$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4afcd4f-361f-3685-8438-71880c85ca41.roa File: f4afcd4f-361f-3685-8438-71880c85ca41.roa (raw, json) Hash identifier: HvdkC0LEkeaRd9KYISwmwKvTVlTUS833yn0faIhG6LM= Subject key identifier: 23:51:AB:2B:D6:47:09:F8:AD:FE:BD:B2:47:3B:5A:89:94:AC:FD:C0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A8FCCB1E2A0AEB3F285B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4afcd4f-361f-3685-8438-71880c85ca41.roa Signing time: Fri 20 Jun 2025 09:32:59 +0000 ROA not before: Fri 20 Jun 2025 09:32:59 +0000 ROA not after: Thu 18 Sep 2025 09:32:59 +0000 asID: 22773 IP address blocks: 70.189.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a8:fc:cb:1e:2a:0a:eb:3f:28:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:32:59 2025 GMT Not After : Sep 18 09:32:59 2025 GMT Subject: CN=058feddb-9ed4-4fc2-b72c-c70bcc439834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:54:68:bb:f5:c8:1c:d9:f7:65:b6:35:af: 34:5c:ed:6f:80:73:aa:6d:f4:51:b3:7b:4a:b5:c3: 67:bb:f5:1c:24:c5:f0:86:0f:3e:18:ff:1b:4d:f7: ea:5e:5e:b9:14:47:e0:37:9a:c9:e7:4c:8e:da:45: 20:15:22:e4:5d:22:c1:0e:01:de:41:79:ea:26:43: 77:02:6e:01:8b:fe:23:40:ac:e6:c7:09:bc:2d:b5: 8e:94:97:7d:c2:35:17:db:c9:a9:3f:64:73:b8:e2: 07:d5:30:db:57:3b:fd:fb:56:a8:1c:29:fc:8f:16: c9:97:8c:b9:93:1d:9f:3e:e6:51:a9:ba:1d:cd:69: ac:04:d7:a8:0d:0b:a5:57:f0:0b:bd:91:52:82:4a: 95:76:bc:f5:8a:6f:04:37:ff:33:f9:71:7e:9e:5f: 27:e2:e2:34:b3:0b:d6:f4:d6:b8:9a:f5:27:75:4f: 4a:f0:5d:da:82:f4:ad:33:c2:ad:b7:65:c2:b1:d8: a7:7c:77:5a:6f:40:aa:67:d9:63:fb:6f:03:03:d2: d6:45:d0:0c:39:75:ab:4b:f1:c9:8c:35:d3:c4:93: 96:ec:37:06:a4:88:95:47:ef:1d:06:74:94:c3:e7: d3:f0:57:55:78:f6:ed:bb:a9:59:4c:2a:0d:03:16: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:51:AB:2B:D6:47:09:F8:AD:FE:BD:B2:47:3B:5A:89:94:AC:FD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f4afcd4f-361f-3685-8438-71880c85ca41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.189.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:49:b1:8f:3a:ca:8c:6f:5d:28:ff:c3:f6:2f:93:70:99: 48:4a:2c:43:9f:df:63:54:f8:17:59:c6:47:42:df:8e:4d:b8: f5:df:7a:00:24:93:15:cc:45:87:19:f4:99:d2:51:c6:53:2a: ed:fc:8f:64:55:4e:79:7c:8a:6a:cc:9e:8a:0d:39:4d:a7:93: c5:61:e2:a0:6a:86:27:2d:62:38:6e:29:0b:2a:68:79:56:36: 23:ca:c6:31:d2:13:bb:28:f7:60:cb:88:fa:18:1b:d5:97:5d: 50:ee:cc:03:de:29:2a:14:5c:ae:d9:8c:c6:0c:12:a9:5a:d0: 99:a9:33:11:49:84:57:32:d3:f8:d4:b8:0f:b1:b3:db:b3:d3: 74:52:66:43:a8:75:9e:c3:4c:60:2d:25:1a:47:05:9d:65:64: 46:3a:77:98:98:54:c2:4f:35:da:82:fc:10:b3:71:b6:5f:42: 45:ec:11:1f:53:94:58:d8:ba:d8:d3:86:6a:8b:95:83:f4:e1: 64:28:2e:16:2d:25:44:0d:6d:a3:e3:cb:1a:99:eb:41:53:f7: 33:cd:0b:21:82:d3:90:32:37:a3:b0:71:e1:fe:20:8a:b5:37: 16:f4:21:82:7b:3f:dc:e5:78:3c:a7:f0:b6:1a:e1:d6:8c:e8: 36:e6:80:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqPzLHioK6z8oW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzI1OVoXDTI1MDkxODA5MzI1OVowLzEtMCsGA1UEAxMk MDU4ZmVkZGItOWVkNC00ZmMyLWI3MmMtYzcwYmNjNDM5ODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6tUaLv1yBzZ92W2Na80XO1vgHOqbfRRs3tK tcNnu/UcJMXwhg8+GP8bTffqXl65FEfgN5rJ50yO2kUgFSLkXSLBDgHeQXnqJkN3 Am4Bi/4jQKzmxwm8LbWOlJd9wjUX28mpP2RzuOIH1TDbVzv9+1aoHCn8jxbJl4y5 kx2fPuZRqbodzWmsBNeoDQulV/ALvZFSgkqVdrz1im8EN/8z+XF+nl8n4uI0swvW 9Na4mvUndU9K8F3agvStM8Ktt2XCsdinfHdab0CqZ9lj+28DA9LWRdAMOXWrS/HJ jDXTxJOW7DcGpIiVR+8dBnSUw+fT8FdVePbtu6lZTCoNAxYzdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNRqyvWRwn4rf69skc7WomUrP3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjRhZmNkNGYtMzYxZi0z Njg1LTg0MzgtNzE4ODBjODVjYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYSbGPOsqMb10o/8P2L5NwmUhKLEOf32NU+BdZxkdC345NuPXfegAk kxXMRYcZ9JnSUcZTKu38j2RVTnl8imrMnooNOU2nk8Vh4qBqhictYjhuKQsqaHlW NiPKxjHSE7so92DLiPoYG9WXXVDuzAPeKSoUXK7ZjMYMEqla0JmpMxFJhFcy0/jU uA+xs9uz03RSZkOodZ7DTGAtJRpHBZ1lZEY6d5iYVMJPNdqC/BCzcbZfQkXsER9T lFjYutjThmqLlYP04WQoLhYtJUQNbaPjyxqZ60FT9zPNCyGC05AyN6OwceH+IIq1 Nxb0IYJ7P9zleDyn8LYa4daM6DbmgHk= -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:19 2025 by rpki-client