$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52f4c154-9206-3122-9191-cfd41d15ea40.roa File: 52f4c154-9206-3122-9191-cfd41d15ea40.roa (raw, json) Hash identifier: kgTdBZoJVkp5oIzq8l78dJrxhoUACyLpaT6Qybu+x7c= Subject key identifier: 40:EE:F9:68:01:DC:4F:6C:66:1F:AB:E8:09:A5:85:A5:2A:2F:10:3A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD859528D86C8A400D8DCC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52f4c154-9206-3122-9191-cfd41d15ea40.roa Signing time: Thu 19 Jun 2025 09:20:59 +0000 ROA not before: Thu 19 Jun 2025 09:20:59 +0000 ROA not after: Wed 17 Sep 2025 09:20:59 +0000 asID: 22773 IP address blocks: 70.176.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:59:52:8d:86:c8:a4:00:d8:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:59 2025 GMT Not After : Sep 17 09:20:59 2025 GMT Subject: CN=aad7970a-a34a-4628-94bd-72be8389395a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:b9:91:bf:1e:22:04:f9:dd:65:d4:db:13: b7:63:0b:d2:5a:23:90:18:3e:11:d6:3a:58:46:f4: 47:07:22:f0:5e:d0:e3:e5:48:68:51:60:d9:54:e2: 7e:f3:5c:bc:54:fd:47:79:3b:c1:72:5f:fa:04:0d: f6:59:55:f8:5d:0e:6e:06:82:b5:19:45:80:0b:74: 9c:15:ef:3c:91:13:4e:32:db:bc:cd:52:4d:cc:98: 3e:21:75:77:8d:65:b0:7b:27:c7:4e:09:02:ee:a6: 39:2d:7d:db:3a:ed:c5:72:fa:b9:31:1f:82:3b:b5: a5:b9:b9:13:f5:0d:a8:26:c9:54:13:d2:e3:63:84: 13:cd:56:82:0d:49:f5:4b:45:ee:d2:5c:5a:0e:13: 14:23:6c:5d:e8:34:ae:04:54:dc:9a:07:c5:23:b1: fb:b2:dc:5d:26:16:9a:0e:2e:14:0a:10:35:e5:40: 3e:7f:fe:00:fc:04:7f:a2:88:fd:c9:ea:24:39:4f: 9c:be:a9:2a:6a:45:0f:5e:fb:80:7d:9d:0b:00:70: de:5f:c4:d7:00:72:9d:d9:dd:6b:60:ef:64:31:f6: ef:b0:0e:1e:07:37:87:bd:a4:b2:26:ad:ae:21:b8: 38:33:d2:45:90:d2:16:c8:68:bd:b1:bd:a6:a6:17: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:F9:68:01:DC:4F:6C:66:1F:AB:E8:09:A5:85:A5:2A:2F:10:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52f4c154-9206-3122-9191-cfd41d15ea40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:48:58:e5:dd:9b:92:22:1b:a9:b1:60:53:6b:98:0f:9b:69: 8c:55:f1:38:63:1e:29:04:4b:17:64:7a:85:1e:0f:75:80:4a: 2e:05:e1:cf:ae:0e:40:f2:9a:2d:ba:36:d5:50:e3:1c:d7:cb: 71:cb:42:c3:d1:b6:0b:3e:9b:5b:85:e8:ca:6d:4e:4c:10:69: 16:84:a6:df:84:40:29:6d:45:4e:e7:b9:71:9c:ac:4e:12:9f: b0:23:b1:98:20:97:ee:1c:ad:35:bd:94:82:ee:4d:4e:d5:76: 4f:6e:af:e5:71:0b:1b:02:27:30:4e:c9:bc:14:b1:9e:34:0a: a3:e7:c0:a2:17:b6:c9:5a:1c:53:d1:df:e8:22:d4:a8:f5:dc: d9:dc:8f:7e:f1:c9:42:32:da:27:a8:c5:20:d8:d4:35:49:82: 5c:24:4d:98:5d:3b:93:14:09:a8:9e:51:d8:25:7f:2b:3c:f8: 66:13:e0:d8:0d:16:a7:09:49:10:8e:98:09:04:bc:8e:5d:80: 4d:56:92:a9:cf:2f:4e:85:64:e4:da:ed:4f:cb:46:34:cb:08: 91:17:71:74:39:ff:8a:af:45:2e:2e:91:b0:81:fa:bd:ba:52: bf:95:ff:74:01:eb:5e:61:a0:3e:3b:70:d2:e1:ea:1c:bd:33: 70:25:15:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92FlSjYbIpADY3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjA1OVoXDTI1MDkxNzA5MjA1OVowLzEtMCsGA1UEAxMk YWFkNzk3MGEtYTM0YS00NjI4LTk0YmQtNzJiZTgzODkzOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2q5kb8eIgT53WXU2xO3YwvSWiOQGD4R1jpY RvRHByLwXtDj5UhoUWDZVOJ+81y8VP1HeTvBcl/6BA32WVX4XQ5uBoK1GUWAC3Sc Fe88kRNOMtu8zVJNzJg+IXV3jWWweyfHTgkC7qY5LX3bOu3Fcvq5MR+CO7WlubkT 9Q2oJslUE9LjY4QTzVaCDUn1S0Xu0lxaDhMUI2xd6DSuBFTcmgfFI7H7stxdJhaa Di4UChA15UA+f/4A/AR/ooj9yeokOU+cvqkqakUPXvuAfZ0LAHDeX8TXAHKd2d1r YO9kMfbvsA4eBzeHvaSyJq2uIbg4M9JFkNIWyGi9sb2mphcHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDu+WgB3E9sZh+r6AmlhaUqLxA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJmNGMxNTQtOTIwNi0z MTIyLTkxOTEtY2ZkNDFkMTVlYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRrA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpIWOXdm5IiG6mxYFNrmA+baYxV8ThjHikESxdkeoUeD3WASi4F4c+u DkDymi26NtVQ4xzXy3HLQsPRtgs+m1uF6MptTkwQaRaEpt+EQCltRU7nuXGcrE4S n7AjsZggl+4crTW9lILuTU7Vdk9ur+VxCxsCJzBOybwUsZ40CqPnwKIXtslaHFPR 3+gi1Kj13Nncj37xyUIy2ieoxSDY1DVJglwkTZhdO5MUCaieUdglfys8+GYT4NgN FqcJSRCOmAkEvI5dgE1WkqnPL06FZOTa7U/LRjTLCJEXcXQ5/4qvRS4ukbCB+r26 Ur+V/3QB615hoD47cNLh6hy9M3AlFUE= -----END CERTIFICATE-----Generated at Wed Jul 2 14:46:56 2025 by rpki-client