$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f601eac-3d00-3fea-9ff2-79698f1f2f29.roa File: 7f601eac-3d00-3fea-9ff2-79698f1f2f29.roa (raw, json) Hash identifier: zolMLGBAiXuyFYjft+mj6QEtzNFIJ90iK4ZCM52NEnE= Subject key identifier: B9:B5:4C:43:90:F5:D0:FC:33:61:68:F4:1E:38:CD:B7:98:FC:8E:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A84ADBFA0018CC9EDF8140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f601eac-3d00-3fea-9ff2-79698f1f2f29.roa Signing time: Fri 20 Jun 2025 09:31:35 +0000 ROA not before: Fri 20 Jun 2025 09:31:35 +0000 ROA not after: Thu 18 Sep 2025 09:31:35 +0000 asID: 22773 IP address blocks: 70.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:4a:db:fa:00:18:cc:9e:df:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:31:35 2025 GMT Not After : Sep 18 09:31:35 2025 GMT Subject: CN=3439d9ca-d13a-41ab-94cc-e9153f023e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9b:81:66:f6:20:98:6e:db:8d:5d:4e:39:aa: cc:44:9e:8f:27:b0:6c:8f:ab:4d:f2:d7:e6:5f:99: 61:2d:45:50:58:64:d9:9f:57:a4:70:6c:35:b2:96: f2:3b:8d:20:08:0e:e3:6b:f2:46:d6:3b:35:14:a5: a6:3d:ab:bb:ba:5e:8e:99:17:22:d2:d2:e3:6e:10: 39:15:f1:f8:9e:a0:62:9e:9a:a9:46:4b:a8:ad:af: 26:05:5e:05:62:6f:dc:1f:50:b2:f5:58:fb:92:9a: bf:61:29:d8:50:a1:e3:dc:5a:5d:82:7b:68:cf:a3: 7b:bd:2b:34:e6:64:60:53:75:23:b6:f7:d4:36:e9: 95:4f:cf:86:ed:f6:93:dc:32:a9:3c:1d:af:fa:66: 3f:06:1b:11:eb:22:13:76:ca:5a:ef:82:24:12:e3: c9:be:7f:48:47:2f:2c:f2:02:07:95:97:61:ac:2c: df:91:54:07:68:f1:21:90:ec:a4:10:a1:94:ad:7e: 50:11:48:0b:c6:4f:7b:29:19:05:51:4d:2b:f7:ba: 4b:a6:a5:5e:4a:21:bf:cc:96:26:5a:8c:e5:f4:26: 73:93:e6:fd:e0:19:40:ae:47:45:b3:c9:c1:4d:f8: fe:fe:ed:9c:4f:f3:4f:70:ea:9f:74:aa:44:05:3c: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:4C:43:90:F5:D0:FC:33:61:68:F4:1E:38:CD:B7:98:FC:8E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f601eac-3d00-3fea-9ff2-79698f1f2f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b3:1f:3f:76:8a:4a:07:3e:f2:ae:c5:3a:09:97:a7:b1:6b: 95:7e:12:26:2b:98:29:1c:a1:ae:c5:39:b1:6f:35:40:75:5f: 32:1b:88:1d:09:b5:37:df:1e:3a:51:9d:4e:c2:e6:e9:27:ef: 9c:9a:f7:ed:9f:12:f4:17:da:5e:1a:9f:1f:a3:39:1c:32:8a: 87:85:dd:43:db:65:f5:a9:8e:75:55:ba:e6:35:ef:af:2a:50: a6:d9:92:11:9b:10:71:1d:c9:b5:f8:0a:ae:48:15:02:21:1e: 3c:a3:cf:4f:c2:fd:3f:50:7e:e7:42:b9:3a:bd:b5:30:c5:91: d3:a2:d4:e8:9b:1d:e3:10:47:94:d0:3e:50:28:bf:8d:8d:28: 54:37:8d:56:eb:5d:05:88:51:26:0a:d2:27:14:18:4f:bd:a9: 45:4b:8b:42:bf:71:3a:4e:be:8e:69:35:5b:c8:16:36:69:88: 17:60:ae:93:fb:42:bc:e2:ed:ba:dc:05:7e:50:06:52:50:a7: 15:9f:93:ac:8f:56:a5:f6:76:b3:43:d9:99:3f:f4:78:db:06: e2:a4:c3:90:24:75:23:b7:71:02:21:ed:03:0a:58:2b:ee:26: b3:9b:14:20:ba:72:45:3b:88:ee:7d:69:e3:10:4a:70:c9:71: 5d:fb:1c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqErb+gAYzJ7fgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzEzNVoXDTI1MDkxODA5MzEzNVowLzEtMCsGA1UEAxMk MzQzOWQ5Y2EtZDEzYS00MWFiLTk0Y2MtZTkxNTNmMDIzZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5uBZvYgmG7bjV1OOarMRJ6PJ7Bsj6tN8tfm X5lhLUVQWGTZn1ekcGw1spbyO40gCA7ja/JG1js1FKWmPau7ul6OmRci0tLjbhA5 FfH4nqBinpqpRkuora8mBV4FYm/cH1Cy9Vj7kpq/YSnYUKHj3Fpdgntoz6N7vSs0 5mRgU3UjtvfUNumVT8+G7faT3DKpPB2v+mY/BhsR6yITdspa74IkEuPJvn9IRy8s 8gIHlZdhrCzfkVQHaPEhkOykEKGUrX5QEUgLxk97KRkFUU0r97pLpqVeSiG/zJYm Wozl9CZzk+b94BlArkdFs8nBTfj+/u2cT/NPcOqfdKpEBTxHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLm1TEOQ9dD8M2Fo9B44zbeY/I6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2Y2MDFlYWMtM2QwMC0z ZmVhLTlmZjItNzk2OThmMWYyZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIezHz92ikoHPvKuxToJl6exa5V+EiYrmCkcoa7FObFvNUB1XzIbiB0J tTffHjpRnU7C5ukn75ya9+2fEvQX2l4anx+jORwyioeF3UPbZfWpjnVVuuY1768q UKbZkhGbEHEdybX4Cq5IFQIhHjyjz0/C/T9QfudCuTq9tTDFkdOi1OibHeMQR5TQ PlAov42NKFQ3jVbrXQWIUSYK0icUGE+9qUVLi0K/cTpOvo5pNVvIFjZpiBdgrpP7 Qrzi7brcBX5QBlJQpxWfk6yPVqX2drND2Zk/9HjbBuKkw5AkdSO3cQIh7QMKWCvu JrObFCC6ckU7iO59aeMQSnDJcV37HE4= -----END CERTIFICATE-----Generated at Wed Jul 2 14:31:23 2025 by rpki-client