$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d03860b5-59cb-35a6-9227-e951ae295ea9.roa File: d03860b5-59cb-35a6-9227-e951ae295ea9.roa (raw, json) Hash identifier: 2XBFGq1FRuRzDGFarVydQJjH1dsMHPR/aZ5wI5WqUnk= Subject key identifier: D9:A2:BD:52:C7:21:16:11:B8:6F:DA:B9:32:CC:6E:F5:FA:9F:B2:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7C718D23692F05C959180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d03860b5-59cb-35a6-9227-e951ae295ea9.roa Signing time: Thu 19 Jun 2025 09:19:50 +0000 ROA not before: Thu 19 Jun 2025 09:19:50 +0000 ROA not after: Wed 17 Sep 2025 09:19:50 +0000 asID: 22773 IP address blocks: 70.163.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:c7:18:d2:36:92:f0:5c:95:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:50 2025 GMT Not After : Sep 17 09:19:50 2025 GMT Subject: CN=9c5ca87a-25aa-4965-9c29-cd90f20bfb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:06:e1:75:bf:cc:65:75:e5:c6:0c:f5:14: e3:58:23:4f:15:ed:76:33:6f:0c:20:f3:87:82:90: e1:6f:66:7c:23:2c:ef:19:3e:89:12:c3:eb:bf:f2: 5e:8f:d0:e9:8c:f9:d7:2c:23:48:0a:0e:25:53:0f: 1b:6e:45:a1:f9:c2:76:c5:d3:09:6d:e7:d6:48:be: 84:fb:4d:cc:74:b1:0b:77:76:cd:0a:39:3a:61:ab: cd:d8:0b:8a:0f:f1:e7:73:fe:4b:8e:12:aa:3c:a7: bc:80:b9:41:a8:cf:c9:3b:d5:93:33:c1:2e:4d:24: ff:e2:93:9d:4c:56:bd:cb:76:9c:9e:b2:25:6c:c6: c9:77:21:c0:ee:ee:b4:9a:8b:79:38:11:85:18:29: bc:42:68:a8:94:e0:1b:94:3f:16:bb:4f:4f:4d:30: af:b5:90:d4:a1:e2:b8:24:bd:25:ce:bc:de:7f:1e: a5:1c:be:41:f4:0b:06:a1:36:f7:18:20:60:c2:15: 77:48:df:a3:09:f5:1e:f4:8f:07:4a:84:a1:75:ac: 11:aa:cd:5e:8c:17:9d:b0:1c:82:ab:d6:86:05:90: b4:c3:ea:06:63:fe:8c:03:21:5b:77:b5:a5:1b:bb: c0:02:70:96:1d:22:95:d2:37:64:16:81:97:c0:89: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A2:BD:52:C7:21:16:11:B8:6F:DA:B9:32:CC:6E:F5:FA:9F:B2:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d03860b5-59cb-35a6-9227-e951ae295ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8c:02:fc:fe:46:3e:24:92:96:59:4b:30:be:1c:4d:3d:d6: fe:24:cc:e9:df:62:e1:00:df:9e:6c:c5:84:10:d1:5e:cd:12: 5e:72:ab:fe:67:21:5b:62:cf:d9:bc:e0:23:0f:92:58:d3:25: dc:a5:8d:00:7d:ee:75:6f:98:6e:61:e9:7c:f5:fe:d6:cd:d4: 81:ae:f8:5b:a1:26:44:a4:43:7f:b4:fa:fa:97:9b:e5:90:f5: db:97:aa:58:90:35:f0:5c:f9:80:2e:90:bf:a9:f2:9f:d8:15: 37:4f:91:5c:81:33:21:95:0d:bc:d2:13:87:1e:5d:46:3d:1c: 7e:34:96:f2:92:bb:2c:af:3b:7f:f6:8e:d1:48:80:f2:2a:31: cc:26:76:05:d6:e0:b8:e9:7e:d7:ab:93:ae:cb:eb:09:c0:52: c4:29:32:b2:57:60:fc:cd:bd:10:3b:32:e0:c9:e6:12:0e:39: f5:36:47:c4:48:eb:92:7a:fb:fd:52:34:f5:b6:b2:b7:48:43: 85:d1:f3:d5:13:ad:3c:89:41:8b:6f:ab:4c:20:9c:21:2a:f3: 3b:d3:bb:69:73:f8:7c:3a:c4:3d:b0:e7:12:d5:97:52:31:98: ea:b5:31:fe:20:fe:2b:62:5d:f7:c8:4f:80:45:1a:a6:c1:f0: 51:fa:76:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo918cY0jaS8FyVkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk1MFoXDTI1MDkxNzA5MTk1MFowLzEtMCsGA1UEAxMk OWM1Y2E4N2EtMjVhYS00OTY1LTljMjktY2Q5MGYyMGJmYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhgG4XW/zGV15cYM9RTjWCNPFe12M28MIPOH gpDhb2Z8IyzvGT6JEsPrv/Jej9DpjPnXLCNICg4lUw8bbkWh+cJ2xdMJbefWSL6E +03MdLELd3bNCjk6YavN2AuKD/Hnc/5LjhKqPKe8gLlBqM/JO9WTM8EuTST/4pOd TFa9y3acnrIlbMbJdyHA7u60mot5OBGFGCm8QmiolOAblD8Wu09PTTCvtZDUoeK4 JL0lzrzefx6lHL5B9AsGoTb3GCBgwhV3SN+jCfUe9I8HSoShdawRqs1ejBedsByC q9aGBZC0w+oGY/6MAyFbd7WlG7vAAnCWHSKV0jdkFoGXwIk4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmivVLHIRYRuG/auTLMbvX6n7I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDAzODYwYjUtNTljYi0z NWE2LTkyMjctZTk1MWFlMjk1ZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaMAvz+Rj4kkpZZSzC+HE091v4kzOnfYuEA355sxYQQ0V7NEl5yq/5n IVtiz9m84CMPkljTJdyljQB97nVvmG5h6Xz1/tbN1IGu+FuhJkSkQ3+0+vqXm+WQ 9duXqliQNfBc+YAukL+p8p/YFTdPkVyBMyGVDbzSE4ceXUY9HH40lvKSuyyvO3/2 jtFIgPIqMcwmdgXW4Ljpfterk67L6wnAUsQpMrJXYPzNvRA7MuDJ5hIOOfU2R8RI 65J6+/1SNPW2srdIQ4XR89UTrTyJQYtvq0wgnCEq8zvTu2lz+Hw6xD2w5xLVl1Ix mOq1Mf4g/itiXffIT4BFGqbB8FH6dkU= -----END CERTIFICATE-----Generated at Tue Jul 1 22:44:32 2025 by rpki-client