sa zKYLu8kE9KK2wTWnPkUFDSr3f+6PqoSotSEpndP5g3eUpQyKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG47vDWgSY4824+dPoXI7Zo7dD+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWZmZGFjMzgtNWEyYS0z NjczLWJlZWYtZjkyNjg1NjQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrQKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnF1Eaj2XpJ1cNJh4DoGIEgVWE++LZ5+QpB9Uu03RmMjZ+URGkW2x/D rD2C8g+F19S6YAwxjpXV8Unqi9QiDbgiX2ivX6k/Y0ouZS+wiVCTiFnsuAVQBPQO rKdb1avLbcOsjUl1XTSyYGwE0mLL3RbSNh5uzAugVCBPg6G0VO8AMVt2WVXIEKwp pH6EmOI/OWZuunuOjTdEz4UjtyOlljmAyNhocY63hahKEx/ja/0xtd7JhY4e8gzR iyJ/mWTRG1dOslj+jU76i/aesTbCW/fDwbnzI4rfd0H2c8hQxKhyf30rTbp/g07C OLapFzahMKkpSh3Cnfn/roYK8z2aIhE= -----END CERTIFICATE-----Generated at Wed Jul 2 13:09:22 2025 by rpki-client