$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbee5c2e-8e12-3004-9ded-71aa4dc49db4.roa File: dbee5c2e-8e12-3004-9ded-71aa4dc49db4.roa (raw, json) Hash identifier: GpwQV4jsk9ggGwrWa9YFRD2ARi3ixr3rE96IM/S9fCk= Subject key identifier: 5C:BC:93:9F:60:80:D9:0A:32:47:12:34:73:80:FF:E3:F1:84:9C:72 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A5CFB1F412E8FE3DFCFD4C400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbee5c2e-8e12-3004-9ded-71aa4dc49db4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22773 IP address blocks: 174.70.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:1f:41:2e:8f:e3:df:cf:d4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=44d04558-dc9d-4583-bdb4-71eaddc6286f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:12:8d:f8:a8:b5:c7:99:6b:89:a7:1f:a9: 10:d6:c3:5d:e3:13:a1:57:f8:07:e7:0e:2e:ba:f2: 0e:2d:08:34:89:8f:9f:27:02:d8:20:5a:51:31:52: 71:1d:0f:8f:9d:55:ed:6b:fd:47:6e:86:32:2f:31: b4:01:d2:d8:2a:3b:15:0a:33:de:34:8b:a0:d2:08: c5:d6:70:f7:5f:e0:89:9e:32:8e:80:fe:52:e9:66: 4e:b8:b6:90:39:15:be:31:a4:38:3d:51:02:5b:27: 71:a5:ef:37:9a:87:f5:af:ca:f2:4e:6a:c9:bf:d9: 75:a3:4d:19:bb:be:e9:25:5a:61:7c:88:31:e1:26: dc:f3:44:6b:44:59:04:cb:b7:3a:6d:d6:b1:ff:8c: d7:fb:f9:3c:39:c0:44:17:f4:59:47:9c:0a:29:c5: a2:af:68:4a:4c:10:df:9c:60:eb:d2:40:eb:14:85: 53:26:f1:ee:94:f7:e6:4f:eb:a5:01:db:6d:87:38: c8:d6:40:64:9b:1a:c8:5b:bb:90:1c:f3:78:06:91: 85:5e:e5:19:c3:68:6d:ff:37:9d:74:52:73:6d:94: 03:ed:57:a2:e6:bb:11:e8:07:67:be:0b:50:58:7b: 34:87:6a:1e:1b:01:16:c4:a0:74:a8:ab:d7:21:56: 18:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:93:9F:60:80:D9:0A:32:47:12:34:73:80:FF:E3:F1:84:9C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbee5c2e-8e12-3004-9ded-71aa4dc49db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.70.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:07:ac:ea:46:54:8c:36:7b:3f:f9:73:87:e3:ad:2a:92:9b: 67:da:19:33:3d:70:7b:6d:d1:f3:07:87:ed:91:17:04:75:85: db:db:8f:1d:4c:4e:f7:3b:2f:29:72:1b:92:54:27:7e:50:63: 17:08:ae:9a:c6:ed:26:44:d4:3e:5d:51:1c:0d:9b:d1:10:f8: 91:06:a7:4e:5d:dc:8c:99:c8:9d:16:e3:46:7a:19:3c:b9:d0: 91:78:74:1a:8a:88:58:f8:0c:40:22:74:10:68:2a:83:60:73: ed:57:16:ba:65:08:90:12:6e:91:b2:6c:eb:69:b9:2b:d3:77: 4e:9c:8e:ec:5f:91:9c:66:15:d6:29:b7:c7:ac:61:95:d9:38: e2:0b:8d:e7:fa:7a:23:df:b3:a7:2f:e7:d7:30:97:ca:ca:43: 85:4f:44:66:12:fd:ff:34:2c:e1:91:ad:3a:2d:d7:e0:c2:4b: f5:2f:48:c8:93:0c:f9:d9:f0:03:3d:49:ab:96:8b:04:06:3f: 88:9f:f0:76:5d:52:7b:39:f5:20:59:d1:4c:7a:4a:50:7f:d1: 27:61:02:87:bd:a3:d9:ca:fe:95:89:78:03:75:19:6d:9a:ba: 44:3c:ee:f2:4f:9c:57:15:60:27:bb:e0:c6:6f:37:9f:ed:0f: 25:8b:db:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+x9BLo/j38/UxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDRkMDQ1NTgtZGM5ZC00NTgzLWJkYjQtNzFlYWRkYzYyODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4MSjfiotceZa4mnH6kQ1sNd4xOhV/gH5w4u uvIOLQg0iY+fJwLYIFpRMVJxHQ+PnVXta/1HboYyLzG0AdLYKjsVCjPeNIug0gjF 1nD3X+CJnjKOgP5S6WZOuLaQORW+MaQ4PVECWydxpe83mof1r8ryTmrJv9l1o00Z u77pJVphfIgx4Sbc80RrRFkEy7c6bdax/4zX+/k8OcBEF/RZR5wKKcWir2hKTBDf nGDr0kDrFIVTJvHulPfmT+ulAdtthzjI1kBkmxrIW7uQHPN4BpGFXuUZw2ht/zed dFJzbZQD7Vei5rsR6AdnvgtQWHs0h2oeGwEWxKB0qKvXIVYYpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy8k59ggNkKMkcSNHOA/+PxhJxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGJlZTVjMmUtOGUxMi0z MDA0LTlkZWQtNzFhYTRkYzQ5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsHrOpGVIw2ez/5c4fjrSqSm2faGTM9cHtt0fMHh+2RFwR1hdvbjx1M Tvc7LylyG5JUJ35QYxcIrprG7SZE1D5dURwNm9EQ+JEGp05d3IyZyJ0W40Z6GTy5 0JF4dBqKiFj4DEAidBBoKoNgc+1XFrplCJASbpGybOtpuSvTd06cjuxfkZxmFdYp t8esYZXZOOILjef6eiPfs6cv59cwl8rKQ4VPRGYS/f80LOGRrTot1+DCS/UvSMiT DPnZ8AM9SauWiwQGP4if8HZdUns59SBZ0Ux6SlB/0SdhAoe9o9nK/pWJeAN1GW2a ukQ87vJPnFcVYCe74MZvN5/tDyWL26g= -----END CERTIFICATE-----Generated at Tue Jul 1 18:57:10 2025 by rpki-client