$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa File: a13d722b-8768-3465-ad07-1753eea22842.roa (raw, json) Hash identifier: Sj2WI7vWaiDCyOr/apq6VkwdGx5KaFg2T8ogM+6uH/8= Subject key identifier: 1F:AF:C6:B6:49:E3:28:D5:0E:D9:6E:D0:A8:A9:37:48:D2:A1:8B:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD7CE2126451DD125215460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa Signing time: Thu 19 Jun 2025 09:19:54 +0000 ROA not before: Thu 19 Jun 2025 09:19:54 +0000 ROA not after: Wed 17 Sep 2025 09:19:54 +0000 asID: 22773 IP address blocks: 70.171.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:ce:21:26:45:1d:d1:25:21:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:54 2025 GMT Not After : Sep 17 09:19:54 2025 GMT Subject: CN=b1aeef63-51d8-4c3d-9218-2b60b2482867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:d0:9c:fe:24:bf:82:7a:8d:2d:50:07:cc: ba:05:09:9d:a7:5d:e6:49:0c:be:48:d9:9a:58:c6: f5:a2:94:9b:35:88:e2:c9:07:6d:8d:e5:18:a8:36: 60:eb:f6:6e:79:91:d7:f7:81:0e:fa:77:54:4f:a5: 60:ca:51:75:5b:41:06:2c:ba:90:4f:26:d1:cc:06: 6b:87:4f:9f:18:51:fc:95:e6:87:04:88:dc:a4:71: 1d:4f:a2:28:be:e6:71:a0:97:cb:88:58:3b:74:a6: a7:59:08:93:d7:c5:52:0d:71:4a:e4:d6:44:ab:7f: 21:52:5f:1d:b3:e2:78:85:11:6b:21:53:36:07:0e: c1:d8:c7:83:e9:5d:9b:b8:cd:b0:b5:fa:6c:43:28: ef:41:42:da:a8:12:84:b7:d7:79:00:19:a2:8e:78: 5a:7b:81:fb:e5:dd:74:cc:db:bd:74:95:65:f9:e6: 57:0a:55:49:fe:80:7b:b7:71:1d:f1:26:52:1a:37: 06:1c:02:eb:68:6e:c3:6b:62:7e:33:6c:bb:db:dd: 2e:a8:b1:ea:3d:b7:bb:d6:5f:df:53:d5:86:2c:47: 89:24:0a:2e:fe:3e:f0:e5:44:c6:f1:0d:ca:a7:c5: 46:de:ff:70:f6:5f:91:0e:98:06:9c:5d:48:24:a5: 15:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:C6:B6:49:E3:28:D5:0E:D9:6E:D0:A8:A9:37:48:D2:A1:8B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.171.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0b:c2:2e:ad:33:5b:ec:91:e2:fd:cd:b4:f7:df:3a:2d:c3: 84:5c:05:75:14:80:5d:e9:97:7d:39:c0:11:0e:56:6c:2e:ea: 31:e8:e2:42:ea:90:c0:ed:8e:66:bd:09:b4:52:dd:cd:68:d9: 6d:29:69:a7:32:36:d3:81:0a:37:d5:7e:30:f1:a8:db:a2:74: 7a:1d:a7:54:94:d0:48:c8:c9:c2:a4:ca:60:35:11:62:9f:75: 3d:5f:0b:4c:2c:46:b0:23:c0:92:98:0d:68:0e:ed:bc:73:cd: 3b:10:25:a2:f4:4a:44:32:82:11:41:4e:9c:d8:dd:04:ab:3c: 72:7d:28:60:4b:48:d0:18:72:4e:e7:8c:5c:e9:35:00:a7:7f: aa:03:31:c6:c0:e2:60:54:c5:27:d8:63:b7:4c:67:8d:ac:be: 9f:10:a4:06:48:7a:8e:87:d2:f2:a0:85:40:b4:29:8d:30:ca: 9e:e1:3d:4f:c5:a2:eb:d2:f3:96:23:10:81:4f:f2:c4:34:33: 7b:9c:7d:ad:f9:71:2e:8e:15:b3:d9:36:28:3a:63:51:cc:5c: d1:40:b1:db:4a:1b:28:3e:ed:42:35:9a:27:55:7e:1b:14:9d: b3:f5:f1:d4:01:5d:d8:3f:75:d9:ab:46:a8:8e:a6:0a:c3:3f: a7:9d:25:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9184hJkUd0SUhVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTk1NFoXDTI1MDkxNzA5MTk1NFowLzEtMCsGA1UEAxMk YjFhZWVmNjMtNTFkOC00YzNkLTkyMTgtMmI2MGIyNDgyODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty/QnP4kv4J6jS1QB8y6BQmdp13mSQy+SNma WMb1opSbNYjiyQdtjeUYqDZg6/ZueZHX94EO+ndUT6VgylF1W0EGLLqQTybRzAZr h0+fGFH8leaHBIjcpHEdT6IovuZxoJfLiFg7dKanWQiT18VSDXFK5NZEq38hUl8d s+J4hRFrIVM2Bw7B2MeD6V2buM2wtfpsQyjvQULaqBKEt9d5ABmijnhae4H75d10 zNu9dJVl+eZXClVJ/oB7t3Ed8SZSGjcGHALraG7Da2J+M2y7290uqLHqPbe71l/f U9WGLEeJJAou/j7w5UTG8Q3Kp8VG3v9w9l+RDpgGnF1IJKUV9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+vxrZJ4yjVDtlu0KipN0jSoYsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTEzZDcyMmItODc2OC0z NDY1LWFkMDctMTc1M2VlYTIyODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcLwi6tM1vskeL9zbT33zotw4RcBXUUgF3pl305wBEOVmwu6jHo4kLq kMDtjma9CbRS3c1o2W0paacyNtOBCjfVfjDxqNuidHodp1SU0EjIycKkymA1EWKf dT1fC0wsRrAjwJKYDWgO7bxzzTsQJaL0SkQyghFBTpzY3QSrPHJ9KGBLSNAYck7n jFzpNQCnf6oDMcbA4mBUxSfYY7dMZ42svp8QpAZIeo6H0vKghUC0KY0wyp7hPU/F ouvS85YjEIFP8sQ0M3ucfa35cS6OFbPZNig6Y1HMXNFAsdtKGyg+7UI1midVfhsU nbP18dQBXdg/ddmrRqiOpgrDP6edJXo= -----END CERTIFICATE-----Generated at Wed Jul 2 14:58:12 2025 by rpki-client