$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/575c23a1-f972-3c6b-8784-7e447c715737.roa File: 575c23a1-f972-3c6b-8784-7e447c715737.roa (raw, json) Hash identifier: wCdAVy3/+LpMmn9hgRR2BFO/H1XoVFC/Jr/sWbxsIzU= Subject key identifier: 8E:B8:90:F5:7B:9F:08:90:09:D7:ED:B9:62:81:B3:1C:FF:D8:8E:95 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7EE27E3EF6399D816E180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/575c23a1-f972-3c6b-8784-7e447c715737.roa Signing time: Thu 19 Jun 2025 09:20:09 +0000 ROA not before: Thu 19 Jun 2025 09:20:09 +0000 ROA not after: Wed 17 Sep 2025 09:20:09 +0000 asID: 22773 IP address blocks: 70.172.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:ee:27:e3:ef:63:99:d8:16:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:20:09 2025 GMT Not After : Sep 17 09:20:09 2025 GMT Subject: CN=983abfca-d043-4124-9b0e-030869a61b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:5e:b1:4b:ad:35:a3:92:34:2e:4c:a5:46: bd:15:3e:d3:3a:9c:f7:09:53:84:dd:27:e9:d3:15: 28:b4:ed:57:da:36:6c:0a:f5:8d:e6:fd:7b:20:61: 94:74:11:f7:86:7f:b3:ac:b4:4a:25:8a:a1:8d:12: 46:b9:22:da:56:08:59:27:42:34:46:8a:d7:5f:50: d6:ba:46:b2:56:03:9a:e5:32:c8:be:f6:9c:54:cc: 7c:59:c2:53:35:3d:97:20:6a:2c:a9:ba:fa:b5:8c: 74:2e:64:07:4b:56:34:40:b4:e0:66:44:aa:08:b3: fc:63:0e:9e:8f:17:f0:b5:fa:56:e0:48:ba:82:1b: 96:d2:1f:e0:9c:53:c2:02:7e:36:e6:3f:22:73:d4: 4e:7e:d9:82:23:58:ed:31:68:bf:89:ba:3b:5f:08: ea:a8:fa:27:c1:77:c4:8e:00:e8:0c:68:07:78:94: 9d:dd:49:7b:39:58:03:36:76:89:09:56:c8:11:9b: fe:60:8f:d0:e9:b7:47:44:60:d6:22:b2:02:f0:01: 39:0d:dc:06:fa:15:fb:8a:02:38:8e:6e:ba:86:50: 9d:2f:41:eb:0d:5e:9c:3a:d0:c9:7d:ef:ef:63:03: 2b:61:29:51:ef:18:7b:de:f4:62:41:bb:3a:93:09: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B8:90:F5:7B:9F:08:90:09:D7:ED:B9:62:81:B3:1C:FF:D8:8E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/575c23a1-f972-3c6b-8784-7e447c715737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b8:93:67:09:2f:1e:55:65:d5:0b:9d:67:36:50:fe:19:5e: b5:3c:70:ab:91:9a:87:43:55:3a:2c:0a:a8:2d:ac:46:39:b0: 6d:53:64:96:1a:11:34:47:c0:e0:38:12:1f:36:c0:ca:b5:91: 07:6f:81:f5:14:16:c6:d4:5d:99:cb:4a:6b:09:31:b7:66:d0: 65:16:55:f0:ae:d0:8b:6b:5c:30:94:9f:3a:c5:f8:0b:de:bb: d7:71:33:b7:78:69:db:a6:8c:bc:b5:7a:c6:f1:b1:09:52:cc: a4:2f:dc:63:35:0b:8b:c3:ba:62:73:ac:b0:e7:e8:e2:1d:69: 63:d9:ac:5f:43:95:f8:66:1d:4d:15:8e:39:35:49:c8:bd:48: 37:0f:b7:86:b3:11:89:1c:4d:4b:dc:af:ff:51:b3:f5:b5:8f: bf:bf:be:8e:f4:25:f1:58:2e:93:39:01:0a:e0:92:05:f3:29: ae:ee:bb:e5:8f:e7:82:ab:b4:58:37:49:f4:50:50:eb:fe:53: 4d:09:51:21:1c:4d:c9:25:7b:cf:4e:fa:11:77:8a:20:17:0b: 74:c3:92:8f:24:f0:03:d5:63:cd:de:06:c3:3c:14:5f:c3:c6: 13:fc:e9:f2:34:92:2c:33:ef:a3:29:38:a2:9f:9c:b4:59:41: e2:a1:ce:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91+4n4+9jmdgW4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjAwOVoXDTI1MDkxNzA5MjAwOVowLzEtMCsGA1UEAxMk OTgzYWJmY2EtZDA0My00MTI0LTliMGUtMDMwODY5YTYxYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiClesUutNaOSNC5MpUa9FT7TOpz3CVOE3Sfp 0xUotO1X2jZsCvWN5v17IGGUdBH3hn+zrLRKJYqhjRJGuSLaVghZJ0I0RorXX1DW ukayVgOa5TLIvvacVMx8WcJTNT2XIGosqbr6tYx0LmQHS1Y0QLTgZkSqCLP8Yw6e jxfwtfpW4Ei6ghuW0h/gnFPCAn425j8ic9ROftmCI1jtMWi/ibo7XwjqqPonwXfE jgDoDGgHeJSd3Ul7OVgDNnaJCVbIEZv+YI/Q6bdHRGDWIrIC8AE5DdwG+hX7igI4 jm66hlCdL0HrDV6cOtDJfe/vYwMrYSlR7xh73vRiQbs6kwlytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI64kPV7nwiQCdftuWKBsxz/2I6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTc1YzIzYTEtZjk3Mi0z YzZiLTg3ODQtN2U0NDdjNzE1NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK4k2cJLx5VZdULnWc2UP4ZXrU8cKuRmodDVTosCqgtrEY5sG1TZJYa ETRHwOA4Eh82wMq1kQdvgfUUFsbUXZnLSmsJMbdm0GUWVfCu0ItrXDCUnzrF+Ave u9dxM7d4adumjLy1esbxsQlSzKQv3GM1C4vDumJzrLDn6OIdaWPZrF9DlfhmHU0V jjk1Sci9SDcPt4azEYkcTUvcr/9Rs/W1j7+/vo70JfFYLpM5AQrgkgXzKa7uu+WP 54KrtFg3SfRQUOv+U00JUSEcTckle89O+hF3iiAXC3TDko8k8APVY83eBsM8FF/D xhP86fI0kiwz76MpOKKfnLRZQeKhzoE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:13:06 2025 by rpki-client