$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4029dca6-123b-303b-8ace-73ccda03ba9a.roa File: 4029dca6-123b-303b-8ace-73ccda03ba9a.roa (raw, json) Hash identifier: mfTs2gPpTuTNV6gjzG3tpj2UwE8OBR8iX1pi+NWu3TM= Subject key identifier: 17:85:84:28:9D:92:02:9D:9E:C4:47:DA:55:22:75:AC:AB:1A:42:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E75578D2A993B5BFD4B8180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4029dca6-123b-303b-8ace-73ccda03ba9a.roa Signing time: Thu 19 Jun 2025 14:37:19 +0000 ROA not before: Thu 19 Jun 2025 14:37:19 +0000 ROA not after: Wed 17 Sep 2025 14:37:19 +0000 asID: 22773 IP address blocks: 70.190.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:57:8d:2a:99:3b:5b:fd:4b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:37:19 2025 GMT Not After : Sep 17 14:37:19 2025 GMT Subject: CN=0acf576c-21ac-415b-bafd-0d00309175e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:38:f1:07:81:54:e2:05:80:03:36:ae:c5: 2d:95:f6:f9:5a:08:82:5c:ce:12:ef:e0:2d:2b:41: 76:ce:e9:74:51:b4:7c:67:05:40:e8:89:c7:e9:5e: 61:c8:06:98:34:a5:e1:0e:a1:91:00:14:36:4f:db: 0e:42:f5:00:7e:98:1d:f3:cd:f9:e0:21:b6:e7:04: 33:c3:ed:05:0b:16:6e:b2:f1:a0:bb:6a:67:03:59: 26:ad:1b:ca:a8:c8:34:01:b6:2a:30:1d:af:a9:95: 67:25:38:fd:80:72:2d:2c:06:1b:42:5f:35:d3:3e: b2:65:a1:35:2b:81:ba:08:bd:8c:0c:1b:6e:f1:03: 5c:5b:d0:24:89:91:4e:b9:6c:56:28:97:bd:9f:bd: 33:c9:5a:ad:3c:4d:06:2d:26:32:7d:57:15:f8:75: 5d:f1:13:29:3f:10:08:82:2e:dc:9d:5e:6a:3f:72: 53:5f:e8:b0:33:8b:74:87:ca:37:f6:fd:d0:54:f0: 4e:ee:87:cc:53:ab:a3:8d:b0:51:de:0c:7f:de:a6: 5a:4c:91:57:e6:37:45:4e:c1:ac:13:8a:70:07:df: 4f:23:29:d0:63:8e:b4:29:df:d0:28:43:39:94:7b: 6f:84:6b:24:a5:d7:e2:e4:a5:a3:0e:9e:73:3d:fa: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:84:28:9D:92:02:9D:9E:C4:47:DA:55:22:75:AC:AB:1A:42:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4029dca6-123b-303b-8ace-73ccda03ba9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c4:44:d4:69:58:8b:7d:0d:0f:81:f5:7c:b1:d2:29:4e:a7: 43:15:68:64:85:7b:5c:75:21:2b:56:f6:a8:0f:d6:86:48:eb: 53:54:8d:7f:ec:35:29:e1:09:c8:76:e6:93:a2:1c:25:7a:e8: 7d:4f:f0:c8:f7:01:f6:82:b1:9e:11:eb:76:d6:39:0c:a0:72: c0:31:f7:75:65:14:05:34:81:12:f5:07:17:2a:01:73:cb:ce: 0e:82:a5:7e:f9:a6:c5:67:89:9e:d2:ab:a4:a5:1b:cd:4f:a5: dd:c3:17:58:6c:a1:e5:f4:97:93:1f:80:59:89:bc:04:ea:98: 22:b6:ff:eb:26:c5:57:a4:3d:cb:b2:09:cd:83:69:cd:62:8c: e9:ba:bd:96:61:ce:c7:e8:b8:83:4b:59:ec:5f:37:4b:3e:a4: 69:1d:04:4b:14:20:26:82:6e:1a:1b:d8:a5:35:8a:63:e2:d2: 52:7a:73:a4:e0:7f:db:d1:7c:5b:05:7f:6d:bb:02:63:6d:97: 17:c6:0a:bf:25:5f:ad:41:00:03:12:d1:75:bd:f1:79:97:09: 15:19:4d:3c:1d:71:c3:19:67:40:92:86:82:fe:7c:2e:8e:4c: ed:b4:86:5f:50:87:1d:b6:e9:cd:f9:86:1a:0e:4f:d6:37:1f: d9:7e:86:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dVeNKpk7W/1LgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzcxOVoXDTI1MDkxNzE0MzcxOVowLzEtMCsGA1UEAxMk MGFjZjU3NmMtMjFhYy00MTViLWJhZmQtMGQwMDMwOTE3NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKA48QeBVOIFgAM2rsUtlfb5WgiCXM4S7+At K0F2zul0UbR8ZwVA6InH6V5hyAaYNKXhDqGRABQ2T9sOQvUAfpgd88354CG25wQz w+0FCxZusvGgu2pnA1kmrRvKqMg0AbYqMB2vqZVnJTj9gHItLAYbQl810z6yZaE1 K4G6CL2MDBtu8QNcW9AkiZFOuWxWKJe9n70zyVqtPE0GLSYyfVcV+HVd8RMpPxAI gi7cnV5qP3JTX+iwM4t0h8o39v3QVPBO7ofMU6ujjbBR3gx/3qZaTJFX5jdFTsGs E4pwB99PIynQY460Kd/QKEM5lHtvhGskpdfi5KWjDp5zPfqHxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeFhCidkgKdnsRH2lUidayrGkLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAyOWRjYTYtMTIzYi0z MDNiLThhY2UtNzNjY2RhMDNiYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPERNRpWIt9DQ+B9Xyx0ilOp0MVaGSFe1x1IStW9qgP1oZI61NUjX/s NSnhCch25pOiHCV66H1P8Mj3AfaCsZ4R63bWOQygcsAx93VlFAU0gRL1BxcqAXPL zg6CpX75psVniZ7Sq6SlG81Ppd3DF1hsoeX0l5MfgFmJvATqmCK2/+smxVekPcuy Cc2Dac1ijOm6vZZhzsfouINLWexfN0s+pGkdBEsUICaCbhob2KU1imPi0lJ6c6Tg f9vRfFsFf227AmNtlxfGCr8lX61BAAMS0XW98XmXCRUZTTwdccMZZ0CShoL+fC6O TO20hl9Qhx226c35hhoOT9Y3H9l+ho4= -----END CERTIFICATE-----Generated at Wed Jul 2 07:28:07 2025 by rpki-client