$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa File: 221ee8af-67af-39f0-8880-44845100db4f.roa (raw, json) Hash identifier: 9jO+VFU4OLJEd2olZlJiZtm6ISSODt1qnPupoDJz4aA= Subject key identifier: 6D:E7:A9:23:37:DF:5C:46:90:7E:37:C9:E3:0F:A7:AC:88:AE:7D:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636237366E1F837FDD64B04 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.172.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:23:73:66:e1:f8:37:fd:d6:4b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=36055a02-e1d0-4c6d-b9ae-0bf5e0833b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:be:4c:25:25:bf:0f:ef:76:14:eb:ea:f5: 26:ea:92:fa:4c:86:93:e9:2f:c8:35:6b:27:6b:50: aa:d6:1e:b1:7f:48:b3:2e:80:90:d5:82:77:0a:53: 99:ab:5a:55:99:b0:2b:44:52:e9:ca:d7:df:2e:c7: f4:25:ec:15:6f:ca:24:10:a8:29:d5:53:c6:85:ed: 26:58:2e:18:c4:1f:87:c6:9a:2f:65:6a:9b:e3:73: 56:2a:e0:8b:41:7b:3e:95:ed:00:9d:5c:61:7e:58: 8a:e0:ab:5e:27:57:f6:81:0a:4b:8b:ba:96:f6:3b: 25:c2:86:e3:ae:b6:44:00:95:f2:95:f3:48:96:db: 01:c0:97:2a:a1:ef:cf:6e:57:3b:10:e9:d0:06:95: e5:8a:ce:c5:19:95:c0:b1:69:c1:af:28:55:54:49: fb:a6:d9:fc:bf:ab:30:1a:a3:3f:c6:e9:97:49:3e: 32:04:95:d2:97:43:9f:e9:cd:36:49:12:7d:af:4f: 25:b4:17:88:ac:b2:88:16:44:83:ed:70:1a:50:c6: bf:70:aa:b9:b4:1f:5f:2d:c8:36:bd:8e:38:0c:82: 72:f9:8a:49:06:3e:3f:87:ee:20:46:10:d2:16:f5: dd:ec:c2:3f:e0:60:5e:d5:51:6c:70:a8:4e:19:f7: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E7:A9:23:37:DF:5C:46:90:7E:37:C9:E3:0F:A7:AC:88:AE:7D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/221ee8af-67af-39f0-8880-44845100db4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:65:56:7e:d8:32:12:8c:f3:77:53:2d:5f:37:01:fd:57:41: b6:c0:cb:43:9b:22:3c:3e:92:70:6d:f8:ff:49:b7:ee:0b:7b: 86:c4:9d:d4:42:34:56:8c:47:2b:36:f9:61:b8:9a:43:4b:87: 98:f5:8c:46:b4:7f:bf:28:2e:2c:38:9a:fa:7d:01:3e:84:bf: 4b:f2:ae:d0:90:56:83:cd:4f:4f:ad:b6:71:1d:fd:20:ae:f5: 1a:b6:0d:a2:4a:f9:00:35:c1:bf:a2:1b:36:c5:37:72:4d:11: 1b:c9:46:5a:83:d3:b8:23:b0:c3:90:9f:2b:6a:df:6f:73:8a: d7:54:c8:14:33:3a:47:b3:81:f1:5b:23:25:7e:b1:87:e9:65: 3f:81:6f:8f:e0:d8:67:59:3b:6a:8f:99:2d:8d:3d:48:50:73: e2:1a:d1:87:06:d7:7c:c3:d0:70:5e:a4:bf:a5:d1:a1:f5:2f: 0b:3d:f8:2d:02:42:1a:08:3d:6c:eb:46:cf:28:c6:5f:34:02: 40:31:87:b6:ff:d1:7c:3d:f3:5a:0e:21:ba:04:8a:10:d3:be: 67:b5:e3:22:bb:1c:d3:3c:82:12:06:30:8d:4c:73:c4:5b:bd: f0:0e:53:9c:b0:a5:47:4f:57:71:85:bf:99:8f:43:35:71:17: e8:7d:4c:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiNzZuH4N/3WSwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzYwNTVhMDItZTFkMC00YzZkLWI5YWUtMGJmNWUwODMzYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+e+TCUlvw/vdhTr6vUm6pL6TIaT6S/INWsn a1Cq1h6xf0izLoCQ1YJ3ClOZq1pVmbArRFLpytffLsf0JewVb8okEKgp1VPGhe0m WC4YxB+HxpovZWqb43NWKuCLQXs+le0AnVxhfliK4KteJ1f2gQpLi7qW9jslwobj rrZEAJXylfNIltsBwJcqoe/Pblc7EOnQBpXlis7FGZXAsWnBryhVVEn7ptn8v6sw GqM/xumXST4yBJXSl0Of6c02SRJ9r08ltBeIrLKIFkSD7XAaUMa/cKq5tB9fLcg2 vY44DIJy+YpJBj4/h+4gRhDSFvXd7MI/4GBe1VFscKhOGfe6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3nqSM331xGkH43yeMPp6yIrn3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxZWU4YWYtNjdhZi0z OWYwLTg4ODAtNDQ4NDUxMDBkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxlVn7YMhKM83dTLV83Af1XQbbAy0ObIjw+knBt+P9Jt+4Le4bEndRC NFaMRys2+WG4mkNLh5j1jEa0f78oLiw4mvp9AT6Ev0vyrtCQVoPNT0+ttnEd/SCu 9Rq2DaJK+QA1wb+iGzbFN3JNERvJRlqD07gjsMOQnytq329zitdUyBQzOkezgfFb IyV+sYfpZT+Bb4/g2GdZO2qPmS2NPUhQc+Ia0YcG13zD0HBepL+l0aH1Lws9+C0C QhoIPWzrRs8oxl80AkAxh7b/0Xw981oOIboEihDTvme14yK7HNM8ghIGMI1Mc8Rb vfAOU5ywpUdPV3GFv5mPQzVxF+h9TGs= -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:24 2025 by rpki-client