$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd041607-8309-3e00-803d-a72fc35f741f.roa File: dd041607-8309-3e00-803d-a72fc35f741f.roa (raw, json) Hash identifier: oTsRrs5cGXFD7QngQn8OlJF2iihKvVN9aP6hXhkS4Cw= Subject key identifier: C5:8C:59:19:69:11:2C:E2:09:27:27:A3:20:C5:2F:DC:46:70:B7:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7969BD33F5A4461023180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd041607-8309-3e00-803d-a72fc35f741f.roa Signing time: Thu 19 Jun 2025 09:19:27 +0000 ROA not before: Thu 19 Jun 2025 09:19:27 +0000 ROA not after: Wed 17 Sep 2025 09:19:27 +0000 asID: 22773 IP address blocks: 70.162.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:96:9b:d3:3f:5a:44:61:02:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:27 2025 GMT Not After : Sep 17 09:19:27 2025 GMT Subject: CN=7157c35b-53d6-4c0b-bc2a-fd4a2ed3da63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:b7:96:e8:57:b0:2c:50:6b:47:40:70:cf: 56:12:87:f5:da:3e:6b:11:df:d1:d9:c4:1a:aa:37: 56:58:90:96:bb:95:8c:7d:75:d4:02:b8:43:18:ca: 80:30:b9:89:40:13:16:86:8f:72:a7:a8:9b:96:77: 09:f0:6d:95:6a:15:4b:61:e6:39:8d:9a:29:2a:6a: da:11:fd:77:46:64:a9:2b:fe:ee:c7:35:27:bf:61: 90:7b:27:cc:28:5f:93:3d:6c:23:79:3e:1b:26:29: 95:14:ef:55:36:c3:c8:ad:46:96:db:52:54:96:40: bd:b3:e3:df:c7:b5:ca:87:7c:75:50:4b:2c:05:c8: 96:10:13:24:0a:2c:82:fd:f7:6b:15:16:22:29:bd: 03:4a:87:12:a3:93:10:96:37:56:d8:fd:1a:37:ed: 7d:51:2e:3f:4a:e9:23:e0:aa:83:f6:93:5a:e7:dc: f4:fc:29:e1:bb:23:ff:b8:51:8f:16:af:2e:4b:c6: 2a:e4:ce:1d:16:86:03:06:83:d5:2d:84:bb:87:c7: 90:e5:46:67:9f:2b:c0:b3:54:d3:70:c4:f8:7a:84: 1b:81:9e:fd:d5:b5:c5:ac:43:e1:2d:2b:e1:8c:ce: 19:68:86:82:00:9b:d3:b6:48:78:4d:b3:00:ee:01: a8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8C:59:19:69:11:2C:E2:09:27:27:A3:20:C5:2F:DC:46:70:B7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd041607-8309-3e00-803d-a72fc35f741f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:20:e0:9c:e4:af:b2:4c:19:e0:6e:bc:7a:64:39:95:8e:4a: c4:ab:62:c3:2f:7b:2a:86:b6:ca:f3:7b:63:5c:15:ba:16:82: b0:35:e8:30:8d:51:95:ca:72:e0:5c:4f:d8:a6:b3:aa:ff:12: 37:1c:42:80:38:57:31:c6:8b:88:6c:3a:44:65:51:32:fa:7d: 95:a4:a5:c8:e8:9b:24:17:4f:f9:89:bb:17:9a:90:ac:b9:03: 12:56:a8:95:ac:ef:c5:af:8a:8a:92:75:aa:6e:41:98:61:db: 24:59:4c:66:23:cd:1a:e3:b1:f2:97:a1:af:3c:24:d3:c9:f2: 9a:cc:cc:b0:df:e7:07:20:37:4c:a5:25:d2:cf:b0:cd:60:3e: 0c:ad:04:75:7c:98:02:78:50:1d:98:2b:26:1c:fc:0e:c5:24: 13:ca:7c:e0:89:cb:53:3f:f3:48:bc:e3:ac:3d:15:a1:f7:e8: 71:13:07:09:a6:64:38:eb:9e:32:0f:35:6f:80:94:c2:84:56: bc:87:28:ed:15:dc:a3:91:a0:01:55:25:b6:2f:cb:ff:80:00: 43:b6:12:0d:25:b6:04:b4:05:71:d2:3a:46:87:33:94:bb:ad: c0:61:9b:99:77:96:ca:23:ef:4f:e4:19:28:25:c6:e9:76:ab: 27:8b:3f:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo915ab0z9aRGECMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkyN1oXDTI1MDkxNzA5MTkyN1owLzEtMCsGA1UEAxMk NzE1N2MzNWItNTNkNi00YzBiLWJjMmEtZmQ0YTJlZDNkYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyq3luhXsCxQa0dAcM9WEof12j5rEd/R2cQa qjdWWJCWu5WMfXXUArhDGMqAMLmJQBMWho9yp6iblncJ8G2VahVLYeY5jZopKmra Ef13RmSpK/7uxzUnv2GQeyfMKF+TPWwjeT4bJimVFO9VNsPIrUaW21JUlkC9s+Pf x7XKh3x1UEssBciWEBMkCiyC/fdrFRYiKb0DSocSo5MQljdW2P0aN+19US4/Sukj 4KqD9pNa59z0/CnhuyP/uFGPFq8uS8Yq5M4dFoYDBoPVLYS7h8eQ5UZnnyvAs1TT cMT4eoQbgZ791bXFrEPhLSvhjM4ZaIaCAJvTtkh4TbMA7gGo8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWMWRlpESziCScnoyDFL9xGcLcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGQwNDE2MDctODMwOS0z ZTAwLTgwM2QtYTcyZmMzNWY3NDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAg4Jzkr7JMGeBuvHpkOZWOSsSrYsMveyqGtsrze2NcFboWgrA16DCN UZXKcuBcT9ims6r/EjccQoA4VzHGi4hsOkRlUTL6fZWkpcjomyQXT/mJuxeakKy5 AxJWqJWs78WvioqSdapuQZhh2yRZTGYjzRrjsfKXoa88JNPJ8prMzLDf5wcgN0yl JdLPsM1gPgytBHV8mAJ4UB2YKyYc/A7FJBPKfOCJy1M/80i846w9FaH36HETBwmm ZDjrnjIPNW+AlMKEVryHKO0V3KORoAFVJbYvy/+AAEO2Eg0ltgS0BXHSOkaHM5S7 rcBhm5l3lsoj70/kGSglxul2qyeLPxE= -----END CERTIFICATE-----Generated at Tue Jul 1 14:00:03 2025 by rpki-client