$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b19852-2f27-3a4c-a636-82454ba040de.roa File: 33b19852-2f27-3a4c-a636-82454ba040de.roa (raw, json) Hash identifier: bQwi9PX0ocmp3ufysVyPAf9wlCJYksQU86mzOZpvEV0= Subject key identifier: 2C:93:BF:63:91:CA:24:04:30:06:62:0B:AD:32:2B:50:62:AB:9B:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD898BAAEE863D80E15B180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b19852-2f27-3a4c-a636-82454ba040de.roa Signing time: Thu 19 Jun 2025 09:21:29 +0000 ROA not before: Thu 19 Jun 2025 09:21:29 +0000 ROA not after: Wed 17 Sep 2025 09:21:29 +0000 asID: 22773 IP address blocks: 70.176.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:98:ba:ae:e8:63:d8:0e:15:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:29 2025 GMT Not After : Sep 17 09:21:29 2025 GMT Subject: CN=82c27df8-a6e1-439c-b702-c017c130f7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:21:3c:e9:6c:8d:63:d4:cb:d7:7b:1d:cf: 3c:5a:ef:4b:d3:cf:34:2b:1e:39:e7:1c:74:c1:d9: 0f:ef:ae:7f:5a:5a:02:2b:19:b0:b9:ce:4b:0b:d4: 93:77:b0:2d:b0:4e:63:2d:5b:59:38:0d:7a:6f:37: c1:c5:9b:d1:ee:fa:e5:7d:24:69:1d:36:d2:9b:a1: d6:85:1c:ff:11:a4:e2:0d:1f:20:63:8d:ae:04:f8: 8f:bd:1b:ea:91:c3:26:ee:88:0d:3b:18:dc:d9:06: b4:1e:81:8b:7b:ae:d0:be:f8:02:c4:f1:39:e4:18: 62:13:6f:a3:c6:9c:78:f3:88:46:91:77:01:e5:5e: 05:ab:07:cb:c2:26:63:02:24:73:f9:2c:46:b3:a5: e1:2b:f5:27:ed:cf:ec:10:f4:fe:ca:ce:94:43:48: 4a:e8:d0:54:de:61:3a:70:81:cc:d3:69:c2:b4:ef: 0d:82:8e:77:cc:cc:48:23:87:9d:0d:ab:5d:17:c6: e5:25:66:c4:b9:7e:95:bf:b4:5d:63:fd:66:aa:24: 34:71:f1:63:e6:2b:84:2b:c1:da:5a:2c:4c:97:d2: cf:08:d1:69:54:50:82:4e:0f:3f:bb:a1:f3:91:39: 89:89:d2:f9:fd:27:4a:b6:b3:ee:9d:bd:7b:e9:09: 1d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:93:BF:63:91:CA:24:04:30:06:62:0B:AD:32:2B:50:62:AB:9B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33b19852-2f27-3a4c-a636-82454ba040de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e6:cb:5a:6a:63:3d:b4:a8:bf:d3:5a:1f:bd:bb:17:b3:c5: e4:e7:fc:e2:f2:9e:54:33:99:c2:49:95:fa:d5:d4:c2:ce:57: 6b:2d:84:c2:3e:c2:dd:52:68:7f:22:89:df:dc:1d:5c:72:73: 4a:82:ea:d2:c3:67:9b:e1:f6:fd:2e:3d:82:03:d6:67:12:e5: 1e:44:36:8e:65:c6:1d:dc:67:02:ff:ed:5b:c1:4f:66:07:8a: 62:c7:98:48:a4:da:6f:3e:88:bc:fa:33:cd:44:55:75:6d:b2: c5:1a:54:ba:ec:a2:01:fa:ce:ec:a0:74:d2:f2:76:a5:bb:cd: e2:4f:7a:27:13:77:ea:d5:87:50:7d:ad:da:53:2a:d6:cd:64: 82:3b:3e:50:8b:74:df:8d:bd:12:16:7a:68:56:1f:d8:a9:e5: cb:23:20:e6:65:cb:5d:af:a9:de:c8:35:6b:d9:d9:03:a6:47: a3:82:ba:a8:91:d6:09:97:51:f5:ee:4e:23:e8:5e:6a:9a:7c: ce:01:23:51:bf:18:af:4e:6f:7f:7a:59:b2:23:e1:4e:a3:84: 3f:49:04:6f:17:4e:97:2b:59:04:1b:9f:62:e9:7e:d4:0b:ae: 68:ff:f5:6d:98:c1:92:b0:16:f7:5e:89:39:1a:d7:c7:01:a0: 3b:e5:c4:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92Ji6ruhj2A4VsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjEyOVoXDTI1MDkxNzA5MjEyOVowLzEtMCsGA1UEAxMk ODJjMjdkZjgtYTZlMS00MzljLWI3MDItYzAxN2MxMzBmN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1khPOlsjWPUy9d7Hc88Wu9L0880Kx455xx0 wdkP765/WloCKxmwuc5LC9STd7AtsE5jLVtZOA16bzfBxZvR7vrlfSRpHTbSm6HW hRz/EaTiDR8gY42uBPiPvRvqkcMm7ogNOxjc2Qa0HoGLe67QvvgCxPE55BhiE2+j xpx484hGkXcB5V4FqwfLwiZjAiRz+SxGs6XhK/Un7c/sEPT+ys6UQ0hK6NBU3mE6 cIHM02nCtO8Ngo53zMxII4edDatdF8blJWbEuX6Vv7RdY/1mqiQ0cfFj5iuEK8Ha WixMl9LPCNFpVFCCTg8/u6HzkTmJidL5/SdKtrPunb176Qkd4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyTv2ORyiQEMAZiC60yK1Biq5uHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNiMTk4NTItMmYyNy0z YTRjLWE2MzYtODI0NTRiYTA0MGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrDGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjmy1pqYz20qL/TWh+9uxezxeTn/OLynlQzmcJJlfrV1MLOV2sthMI+ wt1SaH8iid/cHVxyc0qC6tLDZ5vh9v0uPYID1mcS5R5ENo5lxh3cZwL/7VvBT2YH imLHmEik2m8+iLz6M81EVXVtssUaVLrsogH6zuygdNLydqW7zeJPeicTd+rVh1B9 rdpTKtbNZII7PlCLdN+NvRIWemhWH9ip5csjIOZly12vqd7INWvZ2QOmR6OCuqiR 1gmXUfXuTiPoXmqafM4BI1G/GK9Ob396WbIj4U6jhD9JBG8XTpcrWQQbn2LpftQL rmj/9W2YwZKwFvdeiTka18cBoDvlxHc= -----END CERTIFICATE-----Generated at Wed Jul 2 14:58:41 2025 by rpki-client