$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde338c2-d7ab-301b-9919-b4dfd12daa7a.roa File: fde338c2-d7ab-301b-9919-b4dfd12daa7a.roa (raw, json) Hash identifier: 1tpjMnjUngRlQhc5frbRn+Vr8Kc0sZSua0Yguf6+Wrw= Subject key identifier: D0:31:DD:2B:27:81:1F:EE:5F:E9:A6:4F:13:89:FC:B2:5C:F0:01:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7DA895963BBB0FDCAB080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde338c2-d7ab-301b-9919-b4dfd12daa7a.roa Signing time: Thu 19 Jun 2025 09:19:59 +0000 ROA not before: Thu 19 Jun 2025 09:19:59 +0000 ROA not after: Wed 17 Sep 2025 09:19:59 +0000 asID: 22773 IP address blocks: 70.171.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:da:89:59:63:bb:b0:fd:ca:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:59 2025 GMT Not After : Sep 17 09:19:59 2025 GMT Subject: CN=34099c30-530f-4b1e-9b32-74f338f93d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:38:b1:4b:e2:25:92:1f:73:e6:26:11:e8: 5c:6e:fe:ec:62:85:07:af:3b:d6:ba:da:44:c4:65: ee:3d:33:f1:ac:ea:b8:91:d1:09:f8:c0:c4:8d:3f: 03:47:f0:ef:a8:4a:e1:c4:f7:15:8c:60:4d:1a:a1: f7:76:78:3a:27:4e:8a:3c:e4:73:cd:1b:6f:14:11: b9:90:8a:58:43:2f:e6:d0:26:d4:86:b3:2a:76:b9: 32:45:c9:87:13:2d:13:f2:0c:73:6a:a5:aa:12:42: fe:7a:82:2b:e6:17:3a:66:c9:9b:a3:04:8d:5e:09: 38:a0:5b:d4:88:9e:7f:b4:6e:f4:da:1c:fd:b2:1f: 6e:45:22:b3:4f:92:e6:5b:47:a8:ef:a4:a2:23:35: 04:b6:44:16:ae:31:2b:67:29:db:42:ad:97:d9:ac: 0a:1e:3b:00:7a:02:fc:ab:69:33:3c:ce:9a:0b:c7: 40:b9:bb:c5:5f:32:8f:82:10:9a:d7:42:1f:5b:1c: 78:86:64:93:d2:66:1b:12:01:4c:96:1f:88:5f:f7: 19:09:e0:d1:5a:31:2d:c4:e2:29:5e:99:84:2a:2f: 64:57:5b:22:a7:e7:50:90:77:33:69:03:58:58:db: b8:6b:69:0c:1c:a6:ca:7c:59:26:4c:6f:c7:12:f8: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:DD:2B:27:81:1F:EE:5F:E9:A6:4F:13:89:FC:B2:5C:F0:01:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fde338c2-d7ab-301b-9919-b4dfd12daa7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:85:70:cc:67:f2:02:cb:13:a0:05:39:ef:82:a1:df:10:cb: 78:e9:5b:f9:1c:23:1f:8f:97:df:85:f8:a9:b1:e1:2e:76:b0: 13:85:1d:19:ff:3c:b5:ba:5b:25:36:5b:d8:c2:ad:83:21:a7: 61:27:f4:f3:37:3b:98:4c:33:37:31:07:c3:ca:d4:8d:4c:e3: 69:97:12:32:b9:78:bd:fa:8e:98:92:16:fb:aa:9a:5f:56:0d: 37:d6:17:c2:1f:83:ee:8d:e5:16:df:29:c4:6f:78:cf:92:d4: 6a:3d:15:14:df:16:a8:44:e5:2e:de:49:51:ab:6f:94:b1:9e: 20:8d:0b:45:b0:fb:78:ff:bc:5b:3e:d2:3b:85:66:0e:90:8f: 9d:9d:ea:f3:09:77:3a:21:1a:6e:02:d1:f3:2a:f6:55:d0:21: 8a:ad:78:93:ca:b9:aa:6b:70:52:a5:09:1c:8f:b4:fa:4a:24: 35:e6:d7:76:89:2a:e1:80:df:af:2d:53:4d:bb:16:c6:ce:a5: 84:12:7e:d6:cf:b7:f8:6d:88:7b:c2:6a:7a:49:d4:2a:f3:99: cc:9c:d2:0d:68:78:72:0c:c9:e0:33:9d:02:ff:f8:13:ec:4f: c4:43:7f:7b:3a:9c:ff:85:d9:74:de:52:a0:7a:8b:d9:c6:69: 51:79:78:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo919qJWWO7sP3KsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk1OVoXDTI1MDkxNzA5MTk1OVowLzEtMCsGA1UEAxMk MzQwOTljMzAtNTMwZi00YjFlLTliMzItNzRmMzM4ZjkzZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuA4sUviJZIfc+YmEehcbv7sYoUHrzvWutpE xGXuPTPxrOq4kdEJ+MDEjT8DR/DvqErhxPcVjGBNGqH3dng6J06KPORzzRtvFBG5 kIpYQy/m0CbUhrMqdrkyRcmHEy0T8gxzaqWqEkL+eoIr5hc6ZsmbowSNXgk4oFvU iJ5/tG702hz9sh9uRSKzT5LmW0eo76SiIzUEtkQWrjErZynbQq2X2awKHjsAegL8 q2kzPM6aC8dAubvFXzKPghCa10IfWxx4hmST0mYbEgFMlh+IX/cZCeDRWjEtxOIp XpmEKi9kV1sip+dQkHczaQNYWNu4a2kMHKbKfFkmTG/HEvhkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAx3SsngR/uX+mmTxOJ/LJc8AFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmRlMzM4YzItZDdhYi0z MDFiLTk5MTktYjRkZmQxMmRhYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyFcMxn8gLLE6AFOe+Cod8Qy3jpW/kcIx+Pl9+F+Kmx4S52sBOFHRn/ PLW6WyU2W9jCrYMhp2En9PM3O5hMMzcxB8PK1I1M42mXEjK5eL36jpiSFvuqml9W DTfWF8Ifg+6N5RbfKcRveM+S1Go9FRTfFqhE5S7eSVGrb5SxniCNC0Ww+3j/vFs+ 0juFZg6Qj52d6vMJdzohGm4C0fMq9lXQIYqteJPKuaprcFKlCRyPtPpKJDXm13aJ KuGA368tU027FsbOpYQSftbPt/htiHvCanpJ1Crzmcyc0g1oeHIMyeAznQL/+BPs T8RDf3s6nP+F2XTeUqB6i9nGaVF5eOk= -----END CERTIFICATE-----Generated at Tue Jul 1 07:37:51 2025 by rpki-client