$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba58bef7-7ad3-3f81-99ca-5182a578dff1.roa File: ba58bef7-7ad3-3f81-99ca-5182a578dff1.roa (raw, json) Hash identifier: VToT94mZkRiLFwM3wGtpgnybqqv/Bp8rkLjmgyB8D7Y= Subject key identifier: 12:16:F5:05:84:50:8B:69:FC:F3:40:EB:01:F6:1B:E7:84:47:A0:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD78812D644371674B05680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba58bef7-7ad3-3f81-99ca-5182a578dff1.roa Signing time: Thu 19 Jun 2025 09:19:20 +0000 ROA not before: Thu 19 Jun 2025 09:19:20 +0000 ROA not after: Wed 17 Sep 2025 09:19:20 +0000 asID: 22773 IP address blocks: 70.162.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d7:88:12:d6:44:37:16:74:b0:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:19:20 2025 GMT Not After : Sep 17 09:19:20 2025 GMT Subject: CN=6de8c518-9fdd-429a-a4b5-8f696bd95a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e8:71:b1:e8:8c:99:3e:13:38:c6:b5:75:2e: 8f:d3:88:a9:f2:6e:68:60:3c:69:23:db:e3:53:10: 41:a5:68:a0:06:f8:08:fa:e8:26:1a:a7:a7:c0:db: 9a:f4:16:e3:ff:fb:a0:0a:1b:fd:bd:14:9e:35:a7: c3:76:32:e9:ad:2f:90:fe:73:81:7a:3c:c5:91:35: 04:41:eb:a3:89:1f:67:b4:82:4d:7f:5b:03:dc:b2: 8f:c2:53:b9:57:8c:a9:ae:62:5d:61:5b:d5:e1:7f: b3:2e:c8:9a:2e:92:91:eb:aa:3c:08:48:98:ac:d2: 52:7c:0e:b6:40:e3:1b:d7:3d:57:e0:42:9d:64:af: bf:ee:f7:93:c6:53:0b:c3:ef:17:7a:c0:2c:81:1f: 75:3e:f3:cc:24:2b:10:0e:2b:47:64:64:79:0d:97: 32:1c:be:15:60:79:ce:1e:9e:06:4b:08:ec:21:c1: 7e:83:d6:53:39:fc:2a:a0:e8:70:86:79:f9:06:f5: 91:34:97:5b:c4:45:a9:27:7b:a6:f7:fc:35:db:bb: 98:ec:f8:9c:c7:b7:d6:72:2e:a9:0e:d1:fb:02:b5: b2:70:83:fc:ab:ce:d9:05:6e:f6:b8:bc:08:f7:96: db:b4:eb:f4:51:30:dc:04:74:d3:52:1a:2f:a8:d5: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:16:F5:05:84:50:8B:69:FC:F3:40:EB:01:F6:1B:E7:84:47:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba58bef7-7ad3-3f81-99ca-5182a578dff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.162.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c3:c1:78:ba:e6:eb:2c:e1:bc:b4:f7:89:88:b7:80:11:37: 94:94:6e:2f:1e:f6:63:0a:47:4c:98:9a:1a:87:48:3c:f1:27: d6:df:e0:81:b0:fc:fc:fd:3e:86:fd:3c:e3:75:4f:44:26:8a: 7c:cf:4f:c9:55:66:0f:6e:95:f1:c9:36:eb:fe:61:d1:f6:59: 3b:11:65:e5:f2:c7:85:56:07:d4:a3:51:00:9b:75:cb:0f:fd: 34:6d:b0:89:6f:6b:9c:31:88:e5:d1:a2:9b:31:29:77:2e:7e: 14:f8:00:60:e0:ad:4e:c6:8c:fe:b2:62:81:3f:eb:8d:6f:1e: 3d:67:b9:ba:7b:e6:f9:0f:e4:ff:80:f3:5f:b5:dc:53:a6:b5: 30:4f:3d:d9:b5:b3:cb:31:f0:e8:7a:72:b2:3a:c3:4a:1b:c2: 00:60:15:57:fb:45:4f:b4:32:83:43:0b:5c:7f:ea:12:ee:ea: 50:c9:03:4d:10:3e:ea:f6:70:4e:06:e4:a6:41:59:4a:c1:14: 64:70:cf:86:98:16:26:a1:5f:e5:bf:55:ba:78:fb:79:28:33: e5:a2:64:92:bf:89:79:de:82:e6:99:9c:5e:df:b8:14:9d:e6: 63:d4:f8:9d:fc:7e:0f:f3:91:59:b6:a1:66:c2:c2:d8:4c:44: b0:80:34:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo914gS1kQ3FnSwVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MTkyMFoXDTI1MDkxNzA5MTkyMFowLzEtMCsGA1UEAxMk NmRlOGM1MTgtOWZkZC00MjlhLWE0YjUtOGY2OTZiZDk1YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiehxseiMmT4TOMa1dS6P04ip8m5oYDxpI9vj UxBBpWigBvgI+ugmGqenwNua9Bbj//ugChv9vRSeNafDdjLprS+Q/nOBejzFkTUE QeujiR9ntIJNf1sD3LKPwlO5V4yprmJdYVvV4X+zLsiaLpKR66o8CEiYrNJSfA62 QOMb1z1X4EKdZK+/7veTxlMLw+8XesAsgR91PvPMJCsQDitHZGR5DZcyHL4VYHnO Hp4GSwjsIcF+g9ZTOfwqoOhwhnn5BvWRNJdbxEWpJ3um9/w127uY7Picx7fWci6p DtH7ArWycIP8q87ZBW72uLwI95bbtOv0UTDcBHTTUhovqNXzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIW9QWEUItp/PNA6wH2G+eER6DGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmE1OGJlZjctN2FkMy0z ZjgxLTk5Y2EtNTE4MmE1NzhkZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqLPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTDwXi65uss4by094mIt4ARN5SUbi8e9mMKR0yYmhqHSDzxJ9bf4IGw /Pz9Pob9PON1T0QminzPT8lVZg9ulfHJNuv+YdH2WTsRZeXyx4VWB9SjUQCbdcsP /TRtsIlva5wxiOXRopsxKXcufhT4AGDgrU7GjP6yYoE/641vHj1nubp75vkP5P+A 81+13FOmtTBPPdm1s8sx8Oh6crI6w0obwgBgFVf7RU+0MoNDC1x/6hLu6lDJA00Q Pur2cE4G5KZBWUrBFGRwz4aYFiahX+W/Vbp4+3koM+WiZJK/iXneguaZnF7fuBSd 5mPU+J38fg/zkVm2oWbCwthMRLCANIc= -----END CERTIFICATE-----Generated at Wed Jul 2 07:09:10 2025 by rpki-client