$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8920f4-3926-33e9-bac1-4bc75e5a6773.roa File: db8920f4-3926-33e9-bac1-4bc75e5a6773.roa (raw, json) Hash identifier: wnPqg5E+3+WBlxye93hG/uNuvpeAPMkyRVETJ5LIXpI= Subject key identifier: 1C:0A:32:A8:A9:FB:5F:29:99:3D:09:AF:ED:61:A6:DC:41:12:70:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A90711F11BE5173D2ED7C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8920f4-3926-33e9-bac1-4bc75e5a6773.roa Signing time: Fri 20 Jun 2025 09:33:04 +0000 ROA not before: Fri 20 Jun 2025 09:33:04 +0000 ROA not after: Thu 18 Sep 2025 09:33:04 +0000 asID: 22773 IP address blocks: 70.189.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:07:11:f1:1b:e5:17:3d:2e:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:33:04 2025 GMT Not After : Sep 18 09:33:04 2025 GMT Subject: CN=6915ffa0-0371-48ef-b12f-99b4f06793b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:20:62:3c:f7:60:44:1f:d0:56:a3:4a:bf: 68:b8:63:84:30:a1:7c:e7:05:19:eb:a5:4a:0b:b2: 80:0a:fe:a6:6f:0d:cd:2b:07:a3:e3:47:65:67:56: 55:57:54:47:b6:e2:aa:da:64:9e:7c:3a:a6:03:84: 25:e8:eb:c4:36:49:1e:59:81:8c:6a:30:54:dc:1d: 43:fe:4a:2a:37:6f:32:36:af:e3:8e:da:ee:25:ab: 62:bd:af:4a:e2:07:bf:8c:7b:62:33:66:8b:04:e8: c7:a0:7f:dc:63:07:e7:35:2b:fd:4a:a5:1b:9e:6c: 08:86:51:7a:01:ea:75:77:ae:ec:a2:bb:e8:63:08: 28:6f:3a:7c:4b:8d:28:b2:02:82:5e:ac:1f:75:66: 3e:58:41:75:0e:7a:56:f3:a4:c1:e2:53:93:81:19: 42:55:4d:9a:3c:ed:6b:b3:c0:18:a7:d4:db:36:b1: 62:a0:77:00:01:80:c7:af:9a:f1:8c:c3:07:c7:ac: 16:4d:7a:c5:22:f6:8b:00:05:bd:50:35:43:1a:c9: f6:81:2a:84:2b:72:32:83:09:1e:4c:c7:1f:5e:87: 59:bb:0b:34:34:af:fd:fe:e5:6d:24:56:58:81:1f: 70:64:eb:23:ef:95:be:da:5a:91:77:bf:a3:8e:cb: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:32:A8:A9:FB:5F:29:99:3D:09:AF:ED:61:A6:DC:41:12:70:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db8920f4-3926-33e9-bac1-4bc75e5a6773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:a1:3c:76:2a:61:d6:60:8f:17:16:73:77:38:d4:7b:26:5e: 97:45:55:fa:bd:c3:d4:cc:64:ac:2e:ee:ed:6c:04:3e:1d:cf: 90:ac:7a:ed:2f:86:8f:62:a4:24:ec:f2:b8:d8:f3:64:bd:4c: fb:46:f0:a9:15:ee:b9:73:b8:e2:b7:dd:6c:39:3a:5a:27:ff: 2a:e1:6d:40:08:dd:4e:b7:7b:34:5b:71:bf:28:64:26:0f:db: 67:51:27:94:c8:93:de:0d:22:61:2f:8d:13:16:e5:70:45:91: d7:8a:6c:96:d6:50:b4:54:15:44:17:ed:54:f2:fe:26:b8:6a: 97:aa:b0:fc:f1:d0:ec:ca:9f:15:71:e5:f1:5b:97:be:ff:f0: 4e:db:52:cc:60:77:c9:d8:fb:18:af:9d:e5:f0:9b:14:cd:6b: a1:86:e0:a0:c9:7f:28:7f:c4:65:bf:8e:a9:a7:24:ad:b6:58: ab:c8:72:53:a7:23:85:98:b9:d5:2d:57:6e:da:31:be:89:3d: d7:9f:cb:8f:a2:b7:af:d5:a6:4f:59:77:ab:07:f5:b1:34:c2: 69:e0:4e:22:e9:ae:85:9e:54:d5:a7:58:7c:6e:0a:0f:63:da: 7f:39:47:8b:8c:a2:9a:38:68:27:68:e2:5c:ce:43:05:0b:46: 9f:07:13:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqQcR8RvlFz0u18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzMwNFoXDTI1MDkxODA5MzMwNFowLzEtMCsGA1UEAxMk NjkxNWZmYTAtMDM3MS00OGVmLWIxMmYtOTliNGYwNjc5M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKEgYjz3YEQf0FajSr9ouGOEMKF85wUZ66VK C7KACv6mbw3NKwej40dlZ1ZVV1RHtuKq2mSefDqmA4Ql6OvENkkeWYGMajBU3B1D /koqN28yNq/jjtruJativa9K4ge/jHtiM2aLBOjHoH/cYwfnNSv9SqUbnmwIhlF6 Aep1d67sorvoYwgobzp8S40osgKCXqwfdWY+WEF1DnpW86TB4lOTgRlCVU2aPO1r s8AYp9TbNrFioHcAAYDHr5rxjMMHx6wWTXrFIvaLAAW9UDVDGsn2gSqEK3Iygwke TMcfXodZuws0NK/9/uVtJFZYgR9wZOsj75W+2lqRd7+jjsu3zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwKMqip+18pmT0Jr+1hptxBEnBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGI4OTIwZjQtMzkyNi0z M2U5LWJhYzEtNGJjNzVlNWE2NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr3tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKehPHYqYdZgjxcWc3c41HsmXpdFVfq9w9TMZKwu7u1sBD4dz5Cseu0v ho9ipCTs8rjY82S9TPtG8KkV7rlzuOK33Ww5Olon/yrhbUAI3U63ezRbcb8oZCYP 22dRJ5TIk94NImEvjRMW5XBFkdeKbJbWULRUFUQX7VTy/ia4apeqsPzx0OzKnxVx 5fFbl77/8E7bUsxgd8nY+xivneXwmxTNa6GG4KDJfyh/xGW/jqmnJK22WKvIclOn I4WYudUtV27aMb6JPdefy4+it6/Vpk9Zd6sH9bE0wmngTiLproWeVNWnWHxuCg9j 2n85R4uMopo4aCdo4lzOQwULRp8HE2E= -----END CERTIFICATE-----Generated at Tue Jul 1 22:49:27 2025 by rpki-client