$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720243af-3ab8-324a-b658-5c305d8409d4.roa File: 720243af-3ab8-324a-b658-5c305d8409d4.roa (raw, json) Hash identifier: LUuqMJZfFt3pm92d8kI1nryqRU8D6iRhbIibi91ah5w= Subject key identifier: 2A:30:BF:C2:80:F1:37:70:7C:14:1C:F7:88:8C:7D:18:64:AE:D2:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E752537F67CE00D5D9C9280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720243af-3ab8-324a-b658-5c305d8409d4.roa Signing time: Thu 19 Jun 2025 14:36:55 +0000 ROA not before: Thu 19 Jun 2025 14:36:55 +0000 ROA not after: Wed 17 Sep 2025 14:36:55 +0000 asID: 22773 IP address blocks: 70.190.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:25:37:f6:7c:e0:0d:5d:9c:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:55 2025 GMT Not After : Sep 17 14:36:55 2025 GMT Subject: CN=72a3abc9-dd14-4854-99e2-4db897d1c36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a0:43:63:eb:91:3e:ff:0d:e8:7d:e9:f8:34: f2:75:60:b7:50:75:72:db:44:bb:87:19:5e:c1:98: 75:78:67:16:ce:6f:fe:18:0d:d7:6f:dd:2d:6b:1a: 89:e0:d2:e3:d2:5d:2b:e8:79:64:48:9c:a4:7f:4d: 28:be:2d:ab:fe:c4:3f:9f:64:ee:7f:b3:3c:8a:87: 08:ad:7a:cb:80:c2:56:9d:6a:6c:a0:17:be:06:d4: f2:07:65:dc:28:7e:8b:bb:0e:1c:69:90:e4:73:e5: b2:03:79:2c:3a:e9:65:0b:1e:c3:4d:71:6a:e8:47: 5d:b6:60:91:32:b5:bd:72:e9:91:3b:8f:40:d2:58: 29:77:86:70:4a:f9:f2:00:ff:9f:40:5d:80:97:27: e1:6a:32:38:61:2a:2c:a8:af:cd:4b:ac:a4:42:bc: 91:55:18:b4:77:4e:18:73:88:84:62:c4:8a:34:5a: d8:82:61:45:b4:24:8a:29:c5:09:6c:ac:23:81:b9: 8d:c0:a8:6a:00:c7:c6:eb:30:81:76:47:82:e1:0d: 12:b7:f0:6f:79:2e:35:68:66:16:90:38:f6:b0:03: ad:13:c3:2c:01:4d:4e:82:23:71:ad:e1:a2:0c:53: da:28:17:53:26:02:01:35:d4:95:2f:11:fc:4a:6c: bc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:30:BF:C2:80:F1:37:70:7C:14:1C:F7:88:8C:7D:18:64:AE:D2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720243af-3ab8-324a-b658-5c305d8409d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:77:24:3a:84:da:a4:ca:6f:57:e0:ed:e0:83:0d:36:ff:2c: b3:8f:89:66:04:fc:6f:47:a9:b0:20:d3:f6:37:0d:36:cc:bd: 58:2c:7b:8b:0d:61:b3:7c:6b:74:2c:ab:b6:a6:67:84:c2:e8: 23:e5:30:c2:b8:88:51:08:ab:3e:44:d6:b7:44:6a:3e:50:da: 5c:6c:89:02:f7:5c:18:0a:20:d6:ae:29:36:8f:0b:6f:bf:d0: 54:17:ca:2e:ec:0d:af:74:8b:c8:01:3e:1f:b4:3e:5b:f7:f6: e8:a8:ef:b4:78:ef:d7:9e:41:eb:95:f2:6d:dc:cd:1b:97:16: 82:60:d8:41:c5:a7:b2:e5:3f:4d:7f:76:d0:a6:3d:aa:af:b2: 69:c5:57:49:17:c7:fc:59:0b:77:7d:5f:17:e0:c1:86:2a:d0: 79:2b:2c:b1:54:e5:47:4c:66:2c:4e:ee:d4:d6:b8:ed:e7:ec: 26:4a:ef:4e:7b:53:a9:47:56:96:bf:ee:5c:02:ac:ec:74:76: be:d5:84:b6:db:1f:94:9f:be:20:e9:60:be:23:24:51:08:73: fa:dd:47:c6:b0:73:0b:2f:86:90:15:c1:56:d9:87:83:4f:b0: 5e:85:26:c8:63:8e:07:68:74:75:5d:d3:20:d3:bf:01:fc:97: a2:a4:b7:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dSU39nzgDV2ckoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzY1NVoXDTI1MDkxNzE0MzY1NVowLzEtMCsGA1UEAxMk NzJhM2FiYzktZGQxNC00ODU0LTk5ZTItNGRiODk3ZDFjMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaBDY+uRPv8N6H3p+DTydWC3UHVy20S7hxle wZh1eGcWzm/+GA3Xb90taxqJ4NLj0l0r6HlkSJykf00ovi2r/sQ/n2Tuf7M8iocI rXrLgMJWnWpsoBe+BtTyB2XcKH6Luw4caZDkc+WyA3ksOullCx7DTXFq6EddtmCR MrW9cumRO49A0lgpd4ZwSvnyAP+fQF2AlyfhajI4YSosqK/NS6ykQryRVRi0d04Y c4iEYsSKNFrYgmFFtCSKKcUJbKwjgbmNwKhqAMfG6zCBdkeC4Q0St/BveS41aGYW kDj2sAOtE8MsAU1OgiNxreGiDFPaKBdTJgIBNdSVLxH8Smy8twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCowv8KA8TdwfBQc94iMfRhkrtLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzIwMjQzYWYtM2FiOC0z MjRhLWI2NTgtNWMzMDVkODQwOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG93JDqE2qTKb1fg7eCDDTb/LLOPiWYE/G9HqbAg0/Y3DTbMvVgse4sN YbN8a3Qsq7amZ4TC6CPlMMK4iFEIqz5E1rdEaj5Q2lxsiQL3XBgKINauKTaPC2+/ 0FQXyi7sDa90i8gBPh+0Plv39uio77R479eeQeuV8m3czRuXFoJg2EHFp7LlP01/ dtCmPaqvsmnFV0kXx/xZC3d9XxfgwYYq0HkrLLFU5UdMZixO7tTWuO3n7CZK7057 U6lHVpa/7lwCrOx0dr7VhLbbH5SfviDpYL4jJFEIc/rdR8awcwsvhpAVwVbZh4NP sF6FJshjjgdodHVd0yDTvwH8l6Kkt1U= -----END CERTIFICATE-----Generated at Wed Jul 2 10:16:19 2025 by rpki-client