$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43f3f981-eeb7-3754-8386-0a99c85cb09d.roa File: 43f3f981-eeb7-3754-8386-0a99c85cb09d.roa (raw, json) Hash identifier: dR8X9GZKPAReq02ElSX6ljDDdTA1KqAT86N76L5ukRE= Subject key identifier: 3B:1D:31:49:D9:10:38:B5:11:2A:4A:96:91:54:1E:F1:DD:43:80:14 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A963644BB9AF5089A1050A0F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43f3f981-eeb7-3754-8386-0a99c85cb09d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.161.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:44:bb:9a:f5:08:9a:10:50:a0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=1e5395c9-7d94-4e25-9d42-ab134d168d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:9f:75:72:a9:d8:da:ac:e6:95:2e:4c:b4: 2e:8a:3f:35:24:09:f3:0d:41:44:5b:94:e1:ff:2d: ad:d4:05:80:80:d7:c8:d0:db:cb:80:12:75:b0:89: f3:89:96:1e:7b:71:61:dd:bb:0d:65:ac:27:df:4f: a0:65:43:51:92:9b:34:6a:1e:45:2e:47:24:7d:e2: df:8a:d7:b3:0d:9c:2b:ff:c9:68:f2:05:44:f8:b1: 93:58:2a:74:10:84:20:9d:bb:02:09:b6:d6:2f:d4: 03:a5:10:4e:6d:e4:59:57:36:fe:7c:05:31:72:c8: 3a:09:52:89:9d:3b:29:73:85:cf:f3:7c:78:92:5b: af:d8:e9:2a:40:cb:28:1e:71:9a:13:ff:2e:c6:06: 04:bb:45:01:df:43:9e:ad:8f:44:cc:c0:bf:06:d5: 60:61:5f:72:b1:50:61:97:33:ea:04:92:63:95:26: 4d:b6:7b:77:15:ec:6c:59:84:9c:32:25:5e:7a:35: 43:e0:ff:cb:93:4a:e1:a0:1c:b1:ea:f9:38:f2:c6: 67:47:42:9a:5a:aa:5b:28:ef:23:2d:75:ef:c1:00: 3f:a9:65:9f:37:c8:94:d0:ba:84:87:32:c3:68:ab: 62:e0:54:86:14:11:1b:d7:6f:80:79:20:06:ce:d7: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:31:49:D9:10:38:B5:11:2A:4A:96:91:54:1E:F1:DD:43:80:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43f3f981-eeb7-3754-8386-0a99c85cb09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:3c:7a:17:8f:ee:13:22:06:d4:c0:9e:d5:84:b5:d0:c7:20: e1:8a:d6:3b:d9:f5:b4:56:a4:e7:23:15:fa:f9:79:85:8b:91: 44:bd:ae:53:33:1e:0c:f7:88:85:cf:33:90:61:1f:7f:76:71: 9c:2d:c1:e1:1e:60:63:d0:3f:d1:d9:f3:91:9c:4e:4f:76:8b: cf:b2:0f:61:6c:eb:32:1c:dc:68:70:1d:0d:2d:5b:71:f4:4a: ff:f6:52:55:cd:c3:eb:84:f9:72:19:9e:13:ea:d6:cf:07:57: 18:10:65:1d:21:85:cb:c3:eb:6e:da:ef:cb:8b:cd:86:08:eb: 6a:bb:11:a9:eb:e1:99:2b:cb:54:71:0e:9d:2b:2b:c7:5b:21: c1:f6:d7:f5:89:a3:39:49:0b:72:b6:a6:c3:02:f1:0c:49:e0: 15:a4:db:52:d1:55:db:74:08:99:c7:7c:ca:ef:e2:0e:0f:fd: 33:5e:90:ae:71:88:50:73:06:b4:72:2b:ca:18:9d:b7:37:6e: 3d:04:a3:9f:0a:dc:66:24:88:cb:bd:e6:24:78:e2:6e:55:62: b1:ef:13:1e:ef:b2:bd:59:cc:84:d7:c3:84:e4:ae:10:1c:4c: ca:14:38:68:f3:38:bb:09:90:25:80:8f:fa:6c:82:06:2c:8c: 1e:f8:03:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkS7mvUImhBQoPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MWU1Mzk1YzktN2Q5NC00ZTI1LTlkNDItYWIxMzRkMTY4ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFyfdXKp2Nqs5pUuTLQuij81JAnzDUFEW5Th /y2t1AWAgNfI0NvLgBJ1sInziZYee3Fh3bsNZawn30+gZUNRkps0ah5FLkckfeLf itezDZwr/8lo8gVE+LGTWCp0EIQgnbsCCbbWL9QDpRBObeRZVzb+fAUxcsg6CVKJ nTspc4XP83x4kluv2OkqQMsoHnGaE/8uxgYEu0UB30OerY9EzMC/BtVgYV9ysVBh lzPqBJJjlSZNtnt3FexsWYScMiVeejVD4P/Lk0rhoByx6vk48sZnR0KaWqpbKO8j LXXvwQA/qWWfN8iU0LqEhzLDaKti4FSGFBEb12+AeSAGztfRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsdMUnZEDi1ESpKlpFUHvHdQ4AUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNmM2Y5ODEtZWViNy0z NzU0LTgzODYtMGE5OWM4NWNiMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQ8eheP7hMiBtTAntWEtdDHIOGK1jvZ9bRWpOcjFfr5eYWLkUS9rlMz Hgz3iIXPM5BhH392cZwtweEeYGPQP9HZ85GcTk92i8+yD2Fs6zIc3GhwHQ0tW3H0 Sv/2UlXNw+uE+XIZnhPq1s8HVxgQZR0hhcvD627a78uLzYYI62q7Eanr4Zkry1Rx Dp0rK8dbIcH21/WJozlJC3K2psMC8QxJ4BWk21LRVdt0CJnHfMrv4g4P/TNekK5x iFBzBrRyK8oYnbc3bj0Eo58K3GYkiMu95iR44m5VYrHvEx7vsr1ZzITXw4TkrhAc TMoUOGjzOLsJkCWAj/psggYsjB74AwY= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:18 2025 by rpki-client