$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba45b6e-872c-32e0-8f79-343aa2cfc65f.roa File: cba45b6e-872c-32e0-8f79-343aa2cfc65f.roa (raw, json) Hash identifier: 6WcDRwXCzMWFJ2GkGuRLtzRaT+hczoHieDhEk8dflmg= Subject key identifier: 11:5E:5D:A4:FE:FC:88:3E:83:1E:AD:05:02:FF:1B:CF:1C:32:BC:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8E0FC4114DFB3C9461380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba45b6e-872c-32e0-8f79-343aa2cfc65f.roa Signing time: Fri 20 Jun 2025 09:32:46 +0000 ROA not before: Fri 20 Jun 2025 09:32:46 +0000 ROA not after: Thu 18 Sep 2025 09:32:46 +0000 asID: 22773 IP address blocks: 70.189.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:e0:fc:41:14:df:b3:c9:46:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:46 2025 GMT Not After : Sep 18 09:32:46 2025 GMT Subject: CN=0fe3b22b-6383-4f67-ac32-6723fea38b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:6b:d5:5d:c8:4e:71:e1:e4:49:e3:8c:27: f5:e7:a3:fa:99:02:d8:dd:c5:83:71:8c:b2:28:02: 82:19:7d:f1:78:4b:b9:b8:8a:ef:25:43:3a:71:8b: ab:28:ab:6a:a0:06:55:79:14:11:f6:d6:85:76:67: 12:51:d7:6a:d7:95:21:58:33:65:a2:56:1d:2f:b9: c8:91:cd:8e:66:21:6d:f8:1f:10:33:b5:2a:ed:09: 07:56:34:d3:dc:8a:2b:77:54:23:96:df:3d:e4:6c: bf:b9:bb:c6:6b:64:cd:73:de:75:c3:61:94:af:27: cc:56:d6:af:2c:7b:1d:2f:32:39:f9:88:a0:13:91: f5:51:5b:b3:7c:41:6d:85:18:b3:a4:97:ac:d3:3c: d0:51:36:9e:f7:e0:09:57:09:6c:02:b8:9a:e4:97: e3:a7:e7:e8:25:77:69:21:69:d7:08:c5:09:8e:17: 48:5d:6e:50:f1:4a:28:80:47:ed:d7:d9:c3:c0:9d: 44:ab:33:4c:6d:46:48:eb:fe:3b:77:c1:ad:61:66: f3:55:5c:a5:55:be:79:c1:ab:dc:c2:53:00:80:f7: 5f:35:cc:ed:9b:69:34:9e:21:99:f6:19:ea:19:33: 4e:1c:66:d0:ba:71:56:b5:75:3b:1f:92:af:24:30: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:5D:A4:FE:FC:88:3E:83:1E:AD:05:02:FF:1B:CF:1C:32:BC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cba45b6e-872c-32e0-8f79-343aa2cfc65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d9:22:3d:f0:b2:1f:23:0d:89:82:3d:69:84:55:9a:a9:36: 01:d0:7a:23:7f:b6:78:e3:41:d7:90:21:cd:a5:65:d1:18:76: ad:41:d2:8c:d7:c4:b7:e2:68:36:e0:4c:bd:49:30:16:4f:96: ba:63:0b:3e:71:3f:73:63:0c:2d:15:30:ce:01:3d:78:99:e4: ed:eb:ba:f7:65:9c:45:9d:da:38:85:fc:e5:7f:a6:5c:96:6c: 4a:00:28:e8:ff:b6:a4:8a:5a:b4:75:6b:60:7b:f5:66:55:07: c7:df:f3:a7:82:9f:57:a3:7f:4e:20:db:97:62:21:17:0c:78: f2:bf:c4:ab:8e:46:f2:bc:0a:78:6c:98:c8:96:8d:52:8d:b3: 54:ac:f2:29:22:50:99:dc:d1:69:d7:33:68:3f:3b:ed:dd:75: 71:c6:4f:e0:d1:1a:d9:19:73:d5:10:d4:a7:31:96:44:ed:04: ab:ad:59:bd:98:ef:46:51:22:ad:80:50:5c:7f:5c:30:66:5b: f4:67:78:f3:ea:f6:0e:86:46:92:51:40:b2:9a:f5:06:d2:c3: 24:0d:4e:87:c6:5b:1f:98:32:fe:de:bd:38:83:2c:6e:9d:f4: 53:7b:83:bd:68:c8:3f:9c:71:74:6c:7f:59:aa:c6:9d:c4:6e: 78:e4:24:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqOD8QRTfs8lGE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0NloXDTI1MDkxODA5MzI0NlowLzEtMCsGA1UEAxMk MGZlM2IyMmItNjM4My00ZjY3LWFjMzItNjcyM2ZlYTM4YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwBr1V3ITnHh5EnjjCf156P6mQLY3cWDcYyy KAKCGX3xeEu5uIrvJUM6cYurKKtqoAZVeRQR9taFdmcSUddq15UhWDNlolYdL7nI kc2OZiFt+B8QM7Uq7QkHVjTT3Iord1Qjlt895Gy/ubvGa2TNc951w2GUryfMVtav LHsdLzI5+YigE5H1UVuzfEFthRizpJes0zzQUTae9+AJVwlsAria5Jfjp+foJXdp IWnXCMUJjhdIXW5Q8UoogEft19nDwJ1EqzNMbUZI6/47d8GtYWbzVVylVb55wavc wlMAgPdfNcztm2k0niGZ9hnqGTNOHGbQunFWtXU7H5KvJDAqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFeXaT+/Ig+gx6tBQL/G88cMrw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2JhNDViNmUtODcyYy0z MmUwLThmNzktMzQzYWEyY2ZjNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrZIj3wsh8jDYmCPWmEVZqpNgHQeiN/tnjjQdeQIc2lZdEYdq1B0ozX xLfiaDbgTL1JMBZPlrpjCz5xP3NjDC0VMM4BPXiZ5O3ruvdlnEWd2jiF/OV/plyW bEoAKOj/tqSKWrR1a2B79WZVB8ff86eCn1ejf04g25diIRcMePK/xKuORvK8Cnhs mMiWjVKNs1Ss8ikiUJnc0WnXM2g/O+3ddXHGT+DRGtkZc9UQ1KcxlkTtBKutWb2Y 70ZRIq2AUFx/XDBmW/RnePPq9g6GRpJRQLKa9QbSwyQNTofGWx+YMv7evTiDLG6d 9FN7g71oyD+ccXRsf1mqxp3EbnjkJDI= -----END CERTIFICATE-----Generated at Mon Jun 30 12:37:42 2025 by rpki-client