$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e4b474-47c0-3377-b4f0-34ef795e87c6.roa File: 86e4b474-47c0-3377-b4f0-34ef795e87c6.roa (raw, json) Hash identifier: rlJv1BKnDhYM9vOL2csB1KiADqb4xCINRYiWdjV0oZE= Subject key identifier: 7A:B0:74:06:35:94:B8:DD:6C:34:E8:61:CC:EF:E9:F6:EA:A2:D9:EB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E751A18454394847156E056 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e4b474-47c0-3377-b4f0-34ef795e87c6.roa Signing time: Thu 19 Jun 2025 14:36:50 +0000 ROA not before: Thu 19 Jun 2025 14:36:50 +0000 ROA not after: Wed 17 Sep 2025 14:36:50 +0000 asID: 22773 IP address blocks: 70.190.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:75:1a:18:45:43:94:84:71:56:e0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:50 2025 GMT Not After : Sep 17 14:36:50 2025 GMT Subject: CN=cbc885c3-6c30-4e0d-8802-b77b829c0852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5c:b9:76:2a:bb:0c:74:88:34:e5:7c:a5:50: f8:0c:5b:ec:75:40:ce:63:e1:e6:e3:e1:7c:4a:0f: 44:c3:19:63:82:17:26:ec:e6:ce:e1:51:16:7e:0c: fc:97:e2:ae:4e:bd:c5:5d:14:93:f0:aa:8e:12:67: 32:f6:36:5b:24:0c:f7:ac:f9:23:f7:80:63:a5:cb: 38:2e:07:9c:2d:6c:9d:05:8c:5a:eb:ca:e2:93:d4: 85:9e:2b:58:08:c7:2e:c1:aa:f6:54:48:b5:75:f9: 45:96:33:7a:bf:bb:f5:77:24:fd:97:a2:ee:bb:10: b1:23:7a:5c:7a:e2:b5:84:1f:3a:0b:c0:b7:6c:cd: 1d:6a:06:14:83:cd:b4:1f:1f:f6:25:03:c4:cb:6f: 2d:6e:b3:04:e6:68:67:e4:16:5d:74:40:a0:12:0b: e6:a3:7c:94:25:8d:d6:e4:3f:8f:fa:54:5e:87:b4: 25:31:d6:fc:12:07:db:3e:2a:18:78:ad:80:67:91: 65:c9:71:76:68:c5:86:28:c4:24:d1:01:29:2d:2e: 6b:89:ce:71:5d:58:87:39:ce:ac:b8:5e:81:80:f0: cf:a1:37:9e:fd:a8:c3:42:1f:ae:45:d3:53:a0:cb: 67:cc:c0:62:19:03:2f:2a:fa:38:73:82:ad:e5:b1: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B0:74:06:35:94:B8:DD:6C:34:E8:61:CC:EF:E9:F6:EA:A2:D9:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86e4b474-47c0-3377-b4f0-34ef795e87c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:54:da:7d:d6:22:3d:f9:2e:41:e4:03:db:aa:b2:aa:c5:2b: a0:fb:37:35:cc:e3:ef:04:e5:f3:d3:7d:1d:76:ab:d8:23:d4: c0:52:f9:a8:c3:d4:c0:9c:91:98:f7:e7:42:52:a8:86:89:88: 29:8e:76:cc:6c:f8:c9:17:3a:10:de:5a:80:c3:64:0d:78:5e: 0a:28:19:48:25:c2:65:4b:c7:d0:07:64:a2:c2:e0:9f:47:51: 36:28:6c:cb:df:f0:c1:a9:ed:8c:59:68:1e:69:af:49:79:7b: 69:05:7e:fc:37:86:99:3e:2a:80:34:ac:c3:87:f3:ec:f3:42: 25:62:55:f0:eb:ab:52:d5:3d:a3:2d:cc:08:74:85:5a:67:45: 24:3a:28:c5:89:e9:58:7d:2f:47:d4:3c:08:3a:5c:dc:6a:96: 0d:18:96:4f:0e:9b:5d:88:84:27:47:69:dc:3e:41:20:73:37: c7:7c:8d:22:25:c0:81:a1:d8:e8:4a:71:a1:c3:8e:9b:59:58: 6b:50:24:08:f4:ab:80:74:c8:8e:e9:8d:9a:35:1d:64:cb:5f: 94:34:ea:c4:a8:4e:4a:2d:b8:e4:ad:93:60:6a:af:22:f6:93: 7a:7d:7f:7f:61:35:57:de:6c:a5:d4:dc:fe:5d:ac:3c:36:67: a0:8a:cf:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dRoYRUOUhHFW4FYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzY1MFoXDTI1MDkxNzE0MzY1MFowLzEtMCsGA1UEAxMk Y2JjODg1YzMtNmMzMC00ZTBkLTg4MDItYjc3YjgyOWMwODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVy5diq7DHSINOV8pVD4DFvsdUDOY+Hm4+F8 Sg9Ewxljghcm7ObO4VEWfgz8l+KuTr3FXRST8KqOEmcy9jZbJAz3rPkj94Bjpcs4 LgecLWydBYxa68rik9SFnitYCMcuwar2VEi1dflFljN6v7v1dyT9l6LuuxCxI3pc euK1hB86C8C3bM0dagYUg820Hx/2JQPEy28tbrME5mhn5BZddECgEgvmo3yUJY3W 5D+P+lReh7QlMdb8EgfbPioYeK2AZ5FlyXF2aMWGKMQk0QEpLS5ric5xXViHOc6s uF6BgPDPoTee/ajDQh+uRdNToMtnzMBiGQMvKvo4c4Kt5bGflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqwdAY1lLjdbDToYczv6fbqotnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZlNGI0NzQtNDdjMC0z Mzc3LWI0ZjAtMzRlZjc5NWU4N2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZU2n3WIj35LkHkA9uqsqrFK6D7NzXM4+8E5fPTfR12q9gj1MBS+ajD 1MCckZj350JSqIaJiCmOdsxs+MkXOhDeWoDDZA14XgooGUglwmVLx9AHZKLC4J9H UTYobMvf8MGp7YxZaB5pr0l5e2kFfvw3hpk+KoA0rMOH8+zzQiViVfDrq1LVPaMt zAh0hVpnRSQ6KMWJ6Vh9L0fUPAg6XNxqlg0Ylk8Om12IhCdHadw+QSBzN8d8jSIl wIGh2OhKcaHDjptZWGtQJAj0q4B0yI7pjZo1HWTLX5Q06sSoTkotuOStk2BqryL2 k3p9f39hNVfebKXU3P5drDw2Z6CKz24= -----END CERTIFICATE-----Generated at Wed Jul 2 07:29:47 2025 by rpki-client