$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8d4248f-448e-3704-85fe-3bedd1dffb79.roa File: d8d4248f-448e-3704-85fe-3bedd1dffb79.roa (raw, json) Hash identifier: eKnTDj7SgiSo97D++aF9WoekIGFPn2k1AsVmu2N0hJg= Subject key identifier: BE:D7:C3:C8:2D:82:C8:35:DA:76:5E:E1:9F:84:21:9F:F4:56:27:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7B04C95D86CA65E4D6E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8d4248f-448e-3704-85fe-3bedd1dffb79.roa Signing time: Thu 19 Jun 2025 09:19:39 +0000 ROA not before: Thu 19 Jun 2025 09:19:39 +0000 ROA not after: Wed 17 Sep 2025 09:19:39 +0000 asID: 22773 IP address blocks: 70.163.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:b0:4c:95:d8:6c:a6:5e:4d:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:39 2025 GMT Not After : Sep 17 09:19:39 2025 GMT Subject: CN=d777486b-a355-4c4d-b626-c75ec35e1429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:56:f9:8c:61:99:48:34:af:7f:df:54:e9: 91:64:6d:92:3e:49:78:08:33:c2:0f:ce:03:01:e7: 82:75:b6:d3:78:e8:fe:3e:a4:f0:f2:f9:db:0e:5c: 6d:09:0f:ed:08:af:6d:f3:5a:62:01:49:5b:0f:7a: 66:54:b4:ec:f4:b5:31:a5:54:77:2e:3f:19:44:bc: f4:24:71:36:90:0f:15:00:40:7a:03:c6:7b:d3:32: 22:d8:1e:07:c6:8b:b3:9e:db:f2:ac:63:ea:0a:68: 30:97:5f:a0:50:75:c1:81:2f:ac:e5:0d:73:99:71: de:d3:9a:0e:b4:7a:eb:a6:c2:27:8b:7b:10:79:81: ad:e1:92:32:a6:95:47:3d:84:8e:8a:44:0c:5e:0b: 34:cf:0f:7d:98:b9:47:e3:d5:34:f9:cc:05:30:01: 57:ba:ff:ec:fc:ab:cb:5a:33:16:62:ce:d4:e7:a8: ef:bd:43:b6:06:9a:6d:c0:96:9b:89:27:7d:9c:0a: 5a:8e:4f:22:07:04:37:32:16:93:2d:15:e6:65:7a: 4e:d1:6e:7d:bf:76:f4:55:08:fc:f6:bd:38:8d:c4: 66:34:a5:e1:99:64:48:82:86:ed:58:43:e9:bc:56: 0c:1b:06:2e:3a:5f:32:30:46:3d:08:ec:ff:74:42: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D7:C3:C8:2D:82:C8:35:DA:76:5E:E1:9F:84:21:9F:F4:56:27:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d8d4248f-448e-3704-85fe-3bedd1dffb79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:51:d8:e2:40:20:b0:a8:dc:e3:e0:84:45:35:94:c5:7a:92: e7:cf:57:5f:fb:59:23:cd:1d:13:22:1b:bd:1e:ef:da:6f:1a: 54:e4:93:f6:b7:7e:0c:26:c3:31:69:25:b3:64:67:03:c5:6a: cc:19:34:03:84:c0:6a:16:01:3d:af:d3:cc:46:b1:eb:c8:f3: 15:fd:40:32:60:a3:6c:98:eb:35:86:59:6c:ed:01:d6:c4:65: 60:c6:ef:66:17:5b:c4:fb:c7:7b:7b:30:6c:28:e0:7f:35:ea: de:61:78:9e:27:88:02:35:be:9f:d7:e0:ae:97:95:db:2c:54: 67:69:2b:8d:0e:a3:66:af:26:dd:9f:b4:0f:08:e3:6a:f4:92: 63:5a:2e:f2:1b:2d:76:fc:74:24:24:02:bb:59:eb:54:c5:35: 4d:21:5c:b4:af:35:d6:37:1c:7d:e5:78:5f:95:61:2c:c6:c3: a7:23:b2:a3:7c:26:72:46:3b:ba:c1:c5:94:6b:cd:14:14:bc: 5e:b0:e1:0e:5b:bc:4e:ae:df:95:78:8e:c9:6a:b8:89:cf:fc: d5:7d:ac:69:41:27:91:39:da:5f:4c:a3:c2:f4:1a:56:9b:7c: e4:90:d0:66:7f:11:49:56:9e:23:0e:90:c9:c3:97:92:68:a5: 95:de:ff:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo917BMldhspl5NboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkzOVoXDTI1MDkxNzA5MTkzOVowLzEtMCsGA1UEAxMk ZDc3NzQ4NmItYTM1NS00YzRkLWI2MjYtYzc1ZWMzNWUxNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj5W+YxhmUg0r3/fVOmRZG2SPkl4CDPCD84D AeeCdbbTeOj+PqTw8vnbDlxtCQ/tCK9t81piAUlbD3pmVLTs9LUxpVR3Lj8ZRLz0 JHE2kA8VAEB6A8Z70zIi2B4HxouzntvyrGPqCmgwl1+gUHXBgS+s5Q1zmXHe05oO tHrrpsIni3sQeYGt4ZIyppVHPYSOikQMXgs0zw99mLlH49U0+cwFMAFXuv/s/KvL WjMWYs7U56jvvUO2BpptwJabiSd9nApajk8iBwQ3MhaTLRXmZXpO0W59v3b0VQj8 9r04jcRmNKXhmWRIgobtWEPpvFYMGwYuOl8yMEY9COz/dEIz+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7Xw8gtgsg12nZe4Z+EIZ/0VicaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDhkNDI0OGYtNDQ4ZS0z NzA0LTg1ZmUtM2JlZGQxZGZmYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtR2OJAILCo3OPghEU1lMV6kufPV1/7WSPNHRMiG70e79pvGlTkk/a3 fgwmwzFpJbNkZwPFaswZNAOEwGoWAT2v08xGsevI8xX9QDJgo2yY6zWGWWztAdbE ZWDG72YXW8T7x3t7MGwo4H816t5heJ4niAI1vp/X4K6XldssVGdpK40Oo2avJt2f tA8I42r0kmNaLvIbLXb8dCQkArtZ61TFNU0hXLSvNdY3HH3leF+VYSzGw6cjsqN8 JnJGO7rBxZRrzRQUvF6w4Q5bvE6u35V4jslquInP/NV9rGlBJ5E52l9Mo8L0Glab fOSQ0GZ/EUlWniMOkMnDl5JopZXe/9g= -----END CERTIFICATE-----Generated at Mon Jun 30 19:29:21 2025 by rpki-client