$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa File: 25bf4379-88cf-3191-bf58-86f46dec1c53.roa (raw, json) Hash identifier: tli6M4lo0JDciw7+bOsJZJ6rzj8fKqKJPHnwubwXAEI= Subject key identifier: AA:82:22:B4:3B:36:06:92:4E:89:4F:D5:A4:76:1D:0C:1E:7A:02:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636233B081AFC93F6FE00A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.172.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:23:3b:08:1a:fc:93:f6:fe:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=245c64cf-aa29-4383-ab21-b1a5c765c1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:ce:0a:54:48:d6:95:04:bc:10:ea:42:92: 9b:b6:a1:6a:4a:f0:2a:9a:bb:18:c2:16:98:8b:b6: 40:00:ca:e3:ee:ed:12:9b:d0:83:c9:81:bd:5d:c9: 3a:ab:85:58:d7:c9:6d:2c:b3:be:9f:87:20:23:1f: ab:6c:77:cb:e7:85:75:32:05:7d:bf:cc:9e:fb:b6: b4:69:1c:f8:ea:7c:d0:29:f7:1c:87:a9:eb:2e:6e: 27:25:58:69:22:4a:1b:a0:ed:22:51:1d:44:00:90: bb:0e:93:9d:3a:0b:1b:a2:42:60:12:8e:78:26:bc: d0:9d:fc:99:eb:66:a3:ec:6d:7a:18:6e:b2:70:87: d1:b3:81:55:b5:0f:4b:60:5a:5c:a9:e3:84:ee:1b: a8:b1:f1:43:87:04:a6:6a:15:23:45:50:c5:81:bd: 56:f9:45:de:e2:05:f0:81:d4:2b:8f:80:e5:b2:1a: 00:6e:97:60:64:53:17:da:6d:ec:6b:d7:7a:d0:57: 5c:43:46:84:75:a1:e6:74:0a:d7:b0:d7:22:9e:1d: 65:b7:df:53:ff:ee:71:ca:4a:ed:d9:c6:a6:b8:5a: 67:81:1e:7c:40:1c:03:8a:fe:fc:0a:e8:97:01:40: cc:51:ef:33:af:e9:40:41:09:35:e8:42:f8:07:18: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:22:B4:3B:36:06:92:4E:89:4F:D5:A4:76:1D:0C:1E:7A:02:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:09:13:bf:e0:ff:b6:91:cf:af:90:13:83:87:b7:8b:e3:45: 14:3c:91:90:e3:9a:14:b4:93:16:82:0b:8c:68:75:91:05:a8: b2:99:48:f3:9b:fa:8c:b3:7b:32:aa:e7:2d:03:1b:41:04:ab: 7b:c4:ec:83:c8:e9:fc:4d:d2:5f:9b:c3:26:7f:87:7c:fe:dd: c9:79:49:d5:61:1e:e7:42:a6:85:f0:7a:7d:92:95:d0:07:f9: ff:f9:02:ce:35:d5:a8:28:1a:4b:3a:ff:f6:6a:29:72:d9:b2: ec:2d:2a:96:4e:9c:4d:0f:1a:c3:39:5c:cf:72:c4:d8:47:cd: c6:18:b6:74:5a:f7:3b:fe:24:d7:29:5d:dd:cc:3b:9b:a4:76: f4:50:b2:eb:44:51:3f:ab:cc:dd:0a:02:8b:d1:7e:26:19:68: bc:68:01:15:e6:a0:58:ba:d4:08:bf:17:e8:4f:2a:24:92:6f: bb:5a:78:8a:23:3e:8e:d8:e2:b5:d8:ee:66:29:99:ea:7a:08: 54:32:2e:ed:cc:fb:1f:e1:85:d9:b3:fd:69:3b:56:2f:c3:12: 5f:65:b4:07:ea:f8:24:48:35:e7:0b:ab:c4:2a:9b:64:9d:08: 3c:c5:21:fb:3b:b1:c2:08:11:c9:fe:1c:38:6d:f6:cd:79:64: 3e:71:91:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNiM7CBr8k/b+AKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MjQ1YzY0Y2YtYWEyOS00MzgzLWFiMjEtYjFhNWM3NjVjMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbnOClRI1pUEvBDqQpKbtqFqSvAqmrsYwhaY i7ZAAMrj7u0Sm9CDyYG9Xck6q4VY18ltLLO+n4cgIx+rbHfL54V1MgV9v8ye+7a0 aRz46nzQKfcch6nrLm4nJVhpIkoboO0iUR1EAJC7DpOdOgsbokJgEo54JrzQnfyZ 62aj7G16GG6ycIfRs4FVtQ9LYFpcqeOE7huosfFDhwSmahUjRVDFgb1W+UXe4gXw gdQrj4DlshoAbpdgZFMX2m3sa9d60FdcQ0aEdaHmdArXsNcinh1lt99T/+5xykrt 2camuFpngR58QBwDiv78CuiXAUDMUe8zr+lAQQk16EL4Bxh1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqCIrQ7NgaSTolP1aR2HQweegJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjViZjQzNzktODhjZi0z MTkxLWJmNTgtODZmNDZkZWMxYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMJE7/g/7aRz6+QE4OHt4vjRRQ8kZDjmhS0kxaCC4xodZEFqLKZSPOb +oyzezKq5y0DG0EEq3vE7IPI6fxN0l+bwyZ/h3z+3cl5SdVhHudCpoXwen2SldAH +f/5As411agoGks6//ZqKXLZsuwtKpZOnE0PGsM5XM9yxNhHzcYYtnRa9zv+JNcp Xd3MO5ukdvRQsutEUT+rzN0KAovRfiYZaLxoARXmoFi61Ai/F+hPKiSSb7taeIoj Po7Y4rXY7mYpmep6CFQyLu3M+x/hhdmz/Wk7Vi/DEl9ltAfq+CRINecLq8Qqm2Sd CDzFIfs7scIIEcn+HDht9s15ZD5xkUw= -----END CERTIFICATE-----Generated at Fri Aug 8 00:43:38 2025 by rpki-client