$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1725528f-0275-37bd-b551-f4c251eaee42.roa File: 1725528f-0275-37bd-b551-f4c251eaee42.roa (raw, json) Hash identifier: EqUDYxUkAjjaCH6YH8LbOcMudCivd1sf9xBb3D7ImUo= Subject key identifier: 21:EF:27:D4:AF:71:06:5C:1C:C8:FE:86:F4:3A:42:E2:2B:0B:BE:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7F38DBAAF7F9DF7227680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1725528f-0275-37bd-b551-f4c251eaee42.roa Signing time: Thu 19 Jun 2025 09:20:11 +0000 ROA not before: Thu 19 Jun 2025 09:20:11 +0000 ROA not after: Wed 17 Sep 2025 09:20:11 +0000 asID: 22773 IP address blocks: 70.172.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:f3:8d:ba:af:7f:9d:f7:22:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:11 2025 GMT Not After : Sep 17 09:20:11 2025 GMT Subject: CN=60d47c44-6e51-44ea-afc3-8a6889c7f71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:49:fc:6a:3d:75:b5:41:74:39:a2:83:4a: ee:4a:1c:90:e3:24:ce:17:f2:e3:78:81:3a:8b:92: 87:8f:c0:13:22:2d:8d:c1:6b:bf:69:24:ed:d5:a8: cd:ba:c0:4b:3c:46:15:e0:c1:79:45:60:4c:ab:fa: 8a:56:12:8e:d9:b4:d3:03:c8:98:ab:ad:de:22:2d: 04:1f:f1:ef:11:cd:d7:2a:28:c9:d7:74:70:02:94: c3:e8:f5:f7:8d:e6:55:37:9d:04:b6:cf:cb:6e:66: 9c:fa:f2:12:aa:e1:75:2d:68:41:8f:9d:49:ce:49: ba:00:8b:77:7a:5c:29:0c:19:47:8e:cd:ad:9c:8b: 57:01:fe:e6:db:7a:d7:15:e2:c0:31:9d:28:8b:65: 2d:ee:c8:cd:8d:7e:81:f2:78:fd:8c:d9:fd:dc:bc: ca:37:17:7d:64:54:27:b8:12:41:24:62:d4:c2:45: b7:95:65:50:4f:d0:b5:f1:1f:cf:06:e1:a6:0b:96: 6e:08:ed:91:a4:9f:1a:b5:e5:0b:d5:75:af:a9:35: 1a:b1:f8:90:1b:c2:7d:f8:63:64:32:25:a2:a3:8b: 4a:3c:0e:71:ea:3b:03:3e:f9:36:dc:1f:3c:ac:7b: 87:10:34:4d:9f:9d:b1:2b:d7:00:ae:c7:95:41:22: 90:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:27:D4:AF:71:06:5C:1C:C8:FE:86:F4:3A:42:E2:2B:0B:BE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1725528f-0275-37bd-b551-f4c251eaee42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:5e:df:a4:e1:4a:23:fb:dc:e7:55:0d:77:2e:f1:df:52:bc: 3e:dd:7c:95:6b:d7:15:a5:6f:77:c3:ab:73:12:a4:0e:f3:1c: b4:27:bf:c1:28:8f:90:9c:81:f0:8d:28:f3:62:9f:d3:4e:54: de:1a:45:ca:a1:9a:46:13:46:4e:4b:57:97:8f:50:74:62:f7: f0:09:7c:e9:9f:32:e6:a2:44:16:9f:09:bf:83:35:a8:3b:e1: 5f:f0:58:06:80:b3:5f:cb:48:cd:44:58:a5:03:43:fe:0d:3d: 01:d0:d2:10:ce:76:33:35:41:e4:0c:8e:6c:c5:0b:be:8c:cd: c8:2f:14:75:53:85:a4:9b:34:c1:dc:8b:86:51:ef:a8:ae:b0: aa:f1:ea:af:cb:c8:67:0b:30:2d:ca:e2:f0:7b:a9:eb:95:e0: 59:ad:09:a0:d6:51:7b:6d:d0:f9:fb:64:1e:7c:49:14:b7:37: eb:76:eb:e7:bc:c6:8f:84:e7:d4:24:c3:07:5b:6c:89:9a:6a: 55:7a:41:df:7f:c2:7a:b3:0c:31:9a:eb:09:3b:34:a7:22:bf: 21:74:a7:00:5f:ec:ff:85:26:fb:88:af:12:4b:a9:d7:aa:15: e7:1d:77:fd:17:1b:22:6f:0f:dc:da:ab:aa:6a:26:cb:d9:d6: 62:e4:a0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91/ONuq9/nfcidoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAxMVoXDTI1MDkxNzA5MjAxMVowLzEtMCsGA1UEAxMk NjBkNDdjNDQtNmU1MS00NGVhLWFmYzMtOGE2ODg5YzdmNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8tJ/Go9dbVBdDmig0ruShyQ4yTOF/LjeIE6 i5KHj8ATIi2NwWu/aSTt1ajNusBLPEYV4MF5RWBMq/qKVhKO2bTTA8iYq63eIi0E H/HvEc3XKijJ13RwApTD6PX3jeZVN50Ets/Lbmac+vISquF1LWhBj51Jzkm6AIt3 elwpDBlHjs2tnItXAf7m23rXFeLAMZ0oi2Ut7sjNjX6B8nj9jNn93LzKNxd9ZFQn uBJBJGLUwkW3lWVQT9C18R/PBuGmC5ZuCO2RpJ8ateUL1XWvqTUasfiQG8J9+GNk MiWio4tKPA5x6jsDPvk23B88rHuHEDRNn52xK9cArseVQSKQ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHvJ9SvcQZcHMj+hvQ6QuIrC74cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcyNTUyOGYtMDI3NS0z N2JkLWI1NTEtZjRjMjUxZWFlZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRe36ThSiP73OdVDXcu8d9SvD7dfJVr1xWlb3fDq3MSpA7zHLQnv8Eo j5CcgfCNKPNin9NOVN4aRcqhmkYTRk5LV5ePUHRi9/AJfOmfMuaiRBafCb+DNag7 4V/wWAaAs1/LSM1EWKUDQ/4NPQHQ0hDOdjM1QeQMjmzFC76MzcgvFHVThaSbNMHc i4ZR76iusKrx6q/LyGcLMC3K4vB7qeuV4FmtCaDWUXtt0Pn7ZB58SRS3N+t26+e8 xo+E59QkwwdbbImaalV6Qd9/wnqzDDGa6wk7NKcivyF0pwBf7P+FJvuIrxJLqdeq Fecdd/0XGyJvD9zaq6pqJsvZ1mLkoEk= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:57 2025 by rpki-client