$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7bd16a0-01f1-3d3c-b114-19c857e7e70e.roa File: b7bd16a0-01f1-3d3c-b114-19c857e7e70e.roa (raw, json) Hash identifier: cKSCOZ03fqHVKBJeLe/3135MPipANt5zfkaHEXcANsg= Subject key identifier: B5:BC:13:B2:9F:2A:F1:A0:03:3A:4E:51:32:04:1E:A3:78:DA:59:1F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A80023FB599DD593EE2C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7bd16a0-01f1-3d3c-b114-19c857e7e70e.roa Signing time: Fri 20 Jun 2025 09:31:00 +0000 ROA not before: Fri 20 Jun 2025 09:31:00 +0000 ROA not after: Thu 18 Sep 2025 09:31:00 +0000 asID: 22773 IP address blocks: 70.170.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:00:23:fb:59:9d:d5:93:ee:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:00 2025 GMT Not After : Sep 18 09:31:00 2025 GMT Subject: CN=09e7edd1-9f24-45d2-8cda-e48163483fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:19:14:63:0c:d2:4d:80:be:dc:77:93:37: 9f:a5:dc:a7:46:2f:e5:15:5d:1f:90:cc:08:cb:7a: 43:10:8e:fa:c1:ee:da:68:7a:7c:75:d3:91:bb:2e: c5:7c:2b:bd:b6:a7:23:be:5a:0d:c3:a5:ca:d7:61: 25:0f:09:06:7b:31:bd:4e:6f:75:ac:8a:f8:c1:04: 01:46:32:9e:13:66:bc:ea:10:da:88:e8:4a:8c:95: 23:2a:85:ad:78:28:84:3e:49:1d:cc:6e:f6:d3:f7: 9e:02:ee:7c:a6:95:56:f9:95:e1:51:cd:81:6e:54: 79:c0:e2:f0:8f:98:33:c1:14:50:64:ae:bb:f3:42: bb:30:cb:35:fd:e8:ae:e6:43:cc:1a:e0:4a:02:7c: 80:13:24:6a:37:c2:1a:4b:70:02:07:6c:25:43:8d: c6:51:d0:c7:5e:41:cd:be:35:c3:cc:87:99:47:a4: c7:d1:7d:f2:f2:4d:3f:7a:92:cd:05:69:d5:da:9a: 44:fb:0b:3a:d4:bf:d1:f2:f0:a0:d7:54:71:52:0d: 43:3b:53:e5:cc:2c:b8:9d:da:e9:18:ac:0f:3d:d5: a6:fd:1c:82:28:23:5c:8a:32:fe:67:e6:25:70:b4: eb:97:37:0e:b8:90:dc:76:e7:27:c1:5b:ee:28:94: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BC:13:B2:9F:2A:F1:A0:03:3A:4E:51:32:04:1E:A3:78:DA:59:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7bd16a0-01f1-3d3c-b114-19c857e7e70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:42:4e:d7:0a:5f:cb:82:42:68:aa:7e:65:6c:ac:08:29:a4: f0:fd:f8:55:16:69:c6:c4:99:d9:fa:d5:83:bc:e1:46:6c:c2: 04:f0:b3:20:70:8d:2a:61:a5:8a:f4:37:de:f3:ca:2e:c7:90: ca:14:01:ff:f1:a2:e3:0a:da:35:6f:bc:ca:55:a0:37:06:ba: 0c:9d:c3:97:b6:5e:8c:a4:55:db:ba:b8:f0:16:08:87:12:57: 87:0c:72:58:00:50:6e:ad:88:20:71:95:78:61:1b:d8:48:bf: 9d:bf:af:ff:89:c6:6a:69:99:94:04:3f:07:75:a0:20:33:1a: 0a:3d:0b:09:7c:59:da:9e:54:9a:3c:5f:87:63:63:4f:80:53: e7:7e:77:85:aa:29:f2:32:65:d9:01:b5:ec:83:dd:b1:1b:aa: 62:9b:54:31:f3:14:0a:42:28:eb:9d:d2:b5:03:1d:f4:21:67: 24:3f:45:16:40:ac:12:b2:3c:24:40:f6:59:02:65:a9:c6:54: 5b:14:b6:af:ac:2d:9a:13:d2:2e:9e:9e:fb:54:d0:e2:d5:2e: 51:b9:35:0a:f6:f8:5f:2a:9e:2f:4b:93:92:b0:ca:23:af:15: 14:de:54:66:57:52:3c:90:4a:30:dc:48:a5:77:d6:12:ce:b0: fb:a4:cf:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqAAj+1md1ZPuLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEwMFoXDTI1MDkxODA5MzEwMFowLzEtMCsGA1UEAxMk MDllN2VkZDEtOWYyNC00NWQyLThjZGEtZTQ4MTYzNDgzZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigcZFGMM0k2Avtx3kzefpdynRi/lFV0fkMwI y3pDEI76we7aaHp8ddORuy7FfCu9tqcjvloNw6XK12ElDwkGezG9Tm91rIr4wQQB RjKeE2a86hDaiOhKjJUjKoWteCiEPkkdzG720/eeAu58ppVW+ZXhUc2BblR5wOLw j5gzwRRQZK6780K7MMs1/eiu5kPMGuBKAnyAEyRqN8IaS3ACB2wlQ43GUdDHXkHN vjXDzIeZR6TH0X3y8k0/epLNBWnV2ppE+ws61L/R8vCg11RxUg1DO1PlzCy4ndrp GKwPPdWm/RyCKCNcijL+Z+YlcLTrlzcOuJDcducnwVvuKJSjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW8E7KfKvGgAzpOUTIEHqN42lkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjdiZDE2YTAtMDFmMS0z ZDNjLWIxMTQtMTljODU3ZTdlNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqoSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1CTtcKX8uCQmiqfmVsrAgppPD9+FUWacbEmdn61YO84UZswgTwsyBw jSphpYr0N97zyi7HkMoUAf/xouMK2jVvvMpVoDcGugydw5e2XoykVdu6uPAWCIcS V4cMclgAUG6tiCBxlXhhG9hIv52/r/+JxmppmZQEPwd1oCAzGgo9Cwl8WdqeVJo8 X4djY0+AU+d+d4WqKfIyZdkBteyD3bEbqmKbVDHzFApCKOud0rUDHfQhZyQ/RRZA rBKyPCRA9lkCZanGVFsUtq+sLZoT0i6envtU0OLVLlG5NQr2+F8qni9Lk5KwyiOv FRTeVGZXUjyQSjDcSKV31hLOsPukzxc= -----END CERTIFICATE-----Generated at Mon Jun 30 14:00:43 2025 by rpki-client