$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef7e1ba-1a02-37b4-960d-f3c0d2d07621.roa File: bef7e1ba-1a02-37b4-960d-f3c0d2d07621.roa (raw, json) Hash identifier: QbYGtTZRBZmzuqQIEAAlkUwNDV1d1cFLBZbzhucXnZY= Subject key identifier: 91:B0:56:20:81:C3:90:99:59:3B:CD:D5:D4:71:F0:D4:1E:E0:23:1F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD75E52C9BEDEC6B0890680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef7e1ba-1a02-37b4-960d-f3c0d2d07621.roa Signing time: Thu 19 Jun 2025 09:19:01 +0000 ROA not before: Thu 19 Jun 2025 09:19:01 +0000 ROA not after: Wed 17 Sep 2025 09:19:01 +0000 asID: 22773 IP address blocks: 70.162.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:5e:52:c9:be:de:c6:b0:89:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:01 2025 GMT Not After : Sep 17 09:19:01 2025 GMT Subject: CN=aef1dfd8-13bd-4390-9ade-d8b0891d8c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:a4:96:53:e5:7a:cb:0e:a9:b6:c4:44:8d: 40:e9:75:32:ff:09:39:6f:fd:da:a4:31:fc:7e:36: 5b:31:7b:0f:32:75:4b:5a:45:50:10:36:4e:54:4a: c6:81:e1:cf:8f:a2:91:ab:13:86:98:38:70:4c:ab: 81:16:52:24:4e:bd:6d:90:95:17:55:4c:e7:e1:0f: 16:0f:26:c4:fe:e5:e8:69:cf:bc:e8:c4:d4:1a:e8: ab:96:00:26:f4:74:6e:4c:bd:b8:f5:11:6e:c3:63: 3e:92:fc:79:14:5c:98:16:64:cd:3b:87:90:f7:49: f1:fb:d2:79:ab:46:6e:ba:36:d0:54:1b:d7:b6:0a: 92:b2:92:dc:cd:05:8d:bc:67:56:c1:65:5e:5b:08: 42:26:11:28:93:dd:c1:8e:91:9f:7e:82:ce:58:ea: ad:27:0e:29:10:5b:a2:da:a9:a5:0d:5e:da:44:c4: af:ac:3b:77:e5:b8:9a:00:19:bc:4e:7b:00:7f:f1: 2c:11:08:12:96:67:21:13:ca:b3:b9:f2:d0:21:e0: 9d:2d:2a:d4:60:77:49:53:28:8d:f0:a2:0e:d0:bf: d3:8d:df:23:2d:80:23:9a:59:1d:4d:d1:17:6a:4a: cd:e7:d0:2b:d5:45:a5:8a:1e:00:b6:85:64:0b:64: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:56:20:81:C3:90:99:59:3B:CD:D5:D4:71:F0:D4:1E:E0:23:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef7e1ba-1a02-37b4-960d-f3c0d2d07621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a8:11:9a:eb:28:c7:71:cd:db:83:4b:2e:75:34:d5:da:33: 85:fb:20:df:67:65:98:1c:b4:93:40:06:f5:29:60:5b:1c:20: 4b:34:ef:b5:fa:fb:9d:0c:67:37:85:54:ff:66:30:d4:05:f7: 6c:dc:4b:d7:9e:8d:c1:46:f9:b5:09:4a:53:b9:9e:f9:81:32: 7b:f7:8b:b8:f3:5f:ed:80:57:bc:44:7c:01:55:78:ce:f6:5b: b0:9d:6c:35:e7:c0:5b:30:97:c8:6d:71:38:b9:4f:b6:03:6c: 16:b7:af:94:39:8d:a2:a1:7a:f4:8b:3d:9a:e0:07:d9:97:43: 33:d8:29:04:ab:af:87:91:65:20:77:d2:96:df:a6:b0:4e:06: da:3d:15:7a:89:26:51:be:11:af:b2:2d:c8:a4:66:34:d5:ce: 20:4f:8e:51:54:a9:88:14:16:15:a5:34:09:19:67:ce:aa:35: 71:58:52:f2:f1:33:e7:27:7e:16:52:92:4b:af:a2:a2:67:5a: 1e:0f:75:e8:ef:43:98:f8:a0:b7:80:c4:4b:fd:9c:fa:3d:49: 4d:dc:35:93:0b:9f:6c:78:22:db:e9:da:3d:d1:1f:c8:92:36: 45:d8:c8:54:44:e4:4f:77:4e:e1:39:d5:0c:90:25:75:08:86: 7a:4e:49:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9115Syb7exrCJBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkwMVoXDTI1MDkxNzA5MTkwMVowLzEtMCsGA1UEAxMk YWVmMWRmZDgtMTNiZC00MzkwLTlhZGUtZDhiMDg5MWQ4YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+ikllPlessOqbbERI1A6XUy/wk5b/3apDH8 fjZbMXsPMnVLWkVQEDZOVErGgeHPj6KRqxOGmDhwTKuBFlIkTr1tkJUXVUzn4Q8W DybE/uXoac+86MTUGuirlgAm9HRuTL249RFuw2M+kvx5FFyYFmTNO4eQ90nx+9J5 q0ZuujbQVBvXtgqSspLczQWNvGdWwWVeWwhCJhEok93BjpGffoLOWOqtJw4pEFui 2qmlDV7aRMSvrDt35biaABm8TnsAf/EsEQgSlmchE8qzufLQIeCdLSrUYHdJUyiN 8KIO0L/Tjd8jLYAjmlkdTdEXakrN59Ar1UWlih4AtoVkC2Rd6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGwViCBw5CZWTvN1dRx8NQe4CMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmVmN2UxYmEtMWEwMi0z N2I0LTk2MGQtZjNjMGQyZDA3NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqJ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGoEZrrKMdxzduDSy51NNXaM4X7IN9nZZgctJNABvUpYFscIEs077X6 +50MZzeFVP9mMNQF92zcS9eejcFG+bUJSlO5nvmBMnv3i7jzX+2AV7xEfAFVeM72 W7CdbDXnwFswl8htcTi5T7YDbBa3r5Q5jaKhevSLPZrgB9mXQzPYKQSrr4eRZSB3 0pbfprBOBto9FXqJJlG+Ea+yLcikZjTVziBPjlFUqYgUFhWlNAkZZ86qNXFYUvLx M+cnfhZSkkuvoqJnWh4PdejvQ5j4oLeAxEv9nPo9SU3cNZMLn2x4Itvp2j3RH8iS NkXYyFRE5E93TuE51QyQJXUIhnpOSX4= -----END CERTIFICATE-----Generated at Tue Jul 1 03:50:44 2025 by rpki-client