$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa File: cfe9f42f-f924-3717-8008-67f7a3dad58c.roa (raw, json) Hash identifier: 1ga1rfLLO1ErrdM1izOR5M8686NUJPlLfoEZ0xkUNgQ= Subject key identifier: 59:E6:ED:FD:6E:BC:1B:78:6D:E9:95:D8:64:FF:53:2B:55:75:B8:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A84A1370E5B0745AB6D180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa Signing time: Fri 20 Jun 2025 09:31:35 +0000 ROA not before: Fri 20 Jun 2025 09:31:35 +0000 ROA not after: Thu 18 Sep 2025 09:31:35 +0000 asID: 22773 IP address blocks: 70.170.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:4a:13:70:e5:b0:74:5a:b6:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:35 2025 GMT Not After : Sep 18 09:31:35 2025 GMT Subject: CN=2f12b1f2-3721-42a6-a1dd-e5c9087e30bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:90:61:03:d5:f5:31:ac:9b:64:d3:63:1c: 8e:6c:a8:ec:9d:72:32:c0:b8:27:8c:e1:d2:5b:a2: 1c:33:81:db:b0:cd:a8:3f:78:8c:80:1a:b3:65:e0: c4:36:e2:03:dc:25:e2:0e:9d:bc:1c:f7:0c:47:6a: d7:2c:bf:51:f7:44:21:f0:42:33:44:bd:72:1e:bc: c6:e7:1f:70:ef:6a:a4:ba:36:07:91:2e:30:da:3f: cd:3b:6a:5e:85:4e:3c:a3:25:83:9e:83:2d:62:12: ed:c0:1e:10:70:52:e9:b9:bd:92:67:8c:87:61:51: 3d:9e:c6:cf:e4:dc:8f:5e:02:d5:0d:a3:3d:9d:86: d4:b4:81:19:69:ed:39:00:da:0e:02:05:e6:6f:c1: 0a:76:a4:58:2e:30:53:b7:ee:3f:c5:5f:6a:14:49: 1d:cf:aa:a9:23:fb:f2:43:fa:b2:78:16:5e:7f:7b: 6d:56:20:77:90:80:85:5f:4c:3f:31:07:f7:00:16: 71:44:86:4d:0e:04:9b:2a:38:60:81:66:c6:c4:ff: e7:3c:5c:ab:35:ca:b4:00:75:30:7c:0b:bf:3b:58: 6b:f2:14:89:6b:bc:45:b2:e2:fb:84:7f:6b:4d:60: c8:c3:38:b2:8a:d0:9a:9a:4c:e9:ef:51:7c:85:f8: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:ED:FD:6E:BC:1B:78:6D:E9:95:D8:64:FF:53:2B:55:75:B8:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe9f42f-f924-3717-8008-67f7a3dad58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:eb:db:b7:4b:88:fc:a8:77:50:f9:c1:4c:8c:66:82:60:42: 64:96:94:91:62:3b:01:32:db:0d:ec:bb:67:e8:f8:f4:4d:dd: 69:07:9b:5e:ad:e1:95:66:04:01:c3:71:ca:33:6d:49:5d:dc: 7d:00:56:6c:f1:22:6e:7f:ff:77:01:aa:a1:a3:0f:b5:9d:27: 9e:12:ce:fb:86:82:ef:c5:e8:79:5f:cd:fd:f7:5a:ff:7b:60: 75:ed:a0:b0:b8:24:40:f7:28:4d:ab:7d:4f:82:63:cc:cd:49: e5:93:98:d8:27:d5:d0:65:2c:13:e3:35:73:12:f7:0d:5a:78: bb:63:10:8f:e3:d3:3f:b6:25:98:60:31:5d:07:86:a2:67:19: f7:ff:17:45:18:46:25:c6:0e:46:65:26:24:be:be:5d:99:aa: 9c:a9:12:5a:f1:32:ce:65:73:de:e4:a7:fa:48:32:33:1a:09: ef:8b:b9:4d:f4:32:e5:90:e2:65:88:ea:ee:5a:6d:1b:d7:28: e5:3f:5c:51:19:42:41:60:09:67:ac:8a:82:7e:fc:ae:bb:fc: d0:2a:10:a9:31:3d:78:58:11:65:a9:08:fb:2c:02:3d:c9:fc: 2f:cb:98:fe:84:8b:3e:88:65:63:d3:a9:12:7f:9c:a9:5e:d6: ec:70:24:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqEoTcOWwdFq20YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzNVoXDTI1MDkxODA5MzEzNVowLzEtMCsGA1UEAxMk MmYxMmIxZjItMzcyMS00MmE2LWExZGQtZTVjOTA4N2UzMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/aQYQPV9TGsm2TTYxyObKjsnXIywLgnjOHS W6IcM4HbsM2oP3iMgBqzZeDENuID3CXiDp28HPcMR2rXLL9R90Qh8EIzRL1yHrzG 5x9w72qkujYHkS4w2j/NO2pehU48oyWDnoMtYhLtwB4QcFLpub2SZ4yHYVE9nsbP 5NyPXgLVDaM9nYbUtIEZae05ANoOAgXmb8EKdqRYLjBTt+4/xV9qFEkdz6qpI/vy Q/qyeBZef3ttViB3kICFX0w/MQf3ABZxRIZNDgSbKjhggWbGxP/nPFyrNcq0AHUw fAu/O1hr8hSJa7xFsuL7hH9rTWDIwziyitCamkzp71F8hfj80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnm7f1uvBt4bemV2GT/UytVdbhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZlOWY0MmYtZjkyNC0z NzE3LTgwMDgtNjdmN2EzZGFkNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7r27dLiPyod1D5wUyMZoJgQmSWlJFiOwEy2w3su2fo+PRN3WkHm16t 4ZVmBAHDccozbUld3H0AVmzxIm5//3cBqqGjD7WdJ54SzvuGgu/F6Hlfzf33Wv97 YHXtoLC4JED3KE2rfU+CY8zNSeWTmNgn1dBlLBPjNXMS9w1aeLtjEI/j0z+2JZhg MV0HhqJnGff/F0UYRiXGDkZlJiS+vl2ZqpypElrxMs5lc97kp/pIMjMaCe+LuU30 MuWQ4mWI6u5abRvXKOU/XFEZQkFgCWesioJ+/K67/NAqEKkxPXhYEWWpCPssAj3J /C/LmP6Eiz6IZWPTqRJ/nKle1uxwJP4= -----END CERTIFICATE-----Generated at Wed Jul 2 05:22:16 2025 by rpki-client