$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa File: d27650cd-0adc-3814-aa99-9684950b953e.roa (raw, json) Hash identifier: 9zF8Av/8a6T80yFZdu7ZMZSHQsvw8tggLbkcQEwT4PA= Subject key identifier: DD:F8:0E:A1:B2:04:82:A4:54:63:59:79:34:50:BC:3A:8D:A0:49:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA5EE19CC46AB7EE108D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 70.165.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:5e:e1:9c:c4:6a:b7:ee:10:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2e21560f-5d37-4637-8062-53e24adb85df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:f7:70:f1:db:6f:ef:c7:0b:a3:e5:ba:e2: 35:b9:a3:96:8c:87:71:1e:f9:87:3e:9f:04:65:cd: 78:c7:03:bf:82:79:ac:2d:1c:d5:8e:d0:8b:cd:41: 34:4c:e8:e8:b0:b4:b2:fe:aa:61:d5:34:3b:85:da: c4:ed:1d:68:a9:a2:e7:91:d0:92:a1:98:cd:88:4d: 40:9e:f1:73:bc:45:61:f5:7f:d9:37:97:6c:44:32: 1e:37:76:2b:c3:d6:9d:0b:07:61:69:d8:4e:1b:fa: a2:98:f5:a1:f4:3b:68:92:59:24:71:ba:13:3c:45: 49:70:cc:98:85:9f:fb:b2:0a:29:13:33:f1:e1:c7: aa:fe:09:02:d4:23:fc:1f:3d:49:a0:80:92:5f:dd: fc:b4:22:32:a3:bb:85:5d:fc:3c:8c:08:0c:b5:52: 03:00:61:e0:97:7d:32:06:96:4e:ed:75:9e:80:3b: ce:6a:3c:ec:2d:48:55:d8:91:74:73:d0:88:20:a9: 30:ab:f2:68:dc:2a:db:28:d1:7b:d3:70:2e:98:de: 53:09:c3:2a:76:b8:ba:af:b8:db:fc:9e:1c:c9:73: 93:00:12:76:fa:55:c7:ce:0f:9d:de:f9:8e:05:70: 25:7a:05:68:32:3c:55:b6:58:24:d8:62:57:b7:fd: 62:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F8:0E:A1:B2:04:82:A4:54:63:59:79:34:50:BC:3A:8D:A0:49:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d27650cd-0adc-3814-aa99-9684950b953e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.165.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a7:39:45:ee:bb:43:7c:f5:8b:33:24:b9:bb:62:49:6e:f2: 2a:fb:85:20:6e:d2:d4:e5:39:c7:2c:21:d6:c2:c6:c0:c4:b6: fc:b4:d2:19:f2:cf:48:ef:3a:12:92:1f:69:c6:8e:75:c0:90: 23:1c:29:14:23:9f:ad:c6:49:52:b2:d3:02:09:4d:3e:e1:a6: b9:ec:43:d4:35:86:3d:8e:a5:a4:6e:a0:e3:de:b4:ee:e5:be: 41:19:64:cc:51:de:e0:57:74:f5:7d:da:af:39:45:65:2d:ef: 45:f8:9e:e3:3e:14:09:bf:68:17:c4:ae:a8:4a:9a:66:c6:cf: 63:14:35:b4:22:f9:e4:1f:92:29:f5:69:57:65:81:6c:fb:69: 27:d7:e3:d1:a1:41:ea:39:ff:3f:0c:22:cc:5c:9c:16:42:73: 2f:3b:72:e7:23:c1:5a:2c:29:03:21:6f:3f:8a:76:7a:a9:a5: fa:2f:4c:5e:37:03:13:05:24:76:8e:6f:34:07:93:d7:78:08: 40:5f:91:2c:1f:a7:cf:f6:c7:63:75:ff:fa:e4:ce:92:4b:2f: ed:8f:2d:6f:81:af:69:36:be:b4:41:65:86:da:fb:80:95:6f: cb:87:c7:63:31:af:70:d3:bf:f8:2e:02:d2:6a:40:68:19:29: 1a:6c:d8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6l7hnMRqt+4QjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmUyMTU2MGYtNWQzNy00NjM3LTgwNjItNTNlMjRhZGI4NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK73cPHbb+/HC6PluuI1uaOWjIdxHvmHPp8E Zc14xwO/gnmsLRzVjtCLzUE0TOjosLSy/qph1TQ7hdrE7R1oqaLnkdCSoZjNiE1A nvFzvEVh9X/ZN5dsRDIeN3Yrw9adCwdhadhOG/qimPWh9DtoklkkcboTPEVJcMyY hZ/7sgopEzPx4ceq/gkC1CP8Hz1JoICSX938tCIyo7uFXfw8jAgMtVIDAGHgl30y BpZO7XWegDvOajzsLUhV2JF0c9CIIKkwq/Jo3CrbKNF703AumN5TCcMqdri6r7jb /J4cyXOTABJ2+lXHzg+d3vmOBXAlegVoMjxVtlgk2GJXt/1ilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN34DqGyBIKkVGNZeTRQvDqNoEmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDI3NjUwY2QtMGFkYy0z ODE0LWFhOTktOTY4NDk1MGI5NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+nOUXuu0N89YszJLm7Yklu8ir7hSBu0tTlOccsIdbCxsDEtvy00hny z0jvOhKSH2nGjnXAkCMcKRQjn63GSVKy0wIJTT7hprnsQ9Q1hj2OpaRuoOPetO7l vkEZZMxR3uBXdPV92q85RWUt70X4nuM+FAm/aBfErqhKmmbGz2MUNbQi+eQfkin1 aVdlgWz7aSfX49GhQeo5/z8MIsxcnBZCcy87cucjwVosKQMhbz+KdnqppfovTF43 AxMFJHaObzQHk9d4CEBfkSwfp8/2x2N1//rkzpJLL+2PLW+Br2k2vrRBZYba+4CV b8uHx2Mxr3DTv/guAtJqQGgZKRps2Ow= -----END CERTIFICATE-----Generated at Fri Aug 8 21:00:43 2025 by rpki-client