$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d24bd908-15b5-33f8-93cd-ac12f9f3725b.roa File: d24bd908-15b5-33f8-93cd-ac12f9f3725b.roa (raw, json) Hash identifier: B6nRVLSTxPkM3s33YeF6Lfsm2DdKC35RaZNjiSQ3P50= Subject key identifier: F7:BF:34:AE:8D:1D:12:15:86:9B:3B:1E:CF:8D:52:D0:03:73:9C:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A84655846A37BACD4FBAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d24bd908-15b5-33f8-93cd-ac12f9f3725b.roa Signing time: Fri 20 Jun 2025 09:31:33 +0000 ROA not before: Fri 20 Jun 2025 09:31:33 +0000 ROA not after: Thu 18 Sep 2025 09:31:33 +0000 asID: 22773 IP address blocks: 70.170.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:46:55:84:6a:37:ba:cd:4f:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:33 2025 GMT Not After : Sep 18 09:31:33 2025 GMT Subject: CN=295f9704-7fa6-42e2-8822-37c08678536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:11:41:7f:d7:2c:e2:bb:98:c6:b6:50:62:10: 94:d9:24:82:c4:fc:ff:de:18:4a:5f:84:a3:b2:d6: 4b:8d:77:9d:95:06:9a:c4:20:a7:6a:7b:c3:1c:76: 8d:9a:92:6f:08:81:f7:66:d2:b2:b1:f3:b5:e7:f0: c8:b4:0c:a5:24:e6:1a:0f:4d:73:da:d2:8d:30:71: 69:19:68:da:9f:d6:74:3e:62:e9:29:bf:d6:c1:e7: 97:cb:d4:fb:53:11:8a:7d:49:88:cf:fa:19:49:60: df:35:18:d4:71:d3:56:dd:5f:b3:38:1f:1a:1d:14: 5d:70:2a:3b:4e:70:b5:80:31:a9:25:01:49:b6:79: 94:50:0d:f8:94:36:4d:f7:e1:6b:f9:8b:99:13:0c: 7b:f2:cc:83:f1:d8:33:5a:d8:dd:b3:09:d2:7c:84: fb:54:35:7e:43:67:83:df:26:c3:dc:61:a1:d9:4a: 1b:d0:5f:e0:cd:9d:ee:e6:36:2f:40:f6:c8:7f:52: f7:8a:57:2c:a7:83:a6:7d:54:37:bf:8a:9d:cc:dd: 18:c0:5d:01:4d:84:04:8b:98:90:6f:4d:18:99:b7: 2a:6a:d6:bc:5e:95:c8:32:e1:0a:3c:3a:a6:60:83: 42:47:f7:3e:41:20:c2:62:3a:3b:5a:50:2a:43:f0: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:34:AE:8D:1D:12:15:86:9B:3B:1E:CF:8D:52:D0:03:73:9C:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d24bd908-15b5-33f8-93cd-ac12f9f3725b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:31:cc:af:7c:cf:1e:bc:cf:67:a8:6b:95:7b:d4:7d:55:d2: f4:9b:44:a4:75:9d:17:35:c9:19:c8:95:37:3b:d3:1d:af:ce: e5:2f:ec:2b:02:43:09:71:6c:4d:30:00:70:95:a4:45:49:10: 86:15:d5:8b:2d:e0:a0:18:c7:7f:28:e1:5d:36:6a:62:7d:b2: 9e:df:62:6c:f9:18:16:44:2f:d9:6c:08:0a:4f:c3:b2:24:6d: 60:4c:75:23:a1:16:1b:d5:70:ce:f1:6c:36:b2:ec:c3:52:64: a1:fb:a6:66:e6:2a:d4:aa:eb:ba:1e:23:27:65:2a:15:66:77: cb:d1:75:21:dc:03:c1:5d:2b:51:fc:1e:50:3f:ef:31:ef:2a: 88:9f:76:60:bc:92:92:27:ba:13:87:9c:03:c0:2b:8c:11:66: 7d:bb:4b:ee:4e:12:94:b2:11:8c:03:f3:bc:00:c7:26:cf:44: 2d:26:4f:5b:bf:7b:f3:99:29:63:68:6d:3c:fe:52:49:8f:1a: 5a:f3:e9:78:73:3a:45:c8:f7:6f:a2:0d:6a:8b:94:76:d1:8d: 2b:f4:bc:b6:5c:c0:65:72:aa:8c:93:5a:32:4e:9f:69:ab:df: 21:19:1c:80:77:91:49:9b:6b:93:52:ea:4f:70:ee:5c:40:9d: fd:e9:39:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqEZVhGo3us1PusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzM1oXDTI1MDkxODA5MzEzM1owLzEtMCsGA1UEAxMk Mjk1Zjk3MDQtN2ZhNi00MmUyLTg4MjItMzdjMDg2Nzg1MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhFBf9cs4ruYxrZQYhCU2SSCxPz/3hhKX4Sj stZLjXedlQaaxCCnanvDHHaNmpJvCIH3ZtKysfO15/DItAylJOYaD01z2tKNMHFp GWjan9Z0PmLpKb/WweeXy9T7UxGKfUmIz/oZSWDfNRjUcdNW3V+zOB8aHRRdcCo7 TnC1gDGpJQFJtnmUUA34lDZN9+Fr+YuZEwx78syD8dgzWtjdswnSfIT7VDV+Q2eD 3ybD3GGh2Uob0F/gzZ3u5jYvQPbIf1L3ilcsp4OmfVQ3v4qdzN0YwF0BTYQEi5iQ b00Ymbcqata8XpXIMuEKPDqmYINCR/c+QSDCYjo7WlAqQ/C/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe/NK6NHRIVhps7Hs+NUtADc5z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDI0YmQ5MDgtMTViNS0z M2Y4LTkzY2QtYWMxMmY5ZjM3MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqrjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8xzK98zx68z2eoa5V71H1V0vSbRKR1nRc1yRnIlTc70x2vzuUv7CsC QwlxbE0wAHCVpEVJEIYV1Yst4KAYx38o4V02amJ9sp7fYmz5GBZEL9lsCApPw7Ik bWBMdSOhFhvVcM7xbDay7MNSZKH7pmbmKtSq67oeIydlKhVmd8vRdSHcA8FdK1H8 HlA/7zHvKoifdmC8kpInuhOHnAPAK4wRZn27S+5OEpSyEYwD87wAxybPRC0mT1u/ e/OZKWNobTz+UkmPGlrz6XhzOkXI92+iDWqLlHbRjSv0vLZcwGVyqoyTWjJOn2mr 3yEZHIB3kUmba5NS6k9w7lxAnf3pOd8= -----END CERTIFICATE-----Generated at Mon Jun 30 15:02:43 2025 by rpki-client