$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e041ab-7521-3583-907f-a8fe393727b4.roa File: b3e041ab-7521-3583-907f-a8fe393727b4.roa (raw, json) Hash identifier: D9H4AqDhSD5LbJ/IE+lPY0Qc8MVb2vrt/Voc45UJ4nQ= Subject key identifier: 13:56:F5:09:C2:25:6B:F2:4D:E0:87:8B:43:E6:AB:6C:C6:1C:BB:A9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8F80055FE8A237441D580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e041ab-7521-3583-907f-a8fe393727b4.roa Signing time: Fri 20 Jun 2025 09:32:57 +0000 ROA not before: Fri 20 Jun 2025 09:32:57 +0000 ROA not after: Thu 18 Sep 2025 09:32:57 +0000 asID: 22773 IP address blocks: 70.189.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:f8:00:55:fe:8a:23:74:41:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:57 2025 GMT Not After : Sep 18 09:32:57 2025 GMT Subject: CN=a3ab7799-58b2-420e-8f2b-02b0d336516a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:ea:c6:f5:51:79:63:23:78:c5:1c:61:f9: 5f:7d:96:78:17:dd:e9:d9:fd:ea:87:de:8f:b2:4c: 1d:cc:74:bd:44:2b:1e:e4:6d:86:04:a0:e6:4f:c2: bf:5e:05:82:2c:85:e0:12:b3:d3:4f:93:b5:fe:18: c8:8f:da:b3:a9:0f:e8:db:22:ec:29:14:32:9e:13: d4:d1:57:c2:64:46:b4:52:94:58:a3:b7:86:25:c2: ab:e7:6d:b6:71:89:c3:e8:e5:80:f4:13:c9:f2:a1: 13:58:83:89:e5:df:4c:2c:55:f8:86:57:54:9a:9c: 37:9c:9a:22:95:3b:d5:88:5f:26:cf:ca:4f:29:c2: e7:6f:1f:ee:6d:e9:ad:24:b7:c1:58:51:57:14:7c: d8:ae:6f:c2:e2:58:88:5f:8d:51:74:09:03:ae:fb: 5f:60:bd:ae:aa:cf:9e:f4:b0:a1:fb:f8:77:18:f7: 36:a5:50:fd:f6:71:50:a9:95:3c:c5:2b:4c:09:31: 5e:7c:2e:db:3b:70:b6:92:18:71:7e:d2:e4:6d:60: 95:3e:53:fa:0a:a2:bd:ad:1f:c1:01:c9:8e:a7:91: 69:24:1f:dd:75:5c:e5:b6:3e:9e:24:90:bd:c2:f3: 60:19:08:73:90:22:aa:2b:ef:c7:7d:c9:d8:d7:3e: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:56:F5:09:C2:25:6B:F2:4D:E0:87:8B:43:E6:AB:6C:C6:1C:BB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3e041ab-7521-3583-907f-a8fe393727b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d7:a7:92:28:e1:19:3b:b5:4e:12:5a:02:96:ef:3c:2d:35: 62:52:7f:ea:d0:08:2a:f4:07:1e:52:61:b5:fa:27:4a:e6:b0: 2b:8b:c9:02:99:f8:e0:d4:20:6b:15:05:b1:8e:5a:f7:a0:42: 37:a5:15:c1:62:61:1c:19:69:0c:c7:5b:50:01:79:5f:c2:4a: 6e:91:81:16:8c:9f:a2:b4:bc:e8:42:35:78:a0:d9:21:1e:42: 3c:97:d4:f6:1b:ad:01:2b:44:a9:6d:bd:26:bc:8c:1b:42:3a: 8d:ce:c8:a8:d3:38:b8:3c:bd:68:b7:f8:c6:c5:77:be:8d:62: 82:d3:f9:c6:3a:f6:19:de:e3:56:62:dc:86:b7:db:b6:cc:72: fa:ca:5d:1e:d1:b2:60:ff:f0:d1:69:85:79:60:ff:51:a5:18: 9c:dc:7b:11:24:64:de:e3:b5:72:63:ff:30:44:96:e5:33:ec: 54:fe:b9:08:cd:7b:5b:2d:e7:7d:76:cf:72:4f:b7:36:cd:58: a8:e9:bb:94:77:4e:ed:13:e4:2a:11:6c:5a:08:37:ba:80:18: cc:59:25:17:a0:2b:80:04:3b:17:e1:ee:4b:77:5c:ce:4d:8d: 78:52:f6:e4:d6:ff:c8:f2:47:81:12:2e:4f:eb:22:bf:74:03: ed:fc:50:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqPgAVf6KI3RB1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI1N1oXDTI1MDkxODA5MzI1N1owLzEtMCsGA1UEAxMk YTNhYjc3OTktNThiMi00MjBlLThmMmItMDJiMGQzMzY1MTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrnqxvVReWMjeMUcYflffZZ4F93p2f3qh96P skwdzHS9RCse5G2GBKDmT8K/XgWCLIXgErPTT5O1/hjIj9qzqQ/o2yLsKRQynhPU 0VfCZEa0UpRYo7eGJcKr5222cYnD6OWA9BPJ8qETWIOJ5d9MLFX4hldUmpw3nJoi lTvViF8mz8pPKcLnbx/ubemtJLfBWFFXFHzYrm/C4liIX41RdAkDrvtfYL2uqs+e 9LCh+/h3GPc2pVD99nFQqZU8xStMCTFefC7bO3C2khhxftLkbWCVPlP6CqK9rR/B AcmOp5FpJB/ddVzltj6eJJC9wvNgGQhzkCKqK+/HfcnY1z7+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNW9QnCJWvyTeCHi0Pmq2zGHLupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjNlMDQxYWItNzUyMS0z NTgzLTkwN2YtYThmZTM5MzcyN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHXp5Io4Rk7tU4SWgKW7zwtNWJSf+rQCCr0Bx5SYbX6J0rmsCuLyQKZ +ODUIGsVBbGOWvegQjelFcFiYRwZaQzHW1ABeV/CSm6RgRaMn6K0vOhCNXig2SEe QjyX1PYbrQErRKltvSa8jBtCOo3OyKjTOLg8vWi3+MbFd76NYoLT+cY69hne41Zi 3Ia327bMcvrKXR7RsmD/8NFphXlg/1GlGJzcexEkZN7jtXJj/zBEluUz7FT+uQjN e1st5312z3JPtzbNWKjpu5R3Tu0T5CoRbFoIN7qAGMxZJRegK4AEOxfh7kt3XM5N jXhS9uTW/8jyR4ESLk/rIr90A+38UBg= -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:09 2025 by rpki-client