$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa File: 23898270-eb25-35b5-97b6-3acfee4e93e7.roa (raw, json) Hash identifier: AP0J12/xpXua/QL+Svn/B8lv1H1Y45E6VbAMg5qLkmc= Subject key identifier: 3B:BF:2A:2C:69:4E:51:0B:01:A9:1A:54:25:63:D0:A5:AE:8C:9A:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A4E561C3AE3E65515D5621460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa Signing time: Wed 25 Jun 2025 07:07:19 +0000 ROA not before: Wed 25 Jun 2025 07:07:19 +0000 ROA not after: Tue 23 Sep 2025 07:07:19 +0000 asID: 22773 IP address blocks: 70.163.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4e:56:1c:3a:e3:e6:55:15:d5:62:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 25 07:07:19 2025 GMT Not After : Sep 23 07:07:19 2025 GMT Subject: CN=856557b4-8fa6-45e6-a692-0735de835b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:17:0a:fc:09:d7:f8:82:77:a8:ec:f1:d0:b3: 77:c9:45:94:6d:72:49:6b:0c:c0:5c:db:9d:1d:e1: a7:6a:55:e0:75:7c:36:ea:03:c4:7d:59:42:cf:ce: 7f:eb:29:b2:14:4d:92:46:c8:82:85:a3:df:27:17: 50:4d:17:b7:54:e0:38:09:d5:9c:99:6f:74:47:02: 68:67:2b:52:ea:ec:1a:ac:7c:97:4d:dc:79:3d:ae: b9:5e:c3:98:38:36:0e:96:cb:e6:6b:2c:cb:cd:e5: b1:15:33:c1:c2:1d:ed:0c:59:ae:16:33:81:95:4d: 9a:0d:b0:50:d6:6f:ac:95:38:ad:2d:8c:2b:c3:f7: da:1c:eb:97:a7:eb:88:25:16:97:1c:8a:cb:e9:94: 94:45:21:d1:a3:aa:41:c4:ce:e7:b2:7c:66:3b:bf: b8:54:b7:2c:92:0d:7d:a3:25:c4:a9:5e:50:21:8d: 82:ea:75:55:77:94:b3:9b:dc:bc:30:b0:98:d0:f0: 70:4e:fe:9f:6e:b8:b9:de:90:5f:a1:b3:08:7a:ef: e7:51:36:1d:8e:f0:90:09:df:46:0a:86:8d:04:1d: 29:67:38:08:13:c8:b1:08:43:5f:7f:ea:b9:ff:3b: 36:c0:f6:ae:7a:b0:12:26:c0:7d:b2:0a:49:58:64: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BF:2A:2C:69:4E:51:0B:01:A9:1A:54:25:63:D0:A5:AE:8C:9A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23898270-eb25-35b5-97b6-3acfee4e93e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.163.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:93:0f:ac:e5:8e:a7:04:2b:7e:14:d6:f1:cb:a9:02:19:0d: b0:b9:7b:9d:ea:84:0e:45:8f:2e:60:ed:5a:8e:db:da:64:0d: 03:00:ea:bc:76:c9:33:6f:7b:b0:49:86:55:b0:bf:5c:62:78: cd:74:51:39:c0:72:85:a5:7c:77:cc:1c:a3:2e:b7:1c:fb:23: 31:0f:f3:29:ca:4d:78:10:cf:6d:29:db:1d:ba:b4:2c:a7:cd: a3:c7:0e:41:1e:8b:64:69:20:c1:03:ea:e4:ac:50:de:d9:31: 78:f8:90:a8:5f:d2:3d:19:3d:16:e6:83:a9:fa:08:81:8a:96: cc:1a:b9:08:7f:33:13:6b:c4:93:a9:22:d9:43:3c:96:ba:66: 24:7b:b6:8e:52:d1:bb:b6:d3:59:83:03:ac:a5:5a:ca:74:b6: a3:a1:c7:a0:3f:47:ed:16:aa:39:8d:30:86:be:d1:0a:02:87: 7c:6c:7d:7b:0c:2f:ad:f0:c6:29:c8:84:17:75:77:2d:18:f1: 6b:b3:93:bc:53:4a:1f:75:06:92:ff:1b:e1:4b:29:75:af:4b: 7a:d6:c3:ef:5d:6f:7f:0e:53:24:98:be:b4:fd:e9:e4:ce:9f: d2:c1:2b:ac:6b:40:11:8a:70:32:5d:2c:13:c2:24:7e:80:d8: cd:c4:d1:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpOVhw64+ZVFdViFGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyNTA3MDcxOVoXDTI1MDkyMzA3MDcxOVowLzEtMCsGA1UEAxMk ODU2NTU3YjQtOGZhNi00NWU2LWE2OTItMDczNWRlODM1Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hcK/AnX+IJ3qOzx0LN3yUWUbXJJawzAXNud HeGnalXgdXw26gPEfVlCz85/6ymyFE2SRsiChaPfJxdQTRe3VOA4CdWcmW90RwJo ZytS6uwarHyXTdx5Pa65XsOYODYOlsvmayzLzeWxFTPBwh3tDFmuFjOBlU2aDbBQ 1m+slTitLYwrw/faHOuXp+uIJRaXHIrL6ZSURSHRo6pBxM7nsnxmO7+4VLcskg19 oyXEqV5QIY2C6nVVd5Szm9y8MLCY0PBwTv6fbri53pBfobMIeu/nUTYdjvCQCd9G CoaNBB0pZzgIE8ixCENff+q5/zs2wPauerASJsB9sgpJWGSVdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu/KixpTlELAakaVCVj0KWujJoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjM4OTgyNzAtZWIyNS0z NWI1LTk3YjYtM2FjZmVlNGU5M2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSTD6zljqcEK34U1vHLqQIZDbC5e53qhA5Fjy5g7VqO29pkDQMA6rx2 yTNve7BJhlWwv1xieM10UTnAcoWlfHfMHKMutxz7IzEP8ynKTXgQz20p2x26tCyn zaPHDkEei2RpIMED6uSsUN7ZMXj4kKhf0j0ZPRbmg6n6CIGKlswauQh/MxNrxJOp ItlDPJa6ZiR7to5S0bu201mDA6ylWsp0tqOhx6A/R+0WqjmNMIa+0QoCh3xsfXsM L63wxinIhBd1dy0Y8Wuzk7xTSh91BpL/G+FLKXWvS3rWw+9db38OUySYvrT96eTO n9LBK6xrQBGKcDJdLBPCJH6A2M3E0WE= -----END CERTIFICATE-----Generated at Wed Jul 2 14:57:44 2025 by rpki-client