$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de016ab5-a02b-31d2-a32e-f0de80aa63f0.roa File: de016ab5-a02b-31d2-a32e-f0de80aa63f0.roa (raw, json) Hash identifier: KR/u9D0cOnJpI/+8cuL9W0LwO6CijTmBoh3AfVha+M4= Subject key identifier: 51:72:93:46:E9:06:A4:EB:EF:21:81:32:54:15:32:2C:84:B6:C2:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E754174DAC9F339F7A22940 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de016ab5-a02b-31d2-a32e-f0de80aa63f0.roa Signing time: Thu 19 Jun 2025 14:37:08 +0000 ROA not before: Thu 19 Jun 2025 14:37:08 +0000 ROA not after: Wed 17 Sep 2025 14:37:08 +0000 asID: 22773 IP address blocks: 70.190.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:41:74:da:c9:f3:39:f7:a2:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:08 2025 GMT Not After : Sep 17 14:37:08 2025 GMT Subject: CN=2bc97898-bd3b-4d9c-a7f7-06c882aefc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:d7:f6:4f:f5:73:f5:15:cc:0b:cf:e9:bd: 6a:27:31:35:43:fe:97:e9:42:32:c3:bb:a5:c9:c0: f6:cb:5e:30:b8:f9:d8:97:94:90:3b:c6:12:24:3d: f6:ff:c8:93:b3:69:0b:69:32:90:bb:00:0a:34:1a: 45:76:1c:ee:8f:c4:37:f8:a0:ae:c5:3b:a4:4c:00: 62:95:20:78:4c:81:1e:49:1a:05:6f:df:05:27:24: c7:11:9b:fa:d5:e0:7c:2f:77:c7:ee:a0:a0:a8:6c: a2:3f:2f:f7:b4:a7:02:43:8d:02:e2:b0:10:b8:08: dd:dd:62:2d:b3:48:5f:b6:74:05:10:17:e0:a4:98: 56:9a:b1:b5:39:d3:4f:0e:0b:3d:6e:bc:10:17:a7: eb:66:0b:3b:60:d2:cb:f4:7d:7c:45:83:ca:cf:01: 87:83:fa:d1:10:e7:d0:d8:99:dc:c3:85:a3:74:30: 8f:15:98:7b:9c:21:31:09:b4:9a:54:4e:9e:af:c6: fc:96:a9:88:fa:4a:ca:60:29:21:2b:9d:ee:a9:88: 9a:b0:77:43:dc:03:38:c8:c8:e1:d2:75:11:63:ef: db:08:03:4c:93:2d:f7:90:4c:13:44:71:c8:b6:fc: b0:01:65:82:e1:1b:7b:fb:99:3e:be:4e:d1:64:b0: d7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:72:93:46:E9:06:A4:EB:EF:21:81:32:54:15:32:2C:84:B6:C2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de016ab5-a02b-31d2-a32e-f0de80aa63f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f4:9f:6d:08:47:7a:1f:05:26:69:05:27:c0:20:d4:33:61: f7:e8:e6:1b:ab:17:8e:54:b5:ce:87:73:e9:37:4c:dc:a3:e8: d3:22:38:8f:0d:b0:2f:ca:7e:81:10:36:ee:51:9b:65:c1:77: d4:ee:60:2a:dc:e3:2b:be:23:e4:99:7f:6c:fe:1c:16:0b:9a: 46:e1:46:cc:2b:7e:a5:7b:7a:cb:a3:a1:bf:01:25:22:f4:d3: 11:4c:15:50:cf:34:d1:92:c6:c6:a4:f1:3c:67:c7:43:49:a1: 88:b7:37:4e:39:d2:9c:47:fb:36:a7:c2:43:d1:fd:22:62:e7: 81:80:a2:22:87:71:34:cc:f5:6f:c6:a4:25:b8:84:0d:f1:80: 1c:12:ec:56:30:7a:b5:ce:76:2c:e3:98:19:a4:f7:b1:39:63: 6a:ab:02:4b:71:c5:f7:9e:41:91:33:22:b0:52:65:6d:3c:c5: bf:c8:92:8d:36:4c:b1:3c:21:b6:6f:7c:2e:95:8d:ad:cf:59: b2:e6:b3:15:c0:5e:04:93:bf:31:2f:5e:9e:3b:62:dd:1c:af: 9e:da:b4:fd:8b:bb:73:46:82:0b:a1:5d:8d:11:42:a5:b6:a1: 0a:2e:9b:bb:ee:d9:a5:c7:cb:3a:f6:62:f2:3c:9b:20:b6:3d: 08:7c:a1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dUF02snzOfeiKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzcwOFoXDTI1MDkxNzE0MzcwOFowLzEtMCsGA1UEAxMk MmJjOTc4OTgtYmQzYi00ZDljLWE3ZjctMDZjODgyYWVmYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gTX9k/1c/UVzAvP6b1qJzE1Q/6X6UIyw7ul ycD2y14wuPnYl5SQO8YSJD32/8iTs2kLaTKQuwAKNBpFdhzuj8Q3+KCuxTukTABi lSB4TIEeSRoFb98FJyTHEZv61eB8L3fH7qCgqGyiPy/3tKcCQ40C4rAQuAjd3WIt s0hftnQFEBfgpJhWmrG1OdNPDgs9brwQF6frZgs7YNLL9H18RYPKzwGHg/rREOfQ 2Jncw4WjdDCPFZh7nCExCbSaVE6er8b8lqmI+krKYCkhK53uqYiasHdD3AM4yMjh 0nURY+/bCANMky33kEwTRHHItvywAWWC4Rt7+5k+vk7RZLDXhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFyk0bpBqTr7yGBMlQVMiyEtsJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGUwMTZhYjUtYTAyYi0z MWQyLWEzMmUtZjBkZTgwYWE2M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH0n20IR3ofBSZpBSfAINQzYffo5hurF45Utc6Hc+k3TNyj6NMiOI8N sC/KfoEQNu5Rm2XBd9TuYCrc4yu+I+SZf2z+HBYLmkbhRswrfqV7esujob8BJSL0 0xFMFVDPNNGSxsak8Txnx0NJoYi3N0450pxH+zanwkPR/SJi54GAoiKHcTTM9W/G pCW4hA3xgBwS7FYwerXOdizjmBmk97E5Y2qrAktxxfeeQZEzIrBSZW08xb/Iko02 TLE8IbZvfC6Vja3PWbLmsxXAXgSTvzEvXp47Yt0cr57atP2Lu3NGgguhXY0RQqW2 oQoum7vu2aXHyzr2YvI8myC2PQh8oYs= -----END CERTIFICATE-----Generated at Mon Jun 30 14:07:48 2025 by rpki-client