$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d60dac9d-3f74-33cb-b074-310c3f726e0d.roa File: d60dac9d-3f74-33cb-b074-310c3f726e0d.roa (raw, json) Hash identifier: yrYRYWVr+SAJaPLDeTi3EHsA/+VzQYppJzPRbbDUJho= Subject key identifier: 97:76:AD:BA:EF:F8:42:33:5C:6F:EE:B8:A4:FD:1A:B9:78:0F:8D:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A89B9B6432951A340E5F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d60dac9d-3f74-33cb-b074-310c3f726e0d.roa Signing time: Fri 20 Jun 2025 09:32:13 +0000 ROA not before: Fri 20 Jun 2025 09:32:13 +0000 ROA not after: Thu 18 Sep 2025 09:32:13 +0000 asID: 22773 IP address blocks: 70.173.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:9b:9b:64:32:95:1a:34:0e:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:13 2025 GMT Not After : Sep 18 09:32:13 2025 GMT Subject: CN=fd3cd439-edef-4eb4-ab2b-63cfdda421ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:f3:ae:80:3b:c3:91:fb:2a:fc:3f:40:c2: 5a:0e:5d:ee:fe:5d:b8:f0:58:ba:f0:16:a5:9b:b5: 22:ff:b7:bf:05:98:e5:bf:e2:c8:ba:1c:24:e6:16: 16:a8:d5:ee:87:eb:77:83:e7:70:18:a1:c3:6c:d4: 2d:db:b3:ee:12:1b:3d:aa:f5:b9:72:73:f6:13:21: b7:04:13:1a:1b:bb:f8:37:b6:88:52:6a:71:9b:a4: fe:54:89:4d:57:d9:bd:bc:a8:32:99:e9:3c:e5:0e: 48:f6:22:f6:ee:f7:06:30:3d:6a:07:0a:76:ce:22: f1:ba:2d:d3:1e:06:c0:2d:e2:66:dd:af:e9:69:23: d1:7a:c9:78:c7:50:dc:11:9a:b8:cf:57:8f:d0:60: 46:1b:42:1a:72:08:7a:0a:b2:c9:3d:17:51:af:58: 6a:74:78:52:7a:5d:ed:86:1e:fd:29:1e:47:39:72: e9:41:d9:d0:a8:4b:b6:6f:49:72:7a:37:18:5f:ac: c4:33:a9:bd:11:c4:2e:90:77:c6:65:9b:0e:e4:a3: e2:56:a4:39:af:33:5f:49:96:4a:0a:fa:f0:7b:7e: 1b:ce:3a:96:dd:35:76:9f:07:8f:6e:9e:b5:e0:ae: 6c:a1:e1:3c:1b:9b:2a:57:b7:31:79:81:f8:5d:81: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:76:AD:BA:EF:F8:42:33:5C:6F:EE:B8:A4:FD:1A:B9:78:0F:8D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d60dac9d-3f74-33cb-b074-310c3f726e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ac:e9:df:2f:b9:3e:7b:a4:ca:08:32:61:46:1f:69:e1:c6: f7:a0:bb:fa:6e:d4:6b:c4:a9:db:f1:fe:da:c7:f6:25:1f:cc: 58:69:ea:93:7a:59:87:69:29:8e:f4:96:75:3e:13:f2:e4:80: 98:ae:1a:ba:9b:66:79:e8:9a:7f:b2:91:e6:0d:6a:22:c3:6d: 82:cb:4c:44:25:6d:5e:82:65:e8:51:ad:43:f5:db:c8:f1:35: 92:d9:91:7a:57:25:c2:fe:45:f1:5b:5d:0b:e7:72:a6:e7:e3: 87:74:74:16:f2:e2:e9:fb:c2:88:9e:cd:9e:7d:0e:b5:b5:cd: ba:29:0b:74:d3:57:c3:a7:b9:b3:1c:36:a6:77:ca:3b:0d:a9: 99:c8:8b:90:91:fe:12:17:41:d0:41:1f:81:c4:35:33:99:bf: 57:95:01:ce:6e:88:0d:78:de:76:f0:3e:ee:c1:c8:07:f2:3a: 86:c1:43:ba:da:2c:33:c5:eb:72:af:90:10:29:72:8d:bd:07: 22:84:ba:7f:a5:b3:d5:64:1e:e7:3f:f1:ef:72:54:64:d1:26: 96:b8:39:86:d5:97:74:55:14:6a:86:62:64:37:97:43:6d:39: 4f:c4:44:7b:8c:8b:cd:db:5c:5e:04:8d:08:a9:1d:18:81:2f: f8:74:fe:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqJubZDKVGjQOXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIxM1oXDTI1MDkxODA5MzIxM1owLzEtMCsGA1UEAxMk ZmQzY2Q0MzktZWRlZi00ZWI0LWFiMmItNjNjZmRkYTQyMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBjzroA7w5H7Kvw/QMJaDl3u/l248Fi68Bal m7Ui/7e/BZjlv+LIuhwk5hYWqNXuh+t3g+dwGKHDbNQt27PuEhs9qvW5cnP2EyG3 BBMaG7v4N7aIUmpxm6T+VIlNV9m9vKgymek85Q5I9iL27vcGMD1qBwp2ziLxui3T HgbALeJm3a/paSPResl4x1DcEZq4z1eP0GBGG0Iacgh6CrLJPRdRr1hqdHhSel3t hh79KR5HOXLpQdnQqEu2b0lyejcYX6zEM6m9EcQukHfGZZsO5KPiVqQ5rzNfSZZK Cvrwe34bzjqW3TV2nwePbp614K5soeE8G5sqV7cxeYH4XYEhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJd2rbrv+EIzXG/uuKT9Grl4D42QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDYwZGFjOWQtM2Y3NC0z M2NiLWIwNzQtMzEwYzNmNzI2ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJms6d8vuT57pMoIMmFGH2nhxvegu/pu1GvEqdvx/trH9iUfzFhp6pN6 WYdpKY70lnU+E/LkgJiuGrqbZnnomn+ykeYNaiLDbYLLTEQlbV6CZehRrUP128jx NZLZkXpXJcL+RfFbXQvncqbn44d0dBby4un7woiezZ59DrW1zbopC3TTV8OnubMc NqZ3yjsNqZnIi5CR/hIXQdBBH4HENTOZv1eVAc5uiA143nbwPu7ByAfyOobBQ7ra LDPF63KvkBApco29ByKEun+ls9VkHuc/8e9yVGTRJpa4OYbVl3RVFGqGYmQ3l0Nt OU/ERHuMi83bXF4EjQipHRiBL/h0/lE= -----END CERTIFICATE-----Generated at Tue Jul 1 15:08:11 2025 by rpki-client