$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89532c07-a805-3efa-87de-8380e393b369.roa File: 89532c07-a805-3efa-87de-8380e393b369.roa (raw, json) Hash identifier: vVT7CX1MIYJBwWUR3a451Smr29PuNwZbG8C3OhreO1o= Subject key identifier: 8A:44:0F:6E:78:1A:4C:9F:A1:B9:5E:06:17:F0:2E:71:6F:17:56:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3E74FBC34445AEF4B8C2FC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89532c07-a805-3efa-87de-8380e393b369.roa Signing time: Thu 19 Jun 2025 14:36:35 +0000 ROA not before: Thu 19 Jun 2025 14:36:35 +0000 ROA not after: Wed 17 Sep 2025 14:36:35 +0000 asID: 22773 IP address blocks: 70.190.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:74:fb:c3:44:45:ae:f4:b8:c2:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 14:36:35 2025 GMT Not After : Sep 17 14:36:35 2025 GMT Subject: CN=baf4f771-cb9d-4b98-8509-0389f4a4b0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:a2:55:81:b7:cf:cd:ab:38:fd:bd:17:a0: 04:4a:83:ba:13:97:41:19:d2:46:a8:e3:fe:1b:92: d6:38:56:c5:52:12:a9:99:ae:36:4b:b0:52:49:f4: b2:e8:f9:b3:e2:0f:23:5d:d0:ba:f2:66:fe:d1:4c: 87:60:03:f1:da:7a:35:eb:ea:ba:93:50:6f:d2:4e: e7:51:8e:0a:b5:fc:22:ba:96:78:8c:09:90:41:dd: dc:61:6a:11:27:9c:03:65:1a:91:9a:a2:75:28:cf: a8:29:7b:0a:75:60:06:71:fe:50:77:f3:d2:9a:f4: 3b:1b:d8:c9:51:b2:58:fe:af:50:59:35:55:29:01: cc:c2:d8:a5:bc:75:25:4b:03:e5:48:6c:df:f4:25: 23:dd:c6:51:d2:80:77:36:26:7c:2f:f3:6d:e0:e1: be:da:26:bc:6b:f3:ba:b3:b6:95:e5:0b:5b:9a:c7: 34:92:02:0a:e1:88:aa:9b:50:43:d9:21:9c:20:20: f1:76:01:72:0d:f0:b3:3c:bf:ea:9c:e5:44:e4:ba: 90:5b:d2:64:bf:b8:aa:60:8d:b3:f4:6e:01:1f:9c: 7e:d8:ac:bf:e7:88:82:fd:bf:1e:86:11:85:29:8b: 46:98:33:26:69:9f:a7:ff:1d:07:14:01:a0:a9:65: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:0F:6E:78:1A:4C:9F:A1:B9:5E:06:17:F0:2E:71:6F:17:56:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89532c07-a805-3efa-87de-8380e393b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.190.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2e:c9:ed:b0:db:67:50:95:8c:d8:70:bd:e4:53:77:66:da: d1:90:ca:f4:6a:12:37:bc:19:f5:44:95:31:2b:17:7c:b3:4b: b9:df:a7:bf:9a:61:ce:ed:bd:4f:8b:43:69:5e:7e:de:ff:99: e8:09:31:84:e5:19:94:e2:4b:d5:54:a9:9e:65:e1:32:74:15: 55:2d:59:79:a1:d9:ca:22:bb:93:55:f9:8a:48:4a:dd:94:db: 0b:ae:0e:da:80:a4:d0:cf:35:c6:65:a2:a7:b3:17:5c:a4:0f: d4:8d:4f:5d:39:f9:e0:2b:f9:c0:a1:35:a1:9d:3a:c4:f3:24: ad:90:db:59:b1:a1:33:e8:7c:ae:96:f5:b8:64:23:26:cc:b7: 87:cf:d4:4b:b3:c0:c8:ce:89:6e:9a:09:87:f5:b8:fa:06:e9: 8a:30:54:fa:9b:e4:31:c0:7c:d4:1e:68:77:f4:16:27:cb:f1: 67:e7:9c:01:19:71:81:96:b1:25:3f:e9:40:21:5f:a9:76:6a: 55:9d:47:20:60:5a:d0:fc:80:7a:63:fb:dd:5e:56:40:6a:72: 51:08:56:fb:ee:cb:b4:a3:a6:db:26:8b:c5:ee:57:8b:67:6c: ef:74:4a:27:41:76:8b:4d:81:db:cb:eb:bf:48:8c:57:d4:15: cf:43:84:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dPvDREWu9LjC/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTE0MzYzNVoXDTI1MDkxNzE0MzYzNVowLzEtMCsGA1UEAxMk YmFmNGY3NzEtY2I5ZC00Yjk4LTg1MDktMDM4OWY0YTRiMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaSiVYG3z82rOP29F6AESoO6E5dBGdJGqOP+ G5LWOFbFUhKpma42S7BSSfSy6Pmz4g8jXdC68mb+0UyHYAPx2no16+q6k1Bv0k7n UY4KtfwiupZ4jAmQQd3cYWoRJ5wDZRqRmqJ1KM+oKXsKdWAGcf5Qd/PSmvQ7G9jJ UbJY/q9QWTVVKQHMwtilvHUlSwPlSGzf9CUj3cZR0oB3NiZ8L/Nt4OG+2ia8a/O6 s7aV5Qtbmsc0kgIK4Yiqm1BD2SGcICDxdgFyDfCzPL/qnOVE5LqQW9Jkv7iqYI2z 9G4BH5x+2Ky/54iC/b8ehhGFKYtGmDMmaZ+n/x0HFAGgqWWhdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpED254GkyfobleBhfwLnFvF1YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODk1MzJjMDctYTgwNS0z ZWZhLTg3ZGUtODM4MGUzOTNiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4uye2w22dQlYzYcL3kU3dm2tGQyvRqEje8GfVElTErF3yzS7nfp7+a Yc7tvU+LQ2left7/megJMYTlGZTiS9VUqZ5l4TJ0FVUtWXmh2coiu5NV+YpISt2U 2wuuDtqApNDPNcZloqezF1ykD9SNT105+eAr+cChNaGdOsTzJK2Q21mxoTPofK6W 9bhkIybMt4fP1EuzwMjOiW6aCYf1uPoG6YowVPqb5DHAfNQeaHf0FifL8WfnnAEZ cYGWsSU/6UAhX6l2alWdRyBgWtD8gHpj+91eVkBqclEIVvvuy7Sjptsmi8XuV4tn bO90SidBdotNgdvL679IjFfUFc9DhEU= -----END CERTIFICATE-----Generated at Wed Jul 2 07:21:10 2025 by rpki-client