$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a7425e0-149a-3b53-86f0-59bbe190d3a8.roa File: 0a7425e0-149a-3b53-86f0-59bbe190d3a8.roa (raw, json) Hash identifier: BfTi+AHmWWsn9/QADwyRyTcxYfsuRUvSEoDR9Cz9lz0= Subject key identifier: 23:BB:DD:3F:BC:4C:92:FC:04:8F:5A:95:3A:DB:5F:A2:E4:B5:CA:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD80F336798210096013B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a7425e0-149a-3b53-86f0-59bbe190d3a8.roa Signing time: Thu 19 Jun 2025 09:20:24 +0000 ROA not before: Thu 19 Jun 2025 09:20:24 +0000 ROA not after: Wed 17 Sep 2025 09:20:24 +0000 asID: 22773 IP address blocks: 70.174.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:0f:33:67:98:21:00:96:01:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:24 2025 GMT Not After : Sep 17 09:20:24 2025 GMT Subject: CN=029cb6fa-260a-468b-9358-789d0e5ada3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:b3:8d:51:0b:a4:05:55:25:38:23:b0:d6: ce:d4:5d:dc:49:a2:2a:7a:a4:a4:e3:51:1c:f2:4e: 5e:5b:cf:5b:d7:69:9d:3e:cd:67:08:8d:55:e3:6a: 4d:f2:8d:b1:d5:eb:db:3b:0c:f0:51:01:65:95:3d: 2a:1c:03:99:62:83:b6:60:f1:f2:cd:b8:fc:21:27: b4:9b:f2:9a:a9:16:a3:b8:18:b8:09:fe:9c:0b:d7: 65:f4:cc:32:6f:15:9b:66:5f:1f:fa:15:95:bc:17: 8e:c7:86:fe:a9:60:37:a9:d0:bf:c4:db:f4:eb:04: e3:f8:b0:be:fa:58:66:b3:13:a9:09:62:66:78:76: 85:42:4c:ef:ac:24:72:76:c7:6d:23:f5:f6:ec:34: 63:b4:74:2f:b7:d2:dc:ee:92:67:55:ae:dc:71:6c: 10:bc:3e:96:f8:7d:b2:ab:54:93:da:5d:f8:b3:ab: c7:79:95:d8:40:20:88:bf:cf:27:a3:4d:8e:58:58: f5:9f:86:b7:a3:f5:8e:f4:00:43:2d:ec:1e:af:3b: e1:e1:f1:a2:c9:d8:14:4e:28:27:39:73:d2:25:60: 42:24:c0:77:54:87:11:44:8f:11:aa:92:f8:07:4d: a6:ca:ba:9a:20:93:46:7d:da:16:5e:17:8d:e6:29: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BB:DD:3F:BC:4C:92:FC:04:8F:5A:95:3A:DB:5F:A2:E4:B5:CA:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a7425e0-149a-3b53-86f0-59bbe190d3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7b:df:20:e7:5c:2b:1d:dc:a6:cf:cf:70:33:d4:16:15:01: 12:8c:ce:87:2f:15:7d:39:f9:2d:72:f4:e6:85:96:9e:18:0c: e9:ce:10:c7:76:5f:aa:4c:ca:48:57:c4:8d:7b:a9:27:b2:9d: 9a:fe:5b:95:71:5d:94:ec:20:61:8c:89:a1:c6:5c:a8:0a:42: ac:4b:50:b5:89:f6:43:83:9e:51:63:ad:35:cf:0b:7f:7e:34: 70:a1:5b:a3:55:99:6e:24:58:8a:3c:20:f2:e1:33:20:f9:e5: e2:8c:78:7c:47:8b:b0:0e:05:eb:1c:52:41:c4:8c:85:08:b6: 49:8a:8b:0b:c6:e8:ed:59:0f:97:03:01:2b:9e:17:ad:3a:ea: 84:6a:34:e3:cb:b1:54:82:4c:5b:96:5e:98:86:43:2b:63:18: c4:0b:8a:69:94:6b:57:e9:d6:6f:02:8b:09:e7:5a:65:6b:a2: 3a:78:3f:38:bf:ea:07:1f:2b:99:11:fa:a9:82:fa:2f:f1:8a: 09:c9:ba:f6:ee:f2:c2:cf:1e:71:97:98:ab:39:d4:96:23:e5: b9:7d:1c:fe:27:85:c9:55:53:2e:e0:35:b0:da:2e:f4:75:46: e3:84:06:d8:cd:ce:11:f6:8d:1d:03:c0:dc:27:09:c7:13:05: 2a:0a:d0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92A8zZ5ghAJYBO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAyNFoXDTI1MDkxNzA5MjAyNFowLzEtMCsGA1UEAxMk MDI5Y2I2ZmEtMjYwYS00NjhiLTkzNTgtNzg5ZDBlNWFkYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b6zjVELpAVVJTgjsNbO1F3cSaIqeqSk41Ec 8k5eW89b12mdPs1nCI1V42pN8o2x1evbOwzwUQFllT0qHAOZYoO2YPHyzbj8ISe0 m/KaqRajuBi4Cf6cC9dl9MwybxWbZl8f+hWVvBeOx4b+qWA3qdC/xNv06wTj+LC+ +lhmsxOpCWJmeHaFQkzvrCRydsdtI/X27DRjtHQvt9Lc7pJnVa7ccWwQvD6W+H2y q1ST2l34s6vHeZXYQCCIv88no02OWFj1n4a3o/WO9ABDLewerzvh4fGiydgUTign OXPSJWBCJMB3VIcRRI8RqpL4B02myrqaIJNGfdoWXheN5inMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO73T+8TJL8BI9alTrbX6LktcoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE3NDI1ZTAtMTQ5YS0z YjUzLTg2ZjAtNTliYmUxOTBkM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ73yDnXCsd3KbPz3Az1BYVARKMzocvFX05+S1y9OaFlp4YDOnOEMd2 X6pMykhXxI17qSeynZr+W5VxXZTsIGGMiaHGXKgKQqxLULWJ9kODnlFjrTXPC39+ NHChW6NVmW4kWIo8IPLhMyD55eKMeHxHi7AOBescUkHEjIUItkmKiwvG6O1ZD5cD ASueF6066oRqNOPLsVSCTFuWXpiGQytjGMQLimmUa1fp1m8CiwnnWmVrojp4Pzi/ 6gcfK5kR+qmC+i/xignJuvbu8sLPHnGXmKs51JYj5bl9HP4nhclVUy7gNbDaLvR1 RuOEBtjNzhH2jR0DwNwnCccTBSoK0As= -----END CERTIFICATE-----Generated at Wed Jul 2 14:25:14 2025 by rpki-client