$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2af20394-1228-3969-8f23-72d63ccac856.roa File: 2af20394-1228-3969-8f23-72d63ccac856.roa (raw, json) Hash identifier: guxM1qff4+XJ/iuuq+uNSaaZ3PwQMfVh7DEuFv+7fR4= Subject key identifier: F0:81:E5:43:36:9A:26:8A:BC:E3:10:03:F6:7C:01:B8:63:95:61:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74CEF7A200A181F7B85340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2af20394-1228-3969-8f23-72d63ccac856.roa Signing time: Thu 19 Jun 2025 14:36:14 +0000 ROA not before: Thu 19 Jun 2025 14:36:14 +0000 ROA not after: Wed 17 Sep 2025 14:36:14 +0000 asID: 22773 IP address blocks: 70.185.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:ce:f7:a2:00:a1:81:f7:b8:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:14 2025 GMT Not After : Sep 17 14:36:14 2025 GMT Subject: CN=78ae9ee7-6d5e-4605-8123-266293102c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:4d:32:4e:bd:27:52:e6:c4:03:84:5b:f3: 73:eb:1c:5b:18:33:dd:3e:37:62:98:21:67:39:51: 03:76:de:a2:d3:b7:0b:df:ab:37:01:49:8b:44:70: 86:0b:9a:69:69:60:af:10:44:b0:e6:dd:36:0f:80: d8:22:f1:8b:9f:22:37:b2:cc:25:6c:c9:fb:18:b8: 44:ab:84:21:d8:e0:9d:89:78:01:6e:ef:24:8a:a9: 07:71:9f:30:2b:b6:b0:16:bc:2a:8f:1f:26:a4:49: 09:47:ee:7e:03:b1:f9:0b:37:76:8c:25:1b:d8:5f: f0:bb:31:c9:73:f4:32:a8:2e:cd:99:16:38:8e:95: a3:e6:60:d9:15:13:59:03:90:57:49:b3:c4:aa:3f: 92:d3:bb:44:ee:98:05:ba:84:6e:b6:8b:ad:c7:25: 61:2b:ee:83:e5:16:02:27:a8:ed:a3:0b:30:9b:98: 12:a1:d0:8c:31:48:dd:5f:65:82:55:13:b3:43:7c: 29:aa:b4:b9:2f:42:02:4a:1a:c1:97:f7:e8:3a:eb: b9:8b:b9:7e:45:ed:8f:6d:bf:5f:ec:16:98:c4:ca: 86:70:6c:ea:04:e8:3a:05:8f:91:97:4b:e5:76:75: 58:2b:9a:84:39:36:49:71:a9:ce:2f:5b:d8:cb:73: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:E5:43:36:9A:26:8A:BC:E3:10:03:F6:7C:01:B8:63:95:61:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2af20394-1228-3969-8f23-72d63ccac856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.185.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:83:96:a4:ea:46:49:bb:cb:75:c7:3a:56:07:2b:c1:9a:70: f9:bd:0f:1e:d5:cd:5d:5e:73:8a:2e:43:39:17:fa:44:d9:ce: 58:c0:cd:aa:e8:18:2b:fc:c7:ae:fe:eb:4c:aa:26:26:33:57: d1:7b:fe:db:81:e1:22:ba:8e:74:b5:4e:fb:f1:9a:b1:79:60: 14:de:71:3d:50:90:ab:92:b3:68:f4:bd:02:ee:0f:67:45:53: af:f9:c3:81:da:64:96:4b:7e:df:f2:8a:cd:9d:8d:8f:ff:43: 4b:01:45:cd:3c:6e:94:bc:88:14:14:67:98:0e:93:37:07:36: 3e:16:1c:48:77:17:94:1c:c5:19:5b:6a:c0:b1:cf:0c:d0:10: 8c:1e:16:28:c5:9d:e7:ac:b1:fe:4e:71:64:58:96:35:08:23: f5:69:11:e2:19:f2:b2:9c:64:b2:29:9c:d4:de:c4:2b:04:a4: 38:86:67:6f:37:83:60:b5:21:15:3c:88:60:b6:b6:71:db:ca: 24:4d:a6:b1:94:a0:5c:b4:90:c8:ae:d9:54:7d:c7:86:3c:74: ad:c1:49:8a:62:9d:70:1f:77:06:9b:55:4b:63:c2:8d:5b:14: 56:c9:92:de:4f:c6:6a:6e:6e:d1:5e:a2:54:77:4c:fe:05:bb: f1:c7:e5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dM73ogChgfe4U0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYxNFoXDTI1MDkxNzE0MzYxNFowLzEtMCsGA1UEAxMk NzhhZTllZTctNmQ1ZS00NjA1LTgxMjMtMjY2MjkzMTAyYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnhNMk69J1LmxAOEW/Nz6xxbGDPdPjdimCFn OVEDdt6i07cL36s3AUmLRHCGC5ppaWCvEESw5t02D4DYIvGLnyI3sswlbMn7GLhE q4Qh2OCdiXgBbu8kiqkHcZ8wK7awFrwqjx8mpEkJR+5+A7H5Czd2jCUb2F/wuzHJ c/QyqC7NmRY4jpWj5mDZFRNZA5BXSbPEqj+S07tE7pgFuoRutoutxyVhK+6D5RYC J6jtowswm5gSodCMMUjdX2WCVROzQ3wpqrS5L0ICShrBl/foOuu5i7l+Re2Pbb9f 7BaYxMqGcGzqBOg6BY+Rl0vldnVYK5qEOTZJcanOL1vYy3PYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCB5UM2miaKvOMQA/Z8AbhjlWHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFmMjAzOTQtMTIyOC0z OTY5LThmMjMtNzJkNjNjY2FjODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrkrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWDlqTqRkm7y3XHOlYHK8GacPm9Dx7VzV1ec4ouQzkX+kTZzljAzaro GCv8x67+60yqJiYzV9F7/tuB4SK6jnS1TvvxmrF5YBTecT1QkKuSs2j0vQLuD2dF U6/5w4HaZJZLft/yis2djY//Q0sBRc08bpS8iBQUZ5gOkzcHNj4WHEh3F5QcxRlb asCxzwzQEIweFijFneessf5OcWRYljUII/VpEeIZ8rKcZLIpnNTexCsEpDiGZ283 g2C1IRU8iGC2tnHbyiRNprGUoFy0kMiu2VR9x4Y8dK3BSYpinXAfdwabVUtjwo1b FFbJkt5PxmpubtFeolR3TP4Fu/HH5fY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:10:50 2025 by rpki-client