$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db96284a-2f7b-3d0e-8dd2-1acaa6b8ece8.roa File: db96284a-2f7b-3d0e-8dd2-1acaa6b8ece8.roa (raw, json) Hash identifier: kHGqlAXBUSsWi7lc771JzsgCjpaI9aonUwQ6KL5q08s= Subject key identifier: 8C:36:EB:38:ED:20:A4:67:B0:96:B3:44:5E:72:E5:30:CC:40:A9:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A83CFFEF0C9421DE946F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db96284a-2f7b-3d0e-8dd2-1acaa6b8ece8.roa Signing time: Fri 20 Jun 2025 09:31:29 +0000 ROA not before: Fri 20 Jun 2025 09:31:29 +0000 ROA not after: Thu 18 Sep 2025 09:31:29 +0000 asID: 22773 IP address blocks: 70.170.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:3c:ff:ef:0c:94:21:de:94:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:29 2025 GMT Not After : Sep 18 09:31:29 2025 GMT Subject: CN=b77db978-3240-41b3-9198-772a5cb7d6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:43:fa:de:54:43:5e:24:b7:fe:68:2e:9e:7e: 2e:63:57:bf:2a:04:ca:72:ab:03:3b:ba:28:1c:96: 70:ba:dd:98:82:d0:d4:83:82:bc:44:a1:23:ce:4c: c5:f7:3e:40:6e:9e:0d:9f:e0:86:f0:09:9d:c7:a7: 72:a0:e0:1d:d6:04:94:7e:81:89:07:07:d2:ec:7d: 50:2e:67:4f:d9:5c:02:a0:c0:81:41:5f:5d:6c:12: 35:e4:3c:7e:e1:5d:36:47:d9:6b:61:0c:be:bb:dd: b6:fb:cc:37:7c:bd:50:d2:f2:fa:89:92:0f:bb:9a: 56:74:ba:64:83:31:98:dd:4e:84:6d:dc:93:48:b2: 41:cb:04:6e:5f:5d:c6:84:cd:d4:3e:48:5e:2d:65: 10:32:d6:8a:d8:83:a9:4f:f1:bf:40:72:9e:76:b6: f8:f5:25:c7:04:e6:ae:b0:7d:9a:0e:89:23:12:8c: c8:9f:f3:f1:60:ea:a0:fe:b5:6c:29:06:d7:00:03: 2b:30:77:49:f2:49:23:aa:04:ca:ee:74:dc:01:da: 6b:ab:13:38:a1:44:a4:af:6c:93:56:02:96:07:80: 19:63:61:ab:aa:9b:e0:72:87:96:21:43:7d:4a:f2: d3:bf:21:ab:b8:5b:29:c5:df:9e:b1:1b:aa:fd:0d: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:EB:38:ED:20:A4:67:B0:96:B3:44:5E:72:E5:30:CC:40:A9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db96284a-2f7b-3d0e-8dd2-1acaa6b8ece8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:89:eb:03:1f:70:39:ed:56:3b:b4:15:d6:65:65:82:d3:f4: 37:1a:0b:ac:9a:62:37:61:53:13:f8:4c:a0:c6:5f:f7:24:ab: 2d:f7:34:6b:9f:e2:4b:0f:b4:ee:8b:c8:a6:9f:76:18:c5:8c: 29:ca:59:af:d0:77:51:28:61:77:fe:76:f8:8e:e3:0b:da:00: 87:36:60:69:e9:c5:85:fa:f5:8c:99:06:7f:99:0f:bd:d6:f5: 97:46:14:55:14:3b:bb:fd:87:2b:d6:9d:fb:d2:2f:b9:af:32: e8:d1:58:02:38:68:34:af:08:9e:c6:4a:5c:5a:12:6f:a9:fc: c9:ef:d1:24:6d:e8:95:64:70:9e:4b:7a:d4:a0:d1:31:fd:0f: 50:af:e0:28:83:c1:0f:40:e9:e5:e4:f3:83:b8:b8:c9:b4:90: 22:bd:66:9a:91:99:81:5a:16:4d:9d:18:7d:77:91:d7:71:59: 8d:d3:5e:56:67:b5:f0:26:ea:ad:c5:f4:ae:d3:35:97:50:01: 53:97:3c:e4:5a:8f:cc:f7:d3:87:bb:76:ba:e1:da:bb:2e:56: 77:68:bd:17:29:fb:2a:f2:53:93:ca:da:a1:59:2c:05:61:0f: b4:e4:5d:df:7d:f2:1f:b9:8a:3a:b4:6a:e9:c0:ce:64:30:9f: ec:96:06:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqDz/7wyUId6UbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEyOVoXDTI1MDkxODA5MzEyOVowLzEtMCsGA1UEAxMk Yjc3ZGI5NzgtMzI0MC00MWIzLTkxOTgtNzcyYTVjYjdkNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkP63lRDXiS3/mgunn4uY1e/KgTKcqsDO7oo HJZwut2YgtDUg4K8RKEjzkzF9z5Abp4Nn+CG8Amdx6dyoOAd1gSUfoGJBwfS7H1Q LmdP2VwCoMCBQV9dbBI15Dx+4V02R9lrYQy+u922+8w3fL1Q0vL6iZIPu5pWdLpk gzGY3U6EbdyTSLJBywRuX13GhM3UPkheLWUQMtaK2IOpT/G/QHKedrb49SXHBOau sH2aDokjEozIn/PxYOqg/rVsKQbXAAMrMHdJ8kkjqgTK7nTcAdprqxM4oUSkr2yT VgKWB4AZY2GrqpvgcoeWIUN9SvLTvyGruFspxd+esRuq/Q3bjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw26zjtIKRnsJazRF5y5TDMQKmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGI5NjI4NGEtMmY3Yi0z ZDBlLThkZDItMWFjYWE2YjhlY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaJ6wMfcDntVju0FdZlZYLT9DcaC6yaYjdhUxP4TKDGX/ckqy33NGuf 4ksPtO6LyKafdhjFjCnKWa/Qd1EoYXf+dviO4wvaAIc2YGnpxYX69YyZBn+ZD73W 9ZdGFFUUO7v9hyvWnfvSL7mvMujRWAI4aDSvCJ7GSlxaEm+p/Mnv0SRt6JVkcJ5L etSg0TH9D1Cv4CiDwQ9A6eXk84O4uMm0kCK9ZpqRmYFaFk2dGH13kddxWY3TXlZn tfAm6q3F9K7TNZdQAVOXPORaj8z304e7drrh2rsuVndovRcp+yryU5PK2qFZLAVh D7TkXd998h+5ijq0aunAzmQwn+yWBus= -----END CERTIFICATE-----Generated at Mon Jun 30 03:35:43 2025 by rpki-client