$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa File: 476525f4-d55f-34aa-8111-518c8eff2684.roa (raw, json) Hash identifier: MEzfbOrRj2NPl8u34LgLAJUYhfACDM6y7jPm2aNeoAs= Subject key identifier: 00:59:AA:8B:E1:A4:59:79:EC:58:F2:6E:BC:24:64:66:AA:27:81:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636439BCAEB0CDF988AFE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 70.160.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:43:9b:ca:eb:0c:df:98:8a:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=10b5297a-5ff5-4101-8fe8-3bb95f1eedd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:d2:d9:77:79:74:4a:3b:82:f5:fe:e1:7f: 18:4c:1d:eb:72:2c:96:68:d8:be:42:20:77:cc:99: bd:57:f4:eb:a6:6c:4d:72:0a:4f:a0:18:69:6a:e9: 90:9b:0a:85:f8:7f:b4:a7:67:10:18:77:ef:22:36: 88:12:8a:9b:79:12:ba:e8:4b:39:be:71:f1:bc:18: 92:99:c3:7f:07:90:6a:90:38:2e:8d:10:c0:20:56: 43:74:58:fd:e3:db:e3:b5:8e:b7:e3:db:f7:f0:dd: 2c:8f:f8:58:29:91:59:01:02:b3:21:22:07:02:d7: 80:47:a0:95:5c:79:b3:e5:d1:48:f6:4e:33:bf:81: ee:a9:7d:61:a6:9a:c2:de:08:b2:05:60:5e:65:06: 6e:92:27:69:77:e5:e3:61:cf:d8:ee:ad:c5:ca:e6: fd:ad:79:dc:90:98:db:ae:e6:6c:1f:b0:56:79:74: ab:0e:c1:de:13:dd:ff:e7:6c:34:8d:2d:88:c0:80: cb:21:ec:5e:06:20:45:1e:39:6f:11:fb:0d:45:aa: 1d:bb:e4:e6:4a:21:ce:a1:9b:9e:ab:16:ac:6f:33: 9a:16:89:9f:06:11:f8:ad:0f:e1:fc:42:66:98:a7: 29:3e:6b:d8:20:1d:8d:69:60:df:6e:97:cb:3a:8c: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:59:AA:8B:E1:A4:59:79:EC:58:F2:6E:BC:24:64:66:AA:27:81:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/476525f4-d55f-34aa-8111-518c8eff2684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:99:0c:7e:97:a1:c4:a5:67:d8:fb:cb:ae:b2:f2:ee:66: dc:9a:59:70:c5:8a:8a:d4:6b:a4:02:52:8e:60:a3:0c:f4:25: a1:41:32:5f:b3:4b:86:64:ce:6c:4c:27:f5:25:7b:bd:bc:3e: 18:4b:b6:0e:3a:a5:9a:92:49:ed:cd:ae:03:4c:0f:e9:b7:53: 46:65:38:68:cc:5a:d5:ff:74:fe:d5:07:fe:60:90:c2:58:74: 96:29:e2:52:cd:8e:16:48:45:71:95:77:e9:4a:e1:fa:69:a8: a7:d5:47:db:b1:84:d1:af:ab:36:1f:d9:f8:d5:ac:46:cb:aa: d9:19:7d:ae:47:fa:e8:10:36:04:4c:f0:84:8a:63:6a:f9:89: 2e:b9:63:5c:71:20:45:a6:09:57:3b:01:83:e2:54:3f:04:5b: 47:8d:80:be:0f:70:e8:70:cc:e3:83:75:6a:28:52:e0:61:75: 73:5f:a4:27:3e:ec:7a:c2:f1:45:65:2d:3c:a2:1f:b6:25:ae: 7b:b9:e7:49:3a:3f:6f:aa:6c:cd:38:14:1f:1a:42:64:aa:ec: c6:66:6c:c1:11:db:04:6c:15:51:d3:76:11:53:56:af:89:39: 9b:f7:3a:3b:5c:8c:5b:e6:38:24:30:c9:f1:3a:4d:b1:61:a1: 92:82:74:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNkObyusM35iK/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MTBiNTI5N2EtNWZmNS00MTAxLThmZTgtM2JiOTVmMWVlZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+PS2Xd5dEo7gvX+4X8YTB3rciyWaNi+QiB3 zJm9V/TrpmxNcgpPoBhpaumQmwqF+H+0p2cQGHfvIjaIEoqbeRK66Es5vnHxvBiS mcN/B5BqkDgujRDAIFZDdFj949vjtY6349v38N0sj/hYKZFZAQKzISIHAteAR6CV XHmz5dFI9k4zv4HuqX1hpprC3giyBWBeZQZukidpd+XjYc/Y7q3Fyub9rXnckJjb ruZsH7BWeXSrDsHeE93/52w0jS2IwIDLIexeBiBFHjlvEfsNRaodu+TmSiHOoZue qxasbzOaFomfBhH4rQ/h/EJmmKcpPmvYIB2NaWDfbpfLOozVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABZqovhpFl57FjybrwkZGaqJ4EyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDc2NTI1ZjQtZDU1Zi0z NGFhLTgxMTEtNTE4YzhlZmYyNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqDpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzImQx+l6HEpWfY+8uusvLuZtyaWXDFiorUa6QCUo5gowz0JaFBMl+z S4ZkzmxMJ/Ule728PhhLtg46pZqSSe3NrgNMD+m3U0ZlOGjMWtX/dP7VB/5gkMJY dJYp4lLNjhZIRXGVd+lK4fppqKfVR9uxhNGvqzYf2fjVrEbLqtkZfa5H+ugQNgRM 8ISKY2r5iS65Y1xxIEWmCVc7AYPiVD8EW0eNgL4PcOhwzOODdWooUuBhdXNfpCc+ 7HrC8UVlLTyiH7Ylrnu550k6P2+qbM04FB8aQmSq7MZmbMER2wRsFVHTdhFTVq+J OZv3OjtcjFvmOCQwyfE6TbFhoZKCdI0= -----END CERTIFICATE-----Generated at Sat Aug 9 15:06:46 2025 by rpki-client