$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa File: 2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa (raw, json) Hash identifier: bMlzjrbJVdOzlE2lBiZge1O27+209j/XTHRrobcE280= Subject key identifier: BE:B6:06:68:06:EC:81:A8:89:09:95:94:4A:A5:06:85:79:3E:2E:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963641969E7695F5DE9AE180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:41:96:9e:76:95:f5:de:9a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=39dab51f-ceb2-4119-ba64-fe22cfc8f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:97:d7:9a:98:b7:23:84:84:74:35:82:55: 69:52:d1:6b:77:be:94:cc:74:2e:eb:d1:2e:aa:bd: fc:3f:d4:9c:76:6e:be:9f:79:8d:fc:11:ad:22:41: 11:48:67:bd:82:f5:b9:ae:b3:a4:31:0c:8c:d2:6f: 0b:8f:7b:fc:89:88:6c:b5:04:12:1b:0f:58:58:71: e3:c0:c1:49:8d:05:e2:8f:3f:22:a2:4b:5e:f6:e3: 29:ff:ed:e5:95:42:7a:bb:df:76:87:eb:17:ca:70: e8:e2:17:38:25:24:ad:c6:e2:1e:e2:99:dc:5d:7b: f0:06:77:52:39:74:b7:f9:51:4d:f1:f3:c5:c3:b9: 37:99:d3:65:8e:32:36:38:61:87:04:e4:43:54:53: 1f:48:14:18:05:4e:3b:8c:d6:58:d1:7f:de:0f:01: 94:0d:90:33:7c:8f:47:db:71:93:61:b3:0e:6d:a2: e7:ec:26:10:c9:d7:25:60:d5:32:58:70:68:c7:1c: 00:da:32:73:c6:1d:7f:77:a6:47:c7:1e:46:da:f8: ef:ca:8e:40:c3:32:b5:55:eb:65:e4:08:ab:01:2c: 93:62:91:a7:03:99:16:bf:51:9f:01:b1:80:03:8d: 81:db:d2:d8:75:db:40:ca:0f:7b:7f:b9:7a:52:84: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B6:06:68:06:EC:81:A8:89:09:95:94:4A:A5:06:85:79:3E:2E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ad:69:c9:58:b6:5f:cd:e8:3d:03:0d:f9:bf:d7:49:dc:20: 76:ca:16:97:1f:98:fd:77:8b:b4:e7:07:dc:34:3f:2b:23:67: 9a:dd:b7:60:9e:41:b0:62:da:75:50:c6:87:ac:56:24:d5:65: 14:ff:2b:a8:3a:06:c7:5e:a6:0f:a0:db:0f:0c:9c:53:63:46: 69:58:c3:6c:c4:f5:54:f6:fd:cb:84:19:dd:79:71:8b:ac:34: 65:f7:ea:1f:6a:6e:60:04:b0:b7:e9:39:b8:b6:e1:b4:71:73: b3:6e:38:bc:0f:5a:5f:f2:59:7f:37:b0:c1:cc:c1:ef:44:06: 9c:89:ee:e6:9e:48:0d:dc:c1:f3:af:d0:c5:b8:f6:c9:06:86: fb:0b:8b:d8:d1:a3:07:6b:11:33:20:6a:1f:9e:c2:af:9a:e0: 26:49:7b:d9:c1:d5:5b:c1:a1:ad:fe:99:85:a1:fa:b7:c5:62: 2c:7d:1c:78:b7:ee:4a:86:7d:ea:33:42:08:99:e5:e6:4c:0b: b8:28:46:ae:6a:79:e6:c6:52:84:7b:fe:34:3a:81:38:43:19: 46:f4:e5:10:72:06:ad:8c:91:3d:5c:24:1c:60:0a:64:52:3d: 78:77:08:c9:5b:74:4f:ee:be:16:39:ab:ce:0f:90:00:bf:3f: 42:78:de:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkGWnnaV9d6a4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzlkYWI1MWYtY2ViMi00MTE5LWJhNjQtZmUyMmNmYzhmNGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA442X15qYtyOEhHQ1glVpUtFrd76UzHQu69Eu qr38P9Scdm6+n3mN/BGtIkERSGe9gvW5rrOkMQyM0m8Lj3v8iYhstQQSGw9YWHHj wMFJjQXijz8iokte9uMp/+3llUJ6u992h+sXynDo4hc4JSStxuIe4pncXXvwBndS OXS3+VFN8fPFw7k3mdNljjI2OGGHBORDVFMfSBQYBU47jNZY0X/eDwGUDZAzfI9H 23GTYbMObaLn7CYQydclYNUyWHBoxxwA2jJzxh1/d6ZHxx5G2vjvyo5AwzK1Vetl 5AirASyTYpGnA5kWv1GfAbGAA42B29LYddtAyg97f7l6UoTeXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL62BmgG7IGoiQmVlEqlBoV5Pi5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk5N2Y5ZDMtN2EzMy0z YjJhLThhZDAtZGEyNGUyMGVlYmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWtaclYtl/N6D0DDfm/10ncIHbKFpcfmP13i7TnB9w0PysjZ5rdt2Ce QbBi2nVQxoesViTVZRT/K6g6Bsdepg+g2w8MnFNjRmlYw2zE9VT2/cuEGd15cYus NGX36h9qbmAEsLfpObi24bRxc7NuOLwPWl/yWX83sMHMwe9EBpyJ7uaeSA3cwfOv 0MW49skGhvsLi9jRowdrETMgah+ewq+a4CZJe9nB1VvBoa3+mYWh+rfFYix9HHi3 7kqGfeozQgiZ5eZMC7goRq5qeebGUoR7/jQ6gThDGUb05RByBq2MkT1cJBxgCmRS PXh3CMlbdE/uvhY5q84PkAC/P0J43q0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:08:17 2025 by rpki-client