$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2245c8d4-6bb5-3a2a-b079-aa50a528bc28.roa File: 2245c8d4-6bb5-3a2a-b079-aa50a528bc28.roa (raw, json) Hash identifier: 8e+l/3kufpgyzN2+3zcMbfXMtI6b0onncDjUERhjxuo= Subject key identifier: 8D:E9:E0:4B:77:38:F6:7E:24:A0:F6:5E:C9:42:65:91:57:D0:72:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963641206819980242A8FE54 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2245c8d4-6bb5-3a2a-b079-aa50a528bc28.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:41:20:68:19:98:02:42:a8:fe:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ec8beab4-32df-43b6-a81a-e746b0bb5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a2:ac:0d:fc:b9:b3:5c:b9:a6:d1:b5:fd:86: a3:56:76:41:c6:b4:71:2f:0d:08:fe:1b:f6:b6:ae: 9c:0e:4b:60:78:4a:ce:c9:e5:76:c2:24:1c:92:4a: b0:07:6c:ca:f1:ac:5e:43:bf:01:08:85:e2:0b:2d: d1:cd:3e:13:ad:1f:6c:8d:b3:13:9a:67:55:f7:6e: 6d:f2:4a:96:57:83:44:b6:80:ff:52:2c:4f:29:15: 79:16:d9:00:d8:cc:d1:de:80:4d:2b:c8:a8:f7:ab: 36:78:0e:71:e7:b1:25:8d:4c:00:f0:6f:99:f3:15: 3e:4f:0a:85:27:3a:2a:c0:18:e1:54:1a:eb:f1:52: 99:fd:f9:2e:ab:16:88:a9:e2:e9:6e:82:87:99:f5: fb:fb:33:88:cc:bb:27:5d:3e:c4:ff:61:fe:95:f9: b1:8a:74:48:f4:76:92:02:37:1c:c2:d9:61:c1:fc: b7:01:5e:ff:18:a8:c2:33:4d:99:bf:25:9d:70:35: 9c:36:86:8e:da:e0:a7:f5:62:f1:4e:d2:90:84:46: c7:94:ab:67:47:14:17:69:35:10:29:ba:ef:d9:6a: dd:00:d7:b0:d4:ad:0b:cb:56:23:1b:b3:64:86:c1: 25:b1:50:fd:b9:8b:64:61:1c:69:1e:7a:17:bc:dd: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E9:E0:4B:77:38:F6:7E:24:A0:F6:5E:C9:42:65:91:57:D0:72:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2245c8d4-6bb5-3a2a-b079-aa50a528bc28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:12:6d:94:ae:1a:6f:16:fe:34:12:16:b8:6e:a9:1a:18:b8: 46:01:3a:df:46:7e:90:cf:89:7e:ce:1a:9c:ad:ee:75:c3:28: e2:c0:4a:3a:06:f9:8f:82:58:f1:9f:25:f4:44:20:06:04:8e: 13:53:87:eb:b8:28:33:67:76:06:62:25:fa:15:12:b4:fa:db: 77:d7:45:a4:5b:7f:f7:33:cc:ff:00:bd:4e:71:e4:74:b9:78: a8:1f:1e:c6:b9:b1:a2:77:5e:a4:ab:ec:2d:ad:f7:b2:af:8f: 20:63:a8:f6:ca:cf:d6:d8:f9:ce:c5:8e:2a:60:c7:b8:8e:57: 15:43:94:38:6c:a5:f8:90:b0:4e:5d:58:8f:0c:16:c8:8a:f1: 54:c5:0c:2a:00:27:85:b5:14:7a:a1:2c:2a:ff:38:99:87:7f: 73:6d:57:8b:1f:28:77:81:e3:3f:57:7f:0f:6b:77:d2:d8:88: 22:1a:1f:09:12:a5:e4:e6:33:82:a0:aa:f9:e9:80:55:da:1e: f4:12:be:46:76:a1:f8:a1:3e:e8:b2:48:a4:d3:90:6c:53:ea: 63:b1:06:42:11:be:29:2a:24:72:9b:31:02:51:29:91:18:75: 9c:af:5f:64:f5:3a:6c:2b:38:aa:88:26:48:2d:fa:b7:4f:d5: 04:06:67:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkEgaBmYAkKo/lQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWM4YmVhYjQtMzJkZi00M2I2LWE4MWEtZTc0NmIwYmI1Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqKsDfy5s1y5ptG1/YajVnZBxrRxLw0I/hv2 tq6cDktgeErOyeV2wiQckkqwB2zK8axeQ78BCIXiCy3RzT4TrR9sjbMTmmdV925t 8kqWV4NEtoD/UixPKRV5FtkA2MzR3oBNK8io96s2eA5x57EljUwA8G+Z8xU+TwqF JzoqwBjhVBrr8VKZ/fkuqxaIqeLpboKHmfX7+zOIzLsnXT7E/2H+lfmxinRI9HaS Ajccwtlhwfy3AV7/GKjCM02ZvyWdcDWcNoaO2uCn9WLxTtKQhEbHlKtnRxQXaTUQ Kbrv2WrdANew1K0Ly1YjG7NkhsElsVD9uYtkYRxpHnoXvN0qlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3p4Et3OPZ+JKD2XslCZZFX0HI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI0NWM4ZDQtNmJiNS0z YTJhLWIwNzktYWE1MGE1MjhiYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsSbZSuGm8W/jQSFrhuqRoYuEYBOt9GfpDPiX7OGpyt7nXDKOLASjoG +Y+CWPGfJfREIAYEjhNTh+u4KDNndgZiJfoVErT623fXRaRbf/czzP8AvU5x5HS5 eKgfHsa5saJ3XqSr7C2t97KvjyBjqPbKz9bY+c7Fjipgx7iOVxVDlDhspfiQsE5d WI8MFsiK8VTFDCoAJ4W1FHqhLCr/OJmHf3NtV4sfKHeB4z9Xfw9rd9LYiCIaHwkS peTmM4KgqvnpgFXaHvQSvkZ2ofihPuiySKTTkGxT6mOxBkIRvikqJHKbMQJRKZEY dZyvX2T1OmwrOKqIJkgt+rdP1QQGZ4s= -----END CERTIFICATE-----Generated at Wed Aug 6 11:09:18 2025 by rpki-client