$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b45bd6de-0d5c-3e2c-af48-5a0dc200418d.roa File: b45bd6de-0d5c-3e2c-af48-5a0dc200418d.roa (raw, json) Hash identifier: pP3p/k/5t+TQRRoNlcs/MysduYY8wltfVNlgTZIvyQQ= Subject key identifier: 3F:82:D9:B8:1F:66:B0:14:D7:8E:A6:96:43:A3:A1:F1:D1:6A:D0:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8E28DF82E6A54CE773C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b45bd6de-0d5c-3e2c-af48-5a0dc200418d.roa Signing time: Fri 20 Jun 2025 09:32:47 +0000 ROA not before: Fri 20 Jun 2025 09:32:47 +0000 ROA not after: Thu 18 Sep 2025 09:32:47 +0000 asID: 22773 IP address blocks: 70.189.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:e2:8d:f8:2e:6a:54:ce:77:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:47 2025 GMT Not After : Sep 18 09:32:47 2025 GMT Subject: CN=92efd2af-feff-4750-a199-1b447c6e34c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:5c:b3:0f:47:62:83:a4:e3:08:9e:ed:6d: 2d:a1:18:0c:61:6a:33:fa:bb:18:37:04:70:53:03: 32:26:fe:fe:ed:f6:d1:49:03:3a:eb:85:8e:12:07: cb:18:09:8a:a6:85:0d:06:12:bb:39:32:a3:2a:29: 62:29:ac:14:cb:f0:b3:db:f2:d3:72:98:c9:e8:c6: 8a:cd:b7:55:11:de:d3:49:06:4e:14:b9:52:e7:b0: f8:d0:e7:96:00:01:57:42:8a:10:53:23:7b:76:28: 23:76:a8:4c:78:93:44:3c:e2:f0:a2:ec:27:80:ef: 3a:1c:57:4d:ca:1e:c2:f5:49:c3:e3:d5:62:36:d1: 72:1f:59:7d:5c:f2:da:76:8d:e7:53:92:99:31:63: fe:98:2e:f5:f3:70:2d:f1:39:06:96:fb:d7:a0:35: 87:ca:ef:14:72:df:77:84:c2:cb:a7:3e:f3:19:cd: 13:64:f0:0f:5d:44:a0:61:df:e1:cd:00:c1:da:1d: ae:78:ec:c7:14:d0:6c:a7:54:ec:c5:c6:a7:d2:f3: 83:a5:92:0d:b7:a2:cb:fc:a5:a5:aa:8e:93:05:01: 9f:3f:ca:71:9f:20:bb:5e:d0:5a:30:49:f7:d4:01: d7:1a:2c:ec:d2:46:b5:d3:2b:9c:e5:d8:0d:5d:87: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:82:D9:B8:1F:66:B0:14:D7:8E:A6:96:43:A3:A1:F1:D1:6A:D0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b45bd6de-0d5c-3e2c-af48-5a0dc200418d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:66:c1:a7:79:85:98:e9:aa:63:3e:59:22:11:f2:10:8f:90: 00:9a:3d:45:c1:f5:67:27:fe:7e:38:3f:1b:da:d2:9f:1a:61: ec:36:43:91:d3:f2:39:6d:ab:7e:ee:3f:ca:c1:ce:9b:45:b6: 9c:ca:37:de:63:81:24:01:cb:19:ef:3a:40:f2:7c:5f:d3:ce: 5e:2b:83:b8:ff:dc:94:09:c7:a5:7a:34:47:ce:9a:1a:b7:9f: 64:77:fe:a2:ac:87:da:53:5d:21:cc:88:df:de:fe:b5:4a:e6: d1:12:61:56:2a:7c:ac:75:31:f5:82:c0:0c:97:72:43:b2:56: 16:f0:37:54:ff:8a:64:3f:b2:ad:42:d3:f9:49:58:fd:95:d4: 80:f5:e2:b5:d1:65:23:7d:14:b2:17:47:d9:07:f3:4b:15:65: 39:f9:ab:6b:55:ec:29:de:fe:48:88:03:45:06:49:70:c0:2a: 05:ae:3a:2e:cc:84:9f:0f:2c:44:bd:d7:c0:96:d0:f3:20:8f: 83:64:86:c9:85:18:0d:f5:55:7f:43:d5:a8:50:00:c6:9c:7b: b0:9f:f2:c4:f3:2b:b4:99:f9:70:ea:3f:fd:dd:dc:58:dd:c3: 5a:87:c0:54:9f:c0:8c:a0:0c:9e:31:7b:c8:f3:7f:8e:dc:a1: 69:e1:fb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqOKN+C5qVM53PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0N1oXDTI1MDkxODA5MzI0N1owLzEtMCsGA1UEAxMk OTJlZmQyYWYtZmVmZi00NzUwLWExOTktMWI0NDdjNmUzNGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9dcsw9HYoOk4wie7W0toRgMYWoz+rsYNwRw UwMyJv7+7fbRSQM664WOEgfLGAmKpoUNBhK7OTKjKiliKawUy/Cz2/LTcpjJ6MaK zbdVEd7TSQZOFLlS57D40OeWAAFXQooQUyN7digjdqhMeJNEPOLwouwngO86HFdN yh7C9UnD49ViNtFyH1l9XPLado3nU5KZMWP+mC7183At8TkGlvvXoDWHyu8Uct93 hMLLpz7zGc0TZPAPXUSgYd/hzQDB2h2ueOzHFNBsp1Tsxcan0vODpZINt6LL/KWl qo6TBQGfP8pxnyC7XtBaMEn31AHXGizs0ka10yuc5dgNXYd+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+C2bgfZrAU146mlkOjofHRatAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjQ1YmQ2ZGUtMGQ1Yy0z ZTJjLWFmNDgtNWEwZGMyMDA0MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5mwad5hZjpqmM+WSIR8hCPkACaPUXB9Wcn/n44Pxva0p8aYew2Q5HT 8jltq37uP8rBzptFtpzKN95jgSQByxnvOkDyfF/Tzl4rg7j/3JQJx6V6NEfOmhq3 n2R3/qKsh9pTXSHMiN/e/rVK5tESYVYqfKx1MfWCwAyXckOyVhbwN1T/imQ/sq1C 0/lJWP2V1ID14rXRZSN9FLIXR9kH80sVZTn5q2tV7Cne/kiIA0UGSXDAKgWuOi7M hJ8PLES918CW0PMgj4NkhsmFGA31VX9D1ahQAMace7Cf8sTzK7SZ+XDqP/3d3Fjd w1qHwFSfwIygDJ4xe8jzf47coWnh+5k= -----END CERTIFICATE-----Generated at Mon Jun 30 08:40:27 2025 by rpki-client