$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2f11ab1-9203-3d33-b83e-5786f570597d.roa File: b2f11ab1-9203-3d33-b83e-5786f570597d.roa (raw, json) Hash identifier: WSZuYOgldQ2QP95pLhsX4NgDVVS6m3nMAqK3PZHVr+Q= Subject key identifier: DF:AA:C0:54:06:51:28:4A:51:D9:C2:F1:07:55:AE:4B:21:3C:59:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A815C58570FE4713178B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2f11ab1-9203-3d33-b83e-5786f570597d.roa Signing time: Fri 20 Jun 2025 09:31:10 +0000 ROA not before: Fri 20 Jun 2025 09:31:10 +0000 ROA not after: Thu 18 Sep 2025 09:31:10 +0000 asID: 22773 IP address blocks: 70.170.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:15:c5:85:70:fe:47:13:17:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:10 2025 GMT Not After : Sep 18 09:31:10 2025 GMT Subject: CN=597bd6f9-9818-4907-9e93-243b4437865a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:2f:db:93:fe:03:70:cb:42:12:58:41:ae: 52:b2:9b:43:a6:a1:e9:79:8d:ea:ec:1f:a1:f6:94: 5e:e8:64:a5:00:71:e4:5a:d5:02:54:28:f0:ab:48: 30:35:ab:b6:3f:f0:7a:8d:ba:a8:a4:fe:98:af:fb: 06:4d:1b:33:88:4b:0a:9d:87:51:11:f9:ea:f8:33: a4:18:e4:27:94:4e:0e:18:ee:2d:08:4f:79:f0:85: 21:c6:04:48:de:bf:d7:d2:83:0b:cc:b9:28:e6:ed: 31:69:0f:e3:90:9d:fe:8b:fe:d2:ce:04:c8:79:49: 06:85:36:34:9f:4b:1b:60:56:3a:a0:0c:05:3b:3b: de:c9:a0:8f:ab:92:27:29:e0:67:d9:2d:13:b7:df: 05:ed:93:0d:75:45:dd:7e:41:81:37:d1:06:8d:9e: e5:71:ab:30:53:c0:c2:d9:73:6f:70:25:f9:50:41: ae:46:e9:a5:9d:09:0f:e9:63:dc:3e:6f:40:4d:60: ca:b5:9d:31:10:90:97:48:63:4a:3f:c1:6c:1e:cc: ea:63:bd:b9:7d:36:ee:2d:6c:79:df:05:5e:79:ef: be:85:a6:d9:ef:30:89:27:e9:a3:f2:80:7a:f1:69: e8:64:26:8f:e1:dc:ba:51:41:62:9c:eb:17:f4:e7: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:C0:54:06:51:28:4A:51:D9:C2:F1:07:55:AE:4B:21:3C:59:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2f11ab1-9203-3d33-b83e-5786f570597d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:97:7b:9f:c3:b5:61:19:14:17:02:f0:fa:f7:61:89:bf:db: 20:0a:dc:6d:47:03:6e:19:c9:af:3c:9c:7f:21:3c:01:b7:e1: 4c:b3:40:47:75:07:fc:b2:20:ae:c2:97:26:7a:b4:1c:31:3e: 47:79:b6:a2:9b:90:08:c4:65:3b:5f:2f:4a:0e:ad:08:1c:49: fe:39:2b:1c:62:30:f7:9a:a7:5e:c5:37:55:04:0d:9c:ac:39: 11:18:b1:23:1f:d6:12:97:21:56:f9:3e:cd:dc:8c:b3:67:b0: b0:c5:d4:51:34:c6:9e:32:80:55:cd:c3:3f:5f:9e:eb:d0:28: f8:9b:62:0d:b6:ee:1c:83:63:a7:d0:4e:08:33:4a:99:56:94: 49:a1:63:87:25:52:c3:9b:86:e9:cd:ed:fa:e4:f8:15:ed:66: 6d:e6:b9:c9:1a:05:49:19:49:53:9a:39:d1:31:54:90:ce:f5: da:13:b6:7f:ad:e2:00:0a:76:60:fc:08:19:79:29:73:4b:da: 69:2f:11:1e:39:52:f4:ec:0f:86:d2:4f:9b:1d:e7:73:ad:95: 5d:b0:fc:7d:9e:a6:c4:fb:02:61:75:e5:e8:73:72:e0:44:e1: e2:1c:9f:3a:1c:b2:23:32:41:9f:b2:01:09:4b:71:c7:46:dc: 3c:77:30:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqBXFhXD+RxMXi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzExMFoXDTI1MDkxODA5MzExMFowLzEtMCsGA1UEAxMk NTk3YmQ2ZjktOTgxOC00OTA3LTllOTMtMjQzYjQ0Mzc4NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEcv25P+A3DLQhJYQa5SsptDpqHpeY3q7B+h 9pRe6GSlAHHkWtUCVCjwq0gwNau2P/B6jbqopP6Yr/sGTRsziEsKnYdREfnq+DOk GOQnlE4OGO4tCE958IUhxgRI3r/X0oMLzLko5u0xaQ/jkJ3+i/7SzgTIeUkGhTY0 n0sbYFY6oAwFOzveyaCPq5InKeBn2S0Tt98F7ZMNdUXdfkGBN9EGjZ7lcaswU8DC 2XNvcCX5UEGuRumlnQkP6WPcPm9ATWDKtZ0xEJCXSGNKP8FsHszqY725fTbuLWx5 3wVeee++habZ7zCJJ+mj8oB68WnoZCaP4dy6UUFinOsX9OfGuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+qwFQGUShKUdnC8QdVrkshPFmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjJmMTFhYjEtOTIwMy0z ZDMzLWI4M2UtNTc4NmY1NzA1OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqpLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeXe5/DtWEZFBcC8Pr3YYm/2yAK3G1HA24Zya88nH8hPAG34UyzQEd1 B/yyIK7ClyZ6tBwxPkd5tqKbkAjEZTtfL0oOrQgcSf45KxxiMPeap17FN1UEDZys OREYsSMf1hKXIVb5Ps3cjLNnsLDF1FE0xp4ygFXNwz9fnuvQKPibYg227hyDY6fQ TggzSplWlEmhY4clUsObhunN7frk+BXtZm3muckaBUkZSVOaOdExVJDO9doTtn+t 4gAKdmD8CBl5KXNL2mkvER45UvTsD4bST5sd53OtlV2w/H2epsT7AmF15ehzcuBE 4eIcnzocsiMyQZ+yAQlLccdG3Dx3MKs= -----END CERTIFICATE-----Generated at Tue Jul 1 04:21:58 2025 by rpki-client