$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f938daf0-61c4-39be-ab4c-0888775512f3.roa File: f938daf0-61c4-39be-ab4c-0888775512f3.roa (raw, json) Hash identifier: 2OVyST9JvKlQ5BBqS2PKk88Si0gg+q+XFStGSY/6jQ4= Subject key identifier: 13:71:85:6F:84:88:75:42:31:4C:01:9E:DB:E9:48:75:5C:A4:D4:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8D7CFE282A416E8529F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f938daf0-61c4-39be-ab4c-0888775512f3.roa Signing time: Fri 20 Jun 2025 09:32:42 +0000 ROA not before: Fri 20 Jun 2025 09:32:42 +0000 ROA not after: Thu 18 Sep 2025 09:32:42 +0000 asID: 22773 IP address blocks: 70.180.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:d7:cf:e2:82:a4:16:e8:52:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:42 2025 GMT Not After : Sep 18 09:32:42 2025 GMT Subject: CN=50ab2258-5591-4ebd-a002-282fb1f62757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:7c:d2:02:a6:9e:72:3d:64:fd:4f:1a:57: 0e:ba:19:83:00:5d:0d:f2:a0:8b:20:70:83:cc:48: 0d:82:b1:9b:5a:1d:75:f8:3e:a6:16:e7:63:c8:4a: 44:3e:92:21:47:68:97:88:91:69:21:48:b5:ab:2e: 22:7a:61:19:b7:81:76:a8:54:d8:db:76:39:e5:dd: b1:85:ed:67:16:01:bc:b2:22:6c:59:d0:9a:cb:70: 4c:4e:66:57:36:8f:ef:7e:b6:52:5f:21:f4:28:79: 36:60:c6:0c:78:ff:19:b2:37:d0:2e:77:5e:6b:05: 2b:6b:26:30:07:42:1c:bf:70:29:ea:df:c8:93:bf: ee:5a:60:74:ab:d4:16:8f:11:cf:e9:f0:97:ff:6f: 17:3d:91:9a:79:95:f9:ba:8a:99:f7:c5:0b:ca:79: 1e:a7:d8:61:7d:4b:12:47:87:4c:4b:42:77:77:11: bd:44:42:08:04:14:93:18:87:ce:e1:43:eb:33:c0: d2:cb:17:94:0e:d8:c4:21:40:fe:6b:4b:ba:92:62: 68:80:4e:00:b2:81:b7:a5:c6:99:70:92:dd:b2:bf: b1:68:5d:6b:19:5e:f7:27:36:ab:bb:65:d4:b2:96: 67:5b:3e:bd:e7:65:dc:b3:5b:06:da:ef:ec:17:16: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:71:85:6F:84:88:75:42:31:4C:01:9E:DB:E9:48:75:5C:A4:D4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f938daf0-61c4-39be-ab4c-0888775512f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:dc:10:ce:1e:57:e0:5f:20:80:6b:5a:8a:60:71:c1:2d:7c: 33:d6:fe:74:29:53:86:0d:ee:66:f7:cf:94:55:59:36:75:7a: 93:ac:96:0e:e8:62:c1:ba:23:81:5a:65:9a:85:de:81:cc:72: 13:91:ec:0e:f7:0c:46:e4:3d:8c:83:4f:ed:9b:c2:78:28:67: 16:1f:65:b5:28:7c:0b:e4:62:e8:53:e7:41:e2:36:47:f1:ab: 2a:66:ca:2c:56:f4:cf:c5:74:52:5d:d2:95:e6:28:53:ac:b5: 22:4d:78:bb:c8:1a:38:b8:30:40:27:e6:7c:14:7f:47:c0:22: b1:d6:8e:3c:c6:02:c0:3e:bb:29:e5:5e:69:43:14:be:d9:35: 38:51:60:1f:2f:e6:03:6c:78:df:30:89:20:68:19:ec:e3:75: 92:a0:1d:38:86:97:9c:8a:36:e5:a2:29:17:9d:11:32:2c:b8: 75:7d:f1:57:d1:55:94:e3:6a:75:e9:2e:f5:32:c7:39:49:a8: d3:c4:63:56:39:33:4a:f2:26:67:62:ed:3b:4d:a9:f0:a8:90: 49:5b:b1:c3:50:82:b5:9e:69:ea:28:d6:d4:da:5c:c8:46:2c: ea:b5:f4:7d:70:6d:7c:89:74:bd:bf:59:48:8b:2a:18:fe:c9: 88:c1:c2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqNfP4oKkFuhSn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0MloXDTI1MDkxODA5MzI0MlowLzEtMCsGA1UEAxMk NTBhYjIyNTgtNTU5MS00ZWJkLWEwMDItMjgyZmIxZjYyNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogd80gKmnnI9ZP1PGlcOuhmDAF0N8qCLIHCD zEgNgrGbWh11+D6mFudjyEpEPpIhR2iXiJFpIUi1qy4iemEZt4F2qFTY23Y55d2x he1nFgG8siJsWdCay3BMTmZXNo/vfrZSXyH0KHk2YMYMeP8ZsjfQLndeawUrayYw B0Icv3Ap6t/Ik7/uWmB0q9QWjxHP6fCX/28XPZGaeZX5uoqZ98ULynkep9hhfUsS R4dMS0J3dxG9REIIBBSTGIfO4UPrM8DSyxeUDtjEIUD+a0u6kmJogE4AsoG3pcaZ cJLdsr+xaF1rGV73Jzaru2XUspZnWz6952Xcs1sG2u/sFxbeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNxhW+EiHVCMUwBntvpSHVcpNRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjkzOGRhZjAtNjFjNC0z OWJlLWFiNGMtMDg4ODc3NTUxMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDcEM4eV+BfIIBrWopgccEtfDPW/nQpU4YN7mb3z5RVWTZ1epOslg7o YsG6I4FaZZqF3oHMchOR7A73DEbkPYyDT+2bwngoZxYfZbUofAvkYuhT50HiNkfx qypmyixW9M/FdFJd0pXmKFOstSJNeLvIGji4MEAn5nwUf0fAIrHWjjzGAsA+uynl XmlDFL7ZNThRYB8v5gNseN8wiSBoGezjdZKgHTiGl5yKNuWiKRedETIsuHV98VfR VZTjanXpLvUyxzlJqNPEY1Y5M0ryJmdi7TtNqfCokElbscNQgrWeaeoo1tTaXMhG LOq19H1wbXyJdL2/WUiLKhj+yYjBwmU= -----END CERTIFICATE-----Generated at Tue Jul 1 17:58:47 2025 by rpki-client