$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcedc706-0e0a-3558-9c4f-d6562605ad84.roa File: bcedc706-0e0a-3558-9c4f-d6562605ad84.roa (raw, json) Hash identifier: OSjtX+UNL8zIxQtkGOqxbqWs7oAJ9k+gF4BUhtsIgVM= Subject key identifier: 63:3F:C8:87:64:1A:F4:17:A7:AE:F9:2A:08:F1:D2:D7:FE:75:87:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A07D53618096D533E91266E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcedc706-0e0a-3558-9c4f-d6562605ad84.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 397149 IP address blocks: 70.164.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:36:18:09:6d:53:3e:91:26:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=8e0c9a7c-a0ed-4f7c-8cb0-2c093c0582b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:5a:c3:d8:81:40:d9:58:18:68:3d:46:39: 0c:49:68:5c:44:57:a0:ab:6b:92:27:d7:d0:61:a0: d0:ec:73:66:67:7d:17:a1:84:95:73:49:16:7c:74: 82:f9:0d:d1:c8:49:eb:86:75:8a:d2:93:77:0b:8f: 45:65:e9:73:06:86:23:66:00:84:3d:81:07:b3:46: 4f:86:32:6d:db:b3:88:8f:88:dd:47:b9:9d:b6:90: 4c:9f:dd:93:69:31:cc:39:e9:d6:fe:13:a2:31:26: bd:c5:bc:9f:6f:5a:19:d5:43:fc:b6:64:e0:2b:12: 77:a2:98:46:fc:cb:2a:28:8d:31:47:72:08:e2:53: c2:57:17:07:70:b7:58:09:da:3a:be:17:44:59:8e: 3b:32:46:43:48:20:20:b6:52:f0:3a:ff:cb:bf:a3: da:aa:48:3e:a9:ab:56:99:8d:6d:72:5c:29:e2:9e: c0:63:47:d0:29:2d:02:27:f3:ef:8c:c6:3a:10:22: 18:5d:42:45:f5:3e:ae:e0:ea:ae:4b:63:95:40:2d: f6:5d:3a:53:b4:c6:13:1e:28:8c:74:21:ac:b2:22: 2b:a4:0b:b7:b3:12:d8:46:2d:02:14:b7:b3:4c:02: f1:5f:3f:05:10:d1:66:5c:6e:85:f5:5f:a8:87:10: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:C8:87:64:1A:F4:17:A7:AE:F9:2A:08:F1:D2:D7:FE:75:87:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bcedc706-0e0a-3558-9c4f-d6562605ad84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.164.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:16:83:27:b6:fc:18:b8:85:45:7a:6b:a7:ce:30:87:99:eb: fc:29:45:43:71:52:83:f9:56:af:66:b2:97:f9:98:a1:5b:ad: 52:60:7b:e2:d6:16:24:cc:d0:6c:52:f4:da:2b:62:ac:5b:5d: 1b:cf:22:8e:a4:a5:f2:a5:33:5d:3c:61:b8:f1:8a:79:6a:f6: d9:fa:4f:5a:fe:41:20:b2:55:bb:fc:77:c5:59:fe:75:97:59: 57:69:03:36:18:9c:cd:42:40:80:5b:fa:71:40:b5:58:93:16: 8b:07:65:7f:af:93:6c:7b:79:46:13:2f:26:a8:0e:6f:24:d7: a9:58:88:1f:86:5f:49:5f:3c:55:84:79:ce:94:7d:a2:4e:3b: d4:b0:81:66:0c:7d:1f:70:96:05:8c:6f:29:3e:0b:6e:d8:17: c5:44:d5:c5:49:3f:f9:29:61:b7:59:d3:0a:f6:a4:9a:b6:3f: 7f:d1:46:c6:2b:ad:3b:a8:68:f4:21:2a:e2:1c:69:e6:65:30: 99:98:d9:d7:a3:98:89:10:40:90:90:65:57:73:0f:1f:db:28: 5f:1b:1c:48:75:b5:9f:d8:fa:a9:b5:73:88:3c:d5:8e:b0:dc: d5:ae:ec:e5:7f:64:9a:b9:ca:c8:02:8f:1c:96:be:a2:4d:4e: af:07:4c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TYYCW1TPpEmboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk OGUwYzlhN2MtYTBlZC00ZjdjLThjYjAtMmMwOTNjMDU4MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHdaw9iBQNlYGGg9RjkMSWhcRFegq2uSJ9fQ YaDQ7HNmZ30XoYSVc0kWfHSC+Q3RyEnrhnWK0pN3C49FZelzBoYjZgCEPYEHs0ZP hjJt27OIj4jdR7mdtpBMn92TaTHMOenW/hOiMSa9xbyfb1oZ1UP8tmTgKxJ3ophG /MsqKI0xR3II4lPCVxcHcLdYCdo6vhdEWY47MkZDSCAgtlLwOv/Lv6Paqkg+qatW mY1tclwp4p7AY0fQKS0CJ/PvjMY6ECIYXUJF9T6u4OquS2OVQC32XTpTtMYTHiiM dCGssiIrpAu3sxLYRi0CFLezTALxXz8FENFmXG6F9V+ohxCK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGM/yIdkGvQXp675Kgjx0tf+dYeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmNlZGM3MDYtMGUwYS0z NTU4LTljNGYtZDY1NjI2MDVhZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqRzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYWgye2/Bi4hUV6a6fOMIeZ6/wpRUNxUoP5Vq9mspf5mKFbrVJge+LW FiTM0GxS9NorYqxbXRvPIo6kpfKlM108Ybjxinlq9tn6T1r+QSCyVbv8d8VZ/nWX WVdpAzYYnM1CQIBb+nFAtViTFosHZX+vk2x7eUYTLyaoDm8k16lYiB+GX0lfPFWE ec6UfaJOO9SwgWYMfR9wlgWMbyk+C27YF8VE1cVJP/kpYbdZ0wr2pJq2P3/RRsYr rTuoaPQhKuIcaeZlMJmY2dejmIkQQJCQZVdzDx/bKF8bHEh1tZ/Y+qm1c4g81Y6w 3NWu7OV/ZJq5ysgCjxyWvqJNTq8HTPI= -----END CERTIFICATE-----Generated at Wed Jun 18 04:59:05 2025 by rpki-client