$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903afcf1-8164-36ad-928d-fb1de6eef60a.roa File: 903afcf1-8164-36ad-928d-fb1de6eef60a.roa (raw, json) Hash identifier: rkT2JD/bu6fq8nr7d9tYr771z0gM8z9iZMwzqks7iM4= Subject key identifier: 33:0D:9A:21:A0:47:CB:27:70:BF:EB:32:D7:A4:8A:41:4F:C1:BA:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8C96C5181DBCE7EDFA700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903afcf1-8164-36ad-928d-fb1de6eef60a.roa Signing time: Fri 20 Jun 2025 09:32:35 +0000 ROA not before: Fri 20 Jun 2025 09:32:35 +0000 ROA not after: Thu 18 Sep 2025 09:32:35 +0000 asID: 22773 IP address blocks: 70.180.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:c9:6c:51:81:db:ce:7e:df:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:35 2025 GMT Not After : Sep 18 09:32:35 2025 GMT Subject: CN=025c681b-3c59-40fb-9fea-2422efd4dd2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:be:11:4c:c6:33:86:aa:e8:c9:50:a3:5f: 3c:6d:1b:65:18:e1:88:46:3e:6f:40:fb:bb:35:6f: e3:18:de:df:da:d4:49:0d:83:26:1c:26:cc:ee:a6: 4c:0c:18:39:3d:1d:55:e4:e1:0e:a1:8f:b9:30:db: fe:76:e1:ea:be:c2:00:e2:08:fc:62:f1:3d:85:53: e0:82:04:f9:48:fb:16:36:30:ab:2d:7e:e6:be:af: 3c:80:85:c4:4b:df:40:94:3f:5f:c1:6f:66:0e:8e: 17:8b:33:94:67:c3:7c:4b:d7:7a:33:c2:bd:27:56: ad:4c:af:9d:bd:e8:07:88:49:5f:e6:ef:40:e1:1c: 03:46:5f:fa:4f:98:f6:8f:17:4d:e1:10:67:2b:c5: f8:54:6d:75:f6:e0:0f:c7:d2:f0:cc:ec:8e:39:03: cc:d9:c8:10:cd:0c:15:55:cc:32:50:21:eb:e1:6b: 06:23:06:4b:2f:5f:36:d4:60:9d:69:e8:67:01:1d: 20:99:4f:79:a0:14:45:f6:64:a4:2e:41:ad:ef:73: 0a:1e:c5:8d:2f:ef:c6:40:c7:6c:34:97:a3:42:b5: b0:d6:8d:2c:45:db:f0:23:62:c8:e5:95:b8:6b:f8: 5a:9f:15:83:8b:2c:da:52:08:55:0b:f3:77:43:94: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:9A:21:A0:47:CB:27:70:BF:EB:32:D7:A4:8A:41:4F:C1:BA:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/903afcf1-8164-36ad-928d-fb1de6eef60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.180.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fe:01:04:2e:b3:8c:27:a0:5c:b9:90:63:26:f6:9f:82:c7: 24:11:1c:2b:7a:a6:44:fb:e4:31:63:72:c4:a1:33:3e:56:1f: 17:55:f3:74:57:6c:ba:ab:1f:49:01:99:f0:e4:53:b1:d8:8c: 28:42:94:82:85:56:44:81:ca:59:dd:c7:7f:8f:6c:4a:d5:47: f9:e1:d7:20:fe:fa:9c:10:5c:29:6b:79:91:e4:cd:c0:d5:d2: d2:9b:90:58:f1:5d:a0:16:67:e8:4d:2b:f4:5c:e5:8c:de:4f: 12:b9:0e:48:8c:7c:4b:d5:52:19:fe:57:c7:bb:74:08:69:87: 64:f9:30:68:cd:bc:2b:e0:b2:25:8e:f7:99:2d:c0:0d:aa:1c: 13:2d:38:7d:05:cf:ba:c5:67:5d:d9:0e:f0:36:f6:ce:3a:24: 39:47:99:e3:e4:e6:d9:53:a5:7a:71:7d:94:11:4f:f8:d7:ca: ad:b3:d8:58:f8:8b:fb:14:fb:36:a9:a0:94:8d:a0:69:cf:aa: 92:1a:24:d9:74:de:0c:e1:b0:2f:d7:31:b6:45:8c:1b:1c:34: 0b:45:1f:b5:70:25:48:95:30:39:b9:ef:f9:ed:c0:cd:9f:6b: 85:e1:8f:5e:2f:25:03:52:e6:ea:7e:7a:97:ce:00:87:29:47: 2d:0c:74:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqMlsUYHbzn7fpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzIzNVoXDTI1MDkxODA5MzIzNVowLzEtMCsGA1UEAxMk MDI1YzY4MWItM2M1OS00MGZiLTlmZWEtMjQyMmVmZDRkZDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncK+EUzGM4aq6MlQo188bRtlGOGIRj5vQPu7 NW/jGN7f2tRJDYMmHCbM7qZMDBg5PR1V5OEOoY+5MNv+duHqvsIA4gj8YvE9hVPg ggT5SPsWNjCrLX7mvq88gIXES99AlD9fwW9mDo4XizOUZ8N8S9d6M8K9J1atTK+d vegHiElf5u9A4RwDRl/6T5j2jxdN4RBnK8X4VG119uAPx9LwzOyOOQPM2cgQzQwV VcwyUCHr4WsGIwZLL1821GCdaehnAR0gmU95oBRF9mSkLkGt73MKHsWNL+/GQMds NJejQrWw1o0sRdvwI2LI5ZW4a/hanxWDiyzaUghVC/N3Q5RwJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMNmiGgR8sncL/rMtekikFPwbqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTAzYWZjZjEtODE2NC0z NmFkLTkyOGQtZmIxZGU2ZWVmNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb+AQQus4wnoFy5kGMm9p+CxyQRHCt6pkT75DFjcsShMz5WHxdV83RX bLqrH0kBmfDkU7HYjChClIKFVkSBylndx3+PbErVR/nh1yD++pwQXClreZHkzcDV 0tKbkFjxXaAWZ+hNK/Rc5YzeTxK5DkiMfEvVUhn+V8e7dAhph2T5MGjNvCvgsiWO 95ktwA2qHBMtOH0Fz7rFZ13ZDvA29s46JDlHmePk5tlTpXpxfZQRT/jXyq2z2Fj4 i/sU+zapoJSNoGnPqpIaJNl03gzhsC/XMbZFjBscNAtFH7VwJUiVMDm57/ntwM2f a4Xhj14vJQNS5up+epfOAIcpRy0MdPw= -----END CERTIFICATE-----Generated at Wed Jul 2 07:27:32 2025 by rpki-client