$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff58b43-ec15-3536-80d7-8b5e380e3173.roa File: 2ff58b43-ec15-3536-80d7-8b5e380e3173.roa (raw, json) Hash identifier: iOOr5AO15IcCWXQ5rKVmPPkSy3acOt6PlLxRIav6Rbc= Subject key identifier: FE:94:EF:ED:73:C7:A1:F8:BD:A1:B7:1E:FA:7D:E0:05:37:AA:57:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7F5F0AD2B80C4CADA7800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff58b43-ec15-3536-80d7-8b5e380e3173.roa Signing time: Thu 19 Jun 2025 09:20:12 +0000 ROA not before: Thu 19 Jun 2025 09:20:12 +0000 ROA not after: Wed 17 Sep 2025 09:20:12 +0000 asID: 22773 IP address blocks: 70.172.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:f5:f0:ad:2b:80:c4:ca:da:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:12 2025 GMT Not After : Sep 17 09:20:12 2025 GMT Subject: CN=259ed94f-cae4-4a63-afaa-86e40311d0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:7d:02:ed:58:b7:90:07:ba:1a:44:dc:01: 30:ad:a8:b2:d4:d1:70:51:89:cd:d0:57:78:e6:bf: 75:d0:22:ea:0e:f8:5f:30:ad:e9:05:3a:a9:9e:11: e0:d7:fa:0f:fc:b6:dc:7a:62:2b:7d:d4:16:7e:67: 0e:83:b6:8a:44:bf:36:1f:83:62:b8:44:f0:62:59: c7:cf:1d:0e:0c:4b:60:8e:a5:83:e6:31:62:d1:b4: 33:6c:bf:02:fa:8b:6b:db:7d:8d:af:70:8b:b4:9a: 21:68:45:5b:d6:7d:0f:b1:79:36:2a:33:aa:30:bd: 64:96:19:c9:12:7b:35:3d:1a:df:a2:03:e9:7b:8d: ee:dd:be:d7:ee:fa:d1:29:7e:60:8b:39:fd:e8:4f: d9:90:fd:1b:e9:38:07:66:2c:08:c4:2f:88:2e:01: da:a8:ae:91:d9:63:4b:b2:4b:7e:2c:57:8a:3b:b0: d9:d5:fa:90:7a:03:a1:34:9e:4e:67:b1:17:3e:91: 68:56:72:d6:41:48:16:11:f6:89:7f:22:04:18:96: fd:0c:b3:cc:ab:81:b6:04:60:05:72:a1:ad:62:15: 27:4e:64:55:49:3f:f3:35:0b:3d:5b:8d:71:ce:87: 2f:98:35:47:87:ea:94:31:90:41:41:b8:9a:bb:2f: 94:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:94:EF:ED:73:C7:A1:F8:BD:A1:B7:1E:FA:7D:E0:05:37:AA:57:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ff58b43-ec15-3536-80d7-8b5e380e3173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fa:c1:91:b4:78:e3:d4:d2:ea:ec:c4:9f:0a:0a:db:80:d2: 71:b9:70:59:ce:aa:25:9e:6d:db:d1:4d:76:22:77:07:f7:49: 11:4e:eb:d8:63:13:08:84:c3:65:00:19:40:a0:48:14:c2:10: 6c:f4:0b:10:46:19:b2:86:58:f5:50:2e:0c:c8:a6:6b:5c:36: 64:6b:71:3b:b4:23:73:17:48:5e:3b:65:bd:6a:93:39:ec:22: 21:8d:dd:6b:3d:25:a5:ff:dc:5f:32:b9:d0:09:0b:d3:3b:dc: 47:53:57:60:58:1a:01:ed:84:be:2f:0e:94:38:91:bc:3c:9f: 32:d0:1b:de:e7:ce:86:4a:f1:dd:03:4c:46:36:4c:1a:21:51: 22:db:bd:bb:87:6e:a8:dc:08:dd:c1:d3:9f:54:db:1a:4c:4c: 83:60:a0:9c:84:25:7b:a4:d3:a0:7f:3a:25:24:c1:d1:b8:92: 45:2c:67:46:6a:d0:39:0e:15:60:02:45:2d:04:bf:44:de:f2: ea:9f:40:ed:bc:e1:9b:78:26:0e:47:3c:99:dc:1d:7a:b1:6b: 16:b8:c1:f7:d0:b8:ad:97:a3:ac:c0:99:49:df:7c:40:d7:81: 35:a3:66:ee:11:03:a7:35:b4:44:b9:8c:5d:97:82:40:91:be: b7:76:ee:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91/XwrSuAxMraeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAxMloXDTI1MDkxNzA5MjAxMlowLzEtMCsGA1UEAxMk MjU5ZWQ5NGYtY2FlNC00YTYzLWFmYWEtODZlNDAzMTFkMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/t9Au1Yt5AHuhpE3AEwraiy1NFwUYnN0Fd4 5r910CLqDvhfMK3pBTqpnhHg1/oP/LbcemIrfdQWfmcOg7aKRL82H4NiuETwYlnH zx0ODEtgjqWD5jFi0bQzbL8C+otr232Nr3CLtJohaEVb1n0PsXk2KjOqML1klhnJ Ens1PRrfogPpe43u3b7X7vrRKX5gizn96E/ZkP0b6TgHZiwIxC+ILgHaqK6R2WNL skt+LFeKO7DZ1fqQegOhNJ5OZ7EXPpFoVnLWQUgWEfaJfyIEGJb9DLPMq4G2BGAF cqGtYhUnTmRVST/zNQs9W41xzocvmDVHh+qUMZBBQbiauy+UVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6U7+1zx6H4vaG3Hvp94AU3qldFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmZmNThiNDMtZWMxNS0z NTM2LTgwZDctOGI1ZTM4MGUzMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf6wZG0eOPU0ursxJ8KCtuA0nG5cFnOqiWebdvRTXYidwf3SRFO69hj EwiEw2UAGUCgSBTCEGz0CxBGGbKGWPVQLgzIpmtcNmRrcTu0I3MXSF47Zb1qkzns IiGN3Ws9JaX/3F8yudAJC9M73EdTV2BYGgHthL4vDpQ4kbw8nzLQG97nzoZK8d0D TEY2TBohUSLbvbuHbqjcCN3B059U2xpMTINgoJyEJXuk06B/OiUkwdG4kkUsZ0Zq 0DkOFWACRS0Ev0Te8uqfQO284Zt4Jg5HPJncHXqxaxa4wffQuK2Xo6zAmUnffEDX gTWjZu4RA6c1tES5jF2XgkCRvrd27sw= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:10 2025 by rpki-client