$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27dca2d1-1238-314b-9176-20cca7ac59bd.roa File: 27dca2d1-1238-314b-9176-20cca7ac59bd.roa (raw, json) Hash identifier: Qy10IAIgaaYgn1kTg22wYfqr4LcecK2N+xr46jxxHQU= Subject key identifier: 0F:5E:8E:0A:37:16:37:F9:05:C6:B9:BF:32:76:FD:A4:C7:2F:50:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7DF305850F38B4070C780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27dca2d1-1238-314b-9176-20cca7ac59bd.roa Signing time: Thu 19 Jun 2025 09:20:02 +0000 ROA not before: Thu 19 Jun 2025 09:20:02 +0000 ROA not after: Wed 17 Sep 2025 09:20:02 +0000 asID: 22773 IP address blocks: 70.171.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:df:30:58:50:f3:8b:40:70:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:02 2025 GMT Not After : Sep 17 09:20:02 2025 GMT Subject: CN=ad0f723b-9542-46a7-a5b9-9a3a5486a04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:e9:7a:78:47:a2:32:09:68:b1:b1:75:9f: 2b:d4:af:0c:63:6b:eb:33:c5:1e:65:bc:82:bf:af: ef:03:2b:d2:93:28:58:da:4a:12:cf:31:1b:0d:5c: f6:61:ff:f5:83:ea:4d:15:06:c0:5f:b5:49:71:ac: 3c:5a:b1:46:50:52:60:ce:6c:18:9c:33:3f:da:c7: 9f:b0:d7:cc:9f:c1:b7:33:44:ae:50:d3:9c:1d:a9: 45:f7:10:1d:6a:8d:41:21:d4:a5:eb:d6:d5:12:6a: 64:21:59:aa:5d:3d:9b:85:30:52:7c:0b:bc:8b:2a: 15:f7:8e:7a:e0:10:36:c6:93:01:12:a7:19:18:be: 29:0b:dc:ab:60:a9:0c:6f:10:7a:11:66:6a:bc:24: 9b:4b:4e:86:cf:cd:c9:60:3b:f5:29:a7:e1:38:dd: 1e:78:cb:0e:d6:a9:7f:1e:15:fb:54:c0:58:6e:ab: 85:6e:76:1b:55:4f:9e:31:83:23:96:95:95:3c:e8: 00:99:98:0a:62:21:f0:cd:f6:63:0b:15:fe:d9:b0: 57:c7:62:a7:f3:a3:b7:2f:13:46:5e:ec:80:af:19: 3c:09:16:6d:2c:25:c2:86:e3:19:08:c8:9e:c0:b9: 92:79:74:19:8d:65:62:d3:cd:97:f2:57:5f:cb:8d: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:8E:0A:37:16:37:F9:05:C6:B9:BF:32:76:FD:A4:C7:2F:50:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27dca2d1-1238-314b-9176-20cca7ac59bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fe:33:48:9d:56:2f:ab:6b:a6:5f:18:c5:71:4b:21:40:e1: b1:72:a5:41:55:72:7f:7b:04:63:9d:20:40:80:cb:51:a4:a6: 7d:cc:8a:67:06:81:e6:13:82:59:30:bc:35:f6:c2:4f:7d:be: 8a:f2:a6:71:12:14:56:65:27:5e:e3:3d:a1:08:79:17:f9:8e: aa:64:2f:42:47:0b:b0:24:61:42:4e:45:4b:e9:f7:2b:de:80: 5d:b0:39:83:28:6c:75:73:27:ce:8e:9e:f9:28:15:fa:3b:6c: 0e:3d:78:93:95:ad:28:fa:a5:91:bf:75:11:1a:f9:76:91:67: 74:7f:b4:ea:3a:93:ba:a7:9f:bb:6b:be:a3:1b:61:21:36:a5: 5a:f8:9e:bf:b0:a7:00:c1:b7:ca:60:b4:c9:52:7b:cb:1e:a1: 38:77:47:3c:08:1e:7a:88:05:24:e9:96:61:80:b0:f6:15:ec: eb:80:7d:8c:1a:bc:e3:73:68:b7:db:83:c4:b2:09:f0:d0:15: b5:17:96:28:3e:76:33:44:4e:00:94:a9:c4:d3:eb:02:a8:e8: ff:fa:ca:63:48:a1:7c:1a:c7:25:ed:60:f8:b3:b0:ba:37:a9: 18:f4:27:cc:3d:65:ff:ee:12:01:2b:f3:bd:ae:a2:f7:85:8f: 22:79:33:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9198wWFDzi0Bwx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAwMloXDTI1MDkxNzA5MjAwMlowLzEtMCsGA1UEAxMk YWQwZjcyM2ItOTU0Mi00NmE3LWE1YjktOWEzYTU0ODZhMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYfpenhHojIJaLGxdZ8r1K8MY2vrM8UeZbyC v6/vAyvSkyhY2koSzzEbDVz2Yf/1g+pNFQbAX7VJcaw8WrFGUFJgzmwYnDM/2sef sNfMn8G3M0SuUNOcHalF9xAdao1BIdSl69bVEmpkIVmqXT2bhTBSfAu8iyoV9456 4BA2xpMBEqcZGL4pC9yrYKkMbxB6EWZqvCSbS06Gz83JYDv1KafhON0eeMsO1ql/ HhX7VMBYbquFbnYbVU+eMYMjlpWVPOgAmZgKYiHwzfZjCxX+2bBXx2Kn86O3LxNG XuyArxk8CRZtLCXChuMZCMiewLmSeXQZjWVi082X8ldfy43psQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9ejgo3Fjf5Bca5vzJ2/aTHL1ACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjdkY2EyZDEtMTIzOC0z MTRiLTkxNzYtMjBjY2E3YWM1OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX+M0idVi+ra6ZfGMVxSyFA4bFypUFVcn97BGOdIECAy1Gkpn3MimcG geYTglkwvDX2wk99vorypnESFFZlJ17jPaEIeRf5jqpkL0JHC7AkYUJORUvp9yve gF2wOYMobHVzJ86OnvkoFfo7bA49eJOVrSj6pZG/dREa+XaRZ3R/tOo6k7qnn7tr vqMbYSE2pVr4nr+wpwDBt8pgtMlSe8seoTh3RzwIHnqIBSTplmGAsPYV7OuAfYwa vONzaLfbg8SyCfDQFbUXlig+djNETgCUqcTT6wKo6P/6ymNIoXwaxyXtYPizsLo3 qRj0J8w9Zf/uEgEr872uoveFjyJ5M+Q= -----END CERTIFICATE-----Generated at Wed Jul 2 07:34:00 2025 by rpki-client