$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/479ef571-ebaa-3b93-a582-4826b8af305a.roa File: 479ef571-ebaa-3b93-a582-4826b8af305a.roa (raw, json) Hash identifier: atPDZFQCsq8ryOJWCmL52L/qZ6iywwuTXZMdzlFUC+4= Subject key identifier: 9E:CE:4A:E3:FF:60:70:03:7B:BA:9D:7D:31:BB:4D:8C:1D:44:53:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A87B342A86005E5F2BC280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/479ef571-ebaa-3b93-a582-4826b8af305a.roa Signing time: Fri 20 Jun 2025 09:31:58 +0000 ROA not before: Fri 20 Jun 2025 09:31:58 +0000 ROA not after: Thu 18 Sep 2025 09:31:58 +0000 asID: 22773 IP address blocks: 70.173.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:7b:34:2a:86:00:5e:5f:2b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:58 2025 GMT Not After : Sep 18 09:31:58 2025 GMT Subject: CN=b991abe7-db00-4982-ac4b-2e86782ae73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3f:9a:eb:b1:9b:d4:b1:15:f6:06:63:fb:74: 65:ac:a1:a9:66:7d:ef:35:77:81:d9:43:fa:1a:89: 5a:47:c1:85:f5:e9:62:c9:eb:2d:b7:84:d8:6e:7b: e8:86:81:ec:c5:73:d1:d9:c0:79:ed:95:5c:5b:f6: 60:36:de:17:45:5d:9c:77:fd:38:ac:36:2c:1e:38: 54:f7:c2:4a:e1:88:cc:21:a4:20:63:f0:62:9d:9b: 2b:28:57:c3:07:7e:ca:f9:80:49:5c:50:7d:9c:0e: 50:42:67:87:90:00:83:aa:c3:dd:dc:b7:04:61:98: 64:0b:39:49:db:b0:78:f8:26:a7:f2:7e:d2:79:7b: a7:9a:12:e9:15:b8:c1:8d:2f:6e:91:69:83:52:77: a6:54:cf:e5:74:7f:43:d0:bb:85:8a:a8:4f:eb:1b: bc:09:11:5d:92:e5:92:b8:70:f8:68:a1:65:91:d5: 22:c5:11:da:37:1e:24:ce:3a:54:93:f2:80:1b:2c: a1:7b:ea:67:7a:e0:be:0f:09:70:e1:e2:18:ec:23: 16:a7:09:ff:db:9b:0b:a2:15:0f:1a:eb:43:98:12: 12:31:60:c0:3f:15:cb:d9:d8:85:e5:c3:00:02:dc: e8:35:b7:db:4d:5e:12:7e:8a:36:b4:0f:90:97:db: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:4A:E3:FF:60:70:03:7B:BA:9D:7D:31:BB:4D:8C:1D:44:53:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/479ef571-ebaa-3b93-a582-4826b8af305a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:96:a0:a6:98:cc:f8:5e:d3:bd:f9:63:ef:74:db:17:25:ec: c6:6c:16:e5:d5:51:0e:c6:60:2e:2a:b2:6b:f3:b8:f7:f8:a0: 29:f9:9e:59:1b:e7:bd:2e:a0:e7:8f:92:30:c3:df:07:a3:d2: 09:3b:12:df:35:78:5f:4b:5c:fd:be:7c:55:cd:8c:0a:ef:00: c2:27:91:3c:09:c3:85:1d:f4:a8:06:da:d6:53:f0:44:23:35: 01:18:cf:bf:28:da:35:97:2d:0a:13:42:07:8f:f1:e4:d8:52: fd:da:97:43:f3:fc:e6:15:29:4d:48:60:62:1a:17:1a:07:d4: 0a:b5:85:9a:a4:8e:6b:f7:c7:96:1f:a2:c1:db:3d:3f:58:18: e4:86:92:82:c6:f9:55:6e:4d:36:93:ed:83:e4:50:3e:4b:02: 43:70:94:4f:b7:9a:3c:fe:24:b5:7a:d6:75:9d:e3:55:8d:a3: bb:5d:b6:1d:69:bd:be:34:d5:39:59:4b:7b:3a:a0:e7:8a:7c: 1a:b4:de:e6:96:64:6f:6e:f9:f0:ac:f7:46:33:82:cd:87:57: 3e:83:5b:a6:74:5a:ff:98:8b:46:3b:a6:93:3b:79:81:db:69: 48:72:bf:41:58:b6:b5:83:5f:6e:94:32:57:9d:bd:7c:6f:8d: 22:4f:46:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqHs0KoYAXl8rwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzE1OFoXDTI1MDkxODA5MzE1OFowLzEtMCsGA1UEAxMk Yjk5MWFiZTctZGIwMC00OTgyLWFjNGItMmU4Njc4MmFlNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD+a67Gb1LEV9gZj+3RlrKGpZn3vNXeB2UP6 GolaR8GF9eliyestt4TYbnvohoHsxXPR2cB57ZVcW/ZgNt4XRV2cd/04rDYsHjhU 98JK4YjMIaQgY/BinZsrKFfDB37K+YBJXFB9nA5QQmeHkACDqsPd3LcEYZhkCzlJ 27B4+Can8n7SeXunmhLpFbjBjS9ukWmDUnemVM/ldH9D0LuFiqhP6xu8CRFdkuWS uHD4aKFlkdUixRHaNx4kzjpUk/KAGyyhe+pneuC+Dwlw4eIY7CMWpwn/25sLohUP GutDmBISMWDAPxXL2diF5cMAAtzoNbfbTV4Sfoo2tA+Ql9sjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7OSuP/YHADe7qdfTG7TYwdRFNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc5ZWY1NzEtZWJhYS0z YjkzLWE1ODItNDgyNmI4YWYzMDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASWoKaYzPhe0735Y+902xcl7MZsFuXVUQ7GYC4qsmvzuPf4oCn5nlkb 570uoOePkjDD3wej0gk7Et81eF9LXP2+fFXNjArvAMInkTwJw4Ud9KgG2tZT8EQj NQEYz78o2jWXLQoTQgeP8eTYUv3al0Pz/OYVKU1IYGIaFxoH1Aq1hZqkjmv3x5Yf osHbPT9YGOSGkoLG+VVuTTaT7YPkUD5LAkNwlE+3mjz+JLV61nWd41WNo7tdth1p vb401TlZS3s6oOeKfBq03uaWZG9u+fCs90Yzgs2HVz6DW6Z0Wv+Yi0Y7ppM7eYHb aUhyv0FYtrWDX26UMledvXxvjSJPRtA= -----END CERTIFICATE-----Generated at Wed Jul 2 10:18:35 2025 by rpki-client