$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe6794f-11f8-3d16-9dac-6ee706f466c8.roa File: bbe6794f-11f8-3d16-9dac-6ee706f466c8.roa (raw, json) Hash identifier: QvLEIKg9995VotMx2gjvDo0jlcECr4TC7aUaqk+4GR4= Subject key identifier: 26:60:A3:F8:51:AD:DD:DF:5C:87:51:06:1F:8C:AB:D3:4A:10:9C:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A87F1C5BEF9857BCD5AC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe6794f-11f8-3d16-9dac-6ee706f466c8.roa Signing time: Fri 20 Jun 2025 09:32:00 +0000 ROA not before: Fri 20 Jun 2025 09:32:00 +0000 ROA not after: Thu 18 Sep 2025 09:32:00 +0000 asID: 22773 IP address blocks: 70.173.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:7f:1c:5b:ef:98:57:bc:d5:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:00 2025 GMT Not After : Sep 18 09:32:00 2025 GMT Subject: CN=6ed174b2-a336-4012-bef8-0b2a81df7a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f0:47:e1:dd:16:79:43:70:c1:07:67:4e:f3: 46:1d:65:6f:36:7a:8c:81:88:40:d6:80:ce:2a:ff: d0:10:3d:fe:3f:20:5e:85:80:11:fb:e0:57:22:0f: ec:84:01:7e:cc:95:95:c1:61:70:bc:8d:33:36:61: eb:73:c8:6b:8c:43:87:15:3b:00:68:cb:59:d1:a5: 59:f2:bf:09:ed:96:6f:cc:31:c1:65:2f:04:75:52: 63:bc:e6:e9:6e:a3:bd:7b:7c:d1:57:34:a0:59:d5: 1e:a1:be:a1:8e:c4:c6:6d:61:d6:54:5f:3b:e5:2a: 12:d2:0e:94:a5:a0:75:62:81:40:16:71:16:c9:4e: 9b:8c:a4:c9:10:df:d6:f3:7d:5a:85:e9:e0:d8:cf: 38:1d:5c:76:7d:43:a8:d5:e3:63:ca:bb:fd:ba:ba: 0b:b5:20:e7:50:97:73:2b:47:48:77:61:d9:81:18: 48:75:3e:dc:54:05:97:f3:1c:cc:77:85:85:9a:8f: b1:96:c3:58:a8:50:2c:87:99:f8:a0:d2:1a:30:14: f4:63:34:78:40:c4:89:99:ad:29:a9:f5:f0:70:51: 9a:20:12:20:d1:c5:54:61:49:a5:02:78:d2:7d:12: 14:c1:b5:cc:63:93:c3:99:57:5b:7a:80:bb:ab:f1: a6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:60:A3:F8:51:AD:DD:DF:5C:87:51:06:1F:8C:AB:D3:4A:10:9C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bbe6794f-11f8-3d16-9dac-6ee706f466c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:09:34:fa:2b:23:f6:c5:6d:90:4a:90:ed:19:3b:df:5a:bf: b4:59:ac:d9:de:48:2a:a0:90:1a:f4:cb:6f:e8:43:5d:7e:cc: 92:11:3a:7c:56:76:16:25:26:a3:12:f9:8e:64:f2:30:36:c9: 8b:4e:db:83:e4:88:1d:53:ad:8c:4a:86:18:b2:5f:1a:3c:ea: 45:75:f1:4c:50:ef:18:52:87:4e:ff:fd:40:66:71:4b:7c:06: 58:18:d0:bc:da:cd:5e:8c:da:8b:fe:f8:4d:f4:dc:1e:92:25: 8e:6f:44:78:9b:aa:70:06:c8:57:8b:f3:33:80:57:49:55:e9: b9:3c:8b:6d:23:81:3a:10:05:b3:8a:27:9f:cf:bd:42:21:57: 94:02:04:46:39:d9:c6:6e:32:2d:7e:19:d7:d9:b0:77:69:21: 54:73:26:01:ca:8f:52:2f:33:0f:cf:bb:62:17:9a:28:6e:2b: b0:20:71:3a:3f:92:51:c8:34:64:82:39:56:df:aa:6e:f8:55: bf:00:aa:8d:b2:e8:96:e3:b1:5b:18:de:8c:25:e6:d2:da:8e: e3:c2:ce:0e:35:04:f4:d7:b1:82:ed:8c:da:97:d5:08:e6:18: 83:67:13:9d:8b:93:13:ac:87:93:33:08:10:4c:57:7d:23:18: 91:10:f7:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqH8cW++YV7zVrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIwMFoXDTI1MDkxODA5MzIwMFowLzEtMCsGA1UEAxMk NmVkMTc0YjItYTMzNi00MDEyLWJlZjgtMGIyYTgxZGY3YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfBH4d0WeUNwwQdnTvNGHWVvNnqMgYhA1oDO Kv/QED3+PyBehYAR++BXIg/shAF+zJWVwWFwvI0zNmHrc8hrjEOHFTsAaMtZ0aVZ 8r8J7ZZvzDHBZS8EdVJjvObpbqO9e3zRVzSgWdUeob6hjsTGbWHWVF875SoS0g6U paB1YoFAFnEWyU6bjKTJEN/W831aheng2M84HVx2fUOo1eNjyrv9uroLtSDnUJdz K0dId2HZgRhIdT7cVAWX8xzMd4WFmo+xlsNYqFAsh5n4oNIaMBT0YzR4QMSJma0p qfXwcFGaIBIg0cVUYUmlAnjSfRIUwbXMY5PDmVdbeoC7q/GmwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZgo/hRrd3fXIdRBh+Mq9NKEJy4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmJlNjc5NGYtMTFmOC0z ZDE2LTlkYWMtNmVlNzA2ZjQ2NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEJNPorI/bFbZBKkO0ZO99av7RZrNneSCqgkBr0y2/oQ11+zJIROnxW dhYlJqMS+Y5k8jA2yYtO24PkiB1TrYxKhhiyXxo86kV18UxQ7xhSh07//UBmcUt8 BlgY0LzazV6M2ov++E303B6SJY5vRHibqnAGyFeL8zOAV0lV6bk8i20jgToQBbOK J5/PvUIhV5QCBEY52cZuMi1+GdfZsHdpIVRzJgHKj1IvMw/Pu2IXmihuK7AgcTo/ klHINGSCOVbfqm74Vb8Aqo2y6JbjsVsY3owl5tLajuPCzg41BPTXsYLtjNqX1Qjm GINnE52LkxOsh5MzCBBMV30jGJEQ9x8= -----END CERTIFICATE-----Generated at Tue Jul 1 13:12:59 2025 by rpki-client