$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a9cbd6-5dc2-3ef7-a1f1-90dc9c3ec814.roa File: 05a9cbd6-5dc2-3ef7-a1f1-90dc9c3ec814.roa (raw, json) Hash identifier: AvsYZ5jek7jmuMT3dI+G/ALLlKyNZWqMgk/F4Rla5Xw= Subject key identifier: 3A:17:33:D4:54:84:D5:BB:20:1E:A2:54:02:E2:34:09:39:3F:E6:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963621F28C834A0795BC6F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a9cbd6-5dc2-3ef7-a1f1-90dc9c3ec814.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.172.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:21:f2:8c:83:4a:07:95:bc:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=440ea909-be1e-427c-824c-d7f1cf3a15d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:24:dd:1e:2e:3a:99:03:5c:9f:64:cb:e6: 33:2e:7b:a6:79:91:30:2d:8f:51:28:f7:66:68:bf: 3e:59:fb:9a:37:93:55:77:e2:16:2f:93:5d:c7:59: 27:20:57:bb:65:74:bc:57:9e:91:a3:65:64:19:d5: 4f:28:bf:e1:70:c2:5a:5f:c4:8a:36:87:bb:c8:52: f4:0d:60:72:5e:9f:74:82:13:a3:05:21:19:22:91: 75:84:98:6d:61:26:a3:96:51:b0:75:b5:41:b7:87: 95:11:1d:f3:ec:e4:7d:24:3a:c1:a9:eb:45:ff:a3: 9a:df:03:96:9b:92:e9:7a:5b:b1:ba:1e:c4:16:da: b5:ee:ef:b3:49:76:9a:b7:71:b4:24:84:ee:83:08: a4:10:1d:60:6a:dc:bb:bf:e0:b2:6b:6d:6f:8e:46: 2d:17:4a:cd:b6:e6:40:ec:23:da:89:ca:1b:06:78: b2:43:a2:0b:64:46:14:ab:88:92:f8:1a:57:7f:4e: 45:6e:34:53:c7:34:d3:ce:4c:9a:2c:81:ef:98:e1: a3:0f:ad:17:d0:94:0e:fd:19:11:a1:f3:ab:ab:27: ef:56:91:74:cd:88:c4:68:6e:0c:cd:c7:db:2d:18: c0:ad:49:a6:aa:72:f9:2e:b7:d6:0c:62:58:a9:0b: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:17:33:D4:54:84:D5:BB:20:1E:A2:54:02:E2:34:09:39:3F:E6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a9cbd6-5dc2-3ef7-a1f1-90dc9c3ec814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:bc:54:4b:58:e1:d9:04:14:78:b6:52:78:5c:cc:9c:b0:0b: b4:a3:3d:77:fe:16:4d:9a:6d:0c:6c:d4:ce:b2:d0:5b:09:f0: 4b:b4:5b:80:8e:26:f2:f9:56:f2:63:6d:3e:89:80:c5:3d:3d: 5a:fa:cd:40:20:5d:4a:a8:b8:b9:dd:51:5a:9f:79:87:f4:74: d9:0a:64:8f:80:68:51:4f:1a:07:d4:3f:b5:0d:1d:57:d2:08: 4d:93:38:80:2d:9d:0a:e0:40:38:d0:27:e7:33:05:7b:4f:b1: f5:b3:ce:f7:12:2c:b6:89:f6:66:36:22:21:a2:9e:1f:01:3d: f1:0f:cf:d0:7f:09:15:9e:86:6d:01:46:b0:eb:97:19:8d:a8: 70:d1:99:e1:4b:87:1d:c6:01:d4:03:47:91:0a:cb:98:19:03: 2b:2a:8f:ea:c0:63:17:59:ec:eb:c8:19:2d:ac:b6:39:42:1a: b7:e0:c5:80:aa:67:fb:6b:6f:6e:52:94:38:ab:cf:a1:ef:ec: 40:60:22:17:d8:7b:d9:cc:64:23:be:d9:5d:c9:d8:90:25:da: a7:2c:9b:ea:1b:b7:81:db:80:f4:a3:99:dc:26:ce:57:6a:c6: 99:de:90:e5:41:be:3b:3f:1e:bf:bf:22:46:7a:aa:40:e0:77: f4:2c:c9:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiHyjINKB5W8bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NDQwZWE5MDktYmUxZS00MjdjLTgyNGMtZDdmMWNmM2ExNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPsk3R4uOpkDXJ9ky+YzLnumeZEwLY9RKPdm aL8+WfuaN5NVd+IWL5Ndx1knIFe7ZXS8V56Ro2VkGdVPKL/hcMJaX8SKNoe7yFL0 DWByXp90ghOjBSEZIpF1hJhtYSajllGwdbVBt4eVER3z7OR9JDrBqetF/6Oa3wOW m5Lpeluxuh7EFtq17u+zSXaat3G0JITugwikEB1gaty7v+Cya21vjkYtF0rNtuZA 7CPaicobBniyQ6ILZEYUq4iS+BpXf05FbjRTxzTTzkyaLIHvmOGjD60X0JQO/RkR ofOrqyfvVpF0zYjEaG4MzcfbLRjArUmmqnL5LrfWDGJYqQtP+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoXM9RUhNW7IB6iVALiNAk5P+YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDVhOWNiZDYtNWRjMi0z ZWY3LWExZjEtOTBkYzljM2VjODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKO8VEtY4dkEFHi2UnhczJywC7SjPXf+Fk2abQxs1M6y0FsJ8Eu0W4CO JvL5VvJjbT6JgMU9PVr6zUAgXUqouLndUVqfeYf0dNkKZI+AaFFPGgfUP7UNHVfS CE2TOIAtnQrgQDjQJ+czBXtPsfWzzvcSLLaJ9mY2IiGinh8BPfEPz9B/CRWehm0B RrDrlxmNqHDRmeFLhx3GAdQDR5EKy5gZAysqj+rAYxdZ7OvIGS2stjlCGrfgxYCq Z/trb25SlDirz6Hv7EBgIhfYe9nMZCO+2V3J2JAl2qcsm+obt4HbgPSjmdwmzldq xpnekOVBvjs/Hr+/IkZ6qkDgd/QsyW8= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:31 2025 by rpki-client