$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43aa50e0-5291-3691-87e4-22c2ec4bef0a.roa File: 43aa50e0-5291-3691-87e4-22c2ec4bef0a.roa (raw, json) Hash identifier: vWRcsIfhKRl3i4JWkau+ivsQ4D2kS3pDPQ3H6ZKvZa4= Subject key identifier: 17:67:8E:81:3E:07:9D:54:FA:7F:D6:A0:3E:D8:2C:B8:8D:D9:9E:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963641C90781EE18A3DBB3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43aa50e0-5291-3691-87e4-22c2ec4bef0a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:41:c9:07:81:ee:18:a3:db:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=f7f07d59-bdf4-4b2b-a9b4-b3dc5cbbd690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:f7:b4:2a:c1:f1:f5:c5:b5:12:58:e8:79: 1d:bd:65:d4:20:f8:0e:2b:9a:5d:e6:18:90:08:3f: 9b:fb:ce:ea:74:85:e6:4c:96:ab:9f:91:24:1b:b8: 6e:5b:9a:fa:d6:1d:5a:5d:db:df:80:c7:94:78:7f: 71:b4:81:53:89:4e:33:ad:c9:d1:ab:1c:29:cc:64: fa:f6:62:ee:4f:ed:32:2b:e1:e4:4f:f2:17:e4:f0: 16:34:6b:4a:8c:eb:1c:c3:4e:3b:28:f7:eb:8c:a7: 27:9c:9a:ab:b9:7a:f0:fd:70:76:fd:dc:09:ae:dd: 4b:7d:11:fa:72:d8:1e:5d:33:f3:19:17:7c:c7:4a: 34:4e:b6:99:97:13:d7:ba:a9:57:4f:ec:f8:66:4a: f9:b9:19:d4:a0:d9:a2:dc:97:14:b1:c8:14:d5:f9: 1c:6d:b1:1d:41:9f:6d:b0:cd:c2:85:35:40:2a:08: 95:ad:f9:69:98:dc:85:57:a8:ae:91:64:98:d4:ba: bc:ec:e8:31:bd:0b:f6:a1:dd:0b:aa:2b:de:f3:f7: 91:3d:5a:75:5e:3f:6c:72:e0:a7:76:d4:9d:97:a1: fc:a8:00:ae:5a:bd:d5:03:23:fa:aa:20:64:f5:7d: 9f:0d:6e:c1:a6:2e:53:f9:3b:e5:a7:c5:1e:b3:07: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:67:8E:81:3E:07:9D:54:FA:7F:D6:A0:3E:D8:2C:B8:8D:D9:9E:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43aa50e0-5291-3691-87e4-22c2ec4bef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:07:70:79:d5:45:05:e3:ed:aa:fb:02:6f:2b:00:7c:29:ae: 5a:16:e7:6a:1b:a0:3e:46:0b:b5:35:96:56:86:81:93:66:dc: a2:14:fd:56:96:87:11:e8:48:e4:54:da:0c:3e:98:19:99:c1: 9d:7e:7b:6e:47:fc:99:eb:9e:77:3d:a2:66:96:57:1f:78:e7: e7:7b:7b:0e:a3:9f:cd:6b:09:c8:02:57:c2:14:0b:76:af:3b: 2d:88:70:93:d8:f9:92:23:36:f1:44:a9:1f:ef:6a:55:c4:30: 77:73:57:a9:5c:b9:3f:94:ed:7d:e2:c3:e1:1e:c0:e0:aa:03: c2:0a:81:f3:3e:e7:ea:2c:d2:e3:55:78:f2:e9:f1:a1:ca:a2: a7:2f:3b:94:13:4f:0a:d8:00:5d:95:40:46:9f:6c:87:df:15: 02:76:f6:f2:f4:1f:b5:6f:74:26:d3:b2:eb:30:81:69:cb:ab: af:d6:29:c0:15:aa:3d:f0:e9:c0:58:7e:da:a8:5d:0c:5b:64: a6:83:2f:6a:5e:44:43:c7:5b:32:1c:b0:52:a1:d8:52:b4:44: cc:10:2a:fa:35:d8:6a:6f:2f:79:42:01:eb:b1:79:d5:b3:50: af:dc:23:04:8f:e9:8f:f8:8e:cf:3e:f7:e6:6c:26:46:ca:5b: 07:b2:40:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkHJB4HuGKPbs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZjdmMDdkNTktYmRmNC00YjJiLWE5YjQtYjNkYzVjYmJkNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOf3tCrB8fXFtRJY6HkdvWXUIPgOK5pd5hiQ CD+b+87qdIXmTJarn5EkG7huW5r61h1aXdvfgMeUeH9xtIFTiU4zrcnRqxwpzGT6 9mLuT+0yK+HkT/IX5PAWNGtKjOscw047KPfrjKcnnJqruXrw/XB2/dwJrt1LfRH6 ctgeXTPzGRd8x0o0TraZlxPXuqlXT+z4Zkr5uRnUoNmi3JcUscgU1fkcbbEdQZ9t sM3ChTVAKgiVrflpmNyFV6iukWSY1Lq87OgxvQv2od0Lqive8/eRPVp1Xj9scuCn dtSdl6H8qACuWr3VAyP6qiBk9X2fDW7Bpi5T+Tvlp8Ueswe0sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdnjoE+B51U+n/WoD7YLLiN2Z61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNhYTUwZTAtNTI5MS0z NjkxLTg3ZTQtMjJjMmVjNGJlZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMHcHnVRQXj7ar7Am8rAHwprloW52oboD5GC7U1llaGgZNm3KIU/VaW hxHoSORU2gw+mBmZwZ1+e25H/Jnrnnc9omaWVx945+d7ew6jn81rCcgCV8IUC3av Oy2IcJPY+ZIjNvFEqR/valXEMHdzV6lcuT+U7X3iw+EewOCqA8IKgfM+5+os0uNV ePLp8aHKoqcvO5QTTwrYAF2VQEafbIffFQJ29vL0H7VvdCbTsuswgWnLq6/WKcAV qj3w6cBYftqoXQxbZKaDL2peREPHWzIcsFKh2FK0RMwQKvo12GpvL3lCAeuxedWz UK/cIwSP6Y/4js8+9+ZsJkbKWweyQCk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:24:44 2025 by rpki-client