$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa File: 1d4e380e-fac1-329e-8e5c-6664e82556e2.roa (raw, json) Hash identifier: 05NCUm9T6oSIhdbyV3xotFe5rIbqkweZi+UscCrZJXI= Subject key identifier: 43:24:FB:B0:B5:57:14:90:70:4B:8D:DA:09:D6:67:44:A4:57:09:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A7FE90A5E42A23106CA000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa Signing time: Fri 20 Jun 2025 09:30:59 +0000 ROA not before: Fri 20 Jun 2025 09:30:59 +0000 ROA not after: Thu 18 Sep 2025 09:30:59 +0000 asID: 22773 IP address blocks: 70.170.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a7:fe:90:a5:e4:2a:23:10:6c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:30:59 2025 GMT Not After : Sep 18 09:30:59 2025 GMT Subject: CN=6ab89c2c-e642-4304-afac-1e81d15044d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:fe:c2:8c:4e:4c:3d:cd:33:8d:4d:52:17: f2:7e:c8:dd:c4:cb:2d:a4:e6:51:92:11:d8:89:d2: cf:9d:a1:a9:d6:c8:70:ff:3b:a6:ca:f9:23:d3:c3: 91:d7:91:83:1f:27:d3:4e:d8:d1:ed:98:52:c5:46: 87:ce:2f:98:7c:5a:fc:fa:0e:95:48:5d:bf:25:2d: 9f:69:a3:20:e8:20:01:69:f3:b2:74:b3:15:d8:e2: 9a:51:b4:bc:80:5b:8b:da:45:25:d8:30:ff:b9:e6: 9a:e0:03:44:85:51:e3:dd:0b:86:73:22:43:2e:5b: c3:27:d8:34:f0:2d:1a:de:3b:c6:18:db:37:eb:f5: 8b:6f:fb:84:67:48:62:53:2b:ae:16:93:ad:a3:de: 5a:b8:2a:a8:0c:ed:dd:b3:6e:6a:42:1a:28:2f:41: ac:5a:5a:04:24:29:f3:56:69:00:ee:02:0b:d4:64: 74:21:d3:d7:26:43:22:b0:92:f3:be:1a:f0:bb:76: 00:32:73:57:65:a6:d6:d4:4b:19:2b:d1:14:9e:31: 22:f4:9f:34:e1:63:0f:3a:75:8a:c2:5b:2e:83:93: 38:b5:18:82:15:2d:e2:d7:33:cc:df:b1:03:b5:62: f8:01:5e:98:5a:19:e7:2e:7a:b4:12:71:7c:0d:e9: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:24:FB:B0:B5:57:14:90:70:4B:8D:DA:09:D6:67:44:A4:57:09:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d4e380e-fac1-329e-8e5c-6664e82556e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:89:8a:92:af:5e:30:8f:6b:bf:66:41:e7:23:af:3c:3d:73: 19:50:bf:0e:0d:9c:bb:f2:a8:ac:88:2d:25:f2:d0:d2:f8:74: ab:4b:57:62:96:53:39:50:cb:e2:20:42:18:c4:0e:0c:ee:57: ed:2a:2c:04:12:e3:61:5e:b4:4c:af:89:bb:36:b5:ac:6a:ec: e3:49:77:6c:9f:d7:3c:53:1f:ff:f9:ca:ea:b0:d1:4f:73:29: be:06:37:8b:a1:0c:35:08:f9:ce:5d:27:37:ba:4d:c8:17:24: 62:0e:9e:3a:84:2e:d8:02:3a:1c:f9:18:71:c4:4e:39:bd:fd: da:4c:5f:61:aa:10:ce:9a:fb:cc:71:80:18:d3:25:e2:44:64: e4:90:62:b9:99:51:a9:4e:42:59:1a:cc:cf:60:6b:64:b6:7b: 66:df:eb:20:7d:8c:95:ad:fc:16:99:0b:35:4a:77:8e:5a:47: 5e:1b:6b:65:da:bd:e2:fd:65:e2:ba:5d:a6:71:05:2d:a4:46: a3:5e:64:b9:8b:30:48:99:55:3b:f4:04:0e:88:59:f0:9e:4d: 42:7f:37:17:05:ea:8c:5e:86:82:f5:7c:c6:2f:9f:69:ea:08: 81:7e:5f:1b:5d:0a:6f:24:eb:84:55:04:d5:b5:7f:61:0b:b7: 7b:5a:3b:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp/6QpeQqIxBsoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzA1OVoXDTI1MDkxODA5MzA1OVowLzEtMCsGA1UEAxMk NmFiODljMmMtZTY0Mi00MzA0LWFmYWMtMWU4MWQxNTA0NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6H+woxOTD3NM41NUhfyfsjdxMstpOZRkhHY idLPnaGp1shw/zumyvkj08OR15GDHyfTTtjR7ZhSxUaHzi+YfFr8+g6VSF2/JS2f aaMg6CABafOydLMV2OKaUbS8gFuL2kUl2DD/ueaa4ANEhVHj3QuGcyJDLlvDJ9g0 8C0a3jvGGNs36/WLb/uEZ0hiUyuuFpOto95auCqoDO3ds25qQhooL0GsWloEJCnz VmkA7gIL1GR0IdPXJkMisJLzvhrwu3YAMnNXZabW1EsZK9EUnjEi9J804WMPOnWK wlsug5M4tRiCFS3i1zPM37EDtWL4AV6YWhnnLnq0EnF8DemorwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMk+7C1VxSQcEuN2gnWZ0SkVwnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ0ZTM4MGUtZmFjMS0z MjllLThlNWMtNjY2NGU4MjU1NmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyJipKvXjCPa79mQecjrzw9cxlQvw4NnLvyqKyILSXy0NL4dKtLV2KW UzlQy+IgQhjEDgzuV+0qLAQS42FetEyvibs2taxq7ONJd2yf1zxTH//5yuqw0U9z Kb4GN4uhDDUI+c5dJze6TcgXJGIOnjqELtgCOhz5GHHETjm9/dpMX2GqEM6a+8xx gBjTJeJEZOSQYrmZUalOQlkazM9ga2S2e2bf6yB9jJWt/BaZCzVKd45aR14ba2Xa veL9ZeK6XaZxBS2kRqNeZLmLMEiZVTv0BA6IWfCeTUJ/NxcF6oxehoL1fMYvn2nq CIF+XxtdCm8k64RVBNW1f2ELt3taO04= -----END CERTIFICATE-----Generated at Wed Jul 2 14:24:30 2025 by rpki-client