$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45ef0be3-cc26-360e-9bdb-22502ad5970a.roa File: 45ef0be3-cc26-360e-9bdb-22502ad5970a.roa (raw, json) Hash identifier: 4wGnWryTNxKpZEZYi+JCrU7apSIyoIhGYehMN5ATh9E= Subject key identifier: 85:2A:08:7A:60:C5:F9:35:44:95:6A:B3:40:23:B4:33:AC:C7:B3:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD89FBD9A84207201162280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45ef0be3-cc26-360e-9bdb-22502ad5970a.roa Signing time: Thu 19 Jun 2025 09:21:33 +0000 ROA not before: Thu 19 Jun 2025 09:21:33 +0000 ROA not after: Wed 17 Sep 2025 09:21:33 +0000 asID: 22773 IP address blocks: 70.176.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:9f:bd:9a:84:20:72:01:16:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:33 2025 GMT Not After : Sep 17 09:21:33 2025 GMT Subject: CN=5b763916-a309-4a5e-865c-a14fed79921b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:e8:9d:76:93:69:2a:70:54:ae:2f:b1:aa: 79:ed:c2:a1:75:29:2d:6e:f7:fc:55:ba:e3:23:15: 3e:6a:63:60:d5:aa:28:1c:25:3a:47:b6:27:dc:8e: 99:17:39:7c:95:de:81:cc:19:eb:09:25:fa:3a:95: bd:6e:b8:18:0f:1a:6d:89:27:72:a7:90:18:34:ef: e8:96:46:fd:c9:97:56:94:e6:06:02:4f:8f:ab:fa: a5:e0:c5:1e:ea:ec:33:b1:04:a0:55:fa:42:50:e4: d2:d2:b0:78:ea:33:ce:2e:6c:10:a8:f8:3f:7f:3c: da:1e:82:e6:4a:45:cc:9a:ff:c1:05:6a:d0:fd:57: 5d:ec:8c:ee:58:ec:f1:75:80:cf:2f:7b:60:24:05: f2:e3:05:93:05:0c:77:68:a3:d3:92:48:10:9e:f2: 6e:99:59:79:48:d5:89:81:89:bf:da:83:68:22:84: bb:c6:f3:16:2a:b9:9e:df:77:e4:19:ed:c0:e7:b1: 7c:30:80:6a:09:41:1c:6c:41:68:1f:fb:ab:92:25: 75:35:de:ef:4f:44:53:95:a5:5e:d3:d2:43:18:60: 48:63:a3:b9:f2:dc:0d:4e:8b:ca:00:a9:2c:4d:c3: 2a:e7:f7:96:72:55:94:81:25:e1:5d:69:84:8b:92: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2A:08:7A:60:C5:F9:35:44:95:6A:B3:40:23:B4:33:AC:C7:B3:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45ef0be3-cc26-360e-9bdb-22502ad5970a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b1:e5:e3:ae:7d:54:05:e7:89:89:cb:e0:53:a7:7b:56:79: a1:dc:70:a7:e5:bb:ec:84:65:9b:23:f1:e1:06:f8:33:75:7e: 6d:39:1a:59:78:38:46:34:fc:66:9a:ad:2b:58:e6:ac:28:2d: 41:da:30:43:94:9d:3f:23:a7:b8:78:51:13:55:4f:19:40:4d: 3d:ef:5c:bd:51:d3:2f:a1:8c:36:76:19:06:cf:c7:9c:5f:6d: 34:05:c7:2a:ed:01:c1:8b:a2:ab:51:cd:5a:d9:d7:b2:6f:d3: de:65:b1:83:32:fc:28:5e:51:50:11:99:24:e5:ff:86:60:00: 25:fa:c5:df:f9:fd:05:9d:f6:a0:1b:70:6e:34:08:64:02:ed: 9f:2c:3d:17:3c:c9:d3:35:6e:c0:b7:57:38:99:89:46:9d:51: 2f:e3:a9:3b:c5:a0:04:2a:ae:44:18:92:93:11:4e:b6:f0:4e: bf:c1:51:2d:b2:35:4c:30:80:86:61:ca:92:e0:a3:43:fe:6e: 9f:f7:88:d0:a8:18:3d:19:f2:76:53:7e:42:e0:c7:41:e4:1a: 8e:a4:d7:2f:07:76:0a:2d:91:86:35:63:3c:bd:23:90:57:a9: e2:5e:1c:2f:a5:bf:e1:16:34:84:49:e5:b9:60:22:86:4e:2f: e5:0f:d8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92J+9moQgcgEWIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjEzM1oXDTI1MDkxNzA5MjEzM1owLzEtMCsGA1UEAxMk NWI3NjM5MTYtYTMwOS00YTVlLTg2NWMtYTE0ZmVkNzk5MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihzonXaTaSpwVK4vsap57cKhdSktbvf8Vbrj IxU+amNg1aooHCU6R7Yn3I6ZFzl8ld6BzBnrCSX6OpW9brgYDxptiSdyp5AYNO/o lkb9yZdWlOYGAk+Pq/ql4MUe6uwzsQSgVfpCUOTS0rB46jPOLmwQqPg/fzzaHoLm SkXMmv/BBWrQ/Vdd7IzuWOzxdYDPL3tgJAXy4wWTBQx3aKPTkkgQnvJumVl5SNWJ gYm/2oNoIoS7xvMWKrme33fkGe3A57F8MIBqCUEcbEFoH/urkiV1Nd7vT0RTlaVe 09JDGGBIY6O58twNTovKAKksTcMq5/eWclWUgSXhXWmEi5JKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUqCHpgxfk1RJVqs0AjtDOsx7M6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDVlZjBiZTMtY2MyNi0z NjBlLTliZGItMjI1MDJhZDU5NzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqx5eOufVQF54mJy+BTp3tWeaHccKflu+yEZZsj8eEG+DN1fm05Gll4 OEY0/GaarStY5qwoLUHaMEOUnT8jp7h4URNVTxlATT3vXL1R0y+hjDZ2GQbPx5xf bTQFxyrtAcGLoqtRzVrZ17Jv095lsYMy/CheUVARmSTl/4ZgACX6xd/5/QWd9qAb cG40CGQC7Z8sPRc8ydM1bsC3VziZiUadUS/jqTvFoAQqrkQYkpMRTrbwTr/BUS2y NUwwgIZhypLgo0P+bp/3iNCoGD0Z8nZTfkLgx0HkGo6k1y8HdgotkYY1Yzy9I5BX qeJeHC+lv+EWNIRJ5blgIoZOL+UP2OU= -----END CERTIFICATE-----Generated at Wed Jul 2 06:07:09 2025 by rpki-client