$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2066ecbb-4290-3bae-aa38-d3588f37a353.roa File: 2066ecbb-4290-3bae-aa38-d3588f37a353.roa (raw, json) Hash identifier: +VmkO3AYYjEuBAFyozFe9kzUwpdertTmlg16cyTTIoA= Subject key identifier: 8A:28:2C:39:D3:3A:80:0F:79:EC:4C:B9:94:F2:22:0C:68:D8:C0:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8D34374611A591CD8C400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2066ecbb-4290-3bae-aa38-d3588f37a353.roa Signing time: Fri 20 Jun 2025 09:32:40 +0000 ROA not before: Fri 20 Jun 2025 09:32:40 +0000 ROA not after: Thu 18 Sep 2025 09:32:40 +0000 asID: 22773 IP address blocks: 70.180.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:d3:43:74:61:1a:59:1c:d8:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:40 2025 GMT Not After : Sep 18 09:32:40 2025 GMT Subject: CN=2647aecf-c0c0-4db8-b5bc-16ab99eb19a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7f:67:ec:48:7c:01:8f:94:73:b3:a0:a0:e2: 6a:8c:74:3c:34:ab:01:24:b8:49:1c:22:92:ee:96: 03:31:e2:0b:1e:e7:3b:81:1c:21:c6:cf:a5:c7:de: c8:84:7f:fc:20:f6:1e:2a:47:05:04:de:fb:98:e1: 6e:f0:f7:f2:83:66:03:ec:b7:c7:b2:0f:b4:bd:36: 02:03:46:8b:b8:8b:af:97:d4:17:56:17:38:e3:e4: 04:24:61:bc:00:51:f4:2f:30:83:d5:57:ec:d4:c4: 22:51:83:5f:f6:d2:73:ed:3b:7b:9c:2c:35:b4:b9: 08:f6:f6:df:a2:6e:77:fc:44:8e:73:e9:4e:b3:52: 2c:54:2a:93:e1:03:e0:e7:d7:00:c6:75:5b:c6:89: 02:57:4f:e0:57:c2:25:07:c0:3c:87:f7:36:87:2a: 56:ac:95:48:8c:74:cf:ed:41:4d:5f:a0:01:b8:8c: 4e:bf:7e:89:d8:af:90:40:d3:c7:b5:2a:dc:3b:52: 34:99:cc:f5:04:63:fb:22:b9:13:48:08:bc:d9:b8: 5d:44:18:88:d7:ce:88:6b:38:ad:65:86:26:6f:92: 5c:ec:b6:8a:d1:09:be:6f:0f:94:d5:27:7a:8a:dc: 8c:d7:2d:f4:87:e9:7c:3c:81:0e:95:89:4b:66:a2: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:2C:39:D3:3A:80:0F:79:EC:4C:B9:94:F2:22:0C:68:D8:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2066ecbb-4290-3bae-aa38-d3588f37a353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:35:66:e7:a6:83:3f:8e:76:54:23:40:a4:bc:4f:53:d5:89: f4:19:98:d4:fd:c4:1d:46:ad:75:15:f0:79:ce:31:2e:1d:2a: 4b:fd:50:79:a8:bb:c0:62:66:df:bf:06:8b:e1:73:25:b9:e6: 68:71:cc:63:db:a8:8b:64:17:8e:f4:3c:53:f8:1e:5e:81:09: 87:43:60:6f:ca:36:52:c3:47:5c:fb:e6:e3:87:9b:16:f9:c9: f5:fe:43:10:33:5f:30:e5:c4:5b:13:39:51:a5:da:d2:09:81: be:f5:5a:d2:2e:00:64:3c:80:b2:b8:90:e6:17:0c:40:c0:e6: 64:b7:a5:a8:1b:13:2b:21:9f:68:7e:13:45:08:99:7f:c7:8e: 4d:d4:ba:08:56:73:37:55:be:b6:a5:59:0a:70:d6:2c:0e:c1: 38:3c:a3:b6:8c:61:fc:3d:28:01:8a:6d:d4:bc:37:a8:44:66: aa:2b:f3:1a:f0:9d:1e:79:ef:a0:8c:4d:36:0f:24:50:3a:3c: 24:41:2d:52:8c:11:c5:4b:ba:c4:52:1b:97:28:b0:58:f0:68: 00:52:f9:7f:8c:d5:67:bb:2a:4d:1f:df:8a:53:2c:fb:60:66: f3:c4:39:a0:b8:92:4c:c8:c3:d2:21:d4:5d:fa:dd:79:2e:88: 9c:18:2a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqNNDdGEaWRzYxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI0MFoXDTI1MDkxODA5MzI0MFowLzEtMCsGA1UEAxMk MjY0N2FlY2YtYzBjMC00ZGI4LWI1YmMtMTZhYjk5ZWIxOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin9n7Eh8AY+Uc7OgoOJqjHQ8NKsBJLhJHCKS 7pYDMeILHuc7gRwhxs+lx97IhH/8IPYeKkcFBN77mOFu8Pfyg2YD7LfHsg+0vTYC A0aLuIuvl9QXVhc44+QEJGG8AFH0LzCD1Vfs1MQiUYNf9tJz7Tt7nCw1tLkI9vbf om53/ESOc+lOs1IsVCqT4QPg59cAxnVbxokCV0/gV8IlB8A8h/c2hypWrJVIjHTP 7UFNX6ABuIxOv36J2K+QQNPHtSrcO1I0mcz1BGP7IrkTSAi82bhdRBiI186Iazit ZYYmb5Jc7LaK0Qm+bw+U1Sd6ityM1y30h+l8PIEOlYlLZqJ2GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIooLDnTOoAPeexMuZTyIgxo2MA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA2NmVjYmItNDI5MC0z YmFlLWFhMzgtZDM1ODhmMzdhMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg1Zuemgz+OdlQjQKS8T1PVifQZmNT9xB1GrXUV8HnOMS4dKkv9UHmo u8BiZt+/BovhcyW55mhxzGPbqItkF470PFP4Hl6BCYdDYG/KNlLDR1z75uOHmxb5 yfX+QxAzXzDlxFsTOVGl2tIJgb71WtIuAGQ8gLK4kOYXDEDA5mS3pagbEyshn2h+ E0UImX/Hjk3UughWczdVvralWQpw1iwOwTg8o7aMYfw9KAGKbdS8N6hEZqor8xrw nR5576CMTTYPJFA6PCRBLVKMEcVLusRSG5cosFjwaABS+X+M1We7Kk0f34pTLPtg ZvPEOaC4kkzIw9Ih1F363XkuiJwYKjA= -----END CERTIFICATE-----Generated at Wed Jul 2 14:23:27 2025 by rpki-client