$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa File: e3c52c97-c290-3307-892c-62205511a25b.roa (raw, json) Hash identifier: kEUNe011xbwX1mhDfjTlG5smkrcpPB8O2fWbO3C/80o= Subject key identifier: 22:4F:B0:19:51:3C:CA:AD:7B:1A:A9:27:83:45:EC:A3:E8:63:90:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8095A1A22CB0597FBAF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa Signing time: Fri 20 Jun 2025 09:31:04 +0000 ROA not before: Fri 20 Jun 2025 09:31:04 +0000 ROA not after: Thu 18 Sep 2025 09:31:04 +0000 asID: 22773 IP address blocks: 70.170.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:09:5a:1a:22:cb:05:97:fb:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:04 2025 GMT Not After : Sep 18 09:31:04 2025 GMT Subject: CN=fc7a7234-7ff5-4e88-8dce-485bd71588db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:37:0b:50:67:a2:c1:92:e3:77:45:75:5f: 45:ee:14:6c:7e:59:b5:af:7b:6d:68:b8:fa:ff:c2: 17:05:90:1b:96:de:a6:50:0e:ce:41:8f:57:3c:16: ca:8a:f7:01:a2:10:f0:f2:a0:06:ec:39:98:69:09: b7:20:73:07:91:0f:a8:99:64:17:c4:97:87:4c:72: 51:6a:73:c7:8f:3c:9d:3b:65:3e:e4:e5:9e:30:f9: ee:a8:68:36:75:98:c9:2a:fd:af:10:56:e3:9e:11: ef:33:7b:99:a1:b1:b6:7f:20:47:c2:1a:ad:82:7c: 38:10:f6:55:fb:30:3e:84:8b:ad:4d:3f:a2:40:10: da:26:20:38:8b:79:97:33:79:34:09:d3:37:6d:6c: 48:c9:d3:96:62:6f:40:55:e3:31:50:3a:71:41:80: 46:4a:d8:65:9b:82:23:bb:36:bc:7a:66:17:40:d4: b8:92:ec:ba:68:8a:ef:f7:ee:10:ce:02:93:dc:f1: a7:09:5d:13:ff:58:a5:c1:cb:f4:ea:45:61:31:37: 1e:2c:f1:b8:83:eb:b1:6f:91:71:64:41:61:13:8a: a6:83:fc:3f:5f:ac:54:76:61:ea:cb:04:d6:68:9b: bd:ee:33:66:0a:1a:9c:c7:5c:55:93:46:76:70:b7: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4F:B0:19:51:3C:CA:AD:7B:1A:A9:27:83:45:EC:A3:E8:63:90:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:71:79:dd:50:51:1d:79:3d:41:4e:44:5d:e5:1c:94:f3:a6: 52:84:eb:57:b3:fa:af:7b:78:07:b1:1e:65:5d:bc:de:fe:a1: 6c:6d:a5:e9:ba:b9:ab:c4:ce:2e:d5:df:cd:2c:3c:74:f7:6f: 03:f9:4f:f3:db:e8:5b:ee:0a:aa:7b:db:7d:a7:b1:9f:12:a0: 87:52:dd:c5:3f:fd:59:0b:8e:06:b5:12:96:c3:63:8b:b4:e6: d4:c4:2c:b3:e6:15:99:fe:d4:ed:f8:c9:57:fb:00:0d:b0:5d: 30:72:42:43:33:0b:97:40:b9:b9:65:ed:96:0b:95:c6:da:73: 48:8c:e5:a2:7c:2e:c0:58:c9:01:86:6e:f9:9d:4d:17:13:d3: a7:d1:f0:b1:ad:9b:4c:9b:73:4f:5a:a2:e2:79:32:f1:a1:e6: e2:61:7d:d1:4a:b6:9c:20:d2:59:fa:fe:41:87:61:e1:75:7c: 9f:b9:fe:5f:bb:d1:0e:cb:c3:7b:0e:bc:c2:b9:80:e1:4d:89: 24:3b:a2:bd:22:72:4b:19:37:f4:41:b7:ec:65:f5:b9:20:bc: dd:89:9a:a2:97:7c:08:5e:d3:95:cd:34:5d:3b:4d:68:18:37: d4:e2:76:89:11:90:de:59:83:00:a7:57:e5:4f:61:a1:01:2d: dc:e3:00:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqAlaGiLLBZf7rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEwNFoXDTI1MDkxODA5MzEwNFowLzEtMCsGA1UEAxMk ZmM3YTcyMzQtN2ZmNS00ZTg4LThkY2UtNDg1YmQ3MTU4OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9c3C1BnosGS43dFdV9F7hRsflm1r3ttaLj6 /8IXBZAblt6mUA7OQY9XPBbKivcBohDw8qAG7DmYaQm3IHMHkQ+omWQXxJeHTHJR anPHjzydO2U+5OWeMPnuqGg2dZjJKv2vEFbjnhHvM3uZobG2fyBHwhqtgnw4EPZV +zA+hIutTT+iQBDaJiA4i3mXM3k0CdM3bWxIydOWYm9AVeMxUDpxQYBGSthlm4Ij uza8emYXQNS4kuy6aIrv9+4QzgKT3PGnCV0T/1ilwcv06kVhMTceLPG4g+uxb5Fx ZEFhE4qmg/w/X6xUdmHqywTWaJu97jNmChqcx1xVk0Z2cLfNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJPsBlRPMqtexqpJ4NF7KPoY5DEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTNjNTJjOTctYzI5MC0z MzA3LTg5MmMtNjIyMDU1MTFhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFxed1QUR15PUFORF3lHJTzplKE61ez+q97eAexHmVdvN7+oWxtpem6 uavEzi7V380sPHT3bwP5T/Pb6FvuCqp7232nsZ8SoIdS3cU//VkLjga1EpbDY4u0 5tTELLPmFZn+1O34yVf7AA2wXTByQkMzC5dAubll7ZYLlcbac0iM5aJ8LsBYyQGG bvmdTRcT06fR8LGtm0ybc09aouJ5MvGh5uJhfdFKtpwg0ln6/kGHYeF1fJ+5/l+7 0Q7Lw3sOvMK5gOFNiSQ7or0icksZN/RBt+xl9bkgvN2JmqKXfAhe05XNNF07TWgY N9TidokRkN5ZgwCnV+VPYaEBLdzjABM= -----END CERTIFICATE-----Generated at Tue Jul 1 21:09:01 2025 by rpki-client