$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1410c640-c39c-395b-887a-c1bf6177b1c0.roa File: 1410c640-c39c-395b-887a-c1bf6177b1c0.roa (raw, json) Hash identifier: 2HUvSqrgO7sFRFbOo5Odqz+3AqeWuzuWqJ2IWhJ3YLY= Subject key identifier: 60:32:E3:D6:62:C2:FB:21:1C:D7:1A:04:EA:BB:24:58:1C:55:73:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCB03D64FEFBE40BCEC620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1410c640-c39c-395b-887a-c1bf6177b1c0.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 70.90.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:b0:3d:64:fe:fb:e4:0b:ce:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=50705d78-6a5f-45fa-b8ee-a301efd95459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:6b:ef:25:82:08:5d:48:c4:ef:99:77:ab: c7:8e:04:e7:bb:d9:57:b7:d5:5e:e6:58:74:9c:dc: c1:b9:31:a1:81:a0:27:cf:28:1f:7f:02:dd:69:7c: 3a:bd:f5:5e:d3:e2:a8:0b:b3:44:8f:12:13:a5:b2: 13:7d:4b:18:72:c3:98:5a:d3:61:c0:25:9a:37:e0: bd:a6:29:8d:d3:34:fb:65:e9:ca:94:42:16:fb:47: 46:16:c6:52:e8:1b:4c:cc:aa:08:fd:79:1d:ea:9b: 49:f1:13:00:03:46:86:3a:22:e2:a4:f5:6e:83:f6: fd:2b:5b:34:91:70:91:78:10:a5:19:d8:0b:6f:6b: e8:13:fc:94:05:16:99:18:40:ba:55:86:cb:27:b5: 5d:25:e1:4f:82:85:68:32:35:6a:ea:06:c1:6e:93: 4c:68:ed:d7:b4:1e:dd:bb:f9:40:db:6a:10:77:f8: a3:57:49:08:4d:27:f1:3d:5c:12:d8:52:6e:ef:34: 32:b4:2d:93:bf:3f:61:67:44:ee:a8:d7:bd:a1:b7: 8b:76:80:f8:d9:61:87:eb:f3:7e:ae:ff:d5:42:0c: 40:11:cd:ca:c2:89:cb:18:21:5b:29:d8:25:82:7e: 37:e4:98:0d:d3:30:67:6a:8a:f0:eb:cf:21:de:35: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:32:E3:D6:62:C2:FB:21:1C:D7:1A:04:EA:BB:24:58:1C:55:73:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1410c640-c39c-395b-887a-c1bf6177b1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.90.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:55:73:aa:03:1b:a4:a7:ae:68:05:30:83:63:97:14:e5:72: d9:cd:a9:37:05:77:9f:84:ed:12:e4:06:91:a9:89:b2:19:96: 69:23:15:10:1e:60:bc:10:46:af:7b:57:d8:df:96:10:5d:39: a3:0a:20:60:e1:ca:3e:5c:5b:a4:ed:54:c2:97:17:34:47:28: 43:2a:6d:c8:c4:3a:34:c5:81:05:bc:c5:2d:34:a8:61:87:54: 2b:aa:64:83:61:66:9a:f5:56:f4:47:60:74:6d:d2:9a:ea:be: d9:da:b1:d0:be:be:55:64:e7:a0:fd:35:cd:3d:ad:0b:7e:97: 17:c1:a1:89:8d:4f:2e:62:64:eb:66:49:6c:62:93:6c:dc:dc: d0:cd:c3:d0:27:2f:47:3c:e3:b4:88:e3:ed:ef:7c:67:05:2a: 23:42:d3:dd:7c:0f:01:b4:7d:c1:eb:9b:7c:7a:2c:d1:8b:d6: 1e:02:a8:eb:25:e6:50:4b:33:95:55:d1:38:19:0e:6c:e4:30: 22:f2:21:83:bb:a1:f6:c7:81:d3:40:e7:c7:bd:d7:a9:8d:1e: 44:39:46:5f:52:ec:8e:74:a4:2f:77:21:d9:ae:ad:83:20:1c: e1:c6:36:84:bf:e3:3d:1f:6d:16:bb:04:54:bd:d5:19:48:09: b0:9a:71:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LA9ZP775AvOxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTA3MDVkNzgtNmE1Zi00NWZhLWI4ZWUtYTMwMWVmZDk1NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim5r7yWCCF1IxO+Zd6vHjgTnu9lXt9Ve5lh0 nNzBuTGhgaAnzygffwLdaXw6vfVe0+KoC7NEjxITpbITfUsYcsOYWtNhwCWaN+C9 pimN0zT7ZenKlEIW+0dGFsZS6BtMzKoI/Xkd6ptJ8RMAA0aGOiLipPVug/b9K1s0 kXCReBClGdgLb2voE/yUBRaZGEC6VYbLJ7VdJeFPgoVoMjVq6gbBbpNMaO3XtB7d u/lA22oQd/ijV0kITSfxPVwS2FJu7zQytC2Tvz9hZ0TuqNe9obeLdoD42WGH6/N+ rv/VQgxAEc3KwonLGCFbKdglgn435JgN0zBnaorw688h3jXLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAy49ZiwvshHNcaBOq7JFgcVXOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTQxMGM2NDAtYzM5Yy0z OTViLTg4N2EtYzFiZjYxNzdiMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRlqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxVc6oDG6SnrmgFMINjlxTlctnNqTcFd5+E7RLkBpGpibIZlmkjFRAe YLwQRq97V9jflhBdOaMKIGDhyj5cW6TtVMKXFzRHKEMqbcjEOjTFgQW8xS00qGGH VCuqZINhZpr1VvRHYHRt0prqvtnasdC+vlVk56D9Nc09rQt+lxfBoYmNTy5iZOtm SWxik2zc3NDNw9AnL0c847SI4+3vfGcFKiNC0918DwG0fcHrm3x6LNGL1h4CqOsl 5lBLM5VV0TgZDmzkMCLyIYO7ofbHgdNA58e916mNHkQ5Rl9S7I50pC93IdmurYMg HOHGNoS/4z0fbRa7BFS91RlICbCacTw= -----END CERTIFICATE-----Generated at Sun Jul 20 17:36:58 2025 by rpki-client