$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1816b504-4992-30cf-9d32-3ac5e9c49af1.roa File: 1816b504-4992-30cf-9d32-3ac5e9c49af1.roa (raw, json) Hash identifier: +g0PgVDGdfQ+08YtKLIw/qFjdgexNGtcMh9C4pJ60KM= Subject key identifier: 95:EE:E7:52:FD:72:C1:44:98:DD:79:A6:B5:85:E5:40:C8:D0:85:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E7545B9BD55DE439779B040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1816b504-4992-30cf-9d32-3ac5e9c49af1.roa Signing time: Thu 19 Jun 2025 14:37:10 +0000 ROA not before: Thu 19 Jun 2025 14:37:10 +0000 ROA not after: Wed 17 Sep 2025 14:37:10 +0000 asID: 22773 IP address blocks: 70.190.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:45:b9:bd:55:de:43:97:79:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:10 2025 GMT Not After : Sep 17 14:37:10 2025 GMT Subject: CN=2f832274-fac1-4824-bd48-d754449d7a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:71:4e:ff:86:aa:ec:6f:6e:6d:6c:63:1f:c8: bd:61:04:0c:13:3e:ab:41:06:c3:38:42:70:36:fd: 89:1b:8e:36:33:46:9c:c0:73:05:16:2a:db:da:fa: 58:34:8d:5f:8a:cc:11:ce:69:bd:2e:ff:91:27:3c: ce:5a:89:45:99:07:eb:7b:7e:67:d9:e3:e2:08:89: 16:b9:4d:0f:6a:50:7f:9b:bf:a3:ec:a1:fd:1f:01: bb:45:79:4c:58:1e:ed:8f:62:94:98:4b:21:87:c3: 64:67:8c:de:2b:c3:43:0a:0f:31:7e:1f:e2:6a:e9: cd:3d:59:2e:c6:e4:08:73:56:2d:5d:fa:26:05:7b: f1:f8:61:6f:65:f8:b0:3a:b1:cd:7d:c2:c7:f0:0c: 35:f9:0e:0e:aa:3e:36:50:57:fb:68:35:37:96:5a: 16:fd:f1:ee:5d:87:83:a5:00:2e:2e:f8:6b:e6:3e: 93:9f:cd:90:f4:cb:1c:1a:c9:2d:c0:6b:79:94:7a: 34:52:66:c0:0a:da:17:bb:bd:00:a0:19:a4:cd:94: fe:00:94:9f:49:ab:9a:04:aa:a8:ba:be:73:bf:65: de:d0:73:b4:3b:77:e0:1f:92:4b:c7:f1:71:59:eb: d6:47:46:93:4a:2e:80:9d:02:bd:f6:e9:ca:08:57: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EE:E7:52:FD:72:C1:44:98:DD:79:A6:B5:85:E5:40:C8:D0:85:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1816b504-4992-30cf-9d32-3ac5e9c49af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ab:5a:76:c8:2f:e1:e7:da:d7:ea:7f:e1:c6:11:49:5d:70: dc:f9:d0:d7:d3:e6:be:0b:85:c7:78:17:c9:47:6e:68:73:45: d1:94:e3:95:0f:6e:a6:c2:e9:3f:9e:b3:06:ea:82:6c:5c:f7: e0:a1:3d:b4:3a:6d:ea:84:c4:ab:d8:d5:53:6e:04:2e:9e:c5: 2e:bb:69:88:ae:b8:ed:59:62:f8:59:07:b2:2a:58:2c:99:25: fa:f9:fa:37:1c:29:1f:c2:c8:3b:2b:d9:cc:3d:cd:98:69:73: f2:05:9b:6e:74:1d:6f:8b:22:e4:0f:e2:8f:9a:0d:9a:4f:35: 61:ed:d4:78:08:a6:c0:ba:12:f9:07:ac:63:9a:e9:a0:e5:23: a0:b2:21:40:e8:c5:49:1b:ce:a2:6b:4f:27:28:d2:6f:dd:ce: 8a:f2:20:f4:f2:2e:71:60:26:0f:eb:15:25:e3:f7:98:bf:32: b7:b2:d5:f2:d0:dd:3c:f7:10:b8:46:f7:3c:2d:b6:75:6e:fd: bd:b8:22:10:4a:c5:18:47:3c:9c:0e:41:e2:5d:79:d3:f5:55: 93:a1:09:0d:f0:bf:51:1d:59:7b:12:38:8c:ac:fb:3a:7f:90: e1:29:8e:78:0f:90:94:10:03:49:24:a0:f2:52:04:3b:03:3a: 94:68:1e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dUW5vVXeQ5d5sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzcxMFoXDTI1MDkxNzE0MzcxMFowLzEtMCsGA1UEAxMk MmY4MzIyNzQtZmFjMS00ODI0LWJkNDgtZDc1NDQ0OWQ3YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3FO/4aq7G9ubWxjH8i9YQQMEz6rQQbDOEJw Nv2JG442M0acwHMFFirb2vpYNI1fiswRzmm9Lv+RJzzOWolFmQfre35n2ePiCIkW uU0PalB/m7+j7KH9HwG7RXlMWB7tj2KUmEshh8NkZ4zeK8NDCg8xfh/iaunNPVku xuQIc1YtXfomBXvx+GFvZfiwOrHNfcLH8Aw1+Q4Oqj42UFf7aDU3lloW/fHuXYeD pQAuLvhr5j6Tn82Q9MscGsktwGt5lHo0UmbACtoXu70AoBmkzZT+AJSfSauaBKqo ur5zv2Xe0HO0O3fgH5JLx/FxWevWR0aTSi6AnQK99unKCFdZOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXu51L9csFEmN15prWF5UDI0IUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTgxNmI1MDQtNDk5Mi0z MGNmLTlkMzItM2FjNWU5YzQ5YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWrWnbIL+Hn2tfqf+HGEUldcNz50NfT5r4Lhcd4F8lHbmhzRdGU45UP bqbC6T+eswbqgmxc9+ChPbQ6beqExKvY1VNuBC6exS67aYiuuO1ZYvhZB7IqWCyZ Jfr5+jccKR/CyDsr2cw9zZhpc/IFm250HW+LIuQP4o+aDZpPNWHt1HgIpsC6EvkH rGOa6aDlI6CyIUDoxUkbzqJrTyco0m/dzoryIPTyLnFgJg/rFSXj95i/Mrey1fLQ 3Tz3ELhG9zwttnVu/b24IhBKxRhHPJwOQeJdedP1VZOhCQ3wv1EdWXsSOIys+zp/ kOEpjngPkJQQA0kkoPJSBDsDOpRoHiw= -----END CERTIFICATE-----Generated at Wed Jul 2 14:38:09 2025 by rpki-client