$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa File: bdd6a85b-65b0-3031-826b-0acc561474a0.roa (raw, json) Hash identifier: wRAnd+HsXFz0s0nwpjgYlKXj3xm+Gd86AQNm0DU9goE= Subject key identifier: EA:4C:5D:90:99:20:3E:84:BE:E3:E8:EE:ED:75:23:67:C0:8D:CD:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DD8939C72EDA3AA7CEE8900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa Signing time: Thu 19 Jun 2025 09:21:27 +0000 ROA not before: Thu 19 Jun 2025 09:21:27 +0000 ROA not after: Wed 17 Sep 2025 09:21:27 +0000 asID: 22773 IP address blocks: 70.176.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:d8:93:9c:72:ed:a3:aa:7c:ee:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 09:21:27 2025 GMT Not After : Sep 17 09:21:27 2025 GMT Subject: CN=63eadede-8e29-4879-a35a-e21e91975e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:5a:44:4d:70:01:a7:6f:aa:ad:4b:26:ea: d2:7c:c9:33:04:60:cb:43:b5:25:e8:8a:02:3c:8b: 4c:ad:72:9a:80:2d:84:fb:a9:db:85:31:1c:b0:e4: 1d:7c:6b:b5:3b:37:e5:30:0f:7b:c6:68:2e:3b:90: 89:25:00:b7:bd:45:ad:85:fe:d2:66:2e:a5:a6:db: 96:53:7a:45:c1:40:77:e0:36:00:d0:4e:b7:53:22: a2:a4:1c:e9:84:90:70:dc:ce:81:de:d1:94:ff:b8: 0c:9f:4a:ae:ad:9d:36:69:dc:fb:17:bf:fe:61:67: 46:ba:a8:a5:b8:9b:d7:cd:20:6f:ff:6d:00:b7:ed: 69:d8:e9:be:f1:fa:9a:35:52:a8:85:dc:60:71:a9: a3:2e:6f:7c:c4:88:4f:22:b6:7d:ea:67:f0:b1:78: 36:74:ca:f1:90:18:8c:6c:15:51:48:9d:4f:7f:f4: e7:0e:66:27:be:e2:f7:59:26:14:f6:86:e2:be:dc: 75:e2:9b:94:c4:b5:f7:5e:aa:e8:8c:f1:9d:74:06: 0f:ed:9c:66:2c:15:be:d7:f7:d2:7b:e8:00:ee:fc: 6b:73:55:ba:c9:b9:53:b2:44:54:88:f5:94:ab:33: 7d:95:83:5b:89:74:f9:59:80:06:dd:2f:b4:0f:7c: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4C:5D:90:99:20:3E:84:BE:E3:E8:EE:ED:75:23:67:C0:8D:CD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd6a85b-65b0-3031-826b-0acc561474a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.176.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b6:83:27:a6:4c:5d:f7:ca:71:62:b6:22:8f:8e:9c:e5:18: c7:91:8a:92:1f:db:63:e7:8c:f6:59:e5:81:ac:ef:c6:dc:dd: e0:e2:74:69:d2:ff:6c:96:3c:59:f3:5a:f5:ef:61:05:7d:ed: e3:dd:32:67:48:21:d9:84:e3:b2:08:5a:23:d4:2a:3f:03:e1: a7:43:06:08:7b:04:1e:10:51:d3:7d:6f:87:1d:39:2a:98:e7: 51:66:d4:08:40:9d:e8:bb:94:8d:5e:ce:82:eb:45:21:2c:46: 62:26:86:d5:fe:4d:7f:1c:84:54:10:f2:ca:2d:36:a2:d2:de: 8c:93:4d:b0:26:ad:f6:70:d9:3a:00:6e:ab:43:20:96:70:0d: b7:d0:bd:95:c4:86:59:5b:be:a6:3c:52:0b:24:68:0e:10:d8: 3b:50:b8:eb:a5:ef:93:69:84:bb:8f:d8:19:c5:d6:79:64:51: ba:68:13:83:2b:c9:73:ef:08:94:01:f6:b4:bb:d5:da:c7:8c: 3d:22:5e:78:00:92:26:6e:89:c5:36:83:89:44:59:79:d9:de: 40:e8:4f:4c:49:58:70:10:13:b8:3a:25:4f:dd:fe:a8:29:fd: de:d6:e3:d2:4d:00:a1:20:0a:76:44:c9:76:b3:8f:85:63:b8: b0:95:38:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo92JOccu2jqnzuiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTA5MjEyN1oXDTI1MDkxNzA5MjEyN1owLzEtMCsGA1UEAxMk NjNlYWRlZGUtOGUyOS00ODc5LWEzNWEtZTIxZTkxOTc1ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEpaRE1wAadvqq1LJurSfMkzBGDLQ7Ul6IoC PItMrXKagC2E+6nbhTEcsOQdfGu1OzflMA97xmguO5CJJQC3vUWthf7SZi6lptuW U3pFwUB34DYA0E63UyKipBzphJBw3M6B3tGU/7gMn0qurZ02adz7F7/+YWdGuqil uJvXzSBv/20At+1p2Om+8fqaNVKohdxgcamjLm98xIhPIrZ96mfwsXg2dMrxkBiM bBVRSJ1Pf/TnDmYnvuL3WSYU9obivtx14puUxLX3XqrojPGddAYP7ZxmLBW+1/fS e+gA7vxrc1W6yblTskRUiPWUqzN9lYNbiXT5WYAG3S+0D3z8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpMXZCZID6EvuPo7u11I2fAjc2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmRkNmE4NWItNjViMC0z MDMxLTgyNmItMGFjYzU2MTQ3NGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK2gyemTF33ynFitiKPjpzlGMeRipIf22PnjPZZ5YGs78bc3eDidGnS /2yWPFnzWvXvYQV97ePdMmdIIdmE47IIWiPUKj8D4adDBgh7BB4QUdN9b4cdOSqY 51Fm1AhAnei7lI1ezoLrRSEsRmImhtX+TX8chFQQ8sotNqLS3oyTTbAmrfZw2ToA bqtDIJZwDbfQvZXEhllbvqY8UgskaA4Q2DtQuOul75NphLuP2BnF1nlkUbpoE4Mr yXPvCJQB9rS71drHjD0iXngAkiZuicU2g4lEWXnZ3kDoT0xJWHAQE7g6JU/d/qgp /d7W49JNAKEgCnZEyXazj4VjuLCVOCE= -----END CERTIFICATE-----Generated at Wed Jul 2 14:50:59 2025 by rpki-client