$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3179ba-3fb8-378c-82f2-28d4ba430b3e.roa File: ba3179ba-3fb8-378c-82f2-28d4ba430b3e.roa (raw, json) Hash identifier: QmknhTiEaDb8kaMxt39lWfnPJqCv/RiMbdHrWcfQxlo= Subject key identifier: B2:E6:22:89:19:CE:EE:7C:DF:57:DE:F4:EE:E4:E4:5A:F6:C7:4B:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A836B78405D945E51F0920 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3179ba-3fb8-378c-82f2-28d4ba430b3e.roa Signing time: Fri 20 Jun 2025 09:31:26 +0000 ROA not before: Fri 20 Jun 2025 09:31:26 +0000 ROA not after: Thu 18 Sep 2025 09:31:26 +0000 asID: 22773 IP address blocks: 70.170.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:36:b7:84:05:d9:45:e5:1f:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:26 2025 GMT Not After : Sep 18 09:31:26 2025 GMT Subject: CN=f51a23a8-d5f0-4e4b-91d5-ce210e2a2ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:92:2e:f8:b7:8d:ab:20:88:04:57:a7:33: f2:83:f8:98:79:9f:24:de:f7:45:1e:5c:eb:ec:54: b7:22:ac:7e:7b:0f:46:a8:3b:44:f1:8d:d6:e3:37: d7:21:81:f9:de:18:c3:6e:29:a8:a9:da:a8:89:74: 30:08:08:28:4a:ee:c6:0f:6c:93:1a:75:73:1e:46: 51:36:7b:6d:35:6e:ea:b6:ad:07:b4:c6:23:89:7f: 3f:d8:e8:7e:14:9c:36:37:21:ee:68:4d:5b:00:0d: ae:56:c8:b0:f1:fe:07:73:28:39:c1:6d:a9:ad:f9: 58:68:8b:88:47:ee:1b:74:31:53:21:bf:c8:31:05: 8c:e0:53:c8:07:fe:a1:38:15:49:2d:46:d4:d1:4c: 05:ec:8f:0d:4b:cd:30:67:0f:99:f1:4b:02:cd:ac: 0c:32:2b:b4:f8:31:1f:f1:a0:b8:61:10:b6:d1:c8: 34:3e:a3:37:52:e0:b7:16:45:c8:0b:2c:ed:d0:51: 3d:e5:d6:ac:c1:6b:91:b6:f2:ef:f7:23:2e:ca:d2: e4:7d:61:dd:95:e7:b8:1b:2f:6c:d8:24:e7:d1:dd: 5f:88:09:ff:50:a8:9c:01:3f:c9:61:e5:04:a5:b2: ed:86:69:90:3e:3a:c5:45:08:64:b6:49:4f:51:c4: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:22:89:19:CE:EE:7C:DF:57:DE:F4:EE:E4:E4:5A:F6:C7:4B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba3179ba-3fb8-378c-82f2-28d4ba430b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:8b:45:22:65:4c:a8:fe:4d:69:be:5d:99:f5:db:58:13: e4:e1:0e:a2:cb:45:00:8c:92:39:28:81:61:66:8e:29:03:5c: ac:43:9f:31:36:74:a8:6e:28:25:61:6d:1e:63:a1:bb:5f:8d: 76:85:41:bd:7c:35:91:f4:1f:55:5f:c6:bb:6e:24:15:c6:21: e5:a1:d6:7e:a5:29:6b:f5:2f:b4:00:4b:04:b1:72:5a:d8:63: 31:a9:c7:e3:8a:f6:b9:5f:c0:2c:ea:f8:bd:ba:53:f2:b2:83: 3e:3c:fe:c6:d7:8a:ac:03:0a:b6:d4:f2:5c:8d:d1:dc:4e:5d: 0d:53:6e:ef:76:28:56:12:09:af:9c:b3:e9:91:ab:a0:6f:63: 3c:88:b5:fb:d6:ce:f6:5e:77:44:7d:d0:08:02:51:3f:89:f5: b9:ec:9c:84:f7:10:fa:e6:c1:39:b6:e3:19:d9:3c:87:73:1f: b0:95:fa:b2:72:c1:da:77:a2:04:a6:50:9e:17:6d:4f:50:2b: a6:25:88:91:05:cd:29:fd:e5:67:da:5e:2b:a6:a4:e9:ea:ab: 3c:d3:64:cb:33:a8:4b:16:7b:bb:a6:9f:a5:ef:dd:1d:44:4f: ad:ff:0b:93:d7:e8:8d:cf:c4:0f:ae:d7:af:07:01:f5:c3:d6: 42:c6:e7:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqDa3hAXZReUfCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEyNloXDTI1MDkxODA5MzEyNlowLzEtMCsGA1UEAxMk ZjUxYTIzYTgtZDVmMC00ZTRiLTkxZDUtY2UyMTBlMmEyYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsqSLvi3jasgiARXpzPyg/iYeZ8k3vdFHlzr 7FS3Iqx+ew9GqDtE8Y3W4zfXIYH53hjDbimoqdqoiXQwCAgoSu7GD2yTGnVzHkZR NnttNW7qtq0HtMYjiX8/2Oh+FJw2NyHuaE1bAA2uVsiw8f4Hcyg5wW2prflYaIuI R+4bdDFTIb/IMQWM4FPIB/6hOBVJLUbU0UwF7I8NS80wZw+Z8UsCzawMMiu0+DEf 8aC4YRC20cg0PqM3UuC3FkXICyzt0FE95daswWuRtvLv9yMuytLkfWHdlee4Gy9s 2CTn0d1fiAn/UKicAT/JYeUEpbLthmmQPjrFRQhktklPUcRTvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLmIokZzu5831fe9O7k5Fr2x0tJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmEzMTc5YmEtM2ZiOC0z NzhjLTgyZjItMjhkNGJhNDMwYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqqTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr1i0UiZUyo/k1pvl2Z9dtYE+ThDqLLRQCMkjkogWFmjikDXKxDnzE2 dKhuKCVhbR5jobtfjXaFQb18NZH0H1VfxrtuJBXGIeWh1n6lKWv1L7QASwSxclrY YzGpx+OK9rlfwCzq+L26U/Kygz48/sbXiqwDCrbU8lyN0dxOXQ1Tbu92KFYSCa+c s+mRq6BvYzyItfvWzvZed0R90AgCUT+J9bnsnIT3EPrmwTm24xnZPIdzH7CV+rJy wdp3ogSmUJ4XbU9QK6YliJEFzSn95WfaXiumpOnqqzzTZMszqEsWe7umn6Xv3R1E T63/C5PX6I3PxA+u168HAfXD1kLG56c= -----END CERTIFICATE-----Generated at Tue Jul 1 09:55:14 2025 by rpki-client