$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa File: ec959914-dfb4-3a31-9ac4-21d16e29252e.roa (raw, json) Hash identifier: H+F6W0Q9Faw5n3EoH79PLBZkIT7ALhv8RcQwqP22cx4= Subject key identifier: EC:27:AB:56:16:92:3B:6F:44:C8:44:DB:D8:6E:2A:24:4D:38:5E:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8058ADCAFB6A74BF18380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa Signing time: Fri 20 Jun 2025 09:31:02 +0000 ROA not before: Fri 20 Jun 2025 09:31:02 +0000 ROA not after: Thu 18 Sep 2025 09:31:02 +0000 asID: 22773 IP address blocks: 70.170.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:05:8a:dc:af:b6:a7:4b:f1:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:02 2025 GMT Not After : Sep 18 09:31:02 2025 GMT Subject: CN=2414b2ba-7173-472e-91c8-ac0adc9ece8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:6f:85:d2:d9:e7:c5:44:0b:9d:f9:f4:11: 69:c4:a6:45:a4:b8:ec:cc:d7:ad:8b:b3:21:e5:ee: ef:d2:e1:21:61:cd:6f:ae:24:2d:4d:93:fc:7a:1d: 79:97:28:38:90:b3:f7:a4:bc:84:54:3a:a4:14:b9: ed:e0:fb:54:38:04:0d:01:4b:a5:5b:91:4b:a2:e2: e0:ac:f6:e0:03:86:13:a5:97:0f:8d:fa:fd:cf:3a: b3:c2:ea:4f:fa:34:b5:70:00:c2:d2:bf:b9:45:70: 67:f4:5c:38:a7:d0:bd:59:7b:19:0a:8e:fb:d7:42: fe:15:c8:54:85:89:07:df:da:2f:b9:48:ec:7d:e4: e8:a8:c9:b2:12:7f:48:84:8e:90:68:7e:fd:5d:16: 37:37:98:fd:33:f3:da:df:35:94:f3:55:e7:c6:f0: 5f:05:8c:55:3b:7e:06:d9:45:a2:4a:91:89:6e:63: de:c0:50:f2:4e:c6:ff:f6:ab:04:6a:56:44:c0:dc: 47:c9:cb:f5:29:b7:19:70:61:f4:0b:7f:0e:e2:fa: c1:d1:cb:16:5f:bc:e8:4a:63:62:f4:97:8d:f0:65: e1:af:20:2b:a0:28:3e:23:07:b4:11:f3:1f:b3:3b: 70:8f:a7:b6:56:fc:0c:57:fb:2b:7b:f7:c7:7f:e9: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:27:AB:56:16:92:3B:6F:44:C8:44:DB:D8:6E:2A:24:4D:38:5E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ec959914-dfb4-3a31-9ac4-21d16e29252e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b0:60:a2:9b:40:b7:33:b0:7b:6e:ba:6a:38:1f:51:6c:cf: 74:ab:89:bb:17:6d:8f:11:fc:6f:78:0d:a8:7f:94:3c:31:7f: 0f:55:1a:ff:07:b0:3e:e9:18:0f:75:83:c4:8d:19:1c:a1:63: 47:1d:bb:41:2e:5a:c0:85:2c:3d:78:8e:e8:01:47:2f:c6:5d: fd:33:a1:4e:9c:51:29:3a:e3:28:e2:2d:ac:bd:b1:f9:9f:64: 54:a4:10:9e:b4:01:66:bf:ff:13:fa:06:b6:9f:be:e3:4f:3c: bd:94:54:97:00:27:93:60:ac:2b:6c:51:17:b8:a3:09:05:71: 07:a9:dd:c7:60:c2:d9:92:e7:d8:00:1a:72:9a:56:9d:4f:a5: c6:0a:9e:5b:ca:ef:c9:53:6b:06:77:cf:9d:ef:20:25:bf:44: dc:d0:a5:8a:9b:c7:0c:c2:80:a1:0d:9e:45:b9:7a:cc:20:a4: 09:9b:64:86:47:ef:83:4b:16:6d:02:7d:30:da:30:48:b2:21: 99:b0:da:22:61:74:62:95:82:d3:5a:37:53:41:42:2e:63:1f: b2:73:60:6b:71:36:97:12:da:cf:d7:4f:41:f8:7f:4c:31:7a: 3f:4b:f3:b5:24:a9:9e:68:7a:f8:a5:e4:37:86:53:e6:19:42: e7:c3:20:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqAWK3K+2p0vxg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEwMloXDTI1MDkxODA5MzEwMlowLzEtMCsGA1UEAxMk MjQxNGIyYmEtNzE3My00NzJlLTkxYzgtYWMwYWRjOWVjZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVvhdLZ58VEC5359BFpxKZFpLjszNeti7Mh 5e7v0uEhYc1vriQtTZP8eh15lyg4kLP3pLyEVDqkFLnt4PtUOAQNAUulW5FLouLg rPbgA4YTpZcPjfr9zzqzwupP+jS1cADC0r+5RXBn9Fw4p9C9WXsZCo7710L+FchU hYkH39ovuUjsfeToqMmyEn9IhI6QaH79XRY3N5j9M/Pa3zWU81XnxvBfBYxVO34G 2UWiSpGJbmPewFDyTsb/9qsEalZEwNxHycv1KbcZcGH0C38O4vrB0csWX7zoSmNi 9JeN8GXhryAroCg+Iwe0EfMfsztwj6e2VvwMV/sre/fHf+mR+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwnq1YWkjtvRMhE29huKiRNOF7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWM5NTk5MTQtZGZiNC0z YTMxLTlhYzQtMjFkMTZlMjkyNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKwYKKbQLczsHtuumo4H1Fsz3SribsXbY8R/G94Dah/lDwxfw9VGv8H sD7pGA91g8SNGRyhY0cdu0EuWsCFLD14jugBRy/GXf0zoU6cUSk64yjiLay9sfmf ZFSkEJ60AWa//xP6BrafvuNPPL2UVJcAJ5NgrCtsURe4owkFcQep3cdgwtmS59gA GnKaVp1PpcYKnlvK78lTawZ3z53vICW/RNzQpYqbxwzCgKENnkW5eswgpAmbZIZH 74NLFm0CfTDaMEiyIZmw2iJhdGKVgtNaN1NBQi5jH7JzYGtxNpcS2s/XT0H4f0wx ej9L87UkqZ5oevil5DeGU+YZQufDIBo= -----END CERTIFICATE-----Generated at Mon Jun 30 09:48:07 2025 by rpki-client