$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa File: 232895c1-2d84-3efd-9f62-0662d974b274.roa (raw, json) Hash identifier: c99MLhZyj8TjlAvxD90c/51F7CrlYex1zMPk9toi+L4= Subject key identifier: AC:52:65:DE:CE:CB:CC:CE:8C:0C:93:1C:78:81:DD:AF:5C:1B:94:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636456B49345BC18298E380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:45:6b:49:34:5b:c1:82:98:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d87a4a09-1a1b-4ece-a828-79b085e533bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9f:ee:ea:b5:19:a2:5b:8e:54:63:32:72:1a: 47:17:94:7f:30:30:f1:a7:7a:2f:48:27:c2:48:b8: 5f:22:5e:09:6b:00:37:76:82:08:05:a3:57:fe:13: cd:b6:41:31:e5:aa:5d:87:57:f9:d1:f8:16:f8:59: 78:d8:40:3a:6e:56:18:0c:14:d6:03:ea:e0:ab:51: 33:01:15:b6:58:eb:fa:b2:7a:81:67:82:53:55:23: 16:d3:c3:27:e4:bd:28:14:60:04:55:c4:e9:af:01: 25:41:59:0e:16:f9:55:2a:4d:a1:05:e2:52:6e:54: 12:6c:43:03:70:18:d7:f8:82:96:c1:e0:25:75:62: 24:99:2c:75:f5:ba:5b:59:3c:14:e5:39:b4:e7:82: 78:c2:e6:a1:06:9a:b0:8c:4e:95:26:ac:4f:48:5c: 14:05:16:f4:31:5e:37:59:71:b9:ca:1d:62:b1:8f: 34:79:0f:95:8e:07:71:d1:bc:eb:c7:ec:60:e1:70: 9f:3b:60:31:a0:57:3e:3f:6b:a6:54:75:57:d9:1f: 54:fa:3d:9f:62:79:29:af:e8:7d:b0:90:1b:23:3f: ba:8e:88:c7:26:13:e8:4d:59:76:80:81:56:3b:0d: 26:18:cf:6c:83:79:27:ee:87:0a:56:55:01:59:bd: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:52:65:DE:CE:CB:CC:CE:8C:0C:93:1C:78:81:DD:AF:5C:1B:94:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/232895c1-2d84-3efd-9f62-0662d974b274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:75:06:18:6e:26:33:65:4b:f5:36:c6:f1:ee:a4:ae:07:e6: 0b:9b:61:fd:dd:56:81:3a:30:a7:1d:5e:60:28:c6:9c:44:3a: e0:f1:6e:b4:97:ef:8c:ef:ea:4e:df:9d:37:b6:50:11:d4:c5: 92:35:de:84:06:ab:b0:eb:ed:b4:b7:f3:7e:f6:e7:b3:f8:60: 72:86:5e:e5:a3:ef:60:29:3f:75:fd:7b:d1:e9:cb:84:f9:a4: 02:53:ba:ac:d5:95:db:bf:be:53:89:3c:0b:e4:c2:3d:ba:e7: f7:56:02:7a:60:47:cf:ae:4f:b4:07:a7:a5:97:55:ae:4c:99: 72:cf:63:42:38:8e:49:3d:96:be:d7:37:03:8c:90:33:c2:0e: e6:a7:6b:4b:f3:2f:fe:5f:be:70:a1:a1:83:08:86:bb:8a:3d: 14:be:8d:ad:a4:22:bf:4d:dd:f2:5e:1a:65:05:8e:72:85:f8: 69:53:86:38:b5:a2:5e:3d:1a:70:3f:5e:6d:5f:bc:8d:ba:2c: 7e:46:2f:73:7b:c2:0b:f3:33:94:d7:1e:ce:16:8b:74:47:37: b4:ca:bc:c9:b8:90:44:ef:b6:fa:b4:82:75:dd:22:98:33:1f: 08:2f:8f:18:95:0b:32:a0:74:c5:f8:6a:f1:c6:11:77:6f:f6: ba:66:dc:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkVrSTRbwYKY44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDg3YTRhMDktMWExYi00ZWNlLWE4MjgtNzliMDg1ZTUzM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ/u6rUZoluOVGMychpHF5R/MDDxp3ovSCfC SLhfIl4JawA3doIIBaNX/hPNtkEx5apdh1f50fgW+Fl42EA6blYYDBTWA+rgq1Ez ARW2WOv6snqBZ4JTVSMW08Mn5L0oFGAEVcTprwElQVkOFvlVKk2hBeJSblQSbEMD cBjX+IKWweAldWIkmSx19bpbWTwU5Tm054J4wuahBpqwjE6VJqxPSFwUBRb0MV43 WXG5yh1isY80eQ+Vjgdx0bzrx+xg4XCfO2AxoFc+P2umVHVX2R9U+j2fYnkpr+h9 sJAbIz+6jojHJhPoTVl2gIFWOw0mGM9sg3kn7ocKVlUBWb0rrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxSZd7Oy8zOjAyTHHiB3a9cG5TVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjMyODk1YzEtMmQ4NC0z ZWZkLTlmNjItMDY2MmQ5NzRiMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx1BhhuJjNlS/U2xvHupK4H5gubYf3dVoE6MKcdXmAoxpxEOuDxbrSX 74zv6k7fnTe2UBHUxZI13oQGq7Dr7bS3837257P4YHKGXuWj72ApP3X9e9Hpy4T5 pAJTuqzVldu/vlOJPAvkwj265/dWAnpgR8+uT7QHp6WXVa5MmXLPY0I4jkk9lr7X NwOMkDPCDuana0vzL/5fvnChoYMIhruKPRS+ja2kIr9N3fJeGmUFjnKF+GlThji1 ol49GnA/Xm1fvI26LH5GL3N7wgvzM5TXHs4Wi3RHN7TKvMm4kETvtvq0gnXdIpgz HwgvjxiVCzKgdMX4avHGEXdv9rpm3A0= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:06 2025 by rpki-client